This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/TzY6AHJU7GxQ_2lGsteWo_Zu6VY.roa File: TzY6AHJU7GxQ_2lGsteWo_Zu6VY.roa (raw, json) Hash identifier: BR22m/9Pfevw9R3uzbROoQfrnEnpQGFkpw8PiR4jomE= Subject key identifier: 4F:36:3A:00:72:54:EC:6C:50:FF:69:46:B2:D7:96:A3:F6:6E:E9:56 Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Certificate serial: 019B7E38C123483AD0D196B1CB9B252FC309 Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/TzY6AHJU7GxQ_2lGsteWo_Zu6VY.roa Signing time: Fri 02 Jan 2026 10:20:07 +0000 ROA not before: Fri 02 Jan 2026 10:20:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215750 IP address blocks: 2a13:a5c7:2600::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:c1:23:48:3a:d0:d1:96:b1:cb:9b:25:2f:c3:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Validity Not Before: Jan 2 10:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f363a007254ec6c50ff6946b2d796a3f66ee956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0e:b0:71:e3:f7:1d:59:09:d7:2e:76:6c:db: fc:77:b8:f8:2b:8a:dd:78:6f:c2:f0:40:e5:2c:7f: 63:d8:36:30:76:a2:c3:fe:44:1a:1c:fd:98:e0:9c: 1d:17:1c:2a:ce:e5:f0:48:98:a6:39:b9:21:2c:f3: 64:ba:2c:aa:e6:8a:62:64:b5:ab:4b:88:a4:d8:2d: 61:a1:81:28:d7:53:67:f0:a0:8b:5b:7c:55:ac:25: f6:f9:91:61:a8:f9:e5:54:dc:64:27:44:9f:cd:8a: f3:8a:2b:64:2b:ac:34:d9:20:c1:69:b0:62:c5:f7: a1:88:1a:30:cb:2d:db:65:c0:b3:b1:64:b4:a1:96: 6e:e0:e4:b9:1f:02:02:de:82:d7:ed:ba:9f:6d:5b: 7d:46:61:74:c3:fb:a4:0a:30:0c:fd:63:c6:41:24: b2:69:04:91:b6:50:2c:a3:8b:05:20:76:51:39:95: 8a:87:7b:14:c2:63:a2:27:0b:89:8d:b1:e0:09:66: f1:e0:b5:86:91:ef:48:21:11:e4:8b:14:f0:95:94: 97:a2:87:15:0c:c3:0b:a7:7d:cd:2a:27:03:4d:66: eb:47:ef:56:91:7c:3e:6f:6c:15:cf:c1:be:66:bc: 68:d8:c8:e3:dd:d6:41:aa:c8:28:c2:a8:62:ae:7f: 26:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:36:3A:00:72:54:EC:6C:50:FF:69:46:B2:D7:96:A3:F6:6E:E9:56 X509v3 Authority Key Identifier: keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/TzY6AHJU7GxQ_2lGsteWo_Zu6VY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:a5c7:2600::/40 Signature Algorithm: sha256WithRSAEncryption 89:e2:85:7d:e3:22:7f:95:f8:ee:c7:30:4a:db:69:d3:af:a0: 6a:0d:72:27:66:ec:47:5f:56:f9:74:d9:b9:74:80:28:59:74: ce:5c:98:d4:92:e9:56:ec:b6:90:23:53:46:3d:db:a5:c7:65: 7c:c4:24:28:cd:6d:e9:81:30:a9:e0:a6:1e:65:3c:ec:7f:d8: f9:9b:d4:23:7b:28:fd:55:23:33:de:16:07:14:6d:b1:0d:d4: 26:1e:ea:b3:55:f1:b2:29:68:e4:09:e1:1e:2a:62:f3:f7:a9: 51:67:77:9a:00:4d:c5:7b:57:f8:82:78:e1:15:34:ec:5c:6f: 30:62:d3:83:94:c1:06:14:a5:40:89:10:43:c1:73:f8:34:2b: b1:d7:5a:be:64:e6:bb:fc:d8:1f:65:03:97:48:15:cf:5f:c1: 2f:77:43:3d:74:2b:81:4c:9c:11:7e:30:fe:da:f6:d5:c8:2f: 5e:35:d8:5c:88:de:d9:db:bf:f1:91:46:46:0f:6d:28:9b:2c: 2c:b2:b1:62:37:63:36:90:8b:2f:76:e1:16:2f:13:66:38:2e: 53:ef:ac:4f:d1:76:42:7a:61:d5:a7:c3:cb:8d:c2:32:0c:61: 22:72:e6:52:52:dc:5b:5f:87:6d:7b:6a:fe:7e:fd:4b:84:77: 0a:7e:78:f7 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+OMEjSDrQ0Zaxy5slL8MJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZDZlZTAxMGI5OTBhMzM3MzU3NTZiNGZlMmYzZDNjMjY3 MWRkOWQwHhcNMjYwMTAyMTAyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjM2M2EwMDcyNTRlYzZjNTBmZjY5NDZiMmQ3OTZhM2Y2NmVlOTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtg6wceP3HVkJ1y52bNv8d7j4K4rd eG/C8EDlLH9j2DYwdqLD/kQaHP2Y4JwdFxwqzuXwSJimObkhLPNkuiyq5opiZLWr S4ik2C1hoYEo11Nn8KCLW3xVrCX2+ZFhqPnlVNxkJ0SfzYrziitkK6w02SDBabBi xfehiBowyy3bZcCzsWS0oZZu4OS5HwIC3oLX7bqfbVt9RmF0w/ukCjAM/WPGQSSy aQSRtlAso4sFIHZROZWKh3sUwmOiJwuJjbHgCWbx4LWGke9IIRHkixTwlZSXoocV DMMLp33NKicDTWbrR+9WkXw+b2wVz8G+Zrxo2Mjj3dZBqsgowqhirn8mlwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFE82OgByVOxsUP9pRrLXlqP2bulWMB8GA1UdIwQY MBaAFP3W7gELmQozc1dWtP4vPTwmcd2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDct NjNjNzIxY2YxZjU2LzEvVHpZNkFISlU3R3hRXzJsR3N0ZVdvX1p1NlZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDctNjNjNzIxY2YxZjU2 LzEvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhOlxyYw DQYJKoZIhvcNAQELBQADggEBAInihX3jIn+V+O7HMErbadOvoGoNcidm7EdfVvl0 2bl0gChZdM5cmNSS6VbstpAjU0Y926XHZXzEJCjNbemBMKngph5lPOx/2Pmb1CN7 KP1VIzPeFgcUbbEN1CYe6rNV8bIpaOQJ4R4qYvP3qVFnd5oATcV7V/iCeOEVNOxc bzBi04OUwQYUpUCJEEPBc/g0K7HXWr5k5rv82B9lA5dIFc9fwS93Qz10K4FMnBF+ MP7a9tXIL1412FyI3tnbv/GRRkYPbSibLCyysWI3YzaQiy924RYvE2Y4LlPvrE/R dkJ6YdWnw8uNwjIMYSJy5lJS3Ftfh217av5+/UuEdwp+ePc= -----END CERTIFICATE-----Generated at Mon Jan 5 03:50:58 2026 by rpki-client