This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/t-Nlrb3jkWKMql0R-gWy6KV2tzg.roa File: t-Nlrb3jkWKMql0R-gWy6KV2tzg.roa (raw, json) Hash identifier: oIu2af2fOLn1wMUWQi6xhmqoR7yT8Ct2Fe39qmDYJjg= Subject key identifier: B7:E3:65:AD:BD:E3:91:62:8C:AA:5D:11:FA:05:B2:E8:A5:76:B7:38 Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9 Certificate serial: 019B7C809D6A3858FDA22FAC4B22762B12DA Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/t-Nlrb3jkWKMql0R-gWy6KV2tzg.roa Signing time: Fri 02 Jan 2026 02:19:22 +0000 ROA not before: Fri 02 Jan 2026 02:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56746 IP address blocks: 2a05:b680:100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:9d:6a:38:58:fd:a2:2f:ac:4b:22:76:2b:12:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9 Validity Not Before: Jan 2 02:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7e365adbde391628caa5d11fa05b2e8a576b738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ca:12:6d:cc:c8:27:18:7a:7d:07:37:b0:78: 30:52:0f:41:a4:4a:2e:e2:9b:f8:ca:13:fd:da:7e: ea:90:da:77:88:bd:bd:ef:77:88:cc:4d:ed:63:86: 91:1f:83:21:c9:f5:80:a2:d8:d6:33:34:10:34:7f: cc:ed:c6:08:16:d0:f8:89:f3:c6:08:52:ba:49:21: b3:87:a7:4f:55:7c:a1:30:2a:6f:ce:83:ba:b2:12: e5:ea:14:17:06:9c:c5:52:c6:c7:6b:9d:48:0d:03: f8:68:4a:ed:07:0a:e5:c2:f0:fd:29:27:f0:0a:af: fc:22:bc:f6:de:33:27:95:8f:3c:55:48:9b:45:9c: c4:8f:d7:3e:92:f3:90:01:5a:0c:28:94:60:47:e2: 5b:35:68:db:e1:21:db:e1:fb:09:8f:28:ce:19:dd: 08:b4:e9:82:e4:31:75:77:dc:cd:5b:ad:c3:20:76: 70:8c:ad:d2:a6:fe:90:50:c7:e5:c7:3c:f6:46:83: d0:c0:b4:e7:f2:2b:9b:c4:8c:56:a7:f9:cb:06:19: 6a:a8:54:d3:f8:5a:46:b3:53:52:6d:3a:7a:3a:5e: 1d:1f:6f:2b:3d:31:9b:f9:a1:60:29:25:0d:11:c2: 54:41:c2:55:46:ac:62:64:a1:65:e3:19:bb:a9:c6: 9c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E3:65:AD:BD:E3:91:62:8C:AA:5D:11:FA:05:B2:E8:A5:76:B7:38 X509v3 Authority Key Identifier: keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/t-Nlrb3jkWKMql0R-gWy6KV2tzg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:b680:100::/40 Signature Algorithm: sha256WithRSAEncryption 57:5e:72:15:54:09:98:a4:ef:7d:20:45:92:ca:b0:94:3d:a4: 02:3b:ea:7c:00:66:c1:15:33:7c:aa:68:4c:df:4b:f3:a8:5c: 8f:be:fc:2e:b9:f6:48:59:81:6c:a1:d2:61:a9:86:58:6a:c5: a9:28:7c:23:9e:1f:dc:fe:aa:1f:b3:4c:f6:93:9d:96:da:6a: fc:80:85:be:3f:80:4c:74:8b:ca:5b:9e:74:8a:c7:06:78:1e: 6f:c2:6c:ae:e6:b0:52:65:e9:7b:f6:12:1e:ed:62:df:6f:f4: 3a:c5:ad:c2:71:03:ad:1e:43:b3:71:92:c9:20:11:88:54:65: 63:3b:f3:a1:07:15:ba:c9:97:5e:3a:31:03:b4:56:64:13:aa: d7:ad:d5:ee:26:8a:b3:96:58:d2:52:34:9b:ff:f5:27:8e:cd: b8:4f:b4:bf:a7:c4:8a:52:95:c7:51:5f:74:98:cd:58:e1:1a: 34:4b:3b:38:9d:a4:cb:71:a3:07:c5:14:6e:42:ac:b1:17:12: 63:5d:c9:9b:97:b6:33:48:60:fc:f1:f6:82:e8:54:6d:cf:8f: 02:95:80:cd:e8:da:38:56:22:92:cf:4c:99:f3:db:7c:85:bc: 62:c1:4b:31:10:f7:e8:cb:4b:ef:6c:6e:76:80:fa:14:f7:cd: 5d:b0:d6:17 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt8gJ1qOFj9oi+sSyJ2KxLaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNTg5NTJkMzkzOTM1ZjBkM2JjZTgxNGZkOTE3OGQwNDY5 M2FlYjkwHhcNMjYwMTAyMDIxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2UzNjVhZGJkZTM5MTYyOGNhYTVkMTFmYTA1YjJlOGE1NzZiNzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8oSbczIJxh6fQc3sHgwUg9BpEou 4pv4yhP92n7qkNp3iL2973eIzE3tY4aRH4MhyfWAotjWMzQQNH/M7cYIFtD4ifPG CFK6SSGzh6dPVXyhMCpvzoO6shLl6hQXBpzFUsbHa51IDQP4aErtBwrlwvD9KSfw Cq/8Irz23jMnlY88VUibRZzEj9c+kvOQAVoMKJRgR+JbNWjb4SHb4fsJjyjOGd0I tOmC5DF1d9zNW63DIHZwjK3Spv6QUMflxzz2RoPQwLTn8iubxIxWp/nLBhlqqFTT +FpGs1NSbTp6Ol4dH28rPTGb+aFgKSUNEcJUQcJVRqxiZKFl4xm7qcacAwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFLfjZa2945FijKpdEfoFsuildrc4MB8GA1UdIwQY MBaAFP5YlS05OTXw07zoFP2ReNBGk665MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUt NWQ0OGI2NWNlNTczLzEvdC1ObHJiM2prV0tNcWwwUi1nV3k2S1YydHpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUtNWQ0OGI2NWNlNTcz LzEvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgW2gAEw DQYJKoZIhvcNAQELBQADggEBAFdechVUCZik730gRZLKsJQ9pAI76nwAZsEVM3yq aEzfS/OoXI++/C659khZgWyh0mGphlhqxakofCOeH9z+qh+zTPaTnZbaavyAhb4/ gEx0i8pbnnSKxwZ4Hm/CbK7msFJl6Xv2Eh7tYt9v9DrFrcJxA60eQ7NxkskgEYhU ZWM786EHFbrJl146MQO0VmQTqtet1e4mirOWWNJSNJv/9SeOzbhPtL+nxIpSlcdR X3SYzVjhGjRLOzidpMtxowfFFG5CrLEXEmNdyZuXtjNIYPzx9oLoVG3PjwKVgM3o 2jhWIpLPTJnz23yFvGLBSzEQ9+jLS+9sbnaA+hT3zV2w1hc= -----END CERTIFICATE-----Generated at Tue Jan 20 06:02:46 2026 by rpki-client