This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/TTbQ2CvLr8w8wDepE1I0x0dmnwo.roa File: TTbQ2CvLr8w8wDepE1I0x0dmnwo.roa (raw, json) Hash identifier: z03NMhbfn1K8flAyCFM5D2sBZ7e+DA2fwdI0ghPa150= Subject key identifier: 4D:36:D0:D8:2B:CB:AF:CC:3C:C0:37:A9:13:52:34:C7:47:66:9F:0A Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B7910A637A0B864CBBDF102ED4D405CD1 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/TTbQ2CvLr8w8wDepE1I0x0dmnwo.roa Signing time: Thu 01 Jan 2026 10:18:12 +0000 ROA not before: Thu 01 Jan 2026 10:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209837 IP address blocks: 2a12:bec4:1d00::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:a6:37:a0:b8:64:cb:bd:f1:02:ed:4d:40:5c:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d36d0d82bcbafcc3cc037a9135234c747669f0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d4:bb:5d:bd:e6:3a:10:3d:fd:11:6b:dc:cb: 58:b1:2c:b4:c2:e9:06:b9:47:46:20:17:62:89:91: 6f:a4:c0:c6:08:5b:4e:4a:b4:a1:84:cc:4d:70:4c: 26:89:5f:4c:9c:be:2b:05:bb:76:9f:c1:25:aa:ac: 6d:a1:7a:58:0a:d6:c8:55:66:c3:2b:89:75:cf:10: 2f:0e:6f:8b:97:c4:59:65:04:28:cb:60:5b:96:ac: 6a:c7:fd:ea:30:66:3f:4a:e8:3e:fc:20:30:ff:cc: 97:6d:c0:a6:aa:4a:53:9a:3b:3d:a8:f9:62:11:94: 9a:c2:50:f9:1e:ea:8c:f5:e8:ab:b3:93:dd:7d:a4: 7c:5a:b6:06:c0:a2:ec:ba:aa:0f:9f:eb:ec:5c:1b: 53:4c:44:90:7b:81:66:b8:43:dd:8e:72:18:79:24: 19:fa:f0:82:82:76:8f:47:41:87:91:fa:76:a5:52: fa:f6:49:a3:3e:8d:58:5e:30:14:e5:6e:bf:46:5b: 0c:4f:64:e8:c3:90:d5:9f:c2:3b:a0:b9:9a:fe:98: 78:84:33:ba:a4:c5:e0:aa:2c:5b:08:a2:67:98:85: 4d:71:b0:97:27:cd:94:1f:18:78:8d:29:8b:81:d4: 93:33:1e:75:18:0f:de:af:dd:64:d4:b2:8a:3b:10: 5f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:36:D0:D8:2B:CB:AF:CC:3C:C0:37:A9:13:52:34:C7:47:66:9F:0A X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/TTbQ2CvLr8w8wDepE1I0x0dmnwo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec4:1d00::/44 Signature Algorithm: sha256WithRSAEncryption 3c:47:90:b8:64:67:3c:51:27:1f:96:64:7b:b5:a2:95:40:30: 39:f7:1b:59:3c:22:b0:28:81:9b:c5:0c:50:a9:99:d5:0c:8d: 0f:e2:c4:93:2a:55:e9:92:8d:b3:69:5c:86:ac:53:be:25:42: 15:05:0a:21:25:3a:96:46:c0:35:50:98:39:4a:0e:d8:44:6e: 39:d7:a9:d9:6b:19:40:57:1a:5d:98:70:87:79:40:82:16:ca: f7:93:74:90:c0:f6:ad:62:d8:af:26:13:bb:7f:1c:6a:7f:c5: bf:ff:df:41:ce:fe:13:e5:3b:65:cd:af:aa:a0:e2:72:4f:b6: 41:45:50:96:83:56:2d:03:c7:e6:14:c8:ec:6c:bf:bf:ed:f8: 08:81:bd:bd:12:04:75:38:0c:3d:b4:a9:31:c6:8f:0b:14:35: ff:b8:cb:e1:1f:e9:c3:26:96:bd:9b:2c:a5:18:06:fc:d7:a2: f6:ad:17:fa:05:2f:a8:88:eb:b8:76:95:d9:f0:e8:07:0e:49: fe:67:8d:9c:24:43:1d:39:cb:9e:dd:ac:ef:5d:79:1d:2e:9e: 8a:5b:48:12:e9:23:2d:be:79:10:54:bd:2d:3a:86:2c:fc:be: 5a:60:d3:c7:1a:fe:6e:25:fd:3e:94:4d:d4:52:c4:85:42:3b: 38:50:48:0a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EKY3oLhky73xAu1NQFzRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDM2ZDBkODJiY2JhZmNjM2NjMDM3YTkxMzUyMzRjNzQ3NjY5ZjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNS7Xb3mOhA9/RFr3MtYsSy0wukG uUdGIBdiiZFvpMDGCFtOSrShhMxNcEwmiV9MnL4rBbt2n8ElqqxtoXpYCtbIVWbD K4l1zxAvDm+Ll8RZZQQoy2Bblqxqx/3qMGY/Sug+/CAw/8yXbcCmqkpTmjs9qPli EZSawlD5HuqM9eirs5PdfaR8WrYGwKLsuqoPn+vsXBtTTESQe4FmuEPdjnIYeSQZ +vCCgnaPR0GHkfp2pVL69kmjPo1YXjAU5W6/RlsMT2Tow5DVn8I7oLma/ph4hDO6 pMXgqixbCKJnmIVNcbCXJ82UHxh4jSmLgdSTMx51GA/er91k1LKKOxBf0QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFE020Ngry6/MPMA3qRNSNMdHZp8KMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvVFRiUTJDdkxyOHc4d0RlcEUxSTB4MGRtbndvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+xB0A MA0GCSqGSIb3DQEBCwUAA4IBAQA8R5C4ZGc8UScflmR7taKVQDA59xtZPCKwKIGb xQxQqZnVDI0P4sSTKlXpko2zaVyGrFO+JUIVBQohJTqWRsA1UJg5Sg7YRG4516nZ axlAVxpdmHCHeUCCFsr3k3SQwPatYtivJhO7fxxqf8W//99Bzv4T5Ttlza+qoOJy T7ZBRVCWg1YtA8fmFMjsbL+/7fgIgb29EgR1OAw9tKkxxo8LFDX/uMvhH+nDJpa9 myylGAb816L2rRf6BS+oiOu4dpXZ8OgHDkn+Z42cJEMdOcue3azvXXkdLp6KW0gS 6SMtvnkQVL0tOoYs/L5aYNPHGv5uJf0+lE3UUsSFQjs4UEgK -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:54 2026 by rpki-client