This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/4tt-En_PGBBEh_vFScgf5ScLZ_I.roa File: 4tt-En_PGBBEh_vFScgf5ScLZ_I.roa (raw, json) Hash identifier: haqDUgvoIT0of0YVOdJx97WywemqBAZD7tER9jaDdW4= Subject key identifier: E2:DB:7E:12:7F:CF:18:10:44:87:FB:C5:49:C8:1F:E5:27:0B:67:F2 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E3959F8E34CBD042680A1FFB9E23F0F Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/4tt-En_PGBBEh_vFScgf5ScLZ_I.roa Signing time: Fri 02 Jan 2026 10:20:46 +0000 ROA not before: Fri 02 Jan 2026 10:20:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212653 IP address blocks: 2a0c:b641:4f0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:59:f8:e3:4c:bd:04:26:80:a1:ff:b9:e2:3f:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2db7e127fcf18104487fbc549c81fe5270b67f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7d:47:34:35:2c:b6:b7:8e:be:15:b9:e8:1e: fa:81:c4:30:78:78:18:6f:af:ed:fc:3e:1c:62:52: 35:6b:be:6c:6c:6d:52:0d:66:28:94:29:a7:78:33: 01:eb:c7:9e:c5:69:de:12:43:69:4d:23:c5:00:79: 95:49:c8:f1:21:17:f3:2e:af:92:30:80:6c:01:47: 89:91:cb:a8:ed:b6:06:57:de:aa:b6:b0:19:b0:06: 21:b3:df:24:61:e4:12:d9:18:3e:2b:57:28:98:1b: 02:e6:0c:6c:34:f4:db:b6:22:4c:cb:b8:c9:ec:f7: fe:07:09:31:e1:89:56:71:57:96:13:64:fc:da:2c: f2:d4:a2:16:1f:4e:8f:ad:0f:7c:a7:58:9c:4f:08: 2a:a6:c2:d4:07:80:b3:de:ba:bb:1e:1f:1d:12:b4: 0b:eb:f0:d0:18:5f:93:5c:4a:ed:5c:74:98:08:de: bb:39:b5:6d:0d:05:4f:62:99:7b:c5:d4:34:7e:39: 73:2d:ae:a2:6f:0e:be:9d:dd:0a:1f:e9:0f:73:0e: 92:fe:ed:04:83:b1:67:9f:c7:fb:be:2b:0c:89:b1: 5d:6c:68:f4:73:90:bc:c5:91:b1:1a:d2:ee:9e:c3: a5:d0:8f:ba:23:a6:78:87:a1:29:01:58:b8:20:b4: e6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:DB:7E:12:7F:CF:18:10:44:87:FB:C5:49:C8:1F:E5:27:0B:67:F2 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/4tt-En_PGBBEh_vFScgf5ScLZ_I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:4f0::/44 Signature Algorithm: sha256WithRSAEncryption 76:3c:ca:e4:62:31:ac:d6:bf:5f:8e:45:c9:51:55:3e:63:66: a8:a6:4e:a1:55:3d:a7:c0:b9:e8:91:24:40:7c:f8:da:e9:d2: 7b:f7:fa:92:cf:f1:16:13:b7:b9:32:bf:96:05:1e:70:76:ce: 1c:1d:bf:a6:de:5b:1f:bb:61:fe:59:04:69:2e:57:97:6d:42: 82:be:e5:b9:79:21:68:ca:7a:66:79:ad:5c:4f:4b:85:6c:79: ad:d1:91:75:17:a5:a5:2b:84:ff:59:33:85:c3:2f:b5:4e:d4: f3:f5:1a:72:96:1d:3d:bd:92:0f:e2:1e:f0:ef:0a:ad:50:fb: d9:53:a4:bd:b5:7c:42:af:1d:71:a5:af:0d:46:8c:87:ae:e1: c8:e5:df:e1:c8:da:6f:bb:f6:c7:60:06:1f:fe:2d:75:5b:46: 6c:ac:a3:40:ca:f7:cb:39:27:50:c1:56:93:56:78:79:33:cb: 8d:5b:5e:49:0a:ba:1a:ca:9b:2d:e9:5d:43:33:7b:ac:5f:16: 47:47:d1:51:90:38:20:ce:6c:e4:76:1b:c2:29:75:1b:cd:00: 89:27:1f:96:ac:88:b2:99:58:a6:b1:ee:e9:8c:4a:8a:7d:ce: 9e:72:f3:a0:f7:1a:6c:83:49:32:7e:8d:50:1a:64:d1:4c:ed: b7:15:19:89 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OVn440y9BCaAof+54j8PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmRiN2UxMjdmY2YxODEwNDQ4N2ZiYzU0OWM4MWZlNTI3MGI2N2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx31HNDUstreOvhW56B76gcQweHgY b6/t/D4cYlI1a75sbG1SDWYolCmneDMB68eexWneEkNpTSPFAHmVScjxIRfzLq+S MIBsAUeJkcuo7bYGV96qtrAZsAYhs98kYeQS2Rg+K1comBsC5gxsNPTbtiJMy7jJ 7Pf+Bwkx4YlWcVeWE2T82izy1KIWH06PrQ98p1icTwgqpsLUB4Cz3rq7Hh8dErQL 6/DQGF+TXErtXHSYCN67ObVtDQVPYpl7xdQ0fjlzLa6ibw6+nd0KH+kPcw6S/u0E g7Fnn8f7visMibFdbGj0c5C8xZGxGtLunsOl0I+6I6Z4h6EpAVi4ILTm+QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOLbfhJ/zxgQRIf7xUnIH+UnC2fyMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvNHR0LUVuX1BHQkJFaF92RlNjZ2Y1U2NMWl9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQTw MA0GCSqGSIb3DQEBCwUAA4IBAQB2PMrkYjGs1r9fjkXJUVU+Y2aopk6hVT2nwLno kSRAfPja6dJ79/qSz/EWE7e5Mr+WBR5wds4cHb+m3lsfu2H+WQRpLleXbUKCvuW5 eSFoynpmea1cT0uFbHmt0ZF1F6WlK4T/WTOFwy+1TtTz9Rpylh09vZIP4h7w7wqt UPvZU6S9tXxCrx1xpa8NRoyHruHI5d/hyNpvu/bHYAYf/i11W0ZsrKNAyvfLOSdQ wVaTVnh5M8uNW15JCroaypst6V1DM3usXxZHR9FRkDggzmzkdhvCKXUbzQCJJx+W rIiymVimse7pjEqKfc6ecvOg9xpsg0kyfo1QGmTRTO23FRmJ -----END CERTIFICATE-----Generated at Tue Jan 20 04:28:21 2026 by rpki-client