This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/ttNXspnBYOBylc9inYKHFOll37k.roa File: ttNXspnBYOBylc9inYKHFOll37k.roa (raw, json) Hash identifier: RLGAiX60Eg9+/H6cmMZLT7RRPoDY5hArHpeHbk6ZQf8= Subject key identifier: B6:D3:57:B2:99:C1:60:E0:72:95:CF:62:9D:82:87:14:E9:65:DF:B9 Certificate issuer: /CN=4dd03a586b978a70aaa82e0958a90152e72679d9 Certificate serial: 019B7EA54A5E19739C9F49D6067E91F5FCC5 Authority key identifier: 4D:D0:3A:58:6B:97:8A:70:AA:A8:2E:09:58:A9:01:52:E7:26:79:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/ttNXspnBYOBylc9inYKHFOll37k.roa Signing time: Fri 02 Jan 2026 12:18:40 +0000 ROA not before: Fri 02 Jan 2026 12:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50673 IP address blocks: 2001:67c:e98::/48 maxlen: 48 2001:67c:1330::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.crl rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 03:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:4a:5e:19:73:9c:9f:49:d6:06:7e:91:f5:fc:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd03a586b978a70aaa82e0958a90152e72679d9 Validity Not Before: Jan 2 12:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b6d357b299c160e07295cf629d828714e965dfb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6c:0c:88:17:c8:f4:74:a7:34:b0:9e:40:d3: 84:70:b4:cd:82:8e:bf:f6:1a:68:1c:d1:1a:fa:3e: ce:6d:a7:74:2c:20:5a:ae:4b:3a:5b:71:72:c5:ac: ac:88:c9:d7:15:01:fb:e6:c1:3e:67:f7:9c:0e:80: 8e:b9:4a:41:4e:23:f8:8c:b1:5f:e9:5f:2a:a2:49: 69:83:68:b8:49:4b:6c:54:a7:c0:1d:0f:24:6a:7a: e8:34:66:df:ab:8e:01:69:a6:1f:a5:db:ca:6b:0b: 5d:26:22:b8:20:62:16:fc:7b:56:a1:b6:9b:3f:52: 4a:5c:c0:92:26:1d:0a:25:6a:e5:c5:9a:6a:f5:a5: 31:e3:13:bd:5d:0b:fc:f3:40:fc:0e:3d:d0:67:ce: 75:af:23:42:11:57:81:51:38:79:25:26:21:6f:a9: 7e:5f:c0:b1:b3:04:9d:c9:3d:15:b5:45:9e:0e:c9: c7:a5:34:84:ed:b4:bb:04:53:d8:02:9e:f0:0f:47: 60:b3:7e:5e:59:9f:12:5c:e9:ed:ac:f6:87:19:db: f1:b8:85:2f:ce:a4:f3:1c:64:f4:6a:7e:86:18:9b: bd:22:75:b3:a7:b6:b2:99:e0:b8:b1:33:5a:2a:d2: 42:9f:3e:fa:dd:af:5c:3d:19:68:76:a9:3c:6c:47: 54:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:D3:57:B2:99:C1:60:E0:72:95:CF:62:9D:82:87:14:E9:65:DF:B9 X509v3 Authority Key Identifier: keyid:4D:D0:3A:58:6B:97:8A:70:AA:A8:2E:09:58:A9:01:52:E7:26:79:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/ttNXspnBYOBylc9inYKHFOll37k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:e98::/48 2001:67c:1330::/48 Signature Algorithm: sha256WithRSAEncryption