This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/TsU_TDQZgefA-fi0926iGwzM8Ys.roa File: TsU_TDQZgefA-fi0926iGwzM8Ys.roa (raw, json) Hash identifier: LZj487WHwPjLHFPGIpn7b4ZlmGUfUSFRgqvD3CsHxQg= Subject key identifier: 4E:C5:3F:4C:34:19:81:E7:C0:F9:F8:B4:F7:6E:A2:1B:0C:CC:F1:8B Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6CE021AAF74CF698FAD2B1193B5C5 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/TsU_TDQZgefA-fi0926iGwzM8Ys.roa Signing time: Fri 02 Jan 2026 12:20:19 +0000 ROA not before: Fri 02 Jan 2026 12:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61138 IP address blocks: 2a0c:9a40:8082::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:ce:02:1a:af:74:cf:69:8f:ad:2b:11:93:b5:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ec53f4c341981e7c0f9f8b4f76ea21b0cccf18b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d9:56:00:af:47:6e:25:1c:f4:a3:e2:69:ea: 06:04:0f:64:69:57:57:fb:3e:b3:c2:f7:4d:fd:e8: 6e:52:5f:ec:89:79:72:9a:c4:18:aa:da:7f:a8:e1: 29:58:ad:59:3f:ba:50:bb:37:dd:21:42:d9:40:d3: c8:91:7c:8d:33:c3:c7:bd:77:cc:4e:83:12:27:b8: 59:d4:77:4c:b3:66:35:3f:ff:26:82:65:ee:cc:16: 9f:ec:6b:8d:12:ec:1f:c7:82:00:91:1e:69:61:b3: fa:09:40:da:56:5b:19:f3:7a:be:34:f3:61:45:3c: e1:0b:72:01:28:31:25:e5:4b:e8:56:ff:9d:1c:68: 2e:79:41:bb:fa:3a:c1:91:a8:5f:21:06:42:94:a7: 22:e2:09:64:9b:9a:c2:9d:73:ba:ac:77:02:ff:ca: 79:c1:bc:94:16:31:b9:73:77:dc:f4:05:ed:3e:15: fe:b2:0b:65:a6:95:73:24:14:13:33:0d:f5:72:b2: 2c:3b:46:68:d5:d2:50:c6:78:4f:e8:7d:40:b7:8a: 93:66:5f:c1:f6:04:10:a2:5c:72:f6:62:14:02:12: f3:19:ff:44:6f:a8:50:ed:28:5e:65:ff:37:bd:86: a8:82:86:d8:9e:85:b5:65:7b:eb:1d:4f:ef:ca:bb: 08:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:C5:3F:4C:34:19:81:E7:C0:F9:F8:B4:F7:6E:A2:1B:0C:CC:F1:8B X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/TsU_TDQZgefA-fi0926iGwzM8Ys.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8082::/48 Signature Algorithm: sha256WithRSAEncryption 55:c2:05:98:12:4a:68:c9:a0:85:ef:ee:45:a7:bc:13:be:2b: 97:bb:f3:03:e7:61:a5:57:fc:6b:f4:fc:d5:ae:09:ce:df:3e: 48:95:c9:1c:d6:ef:e0:a2:da:43:d5:03:00:3c:f3:c0:ba:94: 19:c0:bd:cc:1e:4b:af:bc:a7:2d:b6:4a:1c:2c:c9:14:f0:bf: ce:57:e1:46:a4:c0:09:75:fa:e3:b6:ef:6b:e9:9a:37:1e:66: 60:e1:54:b1:ba:0e:ac:43:f7:6b:a7:3c:8c:76:1d:26:d9:12: 5e:e5:47:a8:02:77:83:4e:98:91:6c:a8:8f:29:16:c4:16:bd: 6a:a5:25:7a:47:1d:82:bf:5f:81:61:7f:f1:14:3e:30:07:da: 6d:a7:a0:6c:a3:9d:1f:f6:05:50:8f:73:b0:2e:5a:fe:b5:9f: c3:36:7d:d7:52:b8:fc:77:9d:65:0a:b4:c1:2d:40:be:9b:17: 49:4b:2e:11:1f:62:bf:47:39:d9:23:76:a9:60:7e:70:ab:ef: c1:29:4c:10:d6:fd:6e:76:bf:36:8b:7a:ac:4b:9a:5b:66:2a: 62:fa:07:f3:2e:56:18:4b:b5:a5:a5:4f:3f:15:f0:44:b9:96: cd:2c:9e:b3:12:31:dd:8c:b5:e1:9a:1a:fc:fd:e5:cb:ed:95: 36:9c:aa:db -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+ps4CGq90z2mPrSsRk7XFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZWM1M2Y0YzM0MTk4MWU3YzBmOWY4YjRmNzZlYTIxYjBjY2NmMThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtlWAK9HbiUc9KPiaeoGBA9kaVdX +z6zwvdN/ehuUl/siXlymsQYqtp/qOEpWK1ZP7pQuzfdIULZQNPIkXyNM8PHvXfM ToMSJ7hZ1HdMs2Y1P/8mgmXuzBaf7GuNEuwfx4IAkR5pYbP6CUDaVlsZ83q+NPNh RTzhC3IBKDEl5UvoVv+dHGgueUG7+jrBkahfIQZClKci4glkm5rCnXO6rHcC/8p5 wbyUFjG5c3fc9AXtPhX+sgtlppVzJBQTMw31crIsO0Zo1dJQxnhP6H1At4qTZl/B 9gQQolxy9mIUAhLzGf9Eb6hQ7SheZf83vYaogobYnoW1ZXvrHU/vyrsIzQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFE7FP0w0GYHnwPn4tPduohsMzPGLMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvVHNVX1REUVpnZWZBLWZpMDkyNmlHd3pNOFlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQICC MA0GCSqGSIb3DQEBCwUAA4IBAQBVwgWYEkpoyaCF7+5Fp7wTviuXu/MD52GlV/xr 9PzVrgnO3z5Ilckc1u/gotpD1QMAPPPAupQZwL3MHkuvvKcttkocLMkU8L/OV+FG pMAJdfrjtu9r6Zo3HmZg4VSxug6sQ/drpzyMdh0m2RJe5UeoAneDTpiRbKiPKRbE Fr1qpSV6Rx2Cv1+BYX/xFD4wB9ptp6Bso50f9gVQj3OwLlr+tZ/DNn3XUrj8d51l CrTBLUC+mxdJSy4RH2K/RznZI3apYH5wq+/BKUwQ1v1udr82i3qsS5pbZipi+gfz LlYYS7WlpU8/FfBEuZbNLJ6zEjHdjLXhmhr8/eXL7ZU2nKrb -----END CERTIFICATE-----Generated at Tue Jan 20 09:07:41 2026 by rpki-client