This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/TnLBmBgQSFjNyZk9wLYLseWxWy8.roa File: TnLBmBgQSFjNyZk9wLYLseWxWy8.roa (raw, json) Hash identifier: L8Wqf5zUSRS3tMpgIljce/Plv8K5QgHIKFrd9mENn5A= Subject key identifier: 4E:72:C1:98:18:10:48:58:CD:C9:99:3D:C0:B6:0B:B1:E5:B1:5B:2F Certificate issuer: /CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81 Certificate serial: 019B7EA6C789D987EFB1FE0B4F131F960D6C Authority key identifier: 69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/TnLBmBgQSFjNyZk9wLYLseWxWy8.roa Signing time: Fri 02 Jan 2026 12:20:17 +0000 ROA not before: Fri 02 Jan 2026 12:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 174 IP address blocks: 2a01:e287::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:c7:89:d9:87:ef:b1:fe:0b:4f:13:1f:96:0d:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81 Validity Not Before: Jan 2 12:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e72c19818104858cdc9993dc0b60bb1e5b15b2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:46:b8:7b:8f:51:99:9a:9a:3c:f8:e6:22:df: bf:16:52:e4:98:41:c6:cb:f1:b5:79:61:49:80:70: 9f:61:c7:9f:02:2a:be:1a:a6:15:0d:05:5a:86:ee: 49:01:90:6f:e9:78:9d:5a:96:2d:7a:ee:54:78:07: 0c:3f:8c:d5:51:42:3c:d2:1b:f7:6f:1b:f8:7f:ff: 18:a9:91:6d:02:04:b3:81:a6:fb:05:cf:c4:27:3d: 8d:a0:a5:05:ae:2c:57:c8:da:60:59:6c:13:d2:97: 1f:32:c4:50:18:81:de:91:1c:42:b0:c0:d8:10:15: 3d:f2:c5:fd:b0:0a:b1:33:01:90:2a:57:57:5e:72: 8f:98:19:ef:64:50:3a:e1:f4:8d:f9:1b:4c:8a:40: 46:29:2e:12:09:74:fd:aa:99:c4:d4:1c:8e:ec:76: 28:ac:89:92:7a:06:54:54:15:be:03:2f:14:c6:1a: c4:9a:1f:14:52:68:67:7f:54:91:ee:25:20:89:d7: b3:16:7c:0a:d6:f0:1e:1f:4f:42:b6:0b:80:62:13: d4:55:43:7a:6e:ba:8b:7d:12:56:19:0b:d9:d5:64: cf:ba:63:b6:00:00:b5:3e:40:54:5b:b1:2e:d7:42: 54:5a:79:a1:7b:98:41:e2:7f:59:77:43:75:c3:6a: 00:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:72:C1:98:18:10:48:58:CD:C9:99:3D:C0:B6:0B:B1:E5:B1:5B:2F X509v3 Authority Key Identifier: keyid:69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/TnLBmBgQSFjNyZk9wLYLseWxWy8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:e287::/32 Signature Algorithm: sha256WithRSAEncryption 88:03:74:87:64:c9:d1:66:b7:96:15:74:0f:9e:74:0d:da:28: 5b:24:3a:c7:9d:8b:39:9f:e3:ba:7f:b3:5d:95:be:bf:71:4b: a3:c9:45:ff:a4:91:2c:c3:51:ac:72:f3:88:3c:de:55:18:e9: 73:7c:a9:cf:8a:0e:b5:54:bf:00:c9:93:bc:2b:69:bb:91:12: cf:3d:ea:2e:d6:d7:b0:2b:12:79:2b:d7:82:8c:52:ef:c4:e3: a4:fb:7d:e8:ff:22:4f:d8:82:a1:28:f4:3b:19:5c:3f:a3:59: 1c:a4:37:ec:44:d4:07:60:22:f7:6d:64:01:a5:2e:ac:d1:c7: 3f:5a:0e:84:e6:2e:20:4d:fd:b6:02:5f:c5:dc:34:9d:b3:3f: 04:49:73:61:d6:72:9b:f3:fe:18:8f:ef:78:cc:2c:c3:69:30: 2d:6f:f8:e9:ee:ba:d8:af:f0:e4:e8:93:6a:81:f4:47:59:22: cb:eb:ea:6c:09:67:c8:41:fc:6a:a7:5d:ed:ef:85:e1:49:96: a8:f6:cb:e6:17:b3:e6:9c:a6:66:ab:18:49:88:48:b4:4e:1c: 84:0d:bb:50:72:93:16:2f:57:0f:8b:1b:9f:16:c1:44:c5:a1: ee:6f:f2:b4:98:21:7e:8f:3a:a9:bc:f5:77:d8:2f:94:f1:22: f0:58:b5:e3 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+pseJ2Yfvsf4LTxMflg1sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZGJlMWU3ZDllODdkNjg3MDFhNDAzNWE3NmM1MWJmZWNk ODhkODEwHhcNMjYwMTAyMTIyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTcyYzE5ODE4MTA0ODU4Y2RjOTk5M2RjMGI2MGJiMWU1YjE1YjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUa4e49RmZqaPPjmIt+/FlLkmEHG y/G1eWFJgHCfYcefAiq+GqYVDQVahu5JAZBv6XidWpYteu5UeAcMP4zVUUI80hv3 bxv4f/8YqZFtAgSzgab7Bc/EJz2NoKUFrixXyNpgWWwT0pcfMsRQGIHekRxCsMDY EBU98sX9sAqxMwGQKldXXnKPmBnvZFA64fSN+RtMikBGKS4SCXT9qpnE1ByO7HYo rImSegZUVBW+Ay8UxhrEmh8UUmhnf1SR7iUgidezFnwK1vAeH09CtguAYhPUVUN6 brqLfRJWGQvZ1WTPumO2AAC1PkBUW7Eu10JUWnmhe5hB4n9Zd0N1w2oAewIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFE5ywZgYEEhYzcmZPcC2C7HlsVsvMB8GA1UdIwQY MBaAFGnb4efZ6H1ocBpANadsUb/s2I2BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWR2aDU5bm9mV2h3R2tBMXAyeFJ2LXpZallFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83MjcwMTUtZTE0ZS00ZDQxLWIwNWIt OGQ5NDU1M2I3NWUxLzEvVG5MQm1CZ1FTRmpOeVprOXdMWUxzZVd4V3k4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC83MjcwMTUtZTE0ZS00ZDQxLWIwNWItOGQ5NDU1M2I3NWUx LzEvYWR2aDU5bm9mV2h3R2tBMXAyeFJ2LXpZallFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgHihzAN BgkqhkiG9w0BAQsFAAOCAQEAiAN0h2TJ0Wa3lhV0D550DdooWyQ6x52LOZ/jun+z XZW+v3FLo8lF/6SRLMNRrHLziDzeVRjpc3ypz4oOtVS/AMmTvCtpu5ESzz3qLtbX sCsSeSvXgoxS78TjpPt96P8iT9iCoSj0OxlcP6NZHKQ37ETUB2Ai921kAaUurNHH P1oOhOYuIE39tgJfxdw0nbM/BElzYdZym/P+GI/veMwsw2kwLW/46e662K/w5OiT aoH0R1kiy+vqbAlnyEH8aqdd7e+F4UmWqPbL5hez5pymZqsYSYhItE4chA27UHKT Fi9XD4sbnxbBRMWh7m/ytJghfo86qbz1d9gvlPEi8Fi14w== -----END CERTIFICATE-----Generated at Mon Jan 12 00:51:36 2026 by rpki-client