b9:b7:ce:de:d4:be:09:c7:5b:79:a4:34:73:e8:70:84:ec:d0: 89:2e:90:dd:74:c0:2a:9b:ef:45:46:a6:7d:5e:43:cb:63:c7: 23:49:56:27:cb:19:99:cf:d8:bf:80:41:eb:14:09:90:5a:e7: 05:9e:61:aa:98:1f:9e:42:48:ab:59:25:1f:32:83:3a:f2:b3: 82:f5:37:c9:51:57:99:f8:5b:f7:4d:31:fe:9c:a3:0c:0b:be: 90:d7:f8:ba:58:c6:cc:34:c6:7e:55:2d:4e:43:69:38:b9:02: aa:22:ca:8e:44:80:a5:93:78:a6:d5:0e:c8:71:aa:fc:5f:23: 8a:b2:0d:0b:85:e9:c2:5b:23:9b:3c:fb:a4:ed:db:b3:28:1d: 2e:65:93:4e:11:0b:df:31:c8:59:02:d0:c2:d0:ef:1c:4a:4f: 81:83:70:06:3e:15:87:29:5f:c3:f9:f7:d7:f0:69:89:61:1d: a7:37:df:8f:24:57:95:d2:24:5e:4d:95:50:e0:93:81:e9:bc: d1:5a:cb:83:0d:af:bb:93:be:6c:22:36:64:e9:f9:5b:06:a4: 84:c4:c3:9d:f7:6e:70:84:da:0d:33:f5:e8:80:3e:31:58:52: 04:0b:4e:84:ff:59:8d:7c:4f:00:14:f4:b4:82:d6:65:ab:63: f9:17:44:ff -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+pUpeGXOcn0nWBn6R9fzFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDAzYTU4NmI5NzhhNzBhYWE4MmUwOTU4YTkwMTUyZTcy Njc5ZDkwHhcNMjYwMTAyMTIxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNmQzNTdiMjk5YzE2MGUwNzI5NWNmNjI5ZDgyODcxNGU5NjVkZmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GwMiBfI9HSnNLCeQNOEcLTNgo6/ 9hpoHNEa+j7Obad0LCBarks6W3FyxaysiMnXFQH75sE+Z/ecDoCOuUpBTiP4jLFf 6V8qoklpg2i4SUtsVKfAHQ8kanroNGbfq44BaaYfpdvKawtdJiK4IGIW/HtWobab P1JKXMCSJh0KJWrlxZpq9aUx4xO9XQv880D8Dj3QZ851ryNCEVeBUTh5JSYhb6l+ X8CxswSdyT0VtUWeDsnHpTSE7bS7BFPYAp7wD0dgs35eWZ8SXOntrPaHGdvxuIUv zqTzHGT0an6GGJu9InWzp7aymeC4sTNaKtJCnz763a9cPRlodqk8bEdUoQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLbTV7KZwWDgcpXPYp2ChxTpZd+5MB8GA1UdIwQY MBaAFE3QOlhrl4pwqqguCVipAVLnJnnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRBNldHdVhpbkNxcUM0SldLa0JVdWNtZWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9jOWQ1MjMtMGJiOS00NTczLTk1OTUt NzZhM2ExMGEyNmYyLzEvdHROWHNwbkJZT0J5bGM5aW5ZS0hGT2xsMzdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9jOWQ1MjMtMGJiOS00NTczLTk1OTUtNzZhM2ExMGEyNmYy LzEvVGRBNldHdVhpbkNxcUM0SldLa0JVdWNtZWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAIAEGfA6Y AwcAIAEGfBMwMA0GCSqGSIb3DQEBCwUAA4IBAQC5t87e1L4Jx1t5pDRz6HCE7NCJ LpDddMAqm+9FRqZ9XkPLY8cjSVYnyxmZz9i/gEHrFAmQWucFnmGqmB+eQkirWSUf MoM68rOC9TfJUVeZ+Fv3TTH+nKMMC76Q1/i6WMbMNMZ+VS1OQ2k4uQKqIsqORICl k3im1Q7Icar8XyOKsg0LhenCWyObPPuk7duzKB0uZZNOEQvfMchZAtDC0O8cSk+B g3AGPhWHKV/D+ffX8GmJYR2nN9+PJFeV0iReTZVQ4JOB6bzRWsuDDa+7k75sIjZk 6flbBqSExMOd925whNoNM/XogD4xWFIEC06E/1mNfE8AFPS0gtZlq2P5F0T/ -----END CERTIFICATE-----Generated at Sun Jan 11 11:46:07 2026 by rpki-client