This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/n4I8TICYcXMYnWMIMDutRKdo0D8.roa File: n4I8TICYcXMYnWMIMDutRKdo0D8.roa (raw, json) Hash identifier: t9ki1VonqR/gcTmse++za88C9ag/T/4665NZZvFdtZc= Subject key identifier: 9F:82:3C:4C:80:98:71:73:18:9D:63:08:30:3B:AD:44:A7:68:D0:3F Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D13806E8320698E1B8A5ABAA0414A Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/n4I8TICYcXMYnWMIMDutRKdo0D8.roa Signing time: Fri 02 Jan 2026 06:20:10 +0000 ROA not before: Fri 02 Jan 2026 06:20:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208454 IP address blocks: 2a10:cc44:1d0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:13:80:6e:83:20:69:8e:1b:8a:5a:ba:a0:41:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f823c4c80987173189d6308303bad44a768d03f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:79:83:81:37:b6:ec:cf:d7:43:3e:01:87:ed: 0b:38:7e:fd:1a:92:d0:c0:44:0d:f0:77:1a:01:58: 30:3c:3e:e4:a6:54:66:e2:9c:e7:34:80:a4:ca:42: 89:a9:44:20:4e:c4:e1:5e:f8:d0:06:cb:61:1f:19: 41:9e:67:db:ba:67:c8:62:d2:c6:9a:0b:70:83:86: e8:71:49:79:93:6c:d7:c3:02:1c:16:44:48:d9:21: 99:5e:1a:10:9b:ab:7b:8d:13:0c:cc:f5:21:b4:18: 29:22:c8:a9:da:e1:90:bf:7b:d8:bc:69:14:40:a1: 44:2e:d1:9b:60:40:70:b7:c3:4f:4c:eb:12:01:d9: d6:79:0e:2d:67:a2:a4:d6:3e:17:9c:5f:93:b8:58: df:a6:7e:c4:31:34:ce:9b:88:cc:a5:2f:a2:34:e4: 36:bc:a7:15:7c:48:9f:39:7a:ba:0c:8a:a0:6f:b7: d2:db:30:dd:0a:8f:3e:ba:f9:7b:0b:20:3f:c2:94: eb:92:8d:00:63:70:f4:41:b3:98:6b:62:e2:d2:41: cb:6d:e8:fc:b6:86:a6:d2:91:df:5d:86:1c:ca:79: 0e:30:47:d5:03:97:30:da:33:57:2f:8a:76:09:63: 8c:d0:9d:13:15:a4:f9:62:ac:53:2d:eb:9b:9e:bf: a7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:82:3C:4C:80:98:71:73:18:9D:63:08:30:3B:AD:44:A7:68:D0:3F X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/n4I8TICYcXMYnWMIMDutRKdo0D8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:cc44:1d0::/44 Signature Algorithm: sha256WithRSAEncryption 68:90:c6:ea:64:e7:f0:c3:06:bb:28:9f:21:01:2c:d3:6a:d3: 56:85:fa:72:0c:81:5e:65:06:4e:f1:1f:bf:19:b9:7a:3b:1c: f6:f7:ef:9a:42:3e:f1:73:15:38:c8:1f:60:b4:62:58:78:8a: d5:0f:d8:a7:32:e0:24:22:54:e6:45:64:20:7d:c5:15:6b:3d: 58:fb:de:34:f9:29:28:c3:30:74:9e:a3:6a:e4:f6:29:08:f5: 70:5f:cc:f2:1c:9f:ed:39:32:38:76:2d:f6:d1:a8:a3:39:0b: a1:1b:9c:0d:aa:9b:f0:af:02:7e:2d:ff:84:67:d0:ba:98:8a: 55:e5:49:41:d6:d5:a9:c8:19:0f:ab:3d:a5:9b:3c:ad:e0:87: f9:9f:ee:13:0b:6b:7f:11:45:46:a9:1e:ff:91:ab:fc:a0:0c: 6a:f9:5b:6d:8b:b0:46:10:a6:60:24:a3:40:77:35:c1:ec:e7: 8c:fc:f0:a2:ad:f3:a6:9c:2a:ae:7e:a3:fc:1a:62:e6:33:25: 0d:97:31:46:ec:9e:97:49:b0:53:4d:97:d7:f5:93:87:3b:ba: f0:9f:3a:dd:d5:81:0b:46:98:56:46:21:1d:a0:71:d4:85:1e: 91:df:97:5a:47:98:06:d6:65:c4:f4:52:c1:f3:75:68:60:db: d0:67:8a:c1 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XROAboMgaY4bilq6oEFKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjgyM2M0YzgwOTg3MTczMTg5ZDYzMDgzMDNiYWQ0NGE3NjhkMDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXmDgTe27M/XQz4Bh+0LOH79GpLQ wEQN8HcaAVgwPD7kplRm4pznNICkykKJqUQgTsThXvjQBsthHxlBnmfbumfIYtLG mgtwg4bocUl5k2zXwwIcFkRI2SGZXhoQm6t7jRMMzPUhtBgpIsip2uGQv3vYvGkU QKFELtGbYEBwt8NPTOsSAdnWeQ4tZ6Kk1j4XnF+TuFjfpn7EMTTOm4jMpS+iNOQ2 vKcVfEifOXq6DIqgb7fS2zDdCo8+uvl7CyA/wpTrko0AY3D0QbOYa2Li0kHLbej8 toam0pHfXYYcynkOMEfVA5cw2jNXL4p2CWOM0J0TFaT5YqxTLeubnr+nlwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJ+CPEyAmHFzGJ1jCDA7rUSnaNA/MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvbjRJOFRJQ1ljWE1ZbldNSU1EdXRSS2RvMEQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhDMRAHQ MA0GCSqGSIb3DQEBCwUAA4IBAQBokMbqZOfwwwa7KJ8hASzTatNWhfpyDIFeZQZO 8R+/Gbl6Oxz29++aQj7xcxU4yB9gtGJYeIrVD9inMuAkIlTmRWQgfcUVaz1Y+940 +SkowzB0nqNq5PYpCPVwX8zyHJ/tOTI4di320aijOQuhG5wNqpvwrwJ+Lf+EZ9C6 mIpV5UlB1tWpyBkPqz2lmzyt4If5n+4TC2t/EUVGqR7/kav8oAxq+Vtti7BGEKZg JKNAdzXB7OeM/PCirfOmnCqufqP8GmLmMyUNlzFG7J6XSbBTTZfX9ZOHO7rwnzrd 1YELRphWRiEdoHHUhR6R35daR5gG1mXE9FLB83VoYNvQZ4rB -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:47 2026 by rpki-client