This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/Tgau0g9hd2TV9KJ2R8i9SL-urKE.roa File: Tgau0g9hd2TV9KJ2R8i9SL-urKE.roa (raw, json) Hash identifier: YgQs04TbYGBp6z7hdUp7he/neEsxdPKRCp6qgTF++e4= Subject key identifier: 4E:06:AE:D2:0F:61:77:64:D5:F4:A2:76:47:C8:BD:48:BF:AE:AC:A1 Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a Certificate serial: 019B0F65D253EE1BDE74F32DEE3B4130BA8B Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/Tgau0g9hd2TV9KJ2R8i9SL-urKE.roa Signing time: Thu 11 Dec 2025 21:51:29 +0000 ROA not before: Thu 11 Dec 2025 21:51:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212271 IP address blocks: 2a05:4140::/29 maxlen: 48 2a05:4140:3::/48 maxlen: 48 2a05:4140:4::/48 maxlen: 48 2a05:4140:8::/48 maxlen: 48 2a05:4140:9::/48 maxlen: 48 2a05:4140:10::/48 maxlen: 48 2a05:4140:15::/48 maxlen: 48 2a05:4140:28::/48 maxlen: 48 2a05:4140:29::/48 maxlen: 48 2a05:4140:30::/48 maxlen: 48 2a05:4140:31::/48 maxlen: 48 2a05:4140:32::/48 maxlen: 48 2a05:4140:33::/48 maxlen: 48 2a05:4140:34::/48 maxlen: 48 2a05:4140:36::/48 maxlen: 48 2a05:4140:37::/48 maxlen: 48 2a05:4140:48::/48 maxlen: 48 2a05:4140:50::/48 maxlen: 48 2a05:4140:100::/40 maxlen: 48 2a05:4140:187::/48 maxlen: 48 2a05:4140:190::/48 maxlen: 48 2a05:4140:300::/40 maxlen: 40 2a05:4140:400::/40 maxlen: 48 2a05:4145::/32 maxlen: 32 2a05:4147::/32 maxlen: 32 2a11:e100::/29 maxlen: 48 2a11:e103::/32 maxlen: 32 2a11:e107::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:65:d2:53:ee:1b:de:74:f3:2d:ee:3b:41:30:ba:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a Validity Not Before: Dec 11 21:51:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4e06aed20f617764d5f4a27647c8bd48bfaeaca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2f:45:40:34:a7:c9:fc:15:c0:30:b2:31:fb: b3:34:f1:46:53:9d:b0:36:c0:24:f6:ab:cd:f4:c0: 5f:a7:40:73:dc:48:67:8b:78:bb:28:18:a1:d7:57: 25:d0:ed:87:61:53:68:55:bc:d7:a9:69:08:f3:85: 50:c3:84:82:d8:70:32:a5:80:99:f0:08:5e:19:0e: fe:9d:1f:b8:09:f0:c0:e0:fa:d7:9d:00:e8:06:21: 7b:6f:be:bd:42:b0:f4:88:32:e1:bb:91:e8:33:d0: c6:4a:91:fc:c6:c0:e4:04:24:18:ad:10:cf:7d:4f: 39:50:24:12:a1:1c:58:da:be:cb:f0:ca:db:e8:99: 85:9a:c4:2a:d6:8d:53:df:bc:63:45:6d:11:84:04: 26:70:13:5b:55:87:61:6f:0d:c4:eb:97:d9:e2:a5: 7e:81:63:a1:09:3e:ef:c1:da:8e:79:06:7b:b9:e2: a9:36:37:55:ce:93:0c:5f:41:70:da:e8:55:98:bd: f8:39:90:26:53:fa:12:1c:7a:05:60:bc:ea:01:bd: fc:80:9f:a7:05:8d:a3:33:a3:f3:f1:ea:3d:7d:7d: 45:4b:c7:ac:d3:a2:33:4d:c0:d5:0f:0a:4e:7d:4e: ce:4c:a2:6b:e9:8a:43:ec:9e:d3:25:35:bd:5c:ef: 79:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:06:AE:D2:0F:61:77:64:D5:F4:A2:76:47:C8:BD:48:BF:AE:AC:A1 