This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/tbVX_nBTaE5VNov1rsfXFt2f7SU.roa File: tbVX_nBTaE5VNov1rsfXFt2f7SU.roa (raw, json) Hash identifier: rfYnZjKJQ0wuXUnU3TmEpEijE4Fpnxn/YL0Ur1YiogQ= Subject key identifier: B5:B5:57:FE:70:53:68:4E:55:36:8B:F5:AE:C7:D7:16:DD:9F:ED:25 Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Certificate serial: 019B7EA564A52121F597CAD9D6B4FEE246C2 Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/tbVX_nBTaE5VNov1rsfXFt2f7SU.roa Signing time: Fri 02 Jan 2026 12:18:46 +0000 ROA not before: Fri 02 Jan 2026 12:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215772 IP address blocks: 2a10:4646:3e0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:64:a5:21:21:f5:97:ca:d9:d6:b4:fe:e2:46:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Validity Not Before: Jan 2 12:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5b557fe7053684e55368bf5aec7d716dd9fed25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ad:c7:06:6e:17:7e:fe:14:5d:fe:ae:59:1c: 1a:be:55:e8:6f:c7:23:6d:21:11:e6:81:2c:b3:25: 49:a1:7c:d8:54:3e:54:40:28:4f:53:63:9a:22:31: 36:f6:0f:b8:97:87:79:ad:76:2a:5e:76:1a:e7:69: 3f:c5:1e:25:da:c2:f8:4e:30:49:06:5c:53:0b:c8: ef:9a:40:ea:91:4e:c0:ce:c9:b3:09:99:bd:c7:43: dd:9a:96:8e:51:0b:5a:41:29:1f:25:7b:74:b9:7c: 46:4f:d9:e2:93:1f:08:19:44:c3:c6:01:20:02:c3: 3f:a0:eb:8d:9a:e6:b1:c9:76:d0:8a:1e:49:46:ac: 2a:0d:94:48:8b:cf:cc:f8:7c:25:20:55:75:9c:18: a9:97:5d:8a:23:55:e4:62:1a:c2:25:97:40:19:5f: 0a:50:92:8c:2c:65:09:0c:e6:43:71:da:f8:0c:9c: c3:90:db:22:80:49:d6:00:de:e2:93:1b:20:30:e7: 4c:47:0e:25:02:e3:df:32:a2:c6:0e:32:cc:b7:49: 2d:b0:f2:0a:5d:4f:9a:e1:a9:61:f7:af:bb:2e:d6: 0a:0b:ef:99:68:53:7e:f0:07:06:4c:a5:4f:d5:f8: b6:0f:49:c3:6f:33:21:25:9e:59:1e:0c:53:c7:87: e1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B5:57:FE:70:53:68:4E:55:36:8B:F5:AE:C7:D7:16:DD:9F:ED:25 X509v3 Authority Key Identifier: keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/tbVX_nBTaE5VNov1rsfXFt2f7SU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:4646:3e0::/44 Signature Algorithm: sha256WithRSAEncryption 5b:73:7c:28:f1:d4:11:96:ad:5e:eb:93:12:26:d5:54:14:20: 8c:8f:ab:00:56:87:c9:e2:06:63:55:3c:df:cf:74:11:5e:3e: e5:a4:6f:55:2f:f4:20:ff:be:74:d2:68:7c:08:d7:1c:0b:6e: cd:ce:1f:8f:e5:27:bb:91:cb:ae:39:51:db:14:e5:35:0a:46: 82:81:46:0c:d9:b3:df:d6:3f:8b:0d:0a:db:87:63:49:28:43: 7b:ea:54:bc:d7:cc:6b:6e:de:d6:18:fe:32:28:ba:82:d8:84: eb:4e:ca:9b:99:2e:53:14:68:4e:ad:be:c5:4b:41:e7:c8:53: 9d:99:e7:43:1f:cc:52:34:1d:92:ab:4b:e9:10:94:89:8b:8c: 99:28:eb:0f:ad:98:2a:81:93:8b:14:33:79:ff:49:54:57:2c: 0e:27:cb:3a:5f:3e:e2:03:33:54:bd:5b:93:9a:9c:d7:ce:46: 6e:4f:06:51:2b:90:fd:45:49:2e:23:f1:c4:12:fc:49:d1:e7: 3d:81:fc:44:ee:45:f5:94:bc:1b:ca:06:97:13:16:d5:fd:72: 82:41:c2:71:cd:9f:1f:16:09:28:3e:6c:38:71:20:71:7b:42: e0:2e:74:89:4d:1c:6c:d7:15:26:f1:12:49:de:8a:92:c6:ca: fd:f6:59:51 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pWSlISH1l8rZ1rT+4kbCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNmQyODE3NDkxZGQyY2QwNjc4MDY4ZTM1YTllZmM2ODY2 N2RmMDIwHhcNMjYwMTAyMTIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNWI1NTdmZTcwNTM2ODRlNTUzNjhiZjVhZWM3ZDcxNmRkOWZlZDI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApa3HBm4Xfv4UXf6uWRwavlXob8cj bSER5oEssyVJoXzYVD5UQChPU2OaIjE29g+4l4d5rXYqXnYa52k/xR4l2sL4TjBJ BlxTC8jvmkDqkU7AzsmzCZm9x0PdmpaOUQtaQSkfJXt0uXxGT9nikx8IGUTDxgEg AsM/oOuNmuaxyXbQih5JRqwqDZRIi8/M+HwlIFV1nBipl12KI1XkYhrCJZdAGV8K UJKMLGUJDOZDcdr4DJzDkNsigEnWAN7ikxsgMOdMRw4lAuPfMqLGDjLMt0ktsPIK XU+a4alh96+7LtYKC++ZaFN+8AcGTKVP1fi2D0nDbzMhJZ5ZHgxTx4fhlwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLW1V/5wU2hOVTaL9a7H1xbdn+0lMB8GA1UdIwQY MBaAFEptKBdJHdLNBngGjjWp78aGZ98CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt YWU5MjgzZTc5NjRlLzEvdGJWWF9uQlRhRTVWTm92MXJzZlhGdDJmN1NVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl LzEvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhBGRgPg MA0GCSqGSIb3DQEBCwUAA4IBAQBbc3wo8dQRlq1e65MSJtVUFCCMj6sAVofJ4gZj VTzfz3QRXj7lpG9VL/Qg/7500mh8CNccC27Nzh+P5Se7kcuuOVHbFOU1CkaCgUYM 2bPf1j+LDQrbh2NJKEN76lS818xrbt7WGP4yKLqC2ITrTsqbmS5TFGhOrb7FS0Hn yFOdmedDH8xSNB2Sq0vpEJSJi4yZKOsPrZgqgZOLFDN5/0lUVywOJ8s6Xz7iAzNU vVuTmpzXzkZuTwZRK5D9RUkuI/HEEvxJ0ec9gfxE7kX1lLwbygaXExbV/XKCQcJx zZ8fFgkoPmw4cSBxe0LgLnSJTRxs1xUm8RJJ3oqSxsr99llR -----END CERTIFICATE-----Generated at Sun Jan 18 12:08:04 2026 by rpki-client