This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/TEenDXqwvrpspIY8PfVK0iT4e_A.roa File: TEenDXqwvrpspIY8PfVK0iT4e_A.roa (raw, json) Hash identifier: JuRM4nE9Tc8K5vW0sqHNXTUtlkqbDXZy8Q4zLm/IBaM= Subject key identifier: 4C:47:A7:0D:7A:B0:BE:BA:6C:A4:86:3C:3D:F5:4A:D2:24:F8:7B:F0 Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B7910BCE339720D96E2290A14F21BF1EB Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/TEenDXqwvrpspIY8PfVK0iT4e_A.roa Signing time: Thu 01 Jan 2026 10:18:18 +0000 ROA not before: Thu 01 Jan 2026 10:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215439 IP address blocks: 2a12:bec4:110::/44 maxlen: 44 2a12:bec4:1180::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:bc:e3:39:72:0d:96:e2:29:0a:14:f2:1b:f1:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c47a70d7ab0beba6ca4863c3df54ad224f87bf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4a:70:5c:a5:88:b3:f4:a7:1f:c3:24:06:d1: 16:90:3c:fe:0d:ab:ac:59:1f:64:cf:7b:6c:37:3f: 43:39:f6:dc:6a:5f:53:bb:48:4e:f1:5f:85:fd:8e: cb:20:a1:63:68:ca:46:98:42:0b:58:7b:2b:44:4c: d3:e4:b7:cb:c3:03:ea:c9:9f:fe:3f:1d:40:96:9d: bf:a0:22:d4:42:b3:5d:79:43:72:a9:a3:89:f9:d6: b4:76:11:ef:36:dc:15:7c:89:13:8b:d1:8c:0b:94: 4a:2d:85:dd:d2:88:38:4f:85:5f:45:95:08:56:bb: ae:a4:d0:3a:fa:50:1a:3c:f4:90:7d:1f:cf:3a:3b: 55:ee:b7:9a:25:ca:55:4b:ce:64:77:38:f0:18:7d: c2:e2:c5:e5:c5:a0:42:ea:87:80:19:33:60:12:c0: 68:31:77:64:17:c1:4d:6b:21:31:4a:2c:a8:be:a3: f5:b4:af:b4:0e:8c:23:ed:f8:fb:d7:05:45:66:90: e2:f1:19:56:56:08:5d:6c:ec:86:49:05:34:5f:e4: 4d:f4:47:c7:65:ac:ee:df:b3:f4:1f:44:c4:10:27: ef:f8:1b:14:cb:6e:fb:19:f8:81:74:af:4a:c6:9c: 72:dc:3f:57:a2:f1:58:9f:15:8a:79:82:21:78:ab: cd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:47:A7:0D:7A:B0:BE:BA:6C:A4:86:3C:3D:F5:4A:D2:24:F8:7B:F0 X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/TEenDXqwvrpspIY8PfVK0iT4e_A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec4:110::/44 2a12:bec4:1180::/44 Signature Algorithm: sha256WithRSAEncryption 81:e3:4d:32:47:94:05:00:2a:50:ee:e5:45:bc:b3:82:33:15: d6:7a:79:ad:5c:5d:1d:58:61:ec:fb:d1:94:e1:41:d8:b3:02: 01:33:87:18:40:76:c8:22:f7:d5:01:f7:5c:bd:8a:69:5c:9c: f9:5b:16:e6:b6:9e:67:3e:c5:39:89:0d:c6:b5:d0:b4:9d:4d: cc:76:ee:d4:dc:a4:1e:b3:4b:a1:4f:89:a5:ab:8d:8e:1b:b4: 70:65:bf:f5:8c:ec:65:af:1b:61:ed:b7:9f:79:af:a0:96:ff: 60:fc:19:cf:73:9a:75:e5:0a:68:6b:ab:3c:c5:74:e5:8b:bd: 9e:3b:b5:14:b0:d8:88:3f:08:95:82:7a:ee:5b:a1:b0:98:c2: f2:09:19:46:86:23:8e:51:c8:04:84:31:b9:96:6d:0c:fa:6a: 44:cd:58:7f:11:9c:21:e8:6d:36:0d:bf:11:d6:99:0e:81:e1: 68:2c:de:3b:15:c3:9f:2b:88:21:6a:6d:fd:c4:56:6b:45:04: b5:79:64:7d:e6:64:3f:a2:fa:a1:82:4a:3e:85:6b:e2:0e:b9: dd:e2:46:ee:c6:20:40:9a:26:7d:c3:82:a0:f0:99:10:a7:eb: 6e:87:f5:28:3a:27:aa:4f:95:f5:c6:74:ea:15:35:72:29:bb: 53:d5:65:1b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5ELzjOXINluIpChTyG/HrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzQ3YTcwZDdhYjBiZWJhNmNhNDg2M2MzZGY1NGFkMjI0Zjg3YmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUpwXKWIs/SnH8MkBtEWkDz+Daus WR9kz3tsNz9DOfbcal9Tu0hO8V+F/Y7LIKFjaMpGmEILWHsrREzT5LfLwwPqyZ/+ Px1Alp2/oCLUQrNdeUNyqaOJ+da0dhHvNtwVfIkTi9GMC5RKLYXd0og4T4VfRZUI VruupNA6+lAaPPSQfR/POjtV7reaJcpVS85kdzjwGH3C4sXlxaBC6oeAGTNgEsBo MXdkF8FNayExSiyovqP1tK+0Dowj7fj71wVFZpDi8RlWVghdbOyGSQU0X+RN9EfH Zazu37P0H0TEECfv+BsUy277GfiBdK9Kxpxy3D9XovFYnxWKeYIheKvNLwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFExHpw16sL66bKSGPD31StIk+HvwMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvVEVlbkRYcXd2cnBzcElZOFBmVkswaVQ0ZV9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKhK+xAEQ AwcEKhK+xBGAMA0GCSqGSIb3DQEBCwUAA4IBAQCB400yR5QFACpQ7uVFvLOCMxXW enmtXF0dWGHs+9GU4UHYswIBM4cYQHbIIvfVAfdcvYppXJz5Wxbmtp5nPsU5iQ3G tdC0nU3Mdu7U3KQes0uhT4mlq42OG7RwZb/1jOxlrxth7befea+glv9g/BnPc5p1 5Qpoa6s8xXTli72eO7UUsNiIPwiVgnruW6GwmMLyCRlGhiOOUcgEhDG5lm0M+mpE zVh/EZwh6G02Db8R1pkOgeFoLN47FcOfK4gham39xFZrRQS1eWR95mQ/ovqhgko+ hWviDrnd4kbuxiBAmiZ9w4Kg8JkQp+tuh/UoOieqT5X1xnTqFTVyKbtT1WUb -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:40 2026 by rpki-client