This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/TKAcyjW-K2fMWFteP_AgVE5Sf58.roa
File: TKAcyjW-K2fMWFteP_AgVE5Sf58.roa (raw, json)
Hash identifier: EQ/0GqnYlDDezTnOJGpjIfUWvXw1RICNNg5+3Mf+uqg=
Subject key identifier: 4C:A0:1C:CA:35:BE:2B:67:CC:58:5B:5E:3F:F0:20:54:4E:52:7F:9F
Certificate issuer: /CN=2750f3d7ed825617e26be09aeccc62dda4ea314f
Certificate serial: 019B797EFCFCC6AEE1318C480A45F30DE4C5
Authority key identifier: 27:50:F3:D7:ED:82:56:17:E2:6B:E0:9A:EC:CC:62:DD:A4:EA:31:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/TKAcyjW-K2fMWFteP_AgVE5Sf58.roa
Signing time: Thu 01 Jan 2026 12:18:44 +0000
ROA not before: Thu 01 Jan 2026 12:18:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212983
IP address blocks: 2001:67c:1308::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Jan 2026 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:fc:fc:c6:ae:e1:31:8c:48:0a:45:f3:0d:e4:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2750f3d7ed825617e26be09aeccc62dda4ea314f
Validity
Not Before: Jan 1 12:18:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ca01cca35be2b67cc585b5e3ff020544e527f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d0:14:fb:7c:1b:a0:0a:67:1e:41:bf:60:3a:
46:6c:0f:60:56:8c:8b:1c:22:eb:db:0a:de:04:19:
c3:28:7e:b3:5c:c6:cf:02:85:7d:1e:25:f9:a8:21:
54:5b:30:74:0e:5b:84:92:30:c4:a7:9d:94:99:b7:
e2:eb:60:e3:1c:e5:c2:73:41:2d:37:91:f4:0c:1a:
7f:6c:61:18:00:9d:69:f1:1d:c9:66:18:e1:fb:9d:
99:a6:ce:48:36:4e:ed:4a:5e:72:23:cc:49:f8:27:
54:7b:4a:ff:12:ea:51:3e:06:98:2b:94:43:82:51:
8b:8a:14:8f:2e:ee:80:91:4c:f3:74:5c:95:25:49:
4a:d8:dd:c4:75:68:de:32:6b:17:7f:a2:16:73:97:
76:93:8c:30:3a:5b:75:03:4d:36:d3:37:9f:bf:a2:
7a:da:ae:98:8e:51:c8:8f:ba:f9:ab:2b:f4:33:ae:
95:b4:f6:ba:99:10:1e:c5:b5:09:f7:da:1f:d3:e6:
69:fa:1d:25:85:15:31:72:24:f8:21:27:64:e2:2e:
e7:bc:55:76:e0:5a:f8:06:9b:af:f0:1b:76:2a:e0:
d6:35:83:23:0c:a3:37:0c:9d:08:8f:66:fb:5d:c1:
c0:4b:a2:58:37:ec:72:62:44:1c:ad:f4:9a:42:5f:
4b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A0:1C:CA:35:BE:2B:67:CC:58:5B:5E:3F:F0:20:54:4E:52:7F:9F
X509v3 Authority Key Identifier:
keyid:27:50:F3:D7:ED:82:56:17:E2:6B:E0:9A:EC:CC:62:DD:A4:EA:31:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/TKAcyjW-K2fMWFteP_AgVE5Sf58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1308::/48
Signature Algorithm: sha256WithRSAEncryption
06:f8:3b:2d:ae:40:a2:1e:57:82:bb:af:e1:14:af:47:16:e8:
12:94:46:95:f5:ff:10:7a:82:f9:c4:09:82:22:4c:36:40:68:
56:e4:39:e4:9d:12:87:01:f8:5c:88:f1:b7:03:bd:f2:07:7a:
cd:f6:e9:65:80:a9:55:07:36:76:ba:53:ad:f9:1a:94:79:d0:
62:c7:ba:3e:58:6d:4b:3e:0e:e3:b5:49:d0:e0:42:ba:58:d9:
2a:86:0e:56:7e:f1:1e:17:82:15:f1:3d:4f:ec:55:83:31:a0:
4d:e2:74:09:31:d9:cd:64:ad:01:57:4c:c8:2e:51:76:bd:cd:
9d:c9:bb:be:3f:52:03:6f:9a:8d:6a:15:3b:51:08:18:32:45:
ea:7b:9f:87:6c:7d:10:ed:1d:5a:6e:d0:d1:3e:bf:4a:17:07:
20:5d:b7:2d:0c:c4:17:9b:2e:db:f5:7c:96:a3:77:a8:17:3a:
f2:a7:b5:08:12:0c:05:38:ff:84:bb:5d:86:1d:52:e0:20:7c:
37:6f:27:ba:28:69:16:8b:bc:75:58:5d:bd:bc:96:98:af:1a:
be:43:66:bc:a7:48:dd:63:4c:d9:55:dc:d3:20:2a:47:31:ce:
47:1c:cb:9a:c2:c5:68:11:7b:87:a8:d4:68:75:5a:df:1a:a5:
82:42:2a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 12:27:27 2026 by rpki-client