This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/4x1TKBz_BI-V4dj9yOWPflsgBy0.roa File: 4x1TKBz_BI-V4dj9yOWPflsgBy0.roa (raw, json) Hash identifier: AEyQ4d3oKadVqU+q8qpPHgCbs4RI3Y80TBihfli8Oxo= Subject key identifier: E3:1D:53:28:1C:FF:04:8F:95:E1:D8:FD:C8:E5:8F:7E:5B:20:07:2D Certificate issuer: /CN=9ae2534df509c96ecb811bc85d76d62baadf3d29 Certificate serial: 019B77592479C89FFDC83EE1855D0AA48B4F Authority key identifier: 9A:E2:53:4D:F5:09:C9:6E:CB:81:1B:C8:5D:76:D6:2B:AA:DF:3D:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/4x1TKBz_BI-V4dj9yOWPflsgBy0.roa Signing time: Thu 01 Jan 2026 02:18:09 +0000 ROA not before: Thu 01 Jan 2026 02:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200305 IP address blocks: 2001:67c:b4c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:24:79:c8:9f:fd:c8:3e:e1:85:5d:0a:a4:8b:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ae2534df509c96ecb811bc85d76d62baadf3d29 Validity Not Before: Jan 1 02:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e31d53281cff048f95e1d8fdc8e58f7e5b20072d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:25:36:c3:13:c6:f8:9a:c1:f1:b3:92:23:8c: 7d:a2:1a:21:5e:ac:c5:69:a4:6d:17:5d:b7:2b:85: 76:d2:44:6f:d4:24:8d:84:33:df:01:0d:07:e4:39: 0f:f8:af:24:c1:0b:1a:df:d9:98:19:06:0a:be:8a: 62:54:2e:c4:65:5e:f6:50:64:3f:3c:5c:fe:3b:9a: f7:92:82:81:d6:62:73:51:b6:af:5e:16:79:c7:78: 81:56:ef:db:64:85:34:ae:7e:4f:53:2f:64:b7:e6: ac:56:d6:f5:19:0b:b8:6d:bb:10:e0:21:d9:3b:bb: a5:eb:42:63:b4:f1:a0:bb:50:ba:95:0c:fd:10:3f: 05:38:e1:5f:fb:52:8a:49:4b:ff:74:bd:88:1a:22: e1:4f:83:20:65:6e:8f:cb:c9:90:2c:c8:c6:0f:dc: d2:38:0d:0f:3c:27:65:46:fc:8e:5a:29:cd:13:16: ab:19:67:1e:11:ce:da:22:e3:5e:90:c2:fd:19:eb: 53:98:e3:41:3f:26:5f:ae:8f:15:f7:7f:c1:cb:c3: 4c:e8:ad:97:df:ad:de:15:c1:ed:7e:b6:d0:c0:c0: a8:da:e4:6d:b5:4b:1c:c4:63:7a:3a:c9:74:7b:d0: 02:ef:92:b2:25:22:c9:16:8e:4f:18:fa:26:f9:db: 89:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:1D:53:28:1C:FF:04:8F:95:E1:D8:FD:C8:E5:8F:7E:5B:20:07:2D X509v3 Authority Key Identifier: keyid:9A:E2:53:4D:F5:09:C9:6E:CB:81:1B:C8:5D:76:D6:2B:AA:DF:3D:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/4x1TKBz_BI-V4dj9yOWPflsgBy0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:b4c::/48 Signature Algorithm: sha256WithRSAEncryption a3:b8:53:f7:20:39:6f:67:0a:6b:14:9e:ad:e3:55:da:c6:7b: 32:26:83:56:00:02:eb:88:1b:7a:64:78:f2:1b:53:1d:48:d7: a7:ee:d1:48:d9:b2:80:c1:50:9d:b8:14:61:87:3c:d2:ed:f1: 63:e0:7c:e0:e6:ba:cd:bc:3b:8f:17:f4:7a:84:bd:9e:fd:2a: 99:d1:eb:81:cd:2e:56:3d:89:3d:32:23:63:3a:b9:ec:a5:96: 40:77:c3:91:80:85:33:d6:a4:f7:a2:3d:17:6f:62:17:c8:3a: 56:f5:72:c4:ab:53:cd:bf:9a:0f:03:46:77:09:5c:18:a1:c7: c1:41:5f:77:34:79:3b:78:2e:35:10:04:f5:84:1f:e2:64:b6: c1:b9:fe:56:d9:83:a6:38:76:f6:c5:d9:d6:87:78:9d:00:33: 41:60:a6:d1:ee:e3:a3:05:e5:5b:0f:34:ba:4b:c8:28:c8:a7: 8a:3a:62:50:ee:18:8c:1f:2c:0f:76:ae:d1:31:7c:60:c8:51: 10:b8:94:dd:8e:ac:d5:8a:2a:c4:d0:17:7c:a7:79:45:31:7c: 00:51:24:73:d2:c5:c8:f6:bf:3c:a6:70:39:52:b0:9e:4a:d7: 20:2c:d0:99:f6:b2:49:a3:23:0b:25:65:a9:8b:05:46:e9:6f: 6e:e7:67:ac -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WSR5yJ/9yD7hhV0KpItPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZTI1MzRkZjUwOWM5NmVjYjgxMWJjODVkNzZkNjJiYWFk ZjNkMjkwHhcNMjYwMTAxMDIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzFkNTMyODFjZmYwNDhmOTVlMWQ4ZmRjOGU1OGY3ZTViMjAwNzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCU2wxPG+JrB8bOSI4x9ohohXqzF aaRtF123K4V20kRv1CSNhDPfAQ0H5DkP+K8kwQsa39mYGQYKvopiVC7EZV72UGQ/ PFz+O5r3koKB1mJzUbavXhZ5x3iBVu/bZIU0rn5PUy9kt+asVtb1GQu4bbsQ4CHZ O7ul60JjtPGgu1C6lQz9ED8FOOFf+1KKSUv/dL2IGiLhT4MgZW6Py8mQLMjGD9zS OA0PPCdlRvyOWinNExarGWceEc7aIuNekML9GetTmONBPyZfro8V93/By8NM6K2X 363eFcHtfrbQwMCo2uRttUscxGN6Osl0e9AC75KyJSLJFo5PGPom+duJIQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOMdUygc/wSPleHY/cjlj35bIActMB8GA1UdIwQY MBaAFJriU031Ccluy4EbyF121iuq3z0pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXVKVFRmVUp5VzdMZ1J2SVhYYldLNnJmUFNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS82ZjVkYzItMzBjYi00YzBjLWFhNjIt ODIyNjUyNGU0YWNmLzEvNHgxVEtCel9CSS1WNGRqOXlPV1BmbHNnQnkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS82ZjVkYzItMzBjYi00YzBjLWFhNjItODIyNjUyNGU0YWNm LzEvbXVKVFRmVUp5VzdMZ1J2SVhYYldLNnJmUFNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAtM MA0GCSqGSIb3DQEBCwUAA4IBAQCjuFP3IDlvZwprFJ6t41XaxnsyJoNWAALriBt6 ZHjyG1MdSNen7tFI2bKAwVCduBRhhzzS7fFj4Hzg5rrNvDuPF/R6hL2e/SqZ0euB zS5WPYk9MiNjOrnspZZAd8ORgIUz1qT3oj0Xb2IXyDpW9XLEq1PNv5oPA0Z3CVwY ocfBQV93NHk7eC41EAT1hB/iZLbBuf5W2YOmOHb2xdnWh3idADNBYKbR7uOjBeVb DzS6S8goyKeKOmJQ7hiMHywPdq7RMXxgyFEQuJTdjqzViirE0Bd8p3lFMXwAUSRz 0sXI9r88pnA5UrCeStcgLNCZ9rJJoyMLJWWpiwVG6W9u52es -----END CERTIFICATE-----Generated at Tue Feb 10 04:31:03 2026 by rpki-client