This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/TBnIWRXmaioj4VNAeohizOndJik.roa File: TBnIWRXmaioj4VNAeohizOndJik.roa (raw, json) Hash identifier: 2riLD0Kzk3cTcFLoOXdz+F9jE26bgZXovekMIn+wR5U= Subject key identifier: 4C:19:C8:59:15:E6:6A:2A:23:E1:53:40:7A:88:62:CC:E9:DD:26:29 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6C2CC2DDEE98A133AC75BCCAC7A2B Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/TBnIWRXmaioj4VNAeohizOndJik.roa Signing time: Fri 02 Jan 2026 12:20:16 +0000 ROA not before: Fri 02 Jan 2026 12:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 11967 IP address blocks: 2a0c:9a40:d300::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:c2:cc:2d:de:e9:8a:13:3a:c7:5b:cc:ac:7a:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c19c85915e66a2a23e153407a8862cce9dd2629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d9:11:22:0b:59:01:8f:6d:90:15:6d:91:75: 70:db:15:a3:f4:df:de:c9:b5:56:f4:d2:cc:07:55: f5:a7:26:60:f8:da:91:2f:3e:82:c3:30:97:2f:20: f4:02:16:f0:06:3f:bf:7a:ed:ba:09:8f:51:3d:0b: bc:12:67:84:31:aa:c8:a2:c8:49:96:2d:2b:fc:cf: c2:5b:76:78:8a:5e:7b:98:e1:1c:0f:d6:fb:d0:8a: 26:2e:be:89:f9:57:33:ef:f7:e1:9c:08:4d:3e:bd: 2a:7e:b9:42:26:95:f1:27:31:3f:b6:ca:4f:57:43: a1:5b:6e:1f:ec:8c:47:f3:0b:47:25:d8:85:d8:10: ae:0b:b6:05:83:b0:a8:27:eb:f1:d7:1a:73:cb:28: 4e:66:3a:3b:c4:0d:a1:f1:9f:ec:ca:31:0f:d8:52: e2:f4:15:ed:69:1b:50:21:b8:1c:23:6d:cc:80:d3: 5c:12:7b:17:48:e7:d0:f7:c6:10:9a:e1:74:22:23: 87:b5:1d:a7:0a:f8:14:27:28:d9:aa:49:f9:82:55: 71:12:4a:d8:1f:4a:19:df:c3:b9:a5:f4:91:a3:ba: 5e:7c:62:dc:ad:48:4b:bc:97:14:44:de:a7:45:1a: 60:2f:e8:f3:c9:ba:ac:ec:a6:4a:85:bc:ec:56:10: 16:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:19:C8:59:15:E6:6A:2A:23:E1:53:40:7A:88:62:CC:E9:DD:26:29 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/TBnIWRXmaioj4VNAeohizOndJik.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:d300::/40 Signature Algorithm: sha256WithRSAEncryption 18:6a:c3:5c:1c:db:7b:33:04:37:28:5a:21:84:d3:32:e3:e2: dc:59:ce:d8:5f:ea:17:c6:e2:58:0b:3c:ea:2c:c2:2c:e0:42: 76:b4:b3:d4:a5:14:27:9d:a1:d9:89:ed:a5:8f:aa:a9:ad:a6: 45:7c:e1:88:a2:49:83:43:fe:5b:a5:2a:f7:76:49:f6:6e:37: d5:51:98:ea:5c:45:40:54:8e:6a:5c:ce:fb:9f:2a:ac:26:1a: 13:83:75:c3:fb:7c:e1:fd:ee:21:60:da:48:0f:e9:b1:56:1c: 79:f4:a4:e7:81:3c:f7:61:07:df:f0:64:f4:2e:80:3c:cc:23: f7:16:9c:cb:6f:21:a4:e5:c7:f7:61:be:f6:39:d7:0b:39:88: 0e:dc:ff:ae:d2:75:41:3a:a9:28:d5:d1:8f:1c:59:7c:e8:3b: d1:49:12:de:a0:dd:18:d5:7f:aa:f9:8c:2d:4e:a5:22:77:16: ac:06:14:97:63:72:24:de:9b:fa:98:86:8e:7a:64:af:41:09: 0f:14:5b:27:1b:d4:38:36:9d:e9:a8:53:ec:1d:70:61:7d:27: e2:75:ca:27:d7:d0:89:6c:8d:b9:cb:5b:8d:bd:39:78:dc:43: e4:89:bb:41:4f:03:11:b8:a0:5a:48:f7:48:8d:92:51:7b:19: 9a:3a:d5:b0 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+psLMLd7pihM6x1vMrHorMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzE5Yzg1OTE1ZTY2YTJhMjNlMTUzNDA3YTg4NjJjY2U5ZGQyNjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNkRIgtZAY9tkBVtkXVw2xWj9N/e ybVW9NLMB1X1pyZg+NqRLz6CwzCXLyD0AhbwBj+/eu26CY9RPQu8EmeEMarIoshJ li0r/M/CW3Z4il57mOEcD9b70IomLr6J+Vcz7/fhnAhNPr0qfrlCJpXxJzE/tspP V0OhW24f7IxH8wtHJdiF2BCuC7YFg7CoJ+vx1xpzyyhOZjo7xA2h8Z/syjEP2FLi 9BXtaRtQIbgcI23MgNNcEnsXSOfQ98YQmuF0IiOHtR2nCvgUJyjZqkn5glVxEkrY H0oZ38O5pfSRo7pefGLcrUhLvJcURN6nRRpgL+jzybqs7KZKhbzsVhAWLQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFEwZyFkV5moqI+FTQHqIYszp3SYpMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvVEJuSVdSWG1haW9qNFZOQWVvaGl6T25kSmlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgyaQNMw DQYJKoZIhvcNAQELBQADggEBABhqw1wc23szBDcoWiGE0zLj4txZzthf6hfG4lgL POoswizgQna0s9SlFCedodmJ7aWPqqmtpkV84YiiSYND/lulKvd2SfZuN9VRmOpc RUBUjmpczvufKqwmGhODdcP7fOH97iFg2kgP6bFWHHn0pOeBPPdhB9/wZPQugDzM I/cWnMtvIaTlx/dhvvY51ws5iA7c/67SdUE6qSjV0Y8cWXzoO9FJEt6g3RjVf6r5 jC1OpSJ3FqwGFJdjciTem/qYho56ZK9BCQ8UWycb1Dg2nemoU+wdcGF9J+J1yifX 0IlsjbnLW429OXjcQ+SJu0FPAxG4oFpI90iNklF7GZo61bA= -----END CERTIFICATE-----Generated at Tue Jan 20 09:06:14 2026 by rpki-client