This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/TNsgJfRo8T4wYAftDqW5Y2ISiSw.roa File: TNsgJfRo8T4wYAftDqW5Y2ISiSw.roa (raw, json) Hash identifier: 3A8wQr5AdN0RkrLyZ9wt0wnQNwX319OG4uYDw/IVg1U= Subject key identifier: 4C:DB:20:25:F4:68:F1:3E:30:60:07:ED:0E:A5:B9:63:62:12:89:2C Certificate issuer: /CN=6fa64a647bd2a5557f70f676adcc76904fb872ab Certificate serial: 019B7CECF802FC40E0A727BFE0F1E6FC9AF6 Authority key identifier: 6F:A6:4A:64:7B:D2:A5:55:7F:70:F6:76:AD:CC:76:90:4F:B8:72:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/TNsgJfRo8T4wYAftDqW5Y2ISiSw.roa Signing time: Fri 02 Jan 2026 04:17:43 +0000 ROA not before: Fri 02 Jan 2026 04:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214466 IP address blocks: 2a14:9400::/29 maxlen: 29 2a14:9400:230::/48 maxlen: 48 2a14:9400:1337::/48 maxlen: 48 2a14:9400:2000::/36 maxlen: 36 2a14:9400:3000::/36 maxlen: 36 2a14:9400:4000::/36 maxlen: 36 2a14:9400:5000::/36 maxlen: 36 2a14:9400:6000::/36 maxlen: 36 2a14:9400:7000::/36 maxlen: 36 2a14:9400:8000::/36 maxlen: 36 2a14:9400:9000::/36 maxlen: 36 2a14:9400:a000::/36 maxlen: 36 2a14:9400:b000::/36 maxlen: 36 2a14:9400:c000::/36 maxlen: 36 2a14:9400:d000::/36 maxlen: 36 2a14:9400:e000::/36 maxlen: 36 2a14:9400:f000::/36 maxlen: 36 2a14:9401::/36 maxlen: 36 2a14:9401:1000::/36 maxlen: 36 2a14:9401:3000::/36 maxlen: 36 2a14:9401:5000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:f8:02:fc:40:e0:a7:27:bf:e0:f1:e6:fc:9a:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fa64a647bd2a5557f70f676adcc76904fb872ab Validity Not Before: Jan 2 04:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4cdb2025f468f13e306007ed0ea5b9636212892c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:96:c3:65:4b:0d:6e:2c:5e:ac:70:be:9d:e9: 56:02:a0:94:45:4f:a5:30:50:ac:9c:94:d6:e1:f2: 93:5a:9d:0a:d2:3e:be:d4:f6:56:85:87:3f:a2:87: 8d:66:5d:cc:ab:bf:3a:2f:b0:b3:2c:8c:d3:d8:40: 09:00:1b:cc:0e:bb:23:d5:23:63:65:7d:29:fc:ab: f9:3a:8a:0c:de:d4:33:a6:ec:b9:ea:f6:71:09:a6: 05:13:1f:fe:b0:df:ab:d2:cb:76:4a:71:33:b8:30: 33:39:43:ba:70:a8:1c:fb:15:e1:9b:b1:9b:11:83: 14:24:84:cc:ec:fc:57:2a:61:c6:d7:87:94:2e:54: a4:b5:0f:21:1f:51:da:73:35:76:b3:00:f2:02:bf: 6c:6d:df:de:81:87:5f:80:73:0b:23:a3:28:53:1b: cd:7a:c9:ef:d4:bb:77:e1:a7:a5:d2:99:61:93:63: 04:12:b8:26:31:fd:5e:30:65:20:f8:a0:43:e1:5d: 60:58:f4:d4:2d:3f:3a:dc:41:3c:55:c1:a9:bb:67: ba:7c:96:71:fa:7b:1d:1f:e6:82:31:0e:43:ca:4a: 39:ce:ee:d3:9d:59:b6:f2:53:1d:85:ec:59:1f:d3: 81:71:4e:d6:88:11:0f:85:60:37:c4:9a:98:d5:3f: 0d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:DB:20:25:F4:68:F1:3E:30:60:07:ED:0E:A5:B9:63:62:12:89:2C X509v3 Authority Key Identifier: