This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/TEcoleUmbWQj5i2gknCSKR9Cd0E.roa File: TEcoleUmbWQj5i2gknCSKR9Cd0E.roa (raw, json) Hash identifier: 3NdzNvymYr9jRWoDUYOh9npss+lpEBY+eYb2MluLWK0= Subject key identifier: 4C:47:28:95:E5:26:6D:64:23:E6:2D:A0:92:70:92:29:1F:42:77:41 Certificate issuer: /CN=aeb0b777f5377bb1c50653884b03e27dcdee828e Certificate serial: 019B797E1F896F875F4DA1F145C14FFDDAAA Authority key identifier: AE:B0:B7:77:F5:37:7B:B1:C5:06:53:88:4B:03:E2:7D:CD:EE:82:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/TEcoleUmbWQj5i2gknCSKR9Cd0E.roa Signing time: Thu 01 Jan 2026 12:17:47 +0000 ROA not before: Thu 01 Jan 2026 12:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 2a13:a380:300::/48 maxlen: 48 2a13:a380:301::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 09:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:1f:89:6f:87:5f:4d:a1:f1:45:c1:4f:fd:da:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aeb0b777f5377bb1c50653884b03e27dcdee828e Validity Not Before: Jan 1 12:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c472895e5266d6423e62da0927092291f427741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:2d:44:35:5f:f4:c2:e5:f2:15:52:99:37:0a: 71:a4:57:f5:46:02:8e:15:98:11:5e:8c:e4:b6:50: 5b:53:62:47:c4:7e:9e:37:0a:a3:ca:fe:14:de:d9: 7f:a6:30:df:58:63:7f:be:c7:a2:9f:0e:39:1b:9a: a7:e0:b3:d7:22:93:31:67:46:af:90:be:9d:7c:d3: 82:78:b2:b0:4f:78:9b:27:b1:1c:5c:a2:34:8d:75: 38:78:ba:8d:95:9b:04:aa:fa:f7:98:47:7a:ac:4e: 28:d9:e7:4c:80:fe:75:da:40:7b:61:23:3d:33:6e: 8c:b8:04:7f:89:40:1f:a7:ff:14:fb:1c:a5:2d:ae: d6:29:0b:b2:f6:ec:3c:bb:7c:84:40:29:f7:94:9b: 9f:e6:df:f2:b4:b4:e0:34:d1:f2:4d:40:b3:d1:3a: f1:db:13:f9:3b:7b:e7:91:5f:4c:5a:9b:f5:fa:98: ea:09:18:08:64:ce:88:09:4e:48:db:90:3a:e2:8e: 69:5f:2c:7e:b3:15:f8:43:36:f4:8d:21:8c:7c:de: 3e:76:20:56:d5:03:5b:ff:d3:30:82:bf:79:7f:f6: 88:74:85:02:b1:e7:f7:5e:5b:bc:92:a8:94:05:ef: 39:ab:d1:40:9e:f9:6b:d6:2c:3c:3e:86:10:58:e1: 2c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:47:28:95:E5:26:6D:64:23:E6:2D:A0:92:70:92:29:1F:42:77:41 X509v3 Authority Key Identifier: keyid:AE:B0:B7:77:F5:37:7B:B1:C5:06:53:88:4B:03:E2:7D:CD:EE:82:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/TEcoleUmbWQj5i2gknCSKR9Cd0E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:a380:300::/47 Signature Algorithm: sha256WithRSAEncryption 76:7e:80:44:1e:37:86:29:e8:47:01:bd:12:b7:67:69:25:f3: