This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tBz0by2NzKIkh_m261Gzm8WL1fA.roa File: tBz0by2NzKIkh_m261Gzm8WL1fA.roa (raw, json) Hash identifier: HsCmK+FnFFM5EN4UPd625pAFTouSWoOu/R7Evk3aoN0= Subject key identifier: B4:1C:F4:6F:2D:8D:CC:A2:24:87:F9:B6:EB:51:B3:9B:C5:8B:D5:F0 Certificate issuer: /CN=b5f0f838afbc1322680544ed1c9c5a2b09965d9f Certificate serial: 019B79112A2B4ABC46C51080265858A382AE Authority key identifier: B5:F0:F8:38:AF:BC:13:22:68:05:44:ED:1C:9C:5A:2B:09:96:5D:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tBz0by2NzKIkh_m261Gzm8WL1fA.roa Signing time: Thu 01 Jan 2026 10:18:46 +0000 ROA not before: Thu 01 Jan 2026 10:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3170 IP address blocks: 2001:67c:3e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:2a:2b:4a:bc:46:c5:10:80:26:58:58:a3:82:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5f0f838afbc1322680544ed1c9c5a2b09965d9f Validity Not Before: Jan 1 10:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b41cf46f2d8dcca22487f9b6eb51b39bc58bd5f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:76:55:42:2c:3f:05:af:49:46:dc:7c:a0:54: b7:58:34:d5:e9:91:19:30:f9:c4:78:fa:35:4d:22: f0:79:4e:5b:da:4d:14:73:b5:54:2d:3d:32:9c:26: 15:de:fe:7f:39:15:2b:44:e1:01:a4:06:c0:4f:5d: 0b:69:f7:6a:f6:3b:08:ce:10:46:c9:59:3e:19:67: a0:f7:6c:41:f4:19:aa:d8:be:8d:c4:de:74:c3:fb: 81:73:de:d1:41:91:92:81:c7:4e:15:38:2e:ac:c4: f9:ef:fa:d6:7d:c3:92:1e:99:cc:b5:19:a5:10:4a: cd:15:fc:b1:95:0e:6a:6e:80:b0:de:68:da:eb:1a: 32:b5:c3:81:82:da:79:1a:12:84:b2:9c:f9:0a:1e: c2:86:06:83:3c:44:e7:36:cd:36:d4:0c:3d:2c:f7: a0:c8:bb:d3:57:be:5a:92:95:f3:e3:f2:7e:20:9b: 38:3d:8b:17:b3:a4:68:61:d3:97:f3:1f:52:34:e1: c8:eb:eb:dc:54:e6:d6:f3:b7:24:de:12:27:6b:e8: 85:a7:c5:23:11:5a:ee:fa:97:12:ba:33:fe:cf:b4: d2:e4:f8:cf:e3:80:49:a8:8f:9e:fd:82:47:2f:8b: 3b:5d:33:e3:81:ae:00:cd:f6:66:df:ad:ec:97:f0: 42:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:1C:F4:6F:2D:8D:CC:A2:24:87:F9:B6:EB:51:B3:9B:C5:8B:D5:F0 X509v3 Authority Key Identifier: keyid:B5:F0:F8:38:AF:BC:13:22:68:05:44:ED:1C:9C:5A:2B:09:96:5D:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tBz0by2NzKIkh_m261Gzm8WL1fA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:3e0::/48 Signature Algorithm: sha256WithRSAEncryption 67:23:fd:47:64:ca:40:b7:9b:57:20:d5:71:37:32:83:61:06: d8:ef:26:e2:a5:ed:02:ee:e7:f7:af:26:87:12:e1:99:ef:22: 