This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/Tj86XfWCuCApPHfYX3OGv6qhNv0.roa File: Tj86XfWCuCApPHfYX3OGv6qhNv0.roa (raw, json) Hash identifier: KavhnQrG+XPERodqs0bRhCLXxZdjDwTVYFBmFO2dVKc= Subject key identifier: 4E:3F:3A:5D:F5:82:B8:20:29:3C:77:D8:5F:73:86:BF:AA:A1:36:FD Certificate issuer: /CN=5e51c193fb7ff1746a215c41817f50ecba5a581a Certificate serial: 019B7F8411DE441EBF595BB26A79795D6081 Authority key identifier: 5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/Tj86XfWCuCApPHfYX3OGv6qhNv0.roa Signing time: Fri 02 Jan 2026 16:22:00 +0000 ROA not before: Fri 02 Jan 2026 16:22:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 2001:678:f8c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 17 Jan 2026 22:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:11:de:44:1e:bf:59:5b:b2:6a:79:79:5d:60:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e51c193fb7ff1746a215c41817f50ecba5a581a Validity Not Before: Jan 2 16:22:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e3f3a5df582b820293c77d85f7386bfaaa136fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bf:37:d3:03:fb:13:ea:53:ec:b5:e0:dd:ad: c7:99:c0:d4:f5:95:52:22:66:0e:7c:fc:6c:a8:8d: 7f:72:2b:b3:4d:c2:7e:10:80:c0:55:e4:36:f6:b5: 98:09:9c:38:95:9d:2a:15:d9:52:51:0f:b6:8f:d6: 97:f6:ba:06:97:09:cc:1c:f0:0d:d8:8a:37:74:b9: d8:28:c8:7d:a8:24:4a:33:28:48:bd:bf:e4:c7:b6: 7d:04:2b:fc:cd:83:f4:fd:e8:0d:a8:19:09:5a:57: 65:72:03:23:dc:08:11:c0:9c:4c:3e:6b:bd:e4:01: 0f:7c:a7:70:f4:50:83:a7:ed:6e:41:bf:51:1c:ac: 5c:7c:b4:6a:87:00:74:c2:b8:d7:f1:08:de:78:ba: 3b:58:12:d5:de:ea:65:e5:e7:c0:ef:29:8e:c3:84: dd:59:a4:06:d1:c6:9f:b9:b6:8f:d6:e7:c5:c8:ff: 5c:ac:33:ef:e8:3c:f2:97:47:33:c6:38:17:cd:f9: 5d:d7:4b:7a:a8:5c:b6:83:44:dd:28:b5:93:26:98: c5:71:37:12:ae:07:42:32:22:31:e8:a0:1a:d0:4c: 07:c6:30:cf:20:95:b1:42:30:6c:77:c2:44:4a:2a: 2f:a7:1b:91:66:24:a3:56:d4:c9:77:7a:7b:9c:58: 04:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:3F:3A:5D:F5:82:B8:20:29:3C:77:D8:5F:73:86:BF:AA:A1:36:FD X509v3 Authority Key Identifier: keyid:5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/Tj86XfWCuCApPHfYX3OGv6qhNv0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:f8c::/48 Signature Algorithm: sha256WithRSAEncryption 4e:dd:c3:89:60:ba:6f:20:65:b8:04:14:43:35:be:1a:6b:53: d6:d2:2e:71:6e:27:52:e5:68:2a:50:29:be:66:79:9e:47:5a: