This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/tRoGLV6kqtFOO61B8qddTfKOws0.roa File: tRoGLV6kqtFOO61B8qddTfKOws0.roa (raw, json) Hash identifier: 3yRHA+D+/Gs8ViIUf+WQc7gA/NiUtuvA1y3ObEm0zAc= Subject key identifier: B5:1A:06:2D:5E:A4:AA:D1:4E:3B:AD:41:F2:A7:5D:4D:F2:8E:C2:CD Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797E9B26DF6D7BC490A80107015A4E6E Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/tRoGLV6kqtFOO61B8qddTfKOws0.roa Signing time: Thu 01 Jan 2026 12:18:18 +0000 ROA not before: Thu 01 Jan 2026 12:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 2a0e:aa02::/40 maxlen: 40 2a0e:aa06:52a::/48 maxlen: 48 2a0e:aa07:f0d0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:9b:26:df:6d:7b:c4:90:a8:01:07:01:5a:4e:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b51a062d5ea4aad14e3bad41f2a75d4df28ec2cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b0:7c:72:d5:c4:b2:b3:78:79:da:5c:a5:ad: 93:4b:a7:df:9f:50:bb:ee:8f:92:3e:40:c4:96:66: 95:e6:d5:82:8b:1c:d0:ae:3f:1c:ef:ba:8f:3e:29: db:ef:e2:e5:1c:6d:cc:15:79:a2:ae:de:ab:7f:b6: 3a:42:16:ef:0a:6d:b9:c1:32:14:6d:01:49:9b:f2: d1:29:ba:8e:2d:4e:89:a1:ed:4a:40:6e:d0:d5:d3: b1:ed:6a:fe:e2:2f:d7:c7:58:6c:ec:c1:67:6b:4a: 75:3b:66:ad:c8:ee:58:07:17:3a:6e:5b:dd:71:da: 9c:bd:81:0a:34:85:3d:2a:5a:5d:8e:10:12:1a:b9: fe:78:53:1c:3b:d1:2c:87:61:4e:ad:95:b0:fa:33: a2:08:60:2c:c3:21:75:cb:e2:f3:f7:c7:1e:14:7d: 55:94:cf:73:87:63:c9:54:96:b1:9e:eb:29:b7:a4: d0:22:33:9a:a9:81:9b:bf:d4:72:87:8c:4d:2d:fa: 67:f9:95:2f:0e:53:06:81:13:6b:fa:a7:57:13:3e: 14:00:33:93:db:6a:48:33:f1:bd:6a:b9:68:5b:37: 95:a2:ec:1e:c1:9d:92:a0:06:d4:06:ec:73:e8:0f: 1a:c4:86:6a:db:61:aa:d0:87:e2:fc:20:f1:c5:ee: d8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:1A:06:2D:5E:A4:AA:D1:4E:3B:AD:41:F2:A7:5D:4D:F2:8E:C2:CD X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/tRoGLV6kqtFOO61B8qddTfKOws0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa02::/40 2a0e:aa06:52a::/48 2a0e:aa07:f0d0::/44 Signature Algorithm: sha256WithRSAEncryption 75:87:91:1c:86:cd:f3:05:a2:7c:24:26:6e:39:9a:79:20:18: d8:c2:4b:2d:00:e0:fe:77:3d:d4:8e:77:54:3b:64:08:a1:b1: cd:9b:6b:34:a1:c9:3a:b3:a2:46:3c:42:8e:24:8e:d6:3b:6b: 2e:96:a3:ec:75:15:73:4d:c9:7e:2d:c6:f4:f3:0c:3a:42:ec: cf:da:f7:f3:41:5e:19:31:fb:03:b2:34:a5:4d:39:cb:cf:b7: a2:62:92:ce:2e:c2:43:84:e1:30:20:92:db:72:bf:ff:35:e0: 59:cd:a7:1c:a4:b7:ac:91:be:57:b3:b7:f4:f6:d1:92:4e:3d: fe:39:be:07:b5:5d:e8:98:0c:34:5d:ba:b2:df:3e:72:98:1c: df:7f:a1:73:20:3b:7c:df:2d:5c:71:50:d8:d8:4a:f0:fa:fd: db:e5:c6:46:92:ea:c7:16:a2:f8:77:37:e9:40:da:80:25:da: a2:f4:de:aa:6a:4c:2b:fe:46:25:c8:70:0e:e1:ca:58:61:68: 2b:df:98:4e:09:4c:d1:88:ec:63:c7:2f:bc:c1:16:00:f5:3f: 26:8f:d4:98:36:0f:21:e1:47:08:92:03:7c:31:98:c3:3e:4c: 12:9c:94:80:9f:dc:db:db:05:f6:e2:d3:52:87:93:02:29:fb: 8f:56:7e:69 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt5fpsm3217xJCoAQcBWk5uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTFhMDYyZDVlYTRhYWQxNGUzYmFkNDFmMmE3NWQ0ZGYyOGVjMmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLB8ctXEsrN4edpcpa2TS6ffn1C7 7o+SPkDElmaV5tWCixzQrj8c77qPPinb7+LlHG3MFXmirt6rf7Y6QhbvCm25wTIU bQFJm/LRKbqOLU6Joe1KQG7Q1dOx7Wr+4i/Xx1hs7MFna0p1O2atyO5YBxc6blvd cdqcvYEKNIU9KlpdjhASGrn+eFMcO9Esh2FOrZWw+jOiCGAswyF1y+Lz98ceFH1V lM9zh2PJVJaxnuspt6TQIjOaqYGbv9Ryh4xNLfpn+ZUvDlMGgRNr+qdXEz4UADOT 22pIM/G9arloWzeVouwewZ2SoAbUBuxz6A8axIZq22Gq0Ifi/CDxxe7YNQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFLUaBi1epKrRTjutQfKnXU3yjsLNMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvdFJvR0xWNmtxdEZPTzYxQjhxZGRUZktPd3MwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAAjAaAwYAKg6qAgAD BwAqDqoGBSoDBwQqDqoH8NAwDQYJKoZIhvcNAQELBQADggEBAHWHkRyGzfMFonwk Jm45mnkgGNjCSy0A4P53PdSOd1Q7ZAihsc2bazShyTqzokY8Qo4kjtY7ay6Wo+x1 FXNNyX4txvTzDDpC7M/a9/NBXhkx+wOyNKVNOcvPt6Jiks4uwkOE4TAgkttyv/81 4FnNpxykt6yRvlezt/T20ZJOPf45vge1XeiYDDRdurLfPnKYHN9/oXMgO3zfLVxx UNjYSvD6/dvlxkaS6scWovh3N+lA2oAl2qL03qpqTCv+RiXIcA7hylhhaCvfmE4J TNGI7GPHL7zBFgD1PyaP1Jg2DyHhRwiSA3wxmMM+TBKclICf3NvbBfbi01KHkwIp +49Wfmk= -----END CERTIFICATE-----Generated at Tue Jan 6 21:31:59 2026 by rpki-client