This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/04cb8b-0f54-45fb-9f1e-ac2b74d0c699/1/4dCMi8S9j7I6ZQoKOY1sTqn8HEw.roa File: 4dCMi8S9j7I6ZQoKOY1sTqn8HEw.roa (raw, json) Hash identifier: +N4gy7Ta1ZF9F8cQ5uU6ns+XK6w2hfwIprl05F3UkAk= Subject key identifier: E1:D0:8C:8B:C4:BD:8F:B2:3A:65:0A:0A:39:8D:6C:4E:A9:FC:1C:4C Certificate issuer: /CN=2ef9269ab7f614c1ecfa2359928eee5def39a09d Certificate serial: 019B7AC859F88B813E763BD68B94F6E49C91 Authority key identifier: 2E:F9:26:9A:B7:F6:14:C1:EC:FA:23:59:92:8E:EE:5D:EF:39:A0:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lvkmmrf2FMHs-iNZko7uXe85oJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/04cb8b-0f54-45fb-9f1e-ac2b74d0c699/1/4dCMi8S9j7I6ZQoKOY1sTqn8HEw.roa Signing time: Thu 01 Jan 2026 18:18:29 +0000 ROA not before: Thu 01 Jan 2026 18:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212322 IP address blocks: 2001:678:1048::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/04cb8b-0f54-45fb-9f1e-ac2b74d0c699/1/Lvkmmrf2FMHs-iNZko7uXe85oJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/04cb8b-0f54-45fb-9f1e-ac2b74d0c699/1/Lvkmmrf2FMHs-iNZko7uXe85oJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/Lvkmmrf2FMHs-iNZko7uXe85oJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:59:f8:8b:81:3e:76:3b:d6:8b:94:f6:e4:9c:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ef9269ab7f614c1ecfa2359928eee5def39a09d Validity Not Before: Jan 1 18:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1d08c8bc4bd8fb23a650a0a398d6c4ea9fc1c4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:82:eb:8a:7f:79:47:77:86:62:51:13:e2:85: 15:85:19:0e:9a:58:3c:8e:eb:e6:a5:85:9b:8e:c4: bb:ed:a4:e3:fa:09:52:5c:b4:9f:9a:11:fd:ee:96: 04:de:4a:42:c1:1a:34:66:ea:e9:a8:d2:74:e7:62: fb:6c:76:eb:9c:8c:db:a3:c6:b8:ac:0d:01:fe:5e: c0:f1:c6:5a:73:b2:b7:8d:3e:09:55:4a:35:7a:71: f2:9a:24:e2:63:64:19:02:1a:c3:51:29:6e:75:6f: 72:f0:21:1b:c0:d1:3d:4a:d2:41:e9:46:ee:83:7e: 74:7d:1a:97:a5:2f:10:71:36:b2:4f:50:68:3a:91: 55:5d:66:26:1e:c5:19:f6:84:25:1b:1d:42:5e:96: d7:af:05:c3:b3:5a:7f:f7:7b:a6:78:2e:13:7f:e7: 49:6e:1c:20:dc:38:41:e4:88:9e:71:e0:50:45:98: 0a:a4:7d:b4:74:ee:30:9c:6a:66:90:6d:54:5e:4a: 86:34:f3:68:be:13:df:97:1d:b9:1b:7f:6c:11:e4: c7:c9:d0:51:96:b5:04:26:0f:04:04:ce:9c:aa:40: 8a:fb:de:62:c7:b6:0c:ff:4a:7e:09:ab:50:9c:dc: 50:da:64:99:de:41:d5:43:30:e6:f5:8c:1a:c5:98: 55:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D0:8C:8B:C4:BD:8F:B2:3A:65:0A:0A:39:8D:6C:4E:A9:FC:1C:4C X509v3 Authority Key Identifier: keyid:2E:F9:26:9A:B7:F6:14:C1:EC:FA:23:59:92:8E:EE:5D:EF:39:A0:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lvkmmrf2FMHs-iNZko7uXe85oJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/04cb8b-0f54-45fb-9f1e-ac2b74d0c699/1/4dCMi8S9j7I6ZQoKOY1sTqn8HEw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/04cb8b-0f54-45fb-9f1e-ac2b74d0c699/1/Lvkmmrf2FMHs-iNZko7uXe85oJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:1048::/48 