This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/K-TXYz1WGe-yTlM8TgDj6OFJCUU.roa File: K-TXYz1WGe-yTlM8TgDj6OFJCUU.roa (raw, json) Hash identifier: U5I3qs+P54VnQtmtRw76Uuqe0pRECGpUnhOiOabm1KU= Subject key identifier: 2B:E4:D7:63:3D:56:19:EF:B2:4E:53:3C:4E:00:E3:E8:E1:49:09:45 Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a Certificate serial: 019B7FF1C130635DA0B49ACB89D34E4B2AF8 Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/K-TXYz1WGe-yTlM8TgDj6OFJCUU.roa Signing time: Fri 02 Jan 2026 18:21:48 +0000 ROA not before: Fri 02 Jan 2026 18:21:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212234 IP address blocks: 2a03:5840:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:c1:30:63:5d:a0:b4:9a:cb:89:d3:4e:4b:2a:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a Validity Not Before: Jan 2 18:21:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2be4d7633d5619efb24e533c4e00e3e8e1490945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e1:59:4c:10:1a:4d:01:6c:7a:b2:c1:8a:dc: 5a:d5:ad:51:fd:cd:10:94:f1:a4:fc:dc:8a:e5:bd: 43:4b:a4:da:33:ac:59:7b:15:fb:e0:78:72:f0:55: b9:10:f3:6e:76:cb:06:66:90:c7:05:11:88:b0:30: 4e:de:5b:d6:4a:b9:55:03:fd:66:e1:75:2e:ef:06: a3:7a:89:d3:19:65:a8:61:3b:4a:26:34:1c:0c:91: 5c:1b:d0:f2:05:5d:a1:af:71:2a:04:2e:d4:cb:27: bd:ce:42:5b:45:37:25:a1:9b:b4:80:39:04:be:0b: b3:98:5b:6d:b3:41:53:5a:62:f7:76:e8:b9:b0:25: 8d:fe:98:d6:34:55:d5:79:73:dd:4a:cb:62:3d:e5: d6:a4:47:e4:78:e3:61:37:52:66:6a:c0:d6:69:10: 51:ed:1c:ff:2d:b5:ef:7f:73:97:cf:0a:74:38:a0: 82:c3:34:ed:ec:f7:a2:43:f1:f6:4f:1d:23:22:dc: 1c:f6:ca:c3:a2:62:c4:fb:8c:f2:9f:de:04:e7:f8: f3:79:bb:e0:9e:8b:64:cd:ff:3b:03:0a:1e:48:a7: 65:82:58:23:19:80:18:d9:e9:fe:d4:5d:a2:ab:0e: 97:4a:08:7a:98:83:7b:37:73:c2:b3:71:54:90:54: 01:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E4:D7:63:3D:56:19:EF:B2:4E:53:3C:4E:00:E3:E8:E1:49:09:45 X509v3 Authority Key Identifier: keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/K-TXYz1WGe-yTlM8TgDj6OFJCUU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:5840:135::/48 Signature Algorithm: sha256WithRSAEncryption 07:99:9d:46:04:d0:a5:13:9e:db:14:91:18:f5:aa:3f:96:62: 84:10:3f:fb:ac:3e:3a:e6:dd:f1:f3:20:f5:74:98:71:75:1a: 0e:1c:63:e3:38:dc:31:8c:1c:ea:87:a2:be:77:91:c3:6e:70: 9d:1c:32:40:bd:84:44:87:65:2e:16:f9:43:9e:68:29:7a:42: f8:56:10:3a:41:e3:96:b7:b3:5a:66:5a:f0:7f:e3:ef:55:25: f6:9b:b1:4d:7b:5b:f6:8e:76:81:10:fc:23:d5:f1:9a:71:d3: c3:35:da:f7:20:aa:54:96:c4:57:af:dc:9c:00:02:7c:9c:2b: 1b:41:8f:59:8e:16:80:ae:d3:f9:2b:02:a9:76:11:52:19:f1: f0:62:ed:2f:e6:54:12:5e:e2:24:b0:ba:f0:ea:c8:1f:c3:aa: 02:bb:2f:ca:1c:34:1c:bd:fa:b1:fa:10:14:e3:90:98:83:0d: c1:9a:08:29:76:cb:20:d9:57:7c:b0:eb:a4:f0:36:d5:a0:a8: 15:6b:e8:6b:c9:48:71:d5:0f:d7:41:d0:e8:f1:14:54:51:50: 7e:3a:de:8c:e9:ce:45:93:ca:fc:ce:01:fb:15:64:bc:a8:2c: df:bc:95:21:c9:17:af:36:47:ff:eb:20:25:c9:28:ab:b7:32: ef:39:d2:89 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/8cEwY12gtJrLidNOSyr4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3NzcwNWU4OWJiNjViNDcyZTRlMDE4NGQ2ZmU5YmZiOGM1 ODYzNWEwHhcNMjYwMTAyMTgyMTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYmU0ZDc2MzNkNTYxOWVmYjI0ZTUzM2M0ZTAwZTNlOGUxNDkwOTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveFZTBAaTQFserLBitxa1a1R/c0Q lPGk/NyK5b1DS6TaM6xZexX74Hhy8FW5EPNudssGZpDHBRGIsDBO3lvWSrlVA/1m 4XUu7wajeonTGWWoYTtKJjQcDJFcG9DyBV2hr3EqBC7Uyye9zkJbRTcloZu0gDkE vguzmFtts0FTWmL3dui5sCWN/pjWNFXVeXPdSstiPeXWpEfkeONhN1JmasDWaRBR 7Rz/LbXvf3OXzwp0OKCCwzTt7PeiQ/H2Tx0jItwc9srDomLE+4zyn94E5/jzebvg notkzf87AwoeSKdlglgjGYAY2en+1F2iqw6XSgh6mIN7N3PCs3FUkFQBSQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCvk12M9Vhnvsk5TPE4A4+jhSQlFMB8GA1UdIwQY MBaAFPd3BeibtltHLk4BhNb+m/uMWGNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYt NmNiODk3OTFkN2ZkLzEvSy1UWFl6MVdHZS15VGxNOFRnRGo2T0ZKQ1VVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYtNmNiODk3OTFkN2Zk LzEvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgNYQAE1 MA0GCSqGSIb3DQEBCwUAA4IBAQAHmZ1GBNClE57bFJEY9ao/lmKEED/7rD465t3x 8yD1dJhxdRoOHGPjONwxjBzqh6K+d5HDbnCdHDJAvYREh2UuFvlDnmgpekL4VhA6 QeOWt7NaZlrwf+PvVSX2m7FNe1v2jnaBEPwj1fGacdPDNdr3IKpUlsRXr9ycAAJ8 nCsbQY9ZjhaArtP5KwKpdhFSGfHwYu0v5lQSXuIksLrw6sgfw6oCuy/KHDQcvfqx +hAU45CYgw3Bmggpdssg2Vd8sOuk8DbVoKgVa+hryUhx1Q/XQdDo8RRUUVB+Ot6M 6c5Fk8r8zgH7FWS8qCzfvJUhyRevNkf/6yAlySirtzLvOdKJ -----END CERTIFICATE-----Generated at Fri Jan 23 15:21:46 2026 by rpki-client