This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/TnThCaTGOpbeBVl_q2qvHfPHRKI.roa File: TnThCaTGOpbeBVl_q2qvHfPHRKI.roa (raw, json) Hash identifier: vZGjqFlLceGbm9fhvfK4HD2wMVIEyqf+3QaEkJyXI1A= Subject key identifier: 4E:74:E1:09:A4:C6:3A:96:DE:05:59:7F:AB:6A:AF:1D:F3:C7:44:A2 Certificate issuer: /CN=2f8675457594d7e740aaeef2e7d7efd02239c617 Certificate serial: 019A583F6D6DDA6FE333EC2A713A728C0D61 Authority key identifier: 2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/TnThCaTGOpbeBVl_q2qvHfPHRKI.roa Signing time: Thu 06 Nov 2025 08:19:03 +0000 ROA not before: Thu 06 Nov 2025 08:19:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204915 IP address blocks: 2a02:4780:bad::/48 maxlen: 48 2a02:4780:dead::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:58:3f:6d:6d:da:6f:e3:33:ec:2a:71:3a:72:8c:0d:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f8675457594d7e740aaeef2e7d7efd02239c617 Validity Not Before: Nov 6 08:19:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4e74e109a4c63a96de05597fab6aaf1df3c744a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c2:63:c6:29:7b:f5:bc:d1:ea:2e:cb:e5:6b: 63:64:95:44:ea:99:37:03:3f:48:f3:40:09:94:29: 16:a2:a6:12:cc:6f:ac:5a:6a:a2:b9:79:6a:1c:ef: d9:2d:e7:e0:75:10:4f:e3:3e:d8:74:6c:9f:a5:8d: 13:23:c2:7c:c9:ee:84:ee:64:59:0f:73:6e:0b:bc: a4:0b:65:72:cc:99:b8:a1:78:12:77:31:84:77:ac: 7e:f0:19:bc:c6:72:ff:18:be:a3:20:db:8e:e8:89: 48:b8:b6:5a:2f:ae:7b:b4:2f:1e:4d:a3:58:fb:77: 8a:30:76:ba:01:ad:11:d0:15:81:69:7c:ed:d6:07: 76:ce:36:5e:dd:a0:cc:6e:0c:3e:b5:c0:db:16:c2: 88:46:76:4c:3a:fb:c5:59:ee:37:21:75:83:c6:87: eb:c2:6b:81:11:9e:5a:24:20:4d:f1:15:21:43:ad: 55:79:fd:34:38:56:46:86:da:0b:12:3b:c1:01:f7: 59:04:32:4c:49:6e:9b:48:1f:42:3c:36:8b:e4:d5: 64:a4:71:de:12:53:29:7b:54:c8:6e:87:e7:8e:32: 70:0d:fa:ab:3c:57:f1:82:9d:62:d1:67:d3:46:c0: 2d:e3:08:a4:5f:a3:50:fa:d3:86:cd:ee:93:e9:c3: 86:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:74:E1:09:A4:C6:3A:96:DE:05:59:7F:AB:6A:AF:1D:F3:C7:44:A2 X509v3 Authority Key Identifier: keyid:2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/TnThCaTGOpbeBVl_q2qvHfPHRKI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:4780:bad::/48 2a02:4780:dead::/48 Signature Algorithm: sha256WithRSAEncryption 29:80:f7:a5:81:8f:b6:06:e6:e6:8c:8a:68:f6:0d:a9:20:8f: c9:f2:a0:65:1f:fb:32:43:1e:bb:9e:90:95:eb:d1:33:25:5d: 