This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/s4XhO3zd68odlYNKfOcr66qKpYo.roa File: s4XhO3zd68odlYNKfOcr66qKpYo.roa (raw, json) Hash identifier: lGF4r2lhB2RKS4kFkLqdXXo14Ag7CA/0NH/w4b5IOWU= Subject key identifier: B3:85:E1:3B:7C:DD:EB:CA:1D:95:83:4A:7C:E7:2B:EB:AA:8A:A5:8A Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Certificate serial: 019B79ED4A41FFEEB40309BCC1904E3168FA Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/s4XhO3zd68odlYNKfOcr66qKpYo.roa Signing time: Thu 01 Jan 2026 14:19:12 +0000 ROA not before: Thu 01 Jan 2026 14:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8285 IP address blocks: 2a06:e8c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:4a:41:ff:ee:b4:03:09:bc:c1:90:4e:31:68:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Validity Not Before: Jan 1 14:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b385e13b7cddebca1d95834a7ce72bebaa8aa58a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c9:a8:34:69:88:a2:21:1f:5e:9d:52:2c:93: 36:a6:de:26:1c:47:80:53:92:47:f7:f7:b4:04:e6: c4:14:03:31:74:16:0c:a4:89:89:b3:e1:47:7b:c5: 92:3f:e5:f7:3d:42:92:89:a6:84:33:5a:77:3a:4e: dd:86:02:d0:d8:77:23:c8:be:f2:43:ec:1f:64:bd: ec:a3:e3:93:94:3f:ec:0c:f3:ab:82:61:e5:09:0b: 80:c7:ac:4f:ef:f6:f3:0e:c5:7d:d8:5a:87:37:50: e6:c1:a0:b8:a6:92:0e:1b:19:99:5e:77:53:b7:59: 14:d6:19:55:56:c0:e1:03:d7:ce:d7:6d:96:55:21: 51:0b:57:9b:f0:74:71:95:be:ab:10:58:55:ac:14: c9:6e:11:5d:c4:09:3f:ba:02:49:62:07:93:2b:49: a4:e5:67:e4:d1:16:65:d3:00:21:9a:e1:15:34:1b: 01:1f:aa:1a:fe:7c:2d:c0:50:27:c1:b2:06:b1:48: 10:5e:2e:60:07:8e:ca:21:0a:ce:ea:75:0f:67:61: b7:de:22:b3:c5:f1:a7:0d:a0:73:fe:84:03:47:5d: 0f:41:09:ca:aa:06:a8:3d:b6:35:44:1b:d4:48:f3: da:b2:59:ff:79:60:88:c9:d9:84:fa:c2:88:69:20: 38:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:85:E1:3B:7C:DD:EB:CA:1D:95:83:4A:7C:E7:2B:EB:AA:8A:A5:8A X509v3 Authority Key Identifier: keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/s4XhO3zd68odlYNKfOcr66qKpYo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:e8c0::/29 Signature Algorithm: sha256WithRSAEncryption 70:ae:2d:cc:15:64:d4:82:d1:1e:3b:4d:b3:56:61:7c:9a:25: d6:cc:51:0a:52:39:5f:5c:61:ac:45:0c:6e:86:2e:12:cc:c7: be:4c:05:fa:5d:7f:78:8c:03:1d:53:8f:0d:b4:64:12:97:cc: cc:13:ac:15:fd:34:30:a8:8f:6d:96:a0:bf:d2:ad:8b:b4:d0: 93:7c:2e:0b:9b:3e:58:5b:0f:37:4c:95:25:b9:7a:b4:14:bd: ec:04:72:85:5d:39:c2:0a:61:20:56:f4:f6:8e:f0:8d:d7:16: f7:86:54:c9:d6:8a:b4:63:ac:0e:8b:be:7a:2e:83:0d:cb:44: f3:a6:32:46:00:f3:2e:52:2f:af:66:6e:69:d4:ac:f4:27:dd: a5:90:96:45:6a:3b:aa:2d:83:9f:b5:67:51:99:e6:25:b3:3e: 30:31:56:f1:53:d2:e2:08:17:9c:08:1b:c5:36:bf:b0:f7:a9: c4:55:f1:ab:df:c0:89:85:13:4c:8d:7a:f2:14:d2:63:1e:0a: f9:b6:9f:72:9c:0b:e1:4b:91:f4:5a:49:28:b8:c0:4f:22:50: 3b:39:99:49:dd:99:29:1a:3e:a1:f4:41:14:70:c4:dc:0f:15: 6e:ee:15:f6:27:77:f6:59:f7:99:ad:1b:b9:6d:fd:ba:9c:45: c4:a4:5c:06 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt57UpB/+60Awm8wZBOMWj6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw MmFjZDkwHhcNMjYwMTAxMTQxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzg1ZTEzYjdjZGRlYmNhMWQ5NTgzNGE3Y2U3MmJlYmFhOGFhNThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08moNGmIoiEfXp1SLJM2pt4mHEeA U5JH9/e0BObEFAMxdBYMpImJs+FHe8WSP+X3PUKSiaaEM1p3Ok7dhgLQ2HcjyL7y Q+wfZL3so+OTlD/sDPOrgmHlCQuAx6xP7/bzDsV92FqHN1DmwaC4ppIOGxmZXndT t1kU1hlVVsDhA9fO122WVSFRC1eb8HRxlb6rEFhVrBTJbhFdxAk/ugJJYgeTK0mk 5Wfk0RZl0wAhmuEVNBsBH6oa/nwtwFAnwbIGsUgQXi5gB47KIQrO6nUPZ2G33iKz xfGnDaBz/oQDR10PQQnKqgaoPbY1RBvUSPPasln/eWCIydmE+sKIaSA4xQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFLOF4Tt83evKHZWDSnznK+uqiqWKMB8GA1UdIwQY MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt MWFmMjQ2NWE4ZWVjLzEvczRYaE8zemQ2OG9kbFlOS2ZPY3I2NnFLcFlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgbowDAN BgkqhkiG9w0BAQsFAAOCAQEAcK4tzBVk1ILRHjtNs1ZhfJol1sxRClI5X1xhrEUM boYuEszHvkwF+l1/eIwDHVOPDbRkEpfMzBOsFf00MKiPbZagv9Kti7TQk3wuC5s+ WFsPN0yVJbl6tBS97ARyhV05wgphIFb09o7wjdcW94ZUydaKtGOsDou+ei6DDctE 86YyRgDzLlIvr2ZuadSs9CfdpZCWRWo7qi2Dn7VnUZnmJbM+MDFW8VPS4ggXnAgb xTa/sPepxFXxq9/AiYUTTI168hTSYx4K+bafcpwL4UuR9FpJKLjATyJQOzmZSd2Z KRo+ofRBFHDE3A8Vbu4V9id39ln3ma0buW39upxFxKRcBg== -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:43 2026 by rpki-client