52:7c:a5:75:6d:b6:11:91:6b:6d:fc:be:79:2c:d5:4a:05:d4: 56:73:db:d2:a3:c2:07:fb:92:b5:2f:b4:10:ba:bd:6a:24:0c: e1:76:87:0f:d4:97:17:95:f2:cd:0b:b9:4b:73:d5:a9:6e:4b: 9b:5b:cd:61:41:26:7c:30:fd:68:99:56:f7:63:b4:d0:5d:35: 2a:70:68:30:f6:19:74:f6:7a:fb:e4:87:22:6d:84:cd:bb:45: e8:65:f8:49:d4:6a:54:f9:ca:5f:43:48:82:e2:f8:30:04:80: 87:1f:52:af:5d:6f:37:00:ba:91:c3:c0:75:98:f8:60:70:ad: 5f:b3:26:3e:d9:a6:5d:8a:2b:01:5c:38:01:a8:93:68:53:10: 83:f7:c4:44:f3:ae:1d:27:cc:58:f6:44:69:8b:94:ad:79:b8: 30:93:bb:76:96:b8:47:3e:e6:02:33:1c:1a:47:a8:93:42:ce: 0c:14:c0:00:18:40:22:96:99:fe:ca:cd:91:75:b0:cf:3f:dc: 9d:98:41:bc:3b:2c:bc:0b:87:2c:f9:f8:7c:c2:0b:e8:ac:e9: 21:47:cf:85 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5ESorSrxGxRCAJlhYo4KuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1ZjBmODM4YWZiYzEzMjI2ODA1NDRlZDFjOWM1YTJiMDk5 NjVkOWYwHhcNMjYwMTAxMTAxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDFjZjQ2ZjJkOGRjY2EyMjQ4N2Y5YjZlYjUxYjM5YmM1OGJkNWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nZVQiw/Ba9JRtx8oFS3WDTV6ZEZ MPnEePo1TSLweU5b2k0Uc7VULT0ynCYV3v5/ORUrROEBpAbAT10Lafdq9jsIzhBG yVk+GWeg92xB9Bmq2L6NxN50w/uBc97RQZGSgcdOFTgurMT57/rWfcOSHpnMtRml EErNFfyxlQ5qboCw3mja6xoytcOBgtp5GhKEspz5Ch7ChgaDPETnNs021Aw9LPeg yLvTV75akpXz4/J+IJs4PYsXs6RoYdOX8x9SNOHI6+vcVObW87ck3hIna+iFp8Uj EVru+pcSujP+z7TS5PjP44BJqI+e/YJHL4s7XTPjga4AzfZm363sl/BCcwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLQc9G8tjcyiJIf5tutRs5vFi9XwMB8GA1UdIwQY MBaAFLXw+DivvBMiaAVE7RycWisJll2fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGZENE9LLThFeUpvQlVUdEhKeGFLd21XWFo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8zMjA1MTItOTFjYi00MzgzLTk3NjEt YTUyZGM5YzIyMDdjLzEvdEJ6MGJ5Mk56S0lraF9tMjYxR3ptOFdMMWZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS8zMjA1MTItOTFjYi00MzgzLTk3NjEtYTUyZGM5YzIyMDdj LzEvdGZENE9LLThFeUpvQlVUdEhKeGFLd21XWFo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAPg MA0GCSqGSIb3DQEBCwUAA4IBAQBnI/1HZMpAt5tXINVxNzKDYQbY7ybipe0C7uf3 ryaHEuGZ7yJSfKV1bbYRkWtt/L55LNVKBdRWc9vSo8IH+5K1L7QQur1qJAzhdocP 1JcXlfLNC7lLc9WpbkubW81hQSZ8MP1omVb3Y7TQXTUqcGgw9hl09nr75IcibYTN u0XoZfhJ1GpU+cpfQ0iC4vgwBICHH1KvXW83ALqRw8B1mPhgcK1fsyY+2aZdiisB XDgBqJNoUxCD98RE864dJ8xY9kRpi5Stebgwk7t2lrhHPuYCMxwaR6iTQs4MFMAA GEAilpn+ys2RdbDPP9ydmEG8Oyy8C4cs+fh8wgvorOkhR8+F -----END CERTIFICATE-----Generated at Sun Jan 18 13:14:04 2026 by rpki-client