This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/tBYjR79c9pOWmHlGOHgqj3I6_Jw.roa File: tBYjR79c9pOWmHlGOHgqj3I6_Jw.roa (raw, json) Hash identifier: iBW/QVPwffuDoZBELeeyEHgWzfYpFkqwLORhsBHcuKY= Subject key identifier: B4:16:23:47:BF:5C:F6:93:96:98:79:46:38:78:2A:8F:72:3A:FC:9C Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EA37CF456EB1DE50A0C27BB83C5F2 Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/tBYjR79c9pOWmHlGOHgqj3I6_Jw.roa Signing time: Thu 01 Jan 2026 12:18:20 +0000 ROA not before: Thu 01 Jan 2026 12:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 139216 IP address blocks: 2a0e:aa07:f0d0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:a3:7c:f4:56:eb:1d:e5:0a:0c:27:bb:83:c5:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4162347bf5cf6939698794638782a8f723afc9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e9:f2:bf:9d:66:22:5f:6b:b0:07:43:a2:2f: f2:9a:a3:7e:5b:f9:99:29:cb:3b:1c:e3:32:d7:30: 54:7e:c6:65:15:91:7e:eb:bd:d6:79:9b:48:6a:88: c1:d2:00:2b:d9:e4:4f:d8:15:ac:93:50:77:8f:f1: 95:50:a8:dd:9d:f5:e9:58:dc:5b:9d:45:c0:7b:ab: 44:59:ab:7f:4f:45:44:db:da:bb:d7:78:cb:48:19: 14:26:4e:8a:87:b2:0b:4a:93:20:31:6e:19:7d:1c: 6e:e3:89:ea:c1:49:1f:79:92:09:60:83:33:79:7e: c9:fe:b6:b2:f6:c8:ea:0b:bd:4a:e2:8b:ad:ff:e0: 4f:13:55:04:f6:a7:6c:ce:b7:06:d0:47:be:cf:4b: 9c:05:17:63:c3:e0:cf:26:52:21:e7:9e:be:57:b0: 1f:c7:74:e0:26:97:a8:d8:11:84:7d:be:63:de:14: f2:06:de:47:63:25:90:f5:11:ea:d4:3a:36:e0:bb: db:f6:50:e0:e4:78:4f:d7:39:d7:3f:10:5d:25:8f: 3b:db:b4:4b:33:0f:2c:13:f1:53:41:a8:79:c9:d9: 76:95:4c:3f:30:71:da:65:db:2a:b0:86:54:36:22: cb:03:01:f7:c7:dd:9f:d4:ed:70:8d:da:7c:b9:7a: e9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:16:23:47:BF:5C:F6:93:96:98:79:46:38:78:2A:8F:72:3A:FC:9C X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/tBYjR79c9pOWmHlGOHgqj3I6_Jw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa07:f0d0::/44 Signature Algorithm: sha256WithRSAEncryption 4f:d1:c1:5e:f2:95:16:35:5d:9f:f9:4b:c1:71:74:0c:ac:89: 90:23:62:a6:35:0a:e1:63:4b:7a:72:17:a8:a1:92:f5:29:36: 6f:c8:74:dc:fe:cc:43:1f:0a:7f:21:07:82:34:a9:b1:70:ef: 1e:5e:b9:03:47:76:99:8c:bd:8a:7e:20:7b:0e:a1:40:a9:27: 79:7b:34:19:58:a8:b5:a6:8f:4e:f5:fd:e1:32:a8:94:cf:20: 33:5c:b1:6a:98:c8:7f:d4:96:60:02:f6:74:af:67:36:a5:da: a6:aa:31:38:b0:b6:02:0f:90:d5:9a:71:10:8a:f8:83:d7:b0: 5d:47:5a:f6:3a:72:5a:6f:9b:f6:1a:43:da:e1:94:09:40:d8: da:5c:23:a4:b2:66:dc:a9:b6:44:f0:b0:53:80:a6:e1:7d:b4: a1:1e:38:4c:28:56:f5:2f:bb:6e:c7:7d:c5:d1:e2:d2:db:ac: 6f:f4:ef:6c:1f:9d:5f:4b:0e:d8:e5:d9:88:0f:df:9d:28:aa: b6:5d:80:1d:22:33:0c:82:80:91:1f:94:6a:d2:e8:f2:d6:5d: ee:24:c3:06:15:c3:ec:c2:ef:e6:3c:12:b2:dd:4f:d5:b6:f4: e2:36:8f:0f:15:18:eb:23:a5:58:ff:0c:a4:07:f0:b9:73:4d: 9c:0a:5b:d1 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fqN89FbrHeUKDCe7g8XyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDE2MjM0N2JmNWNmNjkzOTY5ODc5NDYzODc4MmE4ZjcyM2FmYzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvenyv51mIl9rsAdDoi/ymqN+W/mZ Kcs7HOMy1zBUfsZlFZF+673WeZtIaojB0gAr2eRP2BWsk1B3j/GVUKjdnfXpWNxb nUXAe6tEWat/T0VE29q713jLSBkUJk6Kh7ILSpMgMW4ZfRxu44nqwUkfeZIJYIMz eX7J/ray9sjqC71K4out/+BPE1UE9qdszrcG0Ee+z0ucBRdjw+DPJlIh556+V7Af x3TgJpeo2BGEfb5j3hTyBt5HYyWQ9RHq1Do24Lvb9lDg5HhP1znXPxBdJY8727RL Mw8sE/FTQah5ydl2lUw/MHHaZdsqsIZUNiLLAwH3x92f1O1wjdp8uXrpBwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLQWI0e/XPaTlph5Rjh4Ko9yOvycMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvdEJZalI3OWM5cE9XbUhsR09IZ3FqM0k2X0p3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6qB/DQ MA0GCSqGSIb3DQEBCwUAA4IBAQBP0cFe8pUWNV2f+UvBcXQMrImQI2KmNQrhY0t6 cheooZL1KTZvyHTc/sxDHwp/IQeCNKmxcO8eXrkDR3aZjL2KfiB7DqFAqSd5ezQZ WKi1po9O9f3hMqiUzyAzXLFqmMh/1JZgAvZ0r2c2pdqmqjE4sLYCD5DVmnEQiviD 17BdR1r2OnJab5v2GkPa4ZQJQNjaXCOksmbcqbZE8LBTgKbhfbShHjhMKFb1L7tu x33F0eLS26xv9O9sH51fSw7Y5dmID9+dKKq2XYAdIjMMgoCRH5Rq0ujy1l3uJMMG FcPswu/mPBKy3U/VtvTiNo8PFRjrI6VY/wykB/C5c02cClvR -----END CERTIFICATE-----Generated at Tue Jan 6 21:32:10 2026 by rpki-client