dc:eb:23:e6:d2:09:4c:62:02:95:96:54:35:3b:53:b4:10:4a: 03:ec:00:a4:a4:0c:76:63:60:69:77:bb:80:bc:c9:c2:de:d4: 37:4b:4d:1c:82:43:6b:10:22:f3:ce:70:d7:09:20:15:30:ca: 2d:28:1d:6c:99:c3:ac:a1:02:42:46:b2:7e:9f:55:54:90:2f: 40:62:26:ac:d1:5e:af:52:3a:b5:64:b3:38:5c:ab:7b:a7:23: 86:d8:b5:12:e3:c0:12:d5:4e:d2:09:ef:a2:d2:6b:20:3a:bd: 13:81:52:67:ec:e1:f9:01:b9:b6:ee:33:7e:76:19:d2:7e:9f: 61:cb:e6:60:2b:c0:a9:4d:b1:09:c1:e1:04:ec:55:e6:46:d7: c8:b4:54:ae:19:d0:d6:aa:cf:4f:09:55:0e:35:c6:51:9b:65: 53:3c:cc:09:ef:cd:24:7e:61:e7:b9:fc:bf:e2:f1:10:0c:cf: 9e:09:c1:5a:65:26:24:5d:d3:6b:f5:71:1f:b9:be:d7:5d:73: 3b:36:80:4c:f3:95:c8:93:68:b0:80:b4:37:b2:3a:f2:8d:20: 04:66:db:e4:90:c7:10:be:aa:b5:42:0a:a1:8f:8e:8f:fa:92: 48:31:bd:90 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fh+Jb4dfTaHxRcFP/dqqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYjBiNzc3ZjUzNzdiYjFjNTA2NTM4ODRiMDNlMjdkY2Rl ZTgyOGUwHhcNMjYwMTAxMTIxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzQ3Mjg5NWU1MjY2ZDY0MjNlNjJkYTA5MjcwOTIyOTFmNDI3NzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+i1ENV/0wuXyFVKZNwpxpFf1RgKO FZgRXozktlBbU2JHxH6eNwqjyv4U3tl/pjDfWGN/vseinw45G5qn4LPXIpMxZ0av kL6dfNOCeLKwT3ibJ7EcXKI0jXU4eLqNlZsEqvr3mEd6rE4o2edMgP512kB7YSM9 M26MuAR/iUAfp/8U+xylLa7WKQuy9uw8u3yEQCn3lJuf5t/ytLTgNNHyTUCz0Trx 2xP5O3vnkV9MWpv1+pjqCRgIZM6ICU5I25A64o5pXyx+sxX4Qzb0jSGMfN4+diBW 1QNb/9Mwgr95f/aIdIUCsef3Xlu8kqiUBe85q9FAnvlr1iw8PoYQWOEs8QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFExHKJXlJm1kI+YtoJJwkikfQndBMB8GA1UdIwQY MBaAFK6wt3f1N3uxxQZTiEsD4n3N7oKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnJDM2RfVTNlN0hGQmxPSVN3UGlmYzN1Z280LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8yMmRmNjEtYjYwOS00OTg2LTk5ZTMt OTI2YzRhMzI2ZTA4LzEvVEVjb2xlVW1iV1FqNWkyZ2tuQ1NLUjlDZDBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8yMmRmNjEtYjYwOS00OTg2LTk5ZTMtOTI2YzRhMzI2ZTA4 LzEvcnJDM2RfVTNlN0hGQmxPSVN3UGlmYzN1Z280LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKhOjgAMA MA0GCSqGSIb3DQEBCwUAA4IBAQB2foBEHjeGKehHAb0St2dpJfPc6yPm0glMYgKV llQ1O1O0EEoD7ACkpAx2Y2Bpd7uAvMnC3tQ3S00cgkNrECLzznDXCSAVMMotKB1s mcOsoQJCRrJ+n1VUkC9AYias0V6vUjq1ZLM4XKt7pyOG2LUS48AS1U7SCe+i0msg Or0TgVJn7OH5Abm27jN+dhnSfp9hy+ZgK8CpTbEJweEE7FXmRtfItFSuGdDWqs9P CVUONcZRm2VTPMwJ780kfmHnufy/4vEQDM+eCcFaZSYkXdNr9XEfub7XXXM7NoBM 85XIk2iwgLQ3sjryjSAEZtvkkMcQvqq1Qgqhj46P+pJIMb2Q -----END CERTIFICATE-----Generated at Fri Jan 9 17:05:28 2026 by rpki-client