This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/0E4TBSV9rvtb2nA9OuzwxCClhkM.roa File: 0E4TBSV9rvtb2nA9OuzwxCClhkM.roa (raw, json) Hash identifier: UESqw2tC3trMOqM+bN2TWQ56qhklzPd74NTv4soGU2c= Subject key identifier: D0:4E:13:05:25:7D:AE:FB:5B:DA:70:3D:3A:EC:F0:C4:20:A5:86:43 Certificate issuer: /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e Certificate serial: 019B7910D6645AA63D71ED69FDB675DB2384 Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/0E4TBSV9rvtb2nA9OuzwxCClhkM.roa Signing time: Thu 01 Jan 2026 10:18:25 +0000 ROA not before: Thu 01 Jan 2026 10:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 2a03:5000:431::/48 maxlen: 48 2a03:5000:432::/48 maxlen: 48 2a03:5000:471::/48 maxlen: 48 2a03:5000:481::/48 maxlen: 48 2a03:5000:501::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:d6:64:5a:a6:3d:71:ed:69:fd:b6:75:db:23:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e Validity Not Before: Jan 1 10:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d04e1305257daefb5bda703d3aecf0c420a58643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a6:ed:2a:13:4b:bf:56:92:27:fc:25:38:37: 5a:07:5f:38:78:ae:95:39:26:31:e8:1b:7f:c7:e8: 55:bd:3f:2c:89:95:42:2e:70:0c:9a:5e:16:e7:f4: bf:21:0c:d4:2a:4d:e5:09:55:d0:a9:5a:97:04:15: df:ca:1d:18:cb:a4:75:8b:d0:64:e5:88:f9:d8:32: ab:cd:19:b0:1c:f9:5b:6b:19:3d:f3:bc:e0:cc:7d: 20:fc:af:64:7c:90:ba:22:04:8c:8c:76:c7:56:7b: 37:a2:f0:06:c0:ef:0b:fc:bc:69:62:eb:41:00:3d: b0:e9:19:2d:bf:a3:5e:95:ee:28:36:c3:1e:85:72: 91:89:ff:1a:36:66:f6:0d:0b:dc:83:3a:5a:89:2d: bd:d5:db:1f:d6:57:7a:84:b4:0a:a7:28:f5:e8:07: 1f:da:53:21:6b:5d:9d:aa:08:7f:d7:63:7d:68:8e: 51:28:ea:ae:bd:40:b8:33:4a:e2:f7:66:a6:39:62: 6c:4c:cc:55:7f:1f:5e:32:54:ce:21:82:f7:ec:3e: dd:cd:be:a0:0b:f4:22:b5:e8:f6:ff:79:06:cf:74: 67:6c:b3:5e:b9:10:34:13:c6:56:3a:4e:43:50:c0: 07:82:76:80:d3:97:d9:b7:35:70:36:c2:0b:a8:5a: ca:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:4E:13:05:25:7D:AE:FB:5B:DA:70:3D:3A:EC:F0:C4:20:A5:86:43 X509v3 Authority Key Identifier: keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/0E4TBSV9rvtb2nA9OuzwxCClhkM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:5000:431::-2a03:5000:432:ffff:ffff:ffff:ffff:ffff 2a03:5000:471::/48 2a03:5000:481::/48 2a03:5000:501::/48 Signature Algorithm: sha256WithRSAEncryption 9d:e9:38:e4:a4:4b:37:d4:29:09:5a:8f:f0:26:7a:ea:c4:0d: f4:5d:9d:15:8e:2d:21:42:b5:0c:17:2d:bb:02:2c:14:bd:7a: a9:99:8f:fc:33:02:9e:bf:16:c3:18:bb:8b:d0:a7:4e:d7:ae: f6:db:b9:19:74:75:a4:59:a7:1a:7c:bc:78:7b:86:1d:08:19: e9:c8:90:3d:59:7e:39:f9:70:51:b0:ec:ee:bc:05:03:1b:c3: 4c:f5:a6:7a:0a:d5:b0:cd:66:7b:f5:bd:f5:08:a9:75:cb:9e: b2:08:ce:e1:80:ba:50:d7:a4:ac:9b:bf:7b:53:c4:d6:26:31: 81:03:1e:b9:89:3d:d7:47:bf:e5:d7:63:58:ae:0d:f5:ba:ac: 87:d1:8c:dd:1f:49:58:59:e5:36:f8:34:85:2f:9c:00:a6:3e: 73:ab:9d:09:97:6c:ce:7e:ae:9c:90:c5:75:69:66:82:9a:37: 1b:d3:42:84:46:9d:e0:14:f5:33:ee:64:2e:ac:29:2d:83:f4: 41:0e:11:03:4a:21:a0:a4:0e:46:71:fa:ca:71:6b:18:05:01: a8:e3:6e:a3:73:08:50:53:ed:eb:0e:69:75:4f:4e:62:19:7f: 21:7a:cf:77:1b:6f:96:7f:98:61:54:c4:1e:1a:35:50:22:c3: 87:a0:5f:57 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZt5ENZkWqY9ce1p/bZ12yOEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0Y2M2YjljMzdmYWEwZGEzYjQxMjAwN2MwYjEwYjJjNWJm MmNmNGUwHhcNMjYwMTAxMTAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDRlMTMwNTI1N2RhZWZiNWJkYTcwM2QzYWVjZjBjNDIwYTU4NjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqbtKhNLv1aSJ/wlODdaB184eK6V OSYx6Bt/x+hVvT8siZVCLnAMml4W5/S/IQzUKk3lCVXQqVqXBBXfyh0Yy6R1i9Bk 5Yj52DKrzRmwHPlbaxk987zgzH0g/K9kfJC6IgSMjHbHVns3ovAGwO8L/LxpYutB AD2w6Rktv6Nele4oNsMehXKRif8aNmb2DQvcgzpaiS291dsf1ld6hLQKpyj16Acf 2lMha12dqgh/12N9aI5RKOquvUC4M0ri92amOWJsTMxVfx9eMlTOIYL37D7dzb6g C/Qitej2/3kGz3RnbLNeuRA0E8ZWOk5DUMAHgnaA05fZtzVwNsILqFrKwwIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFNBOEwUlfa77W9pwPTrs8MQgpYZDMB8GA1UdIwQY MBaAFCTMa5w3+qDaO0EgB8CxCyxb8s9OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk14cm5EZjZvTm83UVNBSHdMRUxMRnZ5ejA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wZmY0NDktYWQ5OC00ODJkLWFjNzUt ODY0MjM4YmMwNDliLzEvMEU0VEJTVjlydnRiMm5BOU91end4Q0NsaGtNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8wZmY0NDktYWQ5OC00ODJkLWFjNzUtODY0MjM4YmMwNDli LzEvSk14cm5EZjZvTm83UVNBSHdMRUxMRnZ5ejA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzA1BAIAAjAvMBIDBwAqA1AA BDEDBwAqA1AABDIDBwAqA1AABHEDBwAqA1AABIEDBwAqA1AABQEwDQYJKoZIhvcN AQELBQADggEBAJ3pOOSkSzfUKQlaj/AmeurEDfRdnRWOLSFCtQwXLbsCLBS9eqmZ j/wzAp6/FsMYu4vQp07XrvbbuRl0daRZpxp8vHh7hh0IGenIkD1Zfjn5cFGw7O68 BQMbw0z1pnoK1bDNZnv1vfUIqXXLnrIIzuGAulDXpKybv3tTxNYmMYEDHrmJPddH v+XXY1iuDfW6rIfRjN0fSVhZ5Tb4NIUvnACmPnOrnQmXbM5+rpyQxXVpZoKaNxvT QoRGneAU9TPuZC6sKS2D9EEOEQNKIaCkDkZx+spxaxgFAajjbqNzCFBT7esOaXVP TmIZfyF6z3cbb5Z/mGFUxB4aNVAiw4egX1c= -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:04 2026 by rpki-client