This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/tcxUMOqrPC2_GbBiBbKne-UbStA.roa File: tcxUMOqrPC2_GbBiBbKne-UbStA.roa (raw, json) Hash identifier: CZVeupriepzjKvoEa8ISeXVOrpHcd9IZ82u2AK98ry8= Subject key identifier: B5:CC:54:30:EA:AB:3C:2D:BF:19:B0:62:05:B2:A7:7B:E5:1B:4A:D0 Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b Certificate serial: 019C2B3D244E942102B84225C1822DBEBFAC Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/tcxUMOqrPC2_GbBiBbKne-UbStA.roa Signing time: Thu 05 Feb 2026 00:39:13 +0000 ROA not before: Thu 05 Feb 2026 00:39:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210574 IP address blocks: 2a06:9801:25::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Feb 2026 19:31:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:2b:3d:24:4e:94:21:02:b8:42:25:c1:82:2d:be:bf:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b Validity Not Before: Feb 5 00:39:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5cc5430eaab3c2dbf19b06205b2a77be51b4ad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:42:32:62:ac:3c:2c:0a:a3:cd:ce:7b:c5:58: 83:94:72:4e:ce:e5:c1:aa:17:9d:a2:06:d2:e1:5e: a0:1f:9f:20:d4:9f:66:ea:75:85:1a:5d:85:dd:df: c4:a3:80:df:1a:f7:7a:b3:53:95:f5:d0:aa:b2:d1: 8a:b6:8d:59:b6:a7:b0:43:3c:42:1d:b8:c9:b7:af: 00:fd:bb:82:64:bd:17:6f:eb:32:a6:75:38:af:bf: ba:b6:17:ba:89:ca:e2:30:da:86:32:55:35:03:05: 53:f7:91:f6:62:d1:e4:05:23:ca:d1:ac:8f:55:4a: 1c:63:1f:48:38:bd:ce:0a:fb:d6:2f:db:cc:bd:48: d5:a9:3f:c3:7b:81:d5:f8:78:47:79:76:de:f6:6b: e5:ab:42:12:c3:11:75:76:b6:b8:cc:2c:81:bd:3d: dd:35:81:92:53:b9:c4:e2:66:f6:5c:7f:c9:fe:9c: 8c:06:f6:9c:23:6d:1d:99:6b:87:95:67:a8:04:67: 7d:19:ad:99:68:8e:31:eb:47:4d:e6:59:4f:c9:8d: 61:33:e6:d5:f1:17:98:7f:de:e6:63:c5:f6:60:af: 21:00:35:4b:81:d3:82:1f:bb:8b:75:1f:61:e3:fe: 8c:8a:ed:11:e1:42:92:96:c1:5f:a8:41:02:dd:6e: 30:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:CC:54:30:EA:AB:3C:2D:BF:19:B0:62:05:B2:A7:7B:E5:1B:4A:D0 X509v3 Authority Key Identifier: keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/tcxUMOqrPC2_GbBiBbKne-UbStA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9801:25::/48 Signature Algorithm: sha256WithRSAEncryption 30:26:81:3d:31:84:aa:7f:44:2a:f1:94:a2:e6:d3:97:85:bd: d1:69:79:39:3c:5b:e4:ca:3f:f0:6d:c8:28:f9:43:09:6f:82: 21:22:fd:f2:8f:76:2e:7d:9b:36:ed:2b:cb:0c:e7:0e:87:f8: 82:55:98:f7:20:27:b0:74:de:15:f4:f9:9e:a2:92:34:77:bc: da:11:30:31:0a:7e:cf:d7:79:de:5b:15:54:29:4c:91:9e:ef: d6:1f:6e:61:65:b1:64:c0:2c:f9:cd:87:29:df:53:45:07:32: c3:67:c7:f2:f2:46:9d:1e:dc:1f:c1:e0:83:96:c0:a7:de:eb: 21:c8:e6:5d:54:41:8a:a9:1b:db:0f:ee:b5:b7:cf:4d:7e:07: 5d:35:aa:cd:13:27:69:cf:c4:91:78:77:90:44:ba:d7:23:5e: 7a:4f:00:84:ac:2d:fe:0f:2c:4c:e5:51:73:a3:86:f7:a0:e8: 73:25:f0:f8:a7:95:de:aa:6e:3a:86:84:b2:95:ac:96:68:7c: 22:f2:99:bc:f5:ac:f7:2e:b0:bd:e6:f0:d9:27:b7:46:2f:24: 83:23:a2:e4:14:65:40:81:17:99:11:a2:63:1a:46:b8:76:67: c9:68:34:3f:76:73:ba:7b:5b:c0:43:5b:17:55:d5:e4:df:85: d3:5d:63:53 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZwrPSROlCECuEIlwYItvr+sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3 Y2EzNmIwHhcNMjYwMjA1MDAzOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNWNjNTQzMGVhYWIzYzJkYmYxOWIwNjIwNWIyYTc3YmU1MWI0YWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9kIyYqw8LAqjzc57xViDlHJOzuXB qhedogbS4V6gH58g1J9m6nWFGl2F3d/Eo4DfGvd6s1OV9dCqstGKto1ZtqewQzxC HbjJt68A/buCZL0Xb+sypnU4r7+6the6icriMNqGMlU1AwVT95H2YtHkBSPK0ayP VUocYx9IOL3OCvvWL9vMvUjVqT/De4HV+HhHeXbe9mvlq0ISwxF1dra4zCyBvT3d NYGSU7nE4mb2XH/J/pyMBvacI20dmWuHlWeoBGd9Ga2ZaI4x60dN5llPyY1hM+bV 8ReYf97mY8X2YK8hADVLgdOCH7uLdR9h4/6Miu0R4UKSlsFfqEEC3W4wLQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLXMVDDqqzwtvxmwYgWyp3vlG0rQMB8GA1UdIwQY MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt ZWQ4Y2ZhZjFiODFmLzEvdGN4VU1PcXJQQzJfR2JCaUJiS25lLVViU3RBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgaYAQAl MA0GCSqGSIb3DQEBCwUAA4IBAQAwJoE9MYSqf0Qq8ZSi5tOXhb3RaXk5PFvkyj/w bcgo+UMJb4IhIv3yj3YufZs27SvLDOcOh/iCVZj3ICewdN4V9PmeopI0d7zaETAx Cn7P13neWxVUKUyRnu/WH25hZbFkwCz5zYcp31NFBzLDZ8fy8kadHtwfweCDlsCn 3ushyOZdVEGKqRvbD+61t89NfgddNarNEydpz8SReHeQRLrXI156TwCErC3+DyxM 5VFzo4b3oOhzJfD4p5Xeqm46hoSylayWaHwi8pm89az3LrC95vDZJ7dGLySDI6Lk FGVAgReZEaJjGka4dmfJaDQ/dnO6e1vAQ1sXVdXk34XTXWNT -----END CERTIFICATE-----Generated at Sun Feb 8 04:50:43 2026 by rpki-client