keyid:6F:A6:4A:64:7B:D2:A5:55:7F:70:F6:76:AD:CC:76:90:4F:B8:72:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/TNsgJfRo8T4wYAftDqW5Y2ISiSw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:9400::/29 Signature Algorithm: sha256WithRSAEncryption 8b:c1:1d:a1:c8:2e:1c:61:2e:14:9e:f6:a1:6e:c0:12:20:b9: 03:52:b3:a7:e1:e0:4f:5f:a7:67:fa:75:0f:6b:86:49:01:b8: 1b:93:95:66:7b:76:87:9c:e0:b8:c5:c6:fd:8b:6e:1d:20:8b: 74:64:c0:ec:7a:05:dd:ef:6d:5f:89:6f:76:08:a4:d1:8c:a4: 82:6e:14:02:0b:df:8f:d7:f6:26:06:9c:0a:76:bd:09:48:9d: 34:6e:b1:9b:db:15:b8:09:18:23:b1:09:d8:24:e2:1d:30:81: 35:05:3c:0b:ef:d1:2a:a6:1a:c1:9b:2a:ae:30:81:e3:cf:01: 82:b6:4a:9c:3f:cc:a5:07:48:eb:9f:52:88:5f:b9:da:fc:2a: c7:af:8e:9e:ab:6c:b6:cf:d5:dc:f1:c9:16:99:bb:b5:4e:3c: 76:5a:11:66:e5:25:56:8c:1a:e1:ee:4a:31:91:e9:fc:2d:5c: cd:05:89:8c:3e:30:26:2f:00:06:45:94:0c:04:a7:66:c6:2c: c6:96:7e:41:6e:a7:20:a3:d0:1b:05:b5:a1:d4:fc:47:1a:37: 38:d6:a1:43:f0:16:d4:3c:31:ab:9f:99:e8:17:ef:c9:bc:b2: 69:02:2c:da:9e:97:bf:3f:c0:1a:ad:46:7a:86:76:a7:7b:b8: 53:8e:09:d2 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt87PgC/EDgpye/4PHm/Jr2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYTY0YTY0N2JkMmE1NTU3ZjcwZjY3NmFkY2M3NjkwNGZi ODcyYWIwHhcNMjYwMTAyMDQxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Y2RiMjAyNWY0NjhmMTNlMzA2MDA3ZWQwZWE1Yjk2MzYyMTI4OTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5bDZUsNbixerHC+nelWAqCURU+l MFCsnJTW4fKTWp0K0j6+1PZWhYc/ooeNZl3Mq786L7CzLIzT2EAJABvMDrsj1SNj ZX0p/Kv5OooM3tQzpuy56vZxCaYFEx/+sN+r0st2SnEzuDAzOUO6cKgc+xXhm7Gb EYMUJITM7PxXKmHG14eULlSktQ8hH1HaczV2swDyAr9sbd/egYdfgHMLI6MoUxvN esnv1Lt34ael0plhk2MEErgmMf1eMGUg+KBD4V1gWPTULT863EE8VcGpu2e6fJZx +nsdH+aCMQ5Dyko5zu7TnVm28lMdhexZH9OBcU7WiBEPhWA3xJqY1T8NkwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFEzbICX0aPE+MGAH7Q6luWNiEoksMB8GA1UdIwQY MBaAFG+mSmR70qVVf3D2dq3MdpBPuHKrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjZaS1pIdlNwVlZfY1BaMnJjeDJrRS00Y3FzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yNThkYWUtNTRmYS00YTMzLWExOWQt ZTkxYjNhYmQxZmU4LzEvVE5zZ0pmUm84VDR3WUFmdERxVzVZMklTaVN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yNThkYWUtNTRmYS00YTMzLWExOWQtZTkxYjNhYmQxZmU4 LzEvYjZaS1pIdlNwVlZfY1BaMnJjeDJrRS00Y3FzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhSUADAN BgkqhkiG9w0BAQsFAAOCAQEAi8EdocguHGEuFJ72oW7AEiC5A1Kzp+HgT1+nZ/p1 D2uGSQG4G5OVZnt2h5zguMXG/YtuHSCLdGTA7HoF3e9tX4lvdgik0Yykgm4UAgvf j9f2JgacCna9CUidNG6xm9sVuAkYI7EJ2CTiHTCBNQU8C+/RKqYawZsqrjCB488B grZKnD/MpQdI659SiF+52vwqx6+Onqtsts/V3PHJFpm7tU48dloRZuUlVowa4e5K MZHp/C1czQWJjD4wJi8ABkWUDASnZsYsxpZ+QW6nIKPQGwW1odT8Rxo3ONahQ/AW 1Dwxq5+Z6BfvybyyaQIs2p6Xvz/AGq1GeoZ2p3u4U44J0g== -----END CERTIFICATE-----Generated at Sat Jan 10 04:00:49 2026 by rpki-client