X509v3 Authority Key Identifier: keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/Tgau0g9hd2TV9KJ2R8i9SL-urKE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:4140::/29 2a11:e100::/29 Signature Algorithm: sha256WithRSAEncryption 10:6b:30:19:7d:c4:73:6f:7e:13:10:24:1b:68:99:88:67:40: c7:47:52:c0:74:bf:a8:19:5e:26:d4:2f:2d:ad:da:0a:4d:9d: 36:c6:aa:a0:5e:78:e1:d5:c1:41:c2:10:cc:f1:5a:9f:ae:78: 24:48:2a:c9:be:bd:34:e2:b6:af:2a:4d:51:9e:43:37:82:42: 3a:ae:76:aa:b1:2d:28:3f:19:80:18:7f:d1:77:d0:d5:43:b4: 98:06:83:48:1a:65:da:14:cf:16:e8:92:48:66:b1:f4:94:a0: a7:e3:70:36:c1:81:1e:c6:9e:01:71:5c:ae:1c:57:37:62:f9: 83:25:5a:64:eb:7c:f8:cd:d4:6f:f8:0e:ad:b9:a6:08:1b:2f: f1:75:91:5c:2e:b8:e0:b8:61:b7:c7:93:30:a2:75:40:30:78: 16:8a:a4:15:8c:bf:c5:32:41:2a:7b:67:94:c8:2a:66:64:9c: 8a:e5:17:4e:07:ff:ef:5a:17:e4:ee:e2:f9:2a:fa:e1:0c:79: ee:5a:8a:48:0a:67:2f:41:40:3f:ad:46:23:68:88:41:2a:99: 1f:14:a2:a1:14:b5:f9:06:ed:eb:32:ed:f8:c9:34:67:29:5b: 77:19:0e:ce:66:99:c4:94:b8:dd:a0:73:fd:58:d7:18:03:79: 86:0f:2a:92 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZsPZdJT7hvedPMt7jtBMLqLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NGM2MGFkZWIwY2Q1NzY4Y2Y3NTZmNTYyYjFiNWNjNWI5 YzE4MGEwHhcNMjUxMjExMjE1MTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTA2YWVkMjBmNjE3NzY0ZDVmNGEyNzY0N2M4YmQ0OGJmYWVhY2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAry9FQDSnyfwVwDCyMfuzNPFGU52w NsAk9qvN9MBfp0Bz3Ehni3i7KBih11cl0O2HYVNoVbzXqWkI84VQw4SC2HAypYCZ 8AheGQ7+nR+4CfDA4PrXnQDoBiF7b769QrD0iDLhu5HoM9DGSpH8xsDkBCQYrRDP fU85UCQSoRxY2r7L8Mrb6JmFmsQq1o1T37xjRW0RhAQmcBNbVYdhbw3E65fZ4qV+ gWOhCT7vwdqOeQZ7ueKpNjdVzpMMX0Fw2uhVmL34OZAmU/oSHHoFYLzqAb38gJ+n BY2jM6Pz8eo9fX1FS8es06IzTcDVDwpOfU7OTKJr6YpD7J7TJTW9XO95FwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFE4GrtIPYXdk1fSidkfIvUi/rqyhMB8GA1UdIwQY MBaAFMdMYK3rDNV2jPdW9WKxtcxbnBgKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMt ODg1ZTg0ZTc1MTJlLzEvVGdhdTBnOWhkMlRWOUtKMlI4aTlTTC11cktFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMtODg1ZTg0ZTc1MTJl LzEveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDKgVBQAMF AyoR4QAwDQYJKoZIhvcNAQELBQADggEBABBrMBl9xHNvfhMQJBtomYhnQMdHUsB0 v6gZXibULy2t2gpNnTbGqqBeeOHVwUHCEMzxWp+ueCRIKsm+vTTitq8qTVGeQzeC QjqudqqxLSg/GYAYf9F30NVDtJgGg0gaZdoUzxbokkhmsfSUoKfjcDbBgR7GngFx XK4cVzdi+YMlWmTrfPjN1G/4Dq25pggbL/F1kVwuuOC4YbfHkzCidUAweBaKpBWM v8UyQSp7Z5TIKmZknIrlF04H/+9aF+Tu4vkq+uEMee5aikgKZy9BQD+tRiNoiEEq mR8UoqEUtfkG7esy7fjJNGcpW3cZDs5mmcSUuN2gc/1Y1xgDeYYPKpI= -----END CERTIFICATE-----Generated at Fri Dec 12 01:01:12 2025 by rpki-client