This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/TfZFrzK1yvAsMz3ztywJ_6gCqLc.roa File: TfZFrzK1yvAsMz3ztywJ_6gCqLc.roa (raw, json) Hash identifier: +w2T+PAUOSlTJaGaLYfovVSRKJN0mzb4LrDgaUpxdyM= Subject key identifier: 4D:F6:45:AF:32:B5:CA:F0:2C:33:3D:F3:B7:2C:09:FF:A8:02:A8:B7 Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Certificate serial: 019B7EA757542F1771890F6C6CDCB83EE835 Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/TfZFrzK1yvAsMz3ztywJ_6gCqLc.roa Signing time: Fri 02 Jan 2026 12:20:54 +0000 ROA not before: Fri 02 Jan 2026 12:20:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206633 IP address blocks: 2a06:e881:108::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:57:54:2f:17:71:89:0f:6c:6c:dc:b8:3e:e8:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Validity Not Before: Jan 2 12:20:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4df645af32b5caf02c333df3b72c09ffa802a8b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:22:41:18:e0:cc:84:44:24:53:7f:43:66:58: 71:33:74:71:fd:a8:0e:9f:65:cd:8d:7a:cb:6b:86: d7:12:eb:27:20:d5:a3:7c:7c:b0:cb:6b:1c:61:17: d0:db:3e:e4:a3:12:71:7d:02:e4:f1:e9:26:e5:a0: 7a:48:11:54:74:eb:bb:f7:4a:8c:41:50:d0:b1:d8: a8:f5:d2:45:ec:41:7c:61:e2:fd:30:08:fc:3b:06: fb:28:d4:06:97:5d:ff:bc:4f:7a:cd:aa:f4:5d:a3: 3a:6c:60:c6:75:52:79:7c:2e:f6:93:e1:37:25:53: 7f:0e:b9:53:79:36:c9:5b:44:3f:36:e7:db:ef:ae: b2:f6:00:d9:91:76:23:08:bb:34:06:31:c5:8f:b7: c2:8a:51:e9:99:93:c9:c5:54:9f:58:7a:0d:80:80: 74:e8:3e:02:a1:96:b1:05:e4:b7:1d:e5:74:97:ce: 80:85:db:82:03:b5:20:da:66:d1:8d:af:44:c9:e6: c1:16:4a:ba:c5:68:00:d0:f4:bb:40:c2:e3:14:d3: cf:a6:01:c9:1c:8b:94:8a:e3:27:95:aa:3e:ff:8e: c4:d9:91:72:74:93:e5:37:64:8e:ec:99:27:ec:13: 62:8e:ab:c4:88:ef:f8:6c:1a:dd:c0:45:c1:6a:19: 63:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F6:45:AF:32:B5:CA:F0:2C:33:3D:F3:B7:2C:09:FF:A8:02:A8:B7 X509v3 Authority Key Identifier: keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/TfZFrzK1yvAsMz3ztywJ_6gCqLc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:e881:108::/48 Signature Algorithm: sha256WithRSAEncryption 8b:5c:b6:d0:f5:ff:29:04:15:fe:29:10:9c:f2:95:e0:3e:90: 6d:fe:72:c3:e4:23:d7:e0:00:eb:fc:ba:73:e8:cc:1c:3a:45: 32:c5:00:93:32:c4:dd:06:c9:5a:84:45:18:86:3b:0b:0f:96: cf:d3:73:49:02:92:8b:e8:6b:96:13:66:9b:be:50:2c:2a:5e: e2:82:8b:3e:a6:0d:ce:e4:f7:20:4f:e4:55:00:87:03:68:17: 70:28:30:c2:d3:06:85:00:17:10:23:c7:28:5c:4b:c2:06:79: 30:97:3b:5e:42:0b:a0:93:23:56:8b:91:90:cc:e7:20:2d:fb: af:d6:30:47:18:3b:37:3e:bf:01:2a:80:ee:f6:89:c8:68:36: 3b:a9:7f:48:a5:9e:0f:5c:14:0a:fe:71:4c:9d:e3:2a:ed:31: 1f:0c:8f:d8:a3:87:e2:29:4b:7b:f7:75:ce:fc:fa:00:a9:b2: 8f:43:52:dc:92:b2:6a:0c:ba:5d:f5:2f:ef:e8:e8:92:79:0d: 3f:23:4f:ae:76:ce:9e:e0:b9:af:77:44:15:dd:b6:3e:bf:8a: e4:6b:79:3c:40:e2:36:ec:64:1a:76:bd:bb:0e:04:36:bf:d9: 36:c4:55:d9:9b:de:0e:26:ed:13:d4:ab:3a:a0:d1:66:df:34: 9d:19:dc:c5 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+p1dULxdxiQ9sbNy4Pug1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl ZDc5NTQwHhcNMjYwMTAyMTIyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZGY2NDVhZjMyYjVjYWYwMmMzMzNkZjNiNzJjMDlmZmE4MDJhOGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CJBGODMhEQkU39DZlhxM3Rx/agO n2XNjXrLa4bXEusnINWjfHywy2scYRfQ2z7koxJxfQLk8ekm5aB6SBFUdOu790qM QVDQsdio9dJF7EF8YeL9MAj8Owb7KNQGl13/vE96zar0XaM6bGDGdVJ5fC72k+E3 JVN/DrlTeTbJW0Q/Nufb766y9gDZkXYjCLs0BjHFj7fCilHpmZPJxVSfWHoNgIB0 6D4CoZaxBeS3HeV0l86AhduCA7Ug2mbRja9EyebBFkq6xWgA0PS7QMLjFNPPpgHJ HIuUiuMnlao+/47E2ZFydJPlN2SO7Jkn7BNijqvEiO/4bBrdwEXBahljnwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFE32Ra8ytcrwLDM987csCf+oAqi3MB8GA1UdIwQY MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt M2Q5MWVkZTViMmIxLzEvVGZaRnJ6SzF5dkFzTXozenR5d0pfNmdDcUxjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgbogQEI MA0GCSqGSIb3DQEBCwUAA4IBAQCLXLbQ9f8pBBX+KRCc8pXgPpBt/nLD5CPX4ADr /Lpz6MwcOkUyxQCTMsTdBslahEUYhjsLD5bP03NJApKL6GuWE2abvlAsKl7igos+ pg3O5PcgT+RVAIcDaBdwKDDC0waFABcQI8coXEvCBnkwlzteQgugkyNWi5GQzOcg Lfuv1jBHGDs3Pr8BKoDu9onIaDY7qX9IpZ4PXBQK/nFMneMq7TEfDI/Yo4fiKUt7 93XO/PoAqbKPQ1LckrJqDLpd9S/v6OiSeQ0/I0+uds6e4Lmvd0QV3bY+v4rka3k8 QOI27GQadr27DgQ2v9k2xFXZm94OJu0T1Ks6oNFm3zSdGdzF -----END CERTIFICATE-----Generated at Tue Jan 20 22:47:29 2026 by rpki-client