This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/TXHrH8-iAbWXrMU9Zmsf2OqOKUw.roa File: TXHrH8-iAbWXrMU9Zmsf2OqOKUw.roa (raw, json) Hash identifier: HwSA6VOVC924tpz51wI8XZ6n4214AOC2iMxxE1R1r+k= Subject key identifier: 4D:71:EB:1F:CF:A2:01:B5:97:AC:C5:3D:66:6B:1F:D8:EA:8E:29:4C Certificate issuer: /CN=ef1f01881b73c8e9b5d92239229a6e512eca4e7c Certificate serial: 019B81297A42357C34280A38DBA43A32B531 Authority key identifier: EF:1F:01:88:1B:73:C8:E9:B5:D9:22:39:22:9A:6E:51:2E:CA:4E:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/TXHrH8-iAbWXrMU9Zmsf2OqOKUw.roa Signing time: Sat 03 Jan 2026 00:02:17 +0000 ROA not before: Sat 03 Jan 2026 00:02:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 54113 IP address blocks: 2a00:8c40:f000::/44 maxlen: 44 2a00:8c40:f010::/44 maxlen: 44 2a00:8c40:f020::/44 maxlen: 44 2a00:8c40:f030::/44 maxlen: 44 2a00:8c40:f040::/44 maxlen: 44 2a00:8c40:f050::/44 maxlen: 44 2a00:8c40:f060::/44 maxlen: 44 2a00:8c40:f070::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.crl rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.mft rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 09:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:81:29:7a:42:35:7c:34:28:0a:38:db:a4:3a:32:b5:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef1f01881b73c8e9b5d92239229a6e512eca4e7c Validity Not Before: Jan 3 00:02:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d71eb1fcfa201b597acc53d666b1fd8ea8e294c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:93:bf:49:9b:a2:86:2b:51:e0:f7:73:74:d2: 0a:6c:a2:76:1f:3d:1f:6b:47:ba:ed:53:b8:41:e2: a1:cb:3f:9d:f0:a0:08:15:4b:47:f7:87:61:26:b8: 3c:80:0a:80:6e:59:de:cd:45:54:15:4d:92:e4:6d: c2:d2:42:c9:5b:cc:90:b8:29:f5:83:74:7e:d8:3f: 78:81:d9:6a:ea:e2:c6:4f:cb:ec:42:89:05:3e:cf: 81:79:03:bd:d0:63:3e:44:6a:50:52:d2:8c:1e:73: c7:de:13:72:99:2a:38:56:b7:c9:de:98:20:58:73: a3:fd:90:ea:e2:26:31:43:47:cb:79:31:a2:24:35: 76:8c:40:31:90:9e:10:1e:8f:01:4c:8e:e3:96:3d: 50:3c:a6:77:61:de:a5:90:25:e1:25:b9:c5:7c:41: 92:20:06:9a:2c:83:b4:76:a4:81:4d:8b:c8:7a:d7: f0:4c:95:68:9b:c8:59:89:a3:84:1c:85:6b:43:24: f0:88:8c:97:d3:9c:38:78:b0:9e:2c:7f:7b:26:18: 1f:22:c6:af:0f:5b:31:9b:5a:38:f7:bd:7f:6c:4e: a3:c6:30:af:e3:a8:ee:02:f2:56:aa:cb:bd:2b:cf: 79:33:cc:5d:13:37:0e:a6:87:a4:70:0b:de:ff:44: bd:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:71:EB:1F:CF:A2:01:B5:97:AC:C5:3D:66:6B:1F:D8:EA:8E:29:4C X509v3 Authority Key Identifier: keyid:EF:1F:01:88:1B:73:C8:E9:B5:D9:22:39:22:9A:6E:51:2E:CA:4E:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/TXHrH8-iAbWXrMU9Zmsf2OqOKUw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:8c40:f000::/41 