Signature Algorithm: sha256WithRSAEncryption 59:d6:cf:eb:37:f1:f9:82:04:5b:ba:f9:81:af:df:46:ce:01: 49:7a:4a:21:d0:eb:80:2d:f8:c5:5a:37:f9:e6:62:f6:02:6d: 12:39:30:7c:5e:f7:72:16:f6:75:18:96:0a:67:00:a0:b7:ff: f0:4c:a9:5d:28:ad:e1:49:72:32:15:f6:00:90:92:9f:26:cf: b4:48:7b:17:cd:c9:fc:28:f0:4a:dc:f6:72:98:79:70:53:c7: a0:01:27:ac:6f:d3:4a:31:7c:d2:45:72:1d:89:ef:92:a4:6e: 8f:c5:97:d7:a8:ae:59:57:71:28:49:19:6d:df:41:9a:f6:fa: 6a:1b:0f:95:41:72:70:bf:46:28:72:ea:2b:c0:5b:d2:0c:9f: f7:de:87:cb:5b:ac:73:6d:ae:55:d8:b0:b7:4c:32:08:c9:0f: b1:99:5c:35:86:25:9e:24:1c:2f:2e:d7:3d:25:1c:06:a6:09: 3f:84:ca:30:ab:dd:94:bd:89:0f:1e:cf:21:a6:ad:54:c4:e4: f9:d8:e7:35:47:22:65:b0:f8:8e:15:97:d5:61:0b:4e:44:16: 0c:8d:d9:a4:8c:aa:c8:a8:6e:c9:63:d0:2d:35:9b:78:fb:ad: 1c:7b:2f:f8:36:67:f8:49:2d:e4:a8:1f:03:b2:df:73:bd:8a: f7:ed:bb:9e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6yFn4i4E+djvWi5T25JyRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZjkyNjlhYjdmNjE0YzFlY2ZhMjM1OTkyOGVlZTVkZWYz OWEwOWQwHhcNMjYwMTAxMTgxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWQwOGM4YmM0YmQ4ZmIyM2E2NTBhMGEzOThkNmM0ZWE5ZmMxYzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ILrin95R3eGYlET4oUVhRkOmlg8 juvmpYWbjsS77aTj+glSXLSfmhH97pYE3kpCwRo0ZurpqNJ052L7bHbrnIzbo8a4 rA0B/l7A8cZac7K3jT4JVUo1enHymiTiY2QZAhrDUSludW9y8CEbwNE9StJB6Ubu g350fRqXpS8QcTayT1BoOpFVXWYmHsUZ9oQlGx1CXpbXrwXDs1p/93umeC4Tf+dJ bhwg3DhB5IieceBQRZgKpH20dO4wnGpmkG1UXkqGNPNovhPflx25G39sEeTHydBR lrUEJg8EBM6cqkCK+95ix7YM/0p+CatQnNxQ2mSZ3kHVQzDm9YwaxZhViQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOHQjIvEvY+yOmUKCjmNbE6p/BxMMB8GA1UdIwQY MBaAFC75Jpq39hTB7PojWZKO7l3vOaCdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHZrbW1yZjJGTUhzLWlOWmtvN3VYZTg1b0owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8wNGNiOGItMGY1NC00NWZiLTlmMWUt YWMyYjc0ZDBjNjk5LzEvNGRDTWk4UzlqN0k2WlFvS09ZMXNUcW44SEV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8wNGNiOGItMGY1NC00NWZiLTlmMWUtYWMyYjc0ZDBjNjk5 LzEvTHZrbW1yZjJGTUhzLWlOWmtvN3VYZTg1b0owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBBI MA0GCSqGSIb3DQEBCwUAA4IBAQBZ1s/rN/H5ggRbuvmBr99GzgFJekoh0OuALfjF Wjf55mL2Am0SOTB8XvdyFvZ1GJYKZwCgt//wTKldKK3hSXIyFfYAkJKfJs+0SHsX zcn8KPBK3PZymHlwU8egASesb9NKMXzSRXIdie+SpG6PxZfXqK5ZV3EoSRlt30Ga 9vpqGw+VQXJwv0YocuorwFvSDJ/33ofLW6xzba5V2LC3TDIIyQ+xmVw1hiWeJBwv Ltc9JRwGpgk/hMowq92UvYkPHs8hpq1UxOT52Oc1RyJlsPiOFZfVYQtORBYMjdmk jKrIqG7JY9AtNZt4+60cey/4Nmf4SS3kqB8Dst9zvYr37bue -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:20 2026 by rpki-client