This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TacjUbFn4f71ZPgqACAyNQ7MUrc.roa File: TacjUbFn4f71ZPgqACAyNQ7MUrc.roa (raw, json) Hash identifier: 0I2bg2cLL56WH7jiqtPjXY0ReN+rqNhiCt3fiaKwYhA= Subject key identifier: 4D:A7:23:51:B1:67:E1:FE:F5:64:F8:2A:00:20:32:35:0E:CC:52:B7 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CA5517BDB2B59C6DD386ACD55615E Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TacjUbFn4f71ZPgqACAyNQ7MUrc.roa Signing time: Fri 02 Jan 2026 06:19:42 +0000 ROA not before: Fri 02 Jan 2026 06:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24961 IP address blocks: 2a0e:97c0:3e1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:a5:51:7b:db:2b:59:c6:dd:38:6a:cd:55:61:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4da72351b167e1fef564f82a002032350ecc52b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:81:28:11:80:c7:8f:ee:02:25:9f:a5:b3:11: 96:13:d3:c4:b0:94:42:60:12:80:91:33:cf:d5:7f: ae:08:80:08:c2:ac:45:a0:ff:b6:ec:58:3d:35:59: 48:76:7d:2d:8b:32:9b:b1:82:c3:ab:f0:c9:e1:83: d6:29:46:fb:21:cc:87:21:8a:86:d7:7c:b6:13:3c: b3:38:4b:bf:17:35:1f:95:dd:d4:86:af:b6:4c:64: db:5a:4c:48:7b:da:cb:b9:06:d6:29:7f:6c:ff:d7: 3f:76:04:f6:ef:5d:34:8a:81:b9:67:33:ec:4b:1a: b0:86:dc:c9:de:e6:9c:90:53:59:7f:70:e5:62:8a: 85:a3:73:09:a1:7c:5e:98:3e:2e:b5:d0:0d:1d:0e: 71:8a:15:4b:53:7e:99:64:b9:ae:8c:c2:2d:15:8b: ac:6d:ca:ef:36:cb:42:7f:9e:6d:80:11:1c:22:58: 94:01:1c:e3:4e:83:30:25:33:62:f5:c6:18:cc:33: 9f:6e:0b:93:9d:97:ae:04:81:e5:c0:f8:6a:aa:87: fa:5e:09:bf:0c:99:2e:5b:6d:6b:d5:95:fc:5b:aa: 63:b3:51:08:24:ab:63:28:72:75:a3:a0:8a:9d:05: 81:b3:fb:ab:9d:61:8a:da:81:6c:c6:a5:db:11:9e: 27:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A7:23:51:B1:67:E1:FE:F5:64:F8:2A:00:20:32:35:0E:CC:52:B7 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TacjUbFn4f71ZPgqACAyNQ7MUrc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:3e1::/48 Signature Algorithm: sha256WithRSAEncryption 28:11:fa:7b:0f:86:39:9d:3d:27:28:b7:67:44:a3:23:7c:c1: 48:06:3b:1a:30:48:a0:e5:ae:4a:1e:04:2c:87:1e:2c:3a:ae: 6f:20:3c:f8:90:15:ea:46:32:26:ea:b1:2c:a1:03:6d:b4:1d: cd:79:a6:3b:9d:db:49:d4:b4:7d:00:e4:0c:d6:91:e4:bd:38: c9:cb:b2:1b:77:a0:34:ee:e8:27:a3:3e:0b:74:1c:73:57:4f: 0f:7f:b0:df:dd:ef:d9:d7:10:8e:82:fc:14:10:72:99:46:67: b4:b5:cb:a7:0a:69:43:5e:ad:d5:90:94:4f:3d:76:dd:fc:5d: e2:a5:05:e9:12:cb:7f:5b:34:8b:67:b8:b6:89:f3:a3:20:a3: 0b:ac:95:27:4b:2e:e0:49:fd:99:c6:e1:e2:d9:fd:df:80:96: c2:be:0c:a4:4b:4e:72:e5:6c:6b:f7:9b:5d:dc:5e:64:eb:bc: 76:15:f3:03:32:f7:9c:92:3e:15:42:7d:fd:f9:8a:f9:6c:37: b2:eb:f1:db:57:5a:d1:f6:49:eb:57:a7:d1:13:cb:07:4c:04: 4b:44:13:47:44:13:2f:25:7e:98:a1:0e:46:d4:69:df:5e:7e: 78:1b:ae:97:0a:10:ce:3a:67:78:44:de:fa:84:66:9c:39:62: eb:ea:10:ba -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XKVRe9srWcbdOGrNVWFeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZGE3MjM1MWIxNjdlMWZlZjU2NGY4MmEwMDIwMzIzNTBlY2M1MmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoEoEYDHj+4CJZ+lsxGWE9PEsJRC YBKAkTPP1X+uCIAIwqxFoP+27Fg9NVlIdn0tizKbsYLDq/DJ4YPWKUb7IcyHIYqG 13y2EzyzOEu/FzUfld3Uhq+2TGTbWkxIe9rLuQbWKX9s/9c/dgT27100ioG5ZzPs SxqwhtzJ3uackFNZf3DlYoqFo3MJoXxemD4utdANHQ5xihVLU36ZZLmujMItFYus bcrvNstCf55tgBEcIliUARzjToMwJTNi9cYYzDOfbguTnZeuBIHlwPhqqof6Xgm/ DJkuW21r1ZX8W6pjs1EIJKtjKHJ1o6CKnQWBs/urnWGK2oFsxqXbEZ4ntwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFE2nI1GxZ+H+9WT4KgAgMjUOzFK3MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvVGFjalViRm40ZjcxWlBncUFDQXlOUTdNVXJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6XwAPh MA0GCSqGSIb3DQEBCwUAA4IBAQAoEfp7D4Y5nT0nKLdnRKMjfMFIBjsaMEig5a5K HgQshx4sOq5vIDz4kBXqRjIm6rEsoQNttB3NeaY7ndtJ1LR9AOQM1pHkvTjJy7Ib d6A07ugnoz4LdBxzV08Pf7Df3e/Z1xCOgvwUEHKZRme0tcunCmlDXq3VkJRPPXbd /F3ipQXpEst/WzSLZ7i2ifOjIKMLrJUnSy7gSf2ZxuHi2f3fgJbCvgykS05y5Wxr 95td3F5k67x2FfMDMveckj4VQn39+Yr5bDey6/HbV1rR9knrV6fRE8sHTARLRBNH RBMvJX6YoQ5G1GnfXn54G66XChDOOmd4RN76hGacOWLr6hC6 -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:09 2026 by rpki-client