This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/TvvdgghGK7jE5Wdfke5NcSe8W10.roa File: TvvdgghGK7jE5Wdfke5NcSe8W10.roa (raw, json) Hash identifier: jzahL28Bl93klMAzOc6I83k1Jer8sn+vJHe5tMFdTO4= Subject key identifier: 4E:FB:DD:82:08:46:2B:B8:C4:E5:67:5F:91:EE:4D:71:27:BC:5B:5D Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f Certificate serial: 019B7EA71124A7072828B9567FD5AB11C675 Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/TvvdgghGK7jE5Wdfke5NcSe8W10.roa Signing time: Fri 02 Jan 2026 12:20:36 +0000 ROA not before: Fri 02 Jan 2026 12:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12676 IP address blocks: 2a0d:2146:8660::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:11:24:a7:07:28:28:b9:56:7f:d5:ab:11:c6:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f Validity Not Before: Jan 2 12:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4efbdd8208462bb8c4e5675f91ee4d7127bc5b5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e2:1f:d5:40:81:05:e4:1d:95:09:ea:e2:a8: c4:ea:fc:e1:a4:74:d3:16:cf:4c:31:c1:ce:09:4b: e3:84:50:12:04:e8:17:cd:96:21:dd:29:ce:29:0c: 8d:40:91:63:29:61:3f:db:9e:37:d0:84:f9:fd:48: ef:4d:42:99:49:2b:2e:33:71:ab:5a:ea:fe:a5:a0: af:19:03:df:c1:d1:b4:e7:e6:03:30:1a:18:4f:12: a5:2c:51:57:54:3f:7e:c7:b6:92:6b:19:23:94:ae: 4e:37:3b:f0:dc:0f:c2:56:7c:5b:90:e8:e4:53:8d: 66:b1:73:b3:c0:30:19:43:79:c6:b3:4a:0b:16:54: 90:83:bd:4e:38:fd:4f:ea:ca:db:bb:24:fc:21:5d: 27:7c:c8:fe:d9:4a:1c:ab:8a:43:96:f7:fc:fc:1c: 16:a6:39:d5:2f:57:7b:87:93:40:9c:14:6e:b6:05: 67:1e:6a:54:d1:0c:17:aa:b2:55:80:15:f5:dc:f5: 00:e3:c1:6e:11:6f:9e:1d:a1:4f:9c:19:02:a4:5d: 16:1a:20:8a:83:b9:41:ec:69:7d:8a:8a:90:c0:d7: 5b:d2:f9:9a:dd:9f:c8:0a:8e:9c:3d:90:10:d1:7d: 59:c1:14:50:70:a2:76:04:0c:f4:33:1c:75:79:25: f8:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:FB:DD:82:08:46:2B:B8:C4:E5:67:5F:91:EE:4D:71:27:BC:5B:5D X509v3 Authority Key Identifier: keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/TvvdgghGK7jE5Wdfke5NcSe8W10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:2146:8660::/48 Signature Algorithm: sha256WithRSAEncryption 55:9e:2c:4e:4f:7e:9c:b9:70:6c:f3:02:d4:5e:1f:e7:de:80: 73:60:fd:d2:09:4e:cb:28:50:6b:d2:27:d7:b8:e5:64:da:a2: 74:c4:f8:c7:6a:7a:fe:a4:70:63:75:0e:ea:77:d7:70:04:b1: c1:95:cd:a6:63:24:bb:c6:0c:30:fa:27:d9:96:fc:d3:c3:ed: 49:fc:a4:fd:35:33:22:ef:72:c3:9a:36:56:c6:29:2b:cf:43: 0b:b2:4b:40:db:42:ef:62:3e:2f:a9:06:6a:06:21:97:f0:4f: cb:23:b5:78:d9:5e:da:59:78:cd:f8:d6:c1:d1:68:55:fd:53: d9:a6:a7:7c:00:4e:2a:ff:de:50:bc:95:2e:05:58:48:b6:62: 44:a7:f3:43:04:61:83:33:93:40:c7:f7:33:e8:e8:b3:c8:d0: 87:09:05:87:57:8c:95:12:85:9b:10:68:36:00:0a:15:0f:b6: f2:20:17:b0:eb:62:93:3d:e5:29:df:69:1e:cb:29:1a:9a:2e: e2:98:0f:28:18:2c:fd:5a:36:d0:71:40:d6:46:25:a4:48:bf: 7d:7b:9f:cf:4e:03:8f:d4:7c:e7:7c:5c:8f:e8:d4:f7:99:8b: 2e:55:e0:22:eb:49:89:50:c8:c3:af:47:bb:21:19:da:60:b5: 86:b9:f5:36 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pxEkpwcoKLlWf9WrEcZ1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNGFjNjExNjE0ZGQxNjVkOTQ1NTcyOTZlZDdlZDQ2Yzhm YzAyNWYwHhcNMjYwMTAyMTIyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZWZiZGQ4MjA4NDYyYmI4YzRlNTY3NWY5MWVlNGQ3MTI3YmM1YjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+If1UCBBeQdlQnq4qjE6vzhpHTT Fs9MMcHOCUvjhFASBOgXzZYh3SnOKQyNQJFjKWE/25430IT5/UjvTUKZSSsuM3Gr Wur+paCvGQPfwdG05+YDMBoYTxKlLFFXVD9+x7aSaxkjlK5ONzvw3A/CVnxbkOjk U41msXOzwDAZQ3nGs0oLFlSQg71OOP1P6srbuyT8IV0nfMj+2Uocq4pDlvf8/BwW pjnVL1d7h5NAnBRutgVnHmpU0QwXqrJVgBX13PUA48FuEW+eHaFPnBkCpF0WGiCK g7lB7Gl9ioqQwNdb0vma3Z/ICo6cPZAQ0X1ZwRRQcKJ2BAz0Mxx1eSX47wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFE773YIIRiu4xOVnX5HuTXEnvFtdMB8GA1UdIwQY MBaAFOFKxhFhTdFl2UVXKW7X7UbI/AJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUt NzBlODk4YmIzOGRkLzEvVHZ2ZGdnaEdLN2pFNVdkZmtlNU5jU2U4VzEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUtNzBlODk4YmIzOGRk LzEvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg0hRoZg MA0GCSqGSIb3DQEBCwUAA4IBAQBVnixOT36cuXBs8wLUXh/n3oBzYP3SCU7LKFBr 0ifXuOVk2qJ0xPjHanr+pHBjdQ7qd9dwBLHBlc2mYyS7xgww+ifZlvzTw+1J/KT9 NTMi73LDmjZWxikrz0MLsktA20LvYj4vqQZqBiGX8E/LI7V42V7aWXjN+NbB0WhV /VPZpqd8AE4q/95QvJUuBVhItmJEp/NDBGGDM5NAx/cz6OizyNCHCQWHV4yVEoWb EGg2AAoVD7byIBew62KTPeUp32keyykami7imA8oGCz9WjbQcUDWRiWkSL99e5/P TgOP1HznfFyP6NT3mYsuVeAi60mJUMjDr0e7IRnaYLWGufU2 -----END CERTIFICATE-----Generated at Wed Jan 21 12:18:53 2026 by rpki-client