41:07:da:94:a1:85:eb:9e:7a:b2:64:ba:fd:f8:93:7d:40:e5: 0e:1c:f1:a2:78:1f:dd:1b:f1:73:70:d4:0c:d6:3f:19:05:b3: dd:ea:03:e8:34:93:66:79:e5:fb:22:90:02:28:21:68:1a:90: b5:51:f8:57:cd:64:5d:2b:15:d6:10:b2:f4:76:e4:2f:54:af: ab:4e:e4:2a:f9:fd:ab:5a:c0:c1:2e:b9:7e:01:87:22:77:3a: 25:d5:4e:b5:56:f5:94:69:0a:51:33:36:26:1c:3c:e4:3a:8b: c5:61:e7:2b:c8:17:89:9b:26:2f:5a:48:ac:e5:8a:cf:b9:30: 26:69:cf:bc:10:9b:d8:ac:04:d5:81:d3:93:df:31:be:82:b1: 3d:4b:18:11:9e:00:e0:b6:0d:fc:e7:99:50:d1:0a:0e:44:1e: 96:79:b1:47:a9:16:e6:98:0d:f9:c2:a3:ab:ef:99:4d:95:11: 40:aa:2b:d1:fe:8b:b8:af:61:10:d8:dd:57:a5:5b:b4:5a:42: bd:7e:d9:84:ed:fd:40:75:50:85:71:32:c0:fd:b9:91:31:b8: 18:88:40:60 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZpYP21t2m/jM+wqcTpyjA1hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmODY3NTQ1NzU5NGQ3ZTc0MGFhZWVmMmU3ZDdlZmQwMjIz OWM2MTcwHhcNMjUxMTA2MDgxOTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTc0ZTEwOWE0YzYzYTk2ZGUwNTU5N2ZhYjZhYWYxZGYzYzc0NGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5sJjxil79bzR6i7L5WtjZJVE6pk3 Az9I80AJlCkWoqYSzG+sWmqiuXlqHO/ZLefgdRBP4z7YdGyfpY0TI8J8ye6E7mRZ D3NuC7ykC2VyzJm4oXgSdzGEd6x+8Bm8xnL/GL6jINuO6IlIuLZaL657tC8eTaNY +3eKMHa6Aa0R0BWBaXzt1gd2zjZe3aDMbgw+tcDbFsKIRnZMOvvFWe43IXWDxofr wmuBEZ5aJCBN8RUhQ61Vef00OFZGhtoLEjvBAfdZBDJMSW6bSB9CPDaL5NVkpHHe ElMpe1TIbofnjjJwDfqrPFfxgp1i0WfTRsAt4wikX6NQ+tOGze6T6cOG2QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFE504QmkxjqW3gVZf6tqrx3zx0SiMB8GA1UdIwQY MBaAFC+GdUV1lNfnQKru8ufX79AiOcYXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDRaMVJYV1UxLWRBcXU3eTU5ZnYwQ0k1eGhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80Y2Q0Y2EtYzE5NS00YmM0LWJiOWYt MTAzMWFlMWViMDMyLzEvVG5UaENhVEdPcGJlQlZsX3EycXZIZlBIUktJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS80Y2Q0Y2EtYzE5NS00YmM0LWJiOWYtMTAzMWFlMWViMDMy LzEvTDRaMVJYV1UxLWRBcXU3eTU5ZnYwQ0k1eGhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgJHgAut AwcAKgJHgN6tMA0GCSqGSIb3DQEBCwUAA4IBAQApgPelgY+2BubmjIpo9g2pII/J 8qBlH/syQx67npCV69EzJV1BB9qUoYXrnnqyZLr9+JN9QOUOHPGieB/dG/FzcNQM 1j8ZBbPd6gPoNJNmeeX7IpACKCFoGpC1UfhXzWRdKxXWELL0duQvVK+rTuQq+f2r WsDBLrl+AYcidzol1U61VvWUaQpRMzYmHDzkOovFYecryBeJmyYvWkis5YrPuTAm ac+8EJvYrATVgdOT3zG+grE9SxgRngDgtg3855lQ0QoORB6WebFHqRbmmA35wqOr 75lNlRFAqivR/ou4r2EQ2N1XpVu0WkK9ftmE7f1AdVCFcTLA/bmRMbgYiEBg -----END CERTIFICATE-----Generated at Fri Dec 5 07:04:05 2025 by rpki-client