This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/TsNSJxcrqqtVshc_SNvnidAAuoo.roa File: TsNSJxcrqqtVshc_SNvnidAAuoo.roa (raw, json) Hash identifier: iWB4TY7q0FzmEgjG+84T6OCPnmpk1qY11pOvh9CXlNI= Subject key identifier: 4E:C3:52:27:17:2B:AA:AB:55:B2:17:3F:48:DB:E7:89:D0:00:BA:8A Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Certificate serial: 019B7F15E605D1F644753308B712CB10E7DD Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/TsNSJxcrqqtVshc_SNvnidAAuoo.roa Signing time: Fri 02 Jan 2026 14:21:40 +0000 ROA not before: Fri 02 Jan 2026 14:21:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 53356 IP address blocks: 2a07:9200::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:e6:05:d1:f6:44:75:33:08:b7:12:cb:10:e7:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Validity Not Before: Jan 2 14:21:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ec35227172baaab55b2173f48dbe789d000ba8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:62:d0:ff:4c:a5:63:1d:34:be:a5:33:a8:e7: 6e:2a:c0:47:d9:bb:ba:fa:b4:c9:82:5f:14:0e:11: 9b:23:b7:4a:e5:31:a4:56:9c:c6:9e:ce:be:5b:86: 65:c2:48:f7:d4:72:63:d0:38:71:48:c0:94:a8:87: 5d:2c:b8:2a:47:6e:a0:81:f5:8e:23:97:61:8b:d9: 7a:79:04:dd:f3:34:de:67:d5:f6:96:5a:14:40:50: e9:97:46:94:90:30:53:3e:d9:1a:7e:92:51:f1:65: 15:b3:c8:f8:4c:a7:11:37:48:1f:47:eb:10:6b:73: ea:e0:dc:0c:f2:cd:9e:0a:29:71:9b:bd:52:ff:e5: 42:e5:30:40:66:05:65:66:c9:2e:0a:11:2c:23:b1: 8c:bf:c0:dd:24:90:c5:65:af:5d:9d:03:24:16:f2: ce:38:67:a7:1f:d5:23:b6:47:b3:1d:06:5a:f3:c7: d4:8a:ab:a5:f3:8d:da:fc:0b:95:86:a0:a4:41:5e: e4:01:1d:82:b6:08:96:a7:8f:92:a2:bd:af:cc:3e: 08:45:3a:ad:f2:a3:ac:f4:b9:a8:8f:6c:a6:b1:0e: 56:9a:2c:7d:bf:6d:85:96:23:19:ea:6c:0d:3c:c7: 64:5d:c1:d7:77:c4:36:ea:99:51:02:50:dc:58:e2: c6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:C3:52:27:17:2B:AA:AB:55:B2:17:3F:48:DB:E7:89:D0:00:BA:8A X509v3 Authority Key Identifier: keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/TsNSJxcrqqtVshc_SNvnidAAuoo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:9200::/32 Signature Algorithm: sha256WithRSAEncryption 8c:37:7a:47:19:bd:34:aa:8c:63:e6:6d:aa:94:27:5f:4f:fb: 0f:1c:5f:d3:71:56:a1:5d:50:e3:5c:c7:39:d2:a6:38:84:cd: 3e:9b:dc:58:ac:72:6e:fe:a8:30:38:3b:a0:db:8d:08:ee:e9: c7:11:fa:72:0d:da:90:25:1c:cc:1c:0e:49:9a:0b:20:62:db: 92:95:3e:14:3c:a5:ff:26:25:70:bd:3a:7a:e7:15:37:0e:1b: 56:1b:69:68:33:af:33:a1:59:53:fa:6e:32:52:59:b0:4f:26: 16:81:36:fc:e0:23:98:39:16:67:31:4a:6a:55:cc:2e:35:c6: 7e:a3:4f:62:38:71:0c:89:fe:05:2e:01:6d:d2:cc:5a:36:01: 8f:b4:59:ca:0a:07:6b:8c:e0:a3:f0:26:84:46:68:9f:df:c1: 17:92:40:05:40:9a:82:85:0c:00:ee:75:4c:a9:c7:6f:b9:a9: 6a:4c:d6:eb:ae:c6:35:e1:12:b0:a2:27:a2:d5:11:2d:6f:f4: 28:fa:0e:29:6d:a3:e9:99:f8:99:7c:ae:3e:85:6c:8d:2c:b4: 1d:e7:ab:7c:e6:80:e4:bf:25:8c:d9:2a:67:71:ae:d7:9b:46: ba:dd:6f:ce:42:74:95:0d:7f:97:6a:93:a1:71:9b:75:b3:5b: 79:99:30:94 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/FeYF0fZEdTMItxLLEOfdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy YTI4YTEwHhcNMjYwMTAyMTQyMTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZWMzNTIyNzE3MmJhYWFiNTViMjE3M2Y0OGRiZTc4OWQwMDBiYThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmLQ/0ylYx00vqUzqOduKsBH2bu6 +rTJgl8UDhGbI7dK5TGkVpzGns6+W4Zlwkj31HJj0DhxSMCUqIddLLgqR26ggfWO I5dhi9l6eQTd8zTeZ9X2lloUQFDpl0aUkDBTPtkafpJR8WUVs8j4TKcRN0gfR+sQ a3Pq4NwM8s2eCilxm71S/+VC5TBAZgVlZskuChEsI7GMv8DdJJDFZa9dnQMkFvLO OGenH9UjtkezHQZa88fUiqul843a/AuVhqCkQV7kAR2CtgiWp4+Sor2vzD4IRTqt 8qOs9Lmoj2ymsQ5Wmix9v22FliMZ6mwNPMdkXcHXd8Q26plRAlDcWOLGWQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFE7DUicXK6qrVbIXP0jb54nQALqKMB8GA1UdIwQY MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt ZWVmMzUxMWY2YzYwLzEvVHNOU0p4Y3JxcXRWc2hjX1NOdm5pZEFBdW9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgeSADAN BgkqhkiG9w0BAQsFAAOCAQEAjDd6Rxm9NKqMY+ZtqpQnX0/7Dxxf03FWoV1Q41zH OdKmOITNPpvcWKxybv6oMDg7oNuNCO7pxxH6cg3akCUczBwOSZoLIGLbkpU+FDyl /yYlcL06eucVNw4bVhtpaDOvM6FZU/puMlJZsE8mFoE2/OAjmDkWZzFKalXMLjXG fqNPYjhxDIn+BS4BbdLMWjYBj7RZygoHa4zgo/AmhEZon9/BF5JABUCagoUMAO51 TKnHb7mpakzW667GNeESsKInotURLW/0KPoOKW2j6Zn4mXyuPoVsjSy0HeerfOaA 5L8ljNkqZ3Gu15tGut1vzkJ0lQ1/l2qToXGbdbNbeZkwlA== -----END CERTIFICATE-----Generated at Tue Jan 6 20:52:38 2026 by rpki-client