This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4ohnrLEoO-TORmZOUm32jGaMPNk.roa File: 4ohnrLEoO-TORmZOUm32jGaMPNk.roa (raw, json) Hash identifier: Bf4qXGCyapL8cupvDua+TsMWI8N6HQFdr4u7QS31QYU= Subject key identifier: E2:88:67:AC:B1:28:3B:E4:CE:46:66:4E:52:6D:F6:8C:66:8C:3C:D9 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CCC9210B41AFC65071B15EB44A17B Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4ohnrLEoO-TORmZOUm32jGaMPNk.roa Signing time: Fri 02 Jan 2026 06:19:52 +0000 ROA not before: Fri 02 Jan 2026 06:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 141445 IP address blocks: 2a0e:b107:12c0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:cc:92:10:b4:1a:fc:65:07:1b:15:eb:44:a1:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e28867acb1283be4ce46664e526df68c668c3cd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:cc:c9:74:c4:d8:f6:d0:d0:91:64:cb:61:a2: cd:2c:2a:05:88:ab:c7:f4:1d:ca:d1:ec:4f:bd:21: 44:57:8f:dc:8f:f2:2a:6a:fa:0a:3e:14:c1:a9:06: 46:67:fc:ff:19:ff:71:20:e9:03:06:9d:8a:f8:a6: 89:3b:3e:b6:c3:0e:8a:66:c3:ee:a3:03:60:64:e2: a3:4f:fa:f8:ab:10:24:78:71:45:ef:b0:42:46:df: c3:7a:a9:76:89:28:76:f8:02:d3:ca:8e:1e:8f:05: 5c:6d:ed:58:8d:9f:11:fc:19:ee:18:c6:66:ee:90: f4:23:a4:83:64:13:2e:8a:1b:31:e8:32:f3:1c:35: 4d:62:1e:55:38:56:55:df:7c:07:6d:0a:b3:f6:53: 3d:d2:06:1f:89:1a:04:6a:96:89:6c:47:4e:e8:79: a2:cd:96:64:fd:f8:58:d4:4e:7f:9b:69:2d:01:9d: 1c:00:69:3d:e2:b0:fb:33:62:c5:8c:e2:7a:96:e0: f0:e1:70:02:54:10:cc:5e:26:6e:66:c4:a0:d3:3c: 55:73:07:63:3b:76:bb:a3:84:2c:4b:15:8f:fb:b2: fa:93:2f:b5:2c:c8:66:15:cd:b0:4d:95:81:66:3f: 1b:02:06:a5:67:69:a7:d3:e4:45:6b:d8:ba:48:39: 56:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:88:67:AC:B1:28:3B:E4:CE:46:66:4E:52:6D:F6:8C:66:8C:3C:D9 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4ohnrLEoO-TORmZOUm32jGaMPNk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:12c0::/44 Signature Algorithm: sha256WithRSAEncryption 27:30:b5:e3:55:7c:37:61:78:9a:d4:17:bf:ac:b7:da:3f:c0: b4:5c:af:ec:23:77:19:cd:24:f1:b3:e9:a2:94:b4:07:c5:1e: 02:08:a3:a5:32:e1:d7:22:c0:81:09:67:64:eb:6e:bd:d6:a7: 57:79:d7:90:4f:06:a9:a0:c8:73:76:37:7a:79:fe:d2:a7:ce: f4:78:bf:0d:df:59:d6:21:c0:e7:c7:2c:c6:10:51:ed:1b:f9: d1:53:83:39:3d:54:92:67:24:05:97:19:c2:79:ce:69:b1:c4: d6:0b:91:78:b0:8c:d4:1d:16:c2:b8:07:06:60:db:81:1e:42: ce:05:cb:63:40:1d:be:0e:b5:6b:35:e6:2a:cf:d0:f0:3d:b3: a8:8f:f6:ff:1c:75:4f:6e:6b:fa:56:98:9d:37:b1:df:54:9f: b2:be:e9:dd:2f:78:24:45:e5:01:9c:a6:3d:7d:e5:5f:00:f1: 86:1f:5c:8f:88:07:5b:3a:71:cf:64:10:28:7b:dc:60:09:4a: 99:2f:46:e3:56:4a:13:48:4b:d0:88:2c:ed:b1:03:d3:5a:52: 5e:b9:b8:50:48:d9:17:28:7a:6b:03:0a:17:4d:01:86:cf:a3: 42:dc:59:68:19:f5:31:88:76:27:c1:5a:54:90:83:63:71:2a: 1c:3b:39:48 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XMySELQa/GUHGxXrRKF7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjg4NjdhY2IxMjgzYmU0Y2U0NjY2NGU1MjZkZjY4YzY2OGMzY2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28zJdMTY9tDQkWTLYaLNLCoFiKvH 9B3K0exPvSFEV4/cj/IqavoKPhTBqQZGZ/z/Gf9xIOkDBp2K+KaJOz62ww6KZsPu owNgZOKjT/r4qxAkeHFF77BCRt/Deql2iSh2+ALTyo4ejwVcbe1YjZ8R/BnuGMZm 7pD0I6SDZBMuihsx6DLzHDVNYh5VOFZV33wHbQqz9lM90gYfiRoEapaJbEdO6Hmi zZZk/fhY1E5/m2ktAZ0cAGk94rD7M2LFjOJ6luDw4XACVBDMXiZuZsSg0zxVcwdj O3a7o4QsSxWP+7L6ky+1LMhmFc2wTZWBZj8bAgalZ2mn0+RFa9i6SDlW9QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOKIZ6yxKDvkzkZmTlJt9oxmjDzZMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvNG9obnJMRW9PLVRPUm1aT1VtMzJqR2FNUE5rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBxLA MA0GCSqGSIb3DQEBCwUAA4IBAQAnMLXjVXw3YXia1Be/rLfaP8C0XK/sI3cZzSTx s+milLQHxR4CCKOlMuHXIsCBCWdk62691qdXedeQTwapoMhzdjd6ef7Sp870eL8N 31nWIcDnxyzGEFHtG/nRU4M5PVSSZyQFlxnCec5pscTWC5F4sIzUHRbCuAcGYNuB HkLOBctjQB2+DrVrNeYqz9DwPbOoj/b/HHVPbmv6VpidN7HfVJ+yvundL3gkReUB nKY9feVfAPGGH1yPiAdbOnHPZBAoe9xgCUqZL0bjVkoTSEvQiCztsQPTWlJeubhQ SNkXKHprAwoXTQGGz6NC3FloGfUxiHYnwVpUkINjcSocOzlI -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:54 2026 by rpki-client