d9:1b:5a:40:e5:13:4a:3b:29:a7:0f:dc:b9:1f:ba:95:56:4b: 03:67:be:ca:3d:16:02:79:10:15:02:e1:d1:83:1d:18:cc:35: 91:d6:de:72:7e:3d:db:7d:2c:ac:93:98:23:69:ae:3b:c5:40: 1d:81:4e:69:be:47:8c:3e:09:5c:94:ae:eb:09:86:ca:51:c5: e0:55:bc:6a:62:79:f4:74:4f:ed:8f:71:a0:2b:9e:3f:a8:0a: 74:a0:03:7a:07:bd:49:35:95:f9:07:54:93:0d:e5:38:15:5e: 90:0d:69:09:a3:04:5a:9a:fe:9a:58:d0:60:3c:89:e9:59:1d: 2c:1c:b7:c2:36:fa:9b:29:18:47:fb:46:fa:b2:2c:d0:ea:d5: f5:eb:3e:44:71:70:80:a9:a3:ed:d0:8c:cd:ed:ee:88:21:d3: 4c:e4:74:4b:a9:3a:1e:ff:fc:d5:a7:58:3d:6a:78:69:ae:16: a9:10:56:71:23:0b:fc:2b:ed:4a:43:c0:96:d6:30:13:dd:e7: 97:66:52:06:bc:4f:97:6c:c8:81:fb:6b:38:ce:b5:56:86:37: b3:da:3e:ad -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/hBHeRB6/WVuyanl5XWCBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNTFjMTkzZmI3ZmYxNzQ2YTIxNWM0MTgxN2Y1MGVjYmE1 YTU4MWEwHhcNMjYwMTAyMTYyMjAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTNmM2E1ZGY1ODJiODIwMjkzYzc3ZDg1ZjczODZiZmFhYTEzNmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqb830wP7E+pT7LXg3a3HmcDU9ZVS ImYOfPxsqI1/ciuzTcJ+EIDAVeQ29rWYCZw4lZ0qFdlSUQ+2j9aX9roGlwnMHPAN 2Io3dLnYKMh9qCRKMyhIvb/kx7Z9BCv8zYP0/egNqBkJWldlcgMj3AgRwJxMPmu9 5AEPfKdw9FCDp+1uQb9RHKxcfLRqhwB0wrjX8QjeeLo7WBLV3upl5efA7ymOw4Td WaQG0cafubaP1ufFyP9crDPv6Dzyl0czxjgXzfld10t6qFy2g0TdKLWTJpjFcTcS rgdCMiIx6KAa0EwHxjDPIJWxQjBsd8JESiovpxuRZiSjVtTJd3p7nFgEoQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFE4/Ol31grggKTx32F9zhr+qoTb9MB8GA1UdIwQY MBaAFF5RwZP7f/F0aiFcQYF/UOy6WlgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGxIQmtfdF84WFJxSVZ4QmdYOVE3THBhV0JvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iODA3MmYtZjM1NS00ZGQ2LTkzOTMt NmE2NWQ4MDQxODAzLzEvVGo4NlhmV0N1Q0FwUEhmWVgzT0d2NnFoTnYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9iODA3MmYtZjM1NS00ZGQ2LTkzOTMtNmE2NWQ4MDQxODAz LzEvWGxIQmtfdF84WFJxSVZ4QmdYOVE3THBhV0JvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA+M MA0GCSqGSIb3DQEBCwUAA4IBAQBO3cOJYLpvIGW4BBRDNb4aa1PW0i5xbidS5Wgq UCm+ZnmeR1rZG1pA5RNKOymnD9y5H7qVVksDZ77KPRYCeRAVAuHRgx0YzDWR1t5y fj3bfSysk5gjaa47xUAdgU5pvkeMPglclK7rCYbKUcXgVbxqYnn0dE/tj3GgK54/ qAp0oAN6B71JNZX5B1STDeU4FV6QDWkJowRamv6aWNBgPInpWR0sHLfCNvqbKRhH +0b6sizQ6tX16z5EcXCAqaPt0IzN7e6IIdNM5HRLqToe//zVp1g9anhprhapEFZx Iwv8K+1KQ8CW1jAT3eeXZlIGvE+XbMiB+2s4zrVWhjez2j6t -----END CERTIFICATE-----Generated at Sat Jan 17 06:46:21 2026 by rpki-client