This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/_T4G4m2csQPbWKsz52ADW1Njo9k.roa File: _T4G4m2csQPbWKsz52ADW1Njo9k.roa (raw, json) Hash identifier: 7qLcU9SAlA0xKjfKtzQ29nI0OE8gZvht7DAddbsfR98= Subject key identifier: FD:3E:06:E2:6D:9C:B1:03:DB:58:AB:33:E7:60:03:5B:53:63:A3:D9 Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EA6C994D00B0DF377F9CBC647CC4A Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/_T4G4m2csQPbWKsz52ADW1Njo9k.roa Signing time: Thu 01 Jan 2026 12:18:21 +0000 ROA not before: Thu 01 Jan 2026 12:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198734 IP address blocks: 2a0e:aa07:e0a0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:a6:c9:94:d0:0b:0d:f3:77:f9:cb:c6:47:cc:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd3e06e26d9cb103db58ab33e760035b5363a3d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d4:8e:71:b8:50:b6:8a:85:29:f7:74:46:64: a9:08:5f:79:2a:b5:76:8d:b8:33:21:68:25:52:3c: ed:2f:e9:a9:9b:a9:d2:75:bb:95:b8:cc:f5:f1:f7: 57:c7:72:ed:8b:50:e8:e5:c8:96:ee:e7:9d:4c:c1: 26:bf:5b:82:fc:6e:f3:57:3d:a3:30:54:8a:92:d5: 9b:c4:87:4e:3e:bb:ae:56:00:9c:1e:41:e0:84:60: cc:c6:b8:c1:95:c1:d0:a6:bd:5f:90:a7:18:44:4b: 45:06:c7:0b:85:91:06:11:a3:c4:78:45:2e:4f:5c: f7:72:ad:3a:f9:fc:4b:a8:66:8d:91:1f:7b:1e:8d: 2a:6e:3c:1c:70:be:23:17:be:81:c7:2e:14:14:82: dc:8f:af:b6:35:5d:c3:06:84:3c:73:9f:a3:0b:a2: 08:bb:ec:b9:50:9d:e2:77:fb:f6:62:3e:09:22:63: 24:ac:17:67:a2:69:ab:87:27:9b:00:ee:f9:ea:45: 26:3e:d8:0c:7b:3e:23:d9:35:e1:5a:af:99:04:cb: 0f:58:7d:32:ee:66:39:a0:68:c4:d8:56:6a:d1:2d: 91:dc:6b:6b:75:1a:b9:7f:0f:6e:2f:c1:95:c3:d6: dc:60:13:68:4c:6c:02:66:92:56:6e:a6:68:44:dd: 29:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:3E:06:E2:6D:9C:B1:03:DB:58:AB:33:E7:60:03:5B:53:63:A3:D9 X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/_T4G4m2csQPbWKsz52ADW1Njo9k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa07:e0a0::/44 Signature Algorithm: sha256WithRSAEncryption a5:4f:06:7e:4b:d0:22:d0:b2:0b:0c:3f:78:2c:72:44:3d:f2: 6b:1f:2e:59:2a:44:c9:21:cc:50:97:4f:76:14:65:71:59:17: 06:5c:82:c2:55:24:e1:48:d4:3a:88:c7:04:b7:fc:38:7b:96: 76:9c:f0:d9:b3:d9:f3:16:40:a4:c8:b8:f9:e0:d6:31:3d:14: 1c:9c:45:8e:90:fb:3b:62:e9:b8:fb:45:71:69:47:8d:92:39: cc:65:0e:36:04:fb:88:ca:b0:dc:be:ab:42:d8:e5:ac:7d:f7: bf:6e:04:95:56:a3:70:b9:d1:85:90:de:34:9e:ad:34:d4:c5: 4b:e2:77:68:52:83:0b:6f:9e:8a:52:89:1a:85:32:f7:f1:76: be:3c:63:4e:ee:7f:d5:df:21:4b:ea:94:06:b3:f2:82:f4:d1: d4:e8:7c:e0:aa:ff:7d:53:6f:18:27:4f:d4:ef:1b:84:f4:1a: 4e:5e:6f:b8:4a:dc:02:56:ad:ef:31:73:fe:ea:9e:ac:ed:b4: 46:0f:31:ad:4c:28:87:ef:ca:d3:47:4c:43:26:58:7b:09:4f: b4:ed:32:b3:17:2d:a9:9c:26:b9:94:4c:77:f2:04:ea:8b:84: dd:dc:29:6e:65:b7:aa:90:c2:79:2f:b1:2c:36:d7:d4:6c:4a: 47:dc:55:f3 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fqbJlNALDfN3+cvGR8xKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDNlMDZlMjZkOWNiMTAzZGI1OGFiMzNlNzYwMDM1YjUzNjNhM2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtSOcbhQtoqFKfd0RmSpCF95KrV2 jbgzIWglUjztL+mpm6nSdbuVuMz18fdXx3Lti1Do5ciW7uedTMEmv1uC/G7zVz2j MFSKktWbxIdOPruuVgCcHkHghGDMxrjBlcHQpr1fkKcYREtFBscLhZEGEaPEeEUu T1z3cq06+fxLqGaNkR97Ho0qbjwccL4jF76Bxy4UFILcj6+2NV3DBoQ8c5+jC6II u+y5UJ3id/v2Yj4JImMkrBdnommrhyebAO756kUmPtgMez4j2TXhWq+ZBMsPWH0y 7mY5oGjE2FZq0S2R3GtrdRq5fw9uL8GVw9bcYBNoTGwCZpJWbqZoRN0ptwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFP0+BuJtnLED21irM+dgA1tTY6PZMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvX1Q0RzRtMmNzUVBiV0tzejUyQURXMU5qbzlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6qB+Cg MA0GCSqGSIb3DQEBCwUAA4IBAQClTwZ+S9Ai0LILDD94LHJEPfJrHy5ZKkTJIcxQ l092FGVxWRcGXILCVSThSNQ6iMcEt/w4e5Z2nPDZs9nzFkCkyLj54NYxPRQcnEWO kPs7Yum4+0VxaUeNkjnMZQ42BPuIyrDcvqtC2OWsffe/bgSVVqNwudGFkN40nq00 1MVL4ndoUoMLb56KUokahTL38Xa+PGNO7n/V3yFL6pQGs/KC9NHU6Hzgqv99U28Y J0/U7xuE9BpOXm+4StwCVq3vMXP+6p6s7bRGDzGtTCiH78rTR0xDJlh7CU+07TKz Fy2pnCa5lEx38gTqi4Td3CluZbeqkMJ5L7EsNtfUbEpH3FXz -----END CERTIFICATE-----Generated at Tue Jan 6 21:30:42 2026 by rpki-client