This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/4TaiBA7dFZTOcxPbn6m1TCL2OEg.roa File: 4TaiBA7dFZTOcxPbn6m1TCL2OEg.roa (raw, json) Hash identifier: 40u42ncLoIckwNr8yHzl6r6Q68BqosYkehV4n2dOQSk= Subject key identifier: E1:36:A2:04:0E:DD:15:94:CE:73:13:DB:9F:A9:B5:4C:22:F6:38:48 Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B7C802BE11422F154811C9270080ED399 Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/4TaiBA7dFZTOcxPbn6m1TCL2OEg.roa Signing time: Fri 02 Jan 2026 02:18:53 +0000 ROA not before: Fri 02 Jan 2026 02:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214704 IP address blocks: 2a0f:7803:fa20::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:2b:e1:14:22:f1:54:81:1c:92:70:08:0e:d3:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Jan 2 02:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e136a2040edd1594ce7313db9fa9b54c22f63848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a1:8c:13:10:21:8d:e8:5d:a6:d1:74:e4:95: de:77:12:7e:6f:36:de:3f:97:9c:a1:c9:a7:07:59: f3:be:0c:7a:ff:65:15:15:f7:ba:0e:53:51:22:40: 73:19:d1:eb:9a:ff:77:52:a8:7c:1b:5e:b3:fe:80: 0b:5d:05:6c:bd:0c:67:74:80:38:91:9a:07:11:dd: 7c:1b:3a:2e:5c:43:93:9a:43:3b:a7:19:3c:ea:2a: 48:6e:dc:62:91:9c:65:7c:1e:75:cd:a5:1d:8a:df: 28:47:5e:f6:11:a4:97:cc:0c:7c:76:19:a6:bc:e1: 9d:bc:64:eb:6d:03:db:5e:d8:67:a6:96:d6:e3:b7: 8b:0e:d0:03:74:64:89:ad:28:59:c4:2f:36:9d:b8: 4c:71:18:0b:e0:af:4e:c0:26:30:03:7a:12:4d:0e: ed:b8:bf:f6:66:ca:27:e6:23:06:23:d5:ce:5f:4a: 2c:b8:db:58:33:9f:b2:88:16:47:c2:6f:ea:8f:e2: 89:08:52:eb:42:df:f1:c7:78:89:54:e1:f8:67:54: a9:84:65:02:00:98:20:29:f7:06:52:1f:4e:5d:4a: 98:b3:c5:0a:c5:42:4a:45:45:06:4b:48:3c:bb:8a: ee:5f:67:6f:b6:27:ed:59:fb:6d:78:6d:1e:d9:ae: 0d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:36:A2:04:0E:DD:15:94:CE:73:13:DB:9F:A9:B5:4C:22:F6:38:48 X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/4TaiBA7dFZTOcxPbn6m1TCL2OEg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7803:fa20::/44 Signature Algorithm: sha256WithRSAEncryption 9e:4c:9d:29:73:13:34:1b:e7:ef:23:3b:0d:2c:ab:7c:df:bc: 60:00:e7:14:4c:75:66:4b:15:84:f1:b0:3d:22:99:16:68:26: 9c:46:6e:34:b7:b6:40:25:e5:c6:34:ef:fe:32:80:9f:ee:a9: 5e:93:bd:aa:fe:e6:fc:cb:73:07:a1:84:f3:f0:80:b5:42:3c: af:ed:9e:3e:f7:d9:9b:67:91:ae:bc:56:48:ed:31:ee:ca:c4: d6:bd:67:b8:87:79:4b:8e:62:83:35:48:59:84:76:ea:d6:67: 95:32:38:4b:5e:79:0e:d3:38:4e:89:47:b8:f0:92:b9:dc:29: 04:55:51:ad:cf:42:6c:24:9d:61:5f:66:51:a7:2a:8f:19:e3: 53:00:8d:56:28:b8:a2:bf:a6:82:fa:86:8d:e7:a1:94:29:1d: fd:05:a6:fa:3c:40:a8:4f:33:11:c6:14:3d:4e:5e:5a:ce:b5: 88:89:06:da:89:fc:74:26:7a:ac:9b:78:2d:42:e1:e1:12:97: 0e:3d:28:f3:d2:70:e6:29:12:2a:9b:2b:f8:57:19:da:47:0c: 61:42:44:04:72:9f:67:69:a0:dd:34:d0:5c:8f:b1:9a:c2:fb: 17:f5:c4:2b:ee:34:84:e2:aa:2b:84:ab:d5:5c:ac:96:7d:a6: 3e:70:71:22 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8gCvhFCLxVIEcknAIDtOZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjYwMTAyMDIxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTM2YTIwNDBlZGQxNTk0Y2U3MzEzZGI5ZmE5YjU0YzIyZjYzODQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKGMExAhjehdptF05JXedxJ+bzbe P5ecocmnB1nzvgx6/2UVFfe6DlNRIkBzGdHrmv93Uqh8G16z/oALXQVsvQxndIA4 kZoHEd18GzouXEOTmkM7pxk86ipIbtxikZxlfB51zaUdit8oR172EaSXzAx8dhmm vOGdvGTrbQPbXthnppbW47eLDtADdGSJrShZxC82nbhMcRgL4K9OwCYwA3oSTQ7t uL/2Zson5iMGI9XOX0osuNtYM5+yiBZHwm/qj+KJCFLrQt/xx3iJVOH4Z1SphGUC AJggKfcGUh9OXUqYs8UKxUJKRUUGS0g8u4ruX2dvtiftWftteG0e2a4NXQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOE2ogQO3RWUznMT25+ptUwi9jhIMB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvNFRhaUJBN2RGWlRPY3hQYm42bTFUQ0wyT0VnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg94A/og MA0GCSqGSIb3DQEBCwUAA4IBAQCeTJ0pcxM0G+fvIzsNLKt837xgAOcUTHVmSxWE 8bA9IpkWaCacRm40t7ZAJeXGNO/+MoCf7qlek72q/ub8y3MHoYTz8IC1Qjyv7Z4+ 99mbZ5GuvFZI7THuysTWvWe4h3lLjmKDNUhZhHbq1meVMjhLXnkO0zhOiUe48JK5 3CkEVVGtz0JsJJ1hX2ZRpyqPGeNTAI1WKLiiv6aC+oaN56GUKR39Bab6PECoTzMR xhQ9Tl5azrWIiQbaifx0Jnqsm3gtQuHhEpcOPSjz0nDmKRIqmyv4VxnaRwxhQkQE cp9naaDdNNBcj7GawvsX9cQr7jSE4qorhKvVXKyWfaY+cHEi -----END CERTIFICATE-----Generated at Wed Jan 21 16:56:58 2026 by rpki-client