This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/tqmucHZ-pG1XVssJsj5NHaCO3QA.roa File: tqmucHZ-pG1XVssJsj5NHaCO3QA.roa (raw, json) Hash identifier: AsOtQxy2X2EvyvLCvGZtq2rARAmeWCtTobK54XK2EB8= Subject key identifier: B6:A9:AE:70:76:7E:A4:6D:57:56:CB:09:B2:3E:4D:1D:A0:8E:DD:00 Certificate issuer: /CN=a23b71bfd751c0cf3f7143786fda4432e7ccec2c Certificate serial: 019B285251FCA2A5139DF43CBA47E33C7C60 Authority key identifier: A2:3B:71:BF:D7:51:C0:CF:3F:71:43:78:6F:DA:44:32:E7:CC:EC:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojtxv9dRwM8_cUN4b9pEMufM7Cw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/tqmucHZ-pG1XVssJsj5NHaCO3QA.roa Signing time: Tue 16 Dec 2025 18:00:42 +0000 ROA not before: Tue 16 Dec 2025 18:00:42 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 42375 IP address blocks: 2a0a:8f84::/32 maxlen: 32 2a0a:8f85::/32 maxlen: 32 2a0a:8f86::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.crl rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.mft rsync://rpki.ripe.net/repository/DEFAULT/ojtxv9dRwM8_cUN4b9pEMufM7Cw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:52:51:fc:a2:a5:13:9d:f4:3c:ba:47:e3:3c:7c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a23b71bfd751c0cf3f7143786fda4432e7ccec2c Validity Not Before: Dec 16 18:00:42 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b6a9ae70767ea46d5756cb09b23e4d1da08edd00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cf:60:db:1f:41:85:ac:3e:af:94:46:f6:6e: 8e:bd:4a:a0:8f:ff:6f:b6:83:bd:7e:41:32:63:06: 7a:9d:57:a5:40:77:50:ef:de:a4:12:46:5c:1c:f6: f9:78:53:61:5e:de:20:31:f4:90:a8:38:8c:53:4b: 6a:1a:12:3d:b5:bc:7e:b2:4e:1e:95:98:43:af:25: 76:a2:d9:85:83:38:9d:59:85:1b:c8:2a:53:e0:b4: 38:a4:e0:93:23:76:c5:6a:97:18:c8:17:0d:56:eb: fe:39:23:f0:12:ba:08:f3:9e:16:bf:de:99:9f:8f: 46:10:f2:8d:df:de:7f:5f:c9:5f:73:8e:64:2f:cc: a2:51:81:08:f9:ae:ff:de:bc:96:25:62:9a:7b:76: 0d:06:37:bb:99:98:32:6b:39:e2:d3:bb:61:75:d5: 26:e2:92:93:a6:46:57:c3:94:7e:25:74:47:36:72: be:62:2b:5b:fb:fa:a7:2d:ae:ee:36:bf:5f:7f:39: e8:7d:86:19:d7:54:6c:e3:1e:91:87:22:0d:3a:fa: b4:c5:36:4b:9e:44:f7:c7:f5:a5:30:e3:be:33:cb: bd:4a:7e:f0:7b:ab:29:6b:36:68:c3:c8:b6:6f:a3: d4:e6:5d:a4:97:b0:5d:e2:de:d5:33:0b:52:f3:40: 04:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A9:AE:70:76:7E:A4:6D:57:56:CB:09:B2:3E:4D:1D:A0:8E:DD:00 X509v3 Authority Key Identifier: keyid:A2:3B:71:BF:D7:51:C0:CF:3F:71:43:78:6F:DA:44:32:E7:CC:EC:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojtxv9dRwM8_cUN4b9pEMufM7Cw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/tqmucHZ-pG1XVssJsj5NHaCO3QA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:8f84::-2a0a:8f86:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption