This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/4VyO6tQEDMUP2tLzrE4kzWWMgq8.roa File: 4VyO6tQEDMUP2tLzrE4kzWWMgq8.roa (raw, json) Hash identifier: Ce7KWD1zwmOm3FwKp9C1Y5E8hGZ90tuB7cIXoSzRivQ= Subject key identifier: E1:5C:8E:EA:D4:04:0C:C5:0F:DA:D2:F3:AC:4E:24:CD:65:8C:82:AF Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17 Certificate serial: 019B7F839E2417C6FAABFD7AF7C3933CD596 Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/4VyO6tQEDMUP2tLzrE4kzWWMgq8.roa Signing time: Fri 02 Jan 2026 16:21:30 +0000 ROA not before: Fri 02 Jan 2026 16:21:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212144 IP address blocks: 2a10:b540::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:9e:24:17:c6:fa:ab:fd:7a:f7:c3:93:3c:d5:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17 Validity Not Before: Jan 2 16:21:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e15c8eead4040cc50fdad2f3ac4e24cd658c82af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:62:51:27:73:b9:d0:b7:a9:ad:ba:96:7d:5a: 07:18:7f:77:84:b1:66:23:79:4a:1b:cb:11:1d:03: 00:d5:62:5b:74:87:bd:a2:b2:c8:f5:04:1e:4b:ee: 0f:29:66:e7:08:80:3a:9c:45:cb:97:a3:00:3c:1b: 0e:33:31:ac:a3:f7:2d:36:94:7e:d2:85:85:63:39: 21:e0:bd:32:c1:49:a6:f3:3e:0d:ee:84:8b:00:ff: fd:95:9f:b1:d8:06:13:04:ec:4c:f8:b1:8b:65:77: b4:60:4f:65:d9:b9:b0:43:c6:d6:22:7c:9d:d3:9b: 97:44:b9:d1:53:20:2c:ec:b7:9a:4f:cd:52:82:72: 3c:f4:9e:15:4b:ad:02:44:26:1b:fd:9e:ab:64:9b: 94:3d:66:e6:f4:8e:6e:81:37:2d:66:b7:53:c5:17: 13:b9:f2:30:57:75:b1:8a:5d:18:bb:81:4a:8e:4b: 4a:d8:43:d6:d1:24:97:02:76:fa:6a:40:70:5a:80: 2f:1d:03:77:12:41:ec:d2:70:1f:74:c6:a5:46:1a: e0:e3:2c:10:80:08:48:77:a8:d2:98:08:75:83:e3: b4:d9:12:13:5d:fa:39:36:12:dc:32:96:90:9b:d5: fb:58:e6:59:66:02:99:a0:dc:42:5f:d3:cf:1f:e9: b8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:5C:8E:EA:D4:04:0C:C5:0F:DA:D2:F3:AC:4E:24:CD:65:8C:82:AF X509v3 Authority Key Identifier: keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/4VyO6tQEDMUP2tLzrE4kzWWMgq8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:b540::/29 Signature Algorithm: sha256WithRSAEncryption 76:cc:33:16:e7:39:84:3e:f7:a7:89:09:09:3f:bd:ee:64:fb: 98:f3:c4:65:f7:6d:a7:55:1e:22:b0:43:33:0c:05:ac:e7:33: e9:d0:ad:62:dd:32:35:8c:e6:6d:19:be:fe:ed:92:52:5a:8b: 00:7c:03:8b:91:6a:5e:af:e2:f0:60:2c:54:4f:4a:17:03:5c: 1b:53:52:f2:a5:06:e1:e7:f3:f3:a4:a0:b5:96:bc:dc:17:c3: c5:07:40:27:e2:d5:77:b2:06:4b:c2:93:b0:83:12:ce:1f:d3: 99:b8:86:4d:e7:56:9a:52:0d:f4:73:20:81:3b:7a:a0:03:0e: fa:14:74:70:75:67:66:29:49:af:97:6b:3b:bf:64:37:b7:59: 38:b7:e5:31:40:64:09:28:48:fc:2b:d6:7f:f2:b7:24:63:c1: 90:9c:45:a5:e8:4d:60:4c:44:62:3e:20:ab:82:85:58:01:fa: 15:04:f8:89:07:bc:bf:9b:0e:7e:4e:35:d8:31:4b:ff:56:75: ab:75:5b:72:41:9a:10:92:56:51:dd:42:88:99:e4:0f:79:8b: ec:34:35:7f:07:33:4c:b2:0f:a9:50:27:d5:90:71:2f:43:f8: f3:c8:6e:de:f8:1c:30:eb:4c:c2:1c:06:67:89:6b:d9:e4:6e: 27:34:81:9d -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/g54kF8b6q/1698OTPNWWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ODZjNzM5OTRkMDJkOTFmYzk3ZDkxNmU5ODA5YTZkOTgx ZTZiMTcwHhcNMjYwMTAyMTYyMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTVjOGVlYWQ0MDQwY2M1MGZkYWQyZjNhYzRlMjRjZDY1OGM4MmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32JRJ3O50LeprbqWfVoHGH93hLFm I3lKG8sRHQMA1WJbdIe9orLI9QQeS+4PKWbnCIA6nEXLl6MAPBsOMzGso/ctNpR+ 0oWFYzkh4L0ywUmm8z4N7oSLAP/9lZ+x2AYTBOxM+LGLZXe0YE9l2bmwQ8bWInyd 05uXRLnRUyAs7LeaT81SgnI89J4VS60CRCYb/Z6rZJuUPWbm9I5ugTctZrdTxRcT ufIwV3Wxil0Yu4FKjktK2EPW0SSXAnb6akBwWoAvHQN3EkHs0nAfdMalRhrg4ywQ gAhId6jSmAh1g+O02RITXfo5NhLcMpaQm9X7WOZZZgKZoNxCX9PPH+m4awIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFOFcjurUBAzFD9rS86xOJM1ljIKvMB8GA1UdIwQY MBaAFEmGxzmU0C2R/JfZFumAmm2YHmsXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS80NTdlMTMtNDFkMy00MGVmLWI1NzIt OWU4OTVkMGVmOGQyLzEvNFZ5TzZ0UUVETVVQMnRMenJFNGt6V1dNZ3E4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS80NTdlMTMtNDFkMy00MGVmLWI1NzItOWU4OTVkMGVmOGQy LzEvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhC1QDAN BgkqhkiG9w0BAQsFAAOCAQEAdswzFuc5hD73p4kJCT+97mT7mPPEZfdtp1UeIrBD MwwFrOcz6dCtYt0yNYzmbRm+/u2SUlqLAHwDi5FqXq/i8GAsVE9KFwNcG1NS8qUG 4efz86SgtZa83BfDxQdAJ+LVd7IGS8KTsIMSzh/TmbiGTedWmlIN9HMggTt6oAMO +hR0cHVnZilJr5drO79kN7dZOLflMUBkCShI/CvWf/K3JGPBkJxFpehNYExEYj4g q4KFWAH6FQT4iQe8v5sOfk412DFL/1Z1q3VbckGaEJJWUd1CiJnkD3mL7DQ1fwcz TLIPqVAn1ZBxL0P488hu3vgcMOtMwhwGZ4lr2eRuJzSBnQ== -----END CERTIFICATE-----Generated at Fri Jan 30 16:07:23 2026 by rpki-client