This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Ticp_7IMHh2pkZjtla0yjXQAVXQ.roa File: Ticp_7IMHh2pkZjtla0yjXQAVXQ.roa (raw, json) Hash identifier: YHOkH/kJCSLNAwNtZT2eP57puVxZ3wNcVUabpR1GhsE= Subject key identifier: 4E:27:29:FF:B2:0C:1E:1D:A9:91:98:ED:95:AD:32:8D:74:00:55:74 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CBF6AF2F67BA9333941B24EE6FE23 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Ticp_7IMHh2pkZjtla0yjXQAVXQ.roa Signing time: Fri 02 Jan 2026 06:19:48 +0000 ROA not before: Fri 02 Jan 2026 06:19:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58336 IP address blocks: 2a0e:97c0:550::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 17:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:bf:6a:f2:f6:7b:a9:33:39:41:b2:4e:e6:fe:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e2729ffb20c1e1da99198ed95ad328d74005574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:58:14:6e:12:8c:f7:0c:14:85:21:9e:af:58: 0b:16:7f:8a:cc:ae:b4:7b:d4:8c:e8:fe:b9:5a:86: e7:b1:50:5b:52:83:7b:a2:ee:09:82:62:5b:f4:0e: bd:bb:fe:03:d4:38:7c:d4:2a:bb:11:36:2e:4b:47: a3:a7:8f:3f:56:fe:3f:17:90:a6:45:1f:8a:37:71: eb:8d:2d:d4:c6:2f:fb:5d:a6:40:a0:35:24:ff:47: b4:50:0e:e0:8a:1d:98:19:8a:d6:42:45:be:32:c8: b0:52:4b:15:f3:3c:03:ba:a7:a1:c2:85:4d:f9:a7: e9:c7:c1:5a:00:72:79:77:98:fd:bf:d6:47:9d:c5: 0f:bc:16:9b:87:46:7a:ab:7a:76:28:48:19:b2:ac: b6:d0:d6:77:b4:40:1d:3b:a2:3b:b4:80:9b:35:bd: d6:b0:5c:54:5a:ed:d0:c6:3e:31:91:97:36:bc:b7: 08:fd:08:bb:12:2a:4a:70:21:72:a6:1c:5f:a8:24: 72:33:fd:70:8c:45:4a:31:c2:2f:c3:d0:6a:e8:0a: a2:66:35:78:2f:96:d7:29:f4:29:45:1a:c5:98:60: df:f4:f1:1f:6b:a1:f4:6f:90:24:23:36:55:34:8c: 4c:62:9c:e7:d0:7e:d7:f0:ac:d6:3a:ad:fa:2c:23: 9c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:27:29:FF:B2:0C:1E:1D:A9:91:98:ED:95:AD:32:8D:74:00:55:74 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Ticp_7IMHh2pkZjtla0yjXQAVXQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:550::/44 Signature Algorithm: sha256WithRSAEncryption 90:e5:98:4b:55:ea:fb:a1:5f:cb:6b:bc:5a:b3:99:52:58:90: 6e:91:0e:45:fc:29:38:61:86:e6:e7:64:3e:99:de:91:44:31: cd:3e:b2:f7:04:dc:96:45:92:0d:f4:8f:81:26:41:1e:60:e5: 53:10:c0:b5:97:33:60:d4:e0:1d:56:15:68:c1:fa:b5:4d:23: e1:20:37:dc:da:a1:c6:10:f4:ce:12:89:ca:59:6c:96:f5:71: 0c:2e:27:c8:13:30:56:6c:d7:f8:57:f9:b4:8e:b7:d4:e8:9a: 35:12:01:2f:1a:de:51:8c:be:ae:64:ce:c1:bf:b4:bb:5d:25: ee:ba:10:48:a4:a2:ae:01:b2:1a:89:3f:4f:99:ce:c6:07:35: fc:e8:c0:c6:53:a6:33:78:59:7f:0f:db:08:b0:14:ea:41:c8: 67:88:f5:35:f9:4e:68:3c:0f:94:4c:7c:7d:f5:e2:76:f6:01: 1a:40:ed:89:40:d3:e6:16:03:82:3f:0d:1f:75:fd:18:a2:29: 40:47:52:53:ef:06:bb:d2:2e:e4:67:96:b7:db:76:34:4f:f1: f6:2a:a5:cc:c2:b8:b9:e8:99:38:97:f5:0e:c5:a5:7a:36:ca: e9:c7:02:85:78:e1:b9:61:bb:32:07:48:43:14:0a:32:71:48: e7:60:b9:88 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XL9q8vZ7qTM5QbJO5v4jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTI3MjlmZmIyMGMxZTFkYTk5MTk4ZWQ5NWFkMzI4ZDc0MDA1NTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFgUbhKM9wwUhSGer1gLFn+KzK60 e9SM6P65WobnsVBbUoN7ou4JgmJb9A69u/4D1Dh81Cq7ETYuS0ejp48/Vv4/F5Cm RR+KN3HrjS3Uxi/7XaZAoDUk/0e0UA7gih2YGYrWQkW+MsiwUksV8zwDuqehwoVN +afpx8FaAHJ5d5j9v9ZHncUPvBabh0Z6q3p2KEgZsqy20NZ3tEAdO6I7tICbNb3W sFxUWu3Qxj4xkZc2vLcI/Qi7EipKcCFyphxfqCRyM/1wjEVKMcIvw9Bq6AqiZjV4 L5bXKfQpRRrFmGDf9PEfa6H0b5AkIzZVNIxMYpzn0H7X8KzWOq36LCOcqQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFE4nKf+yDB4dqZGY7ZWtMo10AFV0MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvVGljcF83SU1IaDJwa1pqdGxhMHlqWFFBVlhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAVQ MA0GCSqGSIb3DQEBCwUAA4IBAQCQ5ZhLVer7oV/La7xas5lSWJBukQ5F/Ck4YYbm 52Q+md6RRDHNPrL3BNyWRZIN9I+BJkEeYOVTEMC1lzNg1OAdVhVowfq1TSPhIDfc 2qHGEPTOEonKWWyW9XEMLifIEzBWbNf4V/m0jrfU6Jo1EgEvGt5RjL6uZM7Bv7S7 XSXuuhBIpKKuAbIaiT9Pmc7GBzX86MDGU6YzeFl/D9sIsBTqQchniPU1+U5oPA+U THx99eJ29gEaQO2JQNPmFgOCPw0fdf0YoilAR1JT7wa70i7kZ5a323Y0T/H2KqXM wri56Jk4l/UOxaV6NsrpxwKFeOG5YbsyB0hDFAoycUjnYLmI -----END CERTIFICATE-----Generated at Sat Jan 10 02:18:47 2026 by rpki-client