a7:48:57:d9:40:5d:02:a3:da:6b:8c:63:e7:c2:39:db:1f:41: 7f:b8:6d:b4:ed:2e:44:cc:93:cf:fa:53:3e:42:04:14:ff:9c: 59:ef:65:22:2b:50:73:e2:78:e4:c8:29:82:f5:ac:07:8d:1a: 73:b1:74:14:2a:4c:5e:c8:3c:6e:e8:d2:c6:04:e8:aa:31:a2: 81:50:de:b4:34:d1:8a:5d:d0:ed:e4:c2:99:1b:d0:d5:9b:a5: fb:26:7d:35:07:b8:2a:dd:f3:a1:e9:4c:fd:a2:12:41:e0:a8: f6:b8:0a:c4:1e:37:0d:58:d2:e2:0c:24:ea:49:f0:c4:aa:f6: b8:9b:14:65:14:05:2e:fe:d2:95:42:02:3c:d3:a2:2b:d0:e5: 27:ed:a3:e3:10:a8:71:4d:6f:c5:af:5a:73:da:e6:57:0a:f8: ed:19:be:07:85:42:f0:7b:fe:db:40:13:30:9a:03:4d:88:c8: 22:f8:a1:94:68:6a:0f:f9:47:f3:21:d3:64:6d:27:be:bb:40: fa:4f:aa:7a:ba:0c:50:dc:ee:3d:de:1a:c1:31:ea:03:ff:0b: fb:82:37:4d:7f:3c:0f:55:06:0d:41:ad:a8:41:b5:d6:87:0e: 0e:5c:cf:00:90:01:0a:89:d4:d9:4e:d3:b5:84:01:7f:9c:ed: 52:2d:73:ac -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgISAZsoUlH8oqUTnfQ8ukfjPHxgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyM2I3MWJmZDc1MWMwY2YzZjcxNDM3ODZmZGE0NDMyZTdj Y2VjMmMwHhcNMjUxMjE2MTgwMDQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNmE5YWU3MDc2N2VhNDZkNTc1NmNiMDliMjNlNGQxZGEwOGVkZDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxs9g2x9Bhaw+r5RG9m6OvUqgj/9v toO9fkEyYwZ6nVelQHdQ796kEkZcHPb5eFNhXt4gMfSQqDiMU0tqGhI9tbx+sk4e lZhDryV2otmFgzidWYUbyCpT4LQ4pOCTI3bFapcYyBcNVuv+OSPwEroI854Wv96Z n49GEPKN395/X8lfc45kL8yiUYEI+a7/3ryWJWKae3YNBje7mZgyazni07thddUm 4pKTpkZXw5R+JXRHNnK+Yitb+/qnLa7uNr9ffznofYYZ11Rs4x6RhyINOvq0xTZL nkT3x/WlMOO+M8u9Sn7we6spazZow8i2b6PU5l2kl7Bd4t7VMwtS80AEzQIDAQAB o4ICEzCCAg8wHQYDVR0OBBYEFLaprnB2fqRtV1bLCbI+TR2gjt0AMB8GA1UdIwQY MBaAFKI7cb/XUcDPP3FDeG/aRDLnzOwsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2p0eHY5ZFJ3TThfY1VONGI5cEVNdWZNN0N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84MTZiOGEtZWNjYy00Nzg5LWExZjMt MzU3MGQ5YmY1Njc5LzEvdHFtdWNIWi1wRzFYVnNzSnNqNU5IYUNPM1FBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni84MTZiOGEtZWNjYy00Nzg5LWExZjMtMzU3MGQ5YmY1Njc5 LzEvb2p0eHY5ZFJ3TThfY1VONGI5cEVNdWZNN0N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQMA4DBQIqCo+E AwUAKgqPhjANBgkqhkiG9w0BAQsFAAOCAQEAp0hX2UBdAqPaa4xj58I52x9Bf7ht tO0uRMyTz/pTPkIEFP+cWe9lIitQc+J45MgpgvWsB40ac7F0FCpMXsg8bujSxgTo qjGigVDetDTRil3Q7eTCmRvQ1Zul+yZ9NQe4Kt3zoelM/aISQeCo9rgKxB43DVjS 4gwk6knwxKr2uJsUZRQFLv7SlUICPNOiK9DlJ+2j4xCocU1vxa9ac9rmVwr47Rm+ B4VC8Hv+20ATMJoDTYjIIvihlGhqD/lH8yHTZG0nvrtA+k+qeroMUNzuPd4awTHq A/8L+4I3TX88D1UGDUGtqEG11ocODlzPAJABConU2U7TtYQBf5ztUi1zrA== -----END CERTIFICATE-----Generated at Fri Dec 19 06:37:22 2025 by rpki-client