Signature Algorithm: sha256WithRSAEncryption aa:63:95:0d:3e:56:88:8a:88:26:79:b8:6a:75:13:60:43:3d: 69:9e:8b:34:46:0d:a1:bb:f7:3b:04:d6:86:c6:09:11:cd:fa: 04:55:cb:8b:f8:0d:35:7f:7e:bf:c8:cd:28:cd:86:7a:8f:a8: 90:6e:a7:9b:c2:38:ad:71:55:d2:9a:f2:86:2f:24:3d:92:ff: 63:7e:84:4f:18:49:ae:21:90:47:2a:13:dd:7c:16:6c:70:57: f0:b4:cb:3f:6a:24:34:cf:d3:ad:ae:dc:2a:fa:ca:18:43:2f: da:9a:2d:39:43:b6:6b:ff:57:4c:eb:e2:e3:47:2c:5d:1a:3e: 3f:65:0f:7b:75:00:ac:0d:14:a8:6d:6c:40:e6:3b:75:dc:3c: 6a:5f:4d:0b:c6:a7:98:3c:9c:b5:4e:38:b3:12:e2:49:50:1f: 61:96:ba:da:40:94:fe:9d:c3:c3:5e:da:c0:b0:8c:fc:96:70: 35:bc:7f:3a:ba:5a:47:7f:bc:02:65:c8:8a:b4:e0:6c:00:b2: 30:23:1a:9e:0a:00:5e:2a:b1:bc:03:5e:0b:d8:ca:5f:90:23: 1a:11:17:44:77:33:1a:1f:ad:ce:a8:c0:12:8b:ba:d6:c5:2b: 5b:2c:38:2e:d2:eb:af:fd:be:f8:f6:7b:b6:45:06:f5:2c:bb: 88:a8:c4:49 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZuBKXpCNXw0KAo426Q6MrUxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMWYwMTg4MWI3M2M4ZTliNWQ5MjIzOTIyOWE2ZTUxMmVj YTRlN2MwHhcNMjYwMTAzMDAwMjE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDcxZWIxZmNmYTIwMWI1OTdhY2M1M2Q2NjZiMWZkOGVhOGUyOTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5O/SZuihitR4PdzdNIKbKJ2Hz0f a0e67VO4QeKhyz+d8KAIFUtH94dhJrg8gAqAblnezUVUFU2S5G3C0kLJW8yQuCn1 g3R+2D94gdlq6uLGT8vsQokFPs+BeQO90GM+RGpQUtKMHnPH3hNymSo4VrfJ3pgg WHOj/ZDq4iYxQ0fLeTGiJDV2jEAxkJ4QHo8BTI7jlj1QPKZ3Yd6lkCXhJbnFfEGS IAaaLIO0dqSBTYvIetfwTJVom8hZiaOEHIVrQyTwiIyX05w4eLCeLH97JhgfIsav D1sxm1o4971/bE6jxjCv46juAvJWqsu9K895M8xdEzcOpoekcAve/0S9sQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFE1x6x/PogG1l6zFPWZrH9jqjilMMB8GA1UdIwQY MBaAFO8fAYgbc8jptdkiOSKablEuyk58MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3g4QmlCdHp5T20xMlNJNUlwcHVVUzdLVG53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS82NzUzOTktODFiZS00ZmVjLTlmODYt NTUxMzFjYzFlZmVhLzEvVFhIckg4LWlBYldYck1VOVptc2YyT3FPS1V3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS82NzUzOTktODFiZS00ZmVjLTlmODYtNTUxMzFjYzFlZmVh LzEvN3g4QmlCdHp5T20xMlNJNUlwcHVVUzdLVG53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHKgCMQPAA MA0GCSqGSIb3DQEBCwUAA4IBAQCqY5UNPlaIiogmebhqdRNgQz1pnos0Rg2hu/c7 BNaGxgkRzfoEVcuL+A01f36/yM0ozYZ6j6iQbqebwjitcVXSmvKGLyQ9kv9jfoRP GEmuIZBHKhPdfBZscFfwtMs/aiQ0z9Otrtwq+soYQy/ami05Q7Zr/1dM6+LjRyxd Gj4/ZQ97dQCsDRSobWxA5jt13DxqX00LxqeYPJy1TjizEuJJUB9hlrraQJT+ncPD XtrAsIz8lnA1vH86ulpHf7wCZciKtOBsALIwIxqeCgBeKrG8A14L2MpfkCMaERdE dzMaH63OqMASi7rWxStbLDgu0uuv/b749nu2RQb1LLuIqMRJ -----END CERTIFICATE-----Generated at Fri Jan 30 18:00:25 2026 by rpki-client