This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/TaaTxOqOYo71_dtRkH-amK7esOE.roa File: TaaTxOqOYo71_dtRkH-amK7esOE.roa (raw, json) Hash identifier: e/2/DYkJcoVk1IG8rZ2rHcN4XZOBUcKeSPsvi2g4mjc= Subject key identifier: 4D:A6:93:C4:EA:8E:62:8E:F5:FD:DB:51:90:7F:9A:98:AE:DE:B0:E1 Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a Certificate serial: 019B77C742FDEDC6DFBA1BC2FBC09FA52497 Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/TaaTxOqOYo71_dtRkH-amK7esOE.roa Signing time: Thu 01 Jan 2026 04:18:25 +0000 ROA not before: Thu 01 Jan 2026 04:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60915 IP address blocks: 62.76.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:42:fd:ed:c6:df:ba:1b:c2:fb:c0:9f:a5:24:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a Validity Not Before: Jan 1 04:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4da693c4ea8e628ef5fddb51907f9a98aedeb0e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:27:ea:6c:df:1c:ef:1a:30:7b:cb:37:fd:28: db:16:34:a0:1b:09:04:ef:98:50:f3:47:57:f6:9d: a0:62:57:f4:89:dd:52:2b:64:e9:73:95:38:0c:a9: 73:ff:43:8b:72:ad:09:2c:95:aa:5c:a1:ff:e2:e9: 0c:d6:53:2b:48:e6:18:65:a1:fa:c6:5d:aa:3e:38: 6d:fa:2b:4c:86:9b:b9:6b:60:0c:5a:b8:42:2a:52: 71:32:9c:a4:ec:ee:2e:6a:3d:21:34:79:ea:88:a8: a5:94:9b:a6:78:18:62:47:2a:67:08:42:dc:65:f4: e1:a1:2b:86:cd:14:b4:ad:c1:3e:60:0a:eb:06:f2: 56:3d:82:21:12:5b:e0:74:1e:68:2f:1c:85:13:89: 3c:52:a6:29:04:5a:09:99:74:25:21:70:cb:b9:93: e4:e7:9b:f9:31:a7:46:d1:c6:b7:91:53:c2:43:0a: fa:1b:c9:55:69:a6:fb:83:03:e7:15:b3:dc:a0:23: c6:f5:29:69:71:9f:54:bd:f8:3b:99:61:da:79:df: 24:d3:4b:32:de:5f:ab:76:07:21:49:78:b7:08:1c: ff:9a:85:cf:30:d9:28:56:3a:fe:6b:73:7d:cb:e3: 25:fb:03:4a:11:9d:54:7e:a1:27:15:59:ef:fa:c0: 6f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A6:93:C4:EA:8E:62:8E:F5:FD:DB:51:90:7F:9A:98:AE:DE:B0:E1 X509v3 Authority Key Identifier: keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/TaaTxOqOYo71_dtRkH-amK7esOE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.76.9.0/24 Signature Algorithm: sha256WithRSAEncryption 11:90:4b:e6:e9:4e:08:49:cd:c4:c5:60:9f:35:9f:ab:61:7c: ba:da:93:7a:e0:01:59:8f:eb:08:c2:05:62:85:19:c3:2b:94: 99:09:07:5e:57:35:9f:d7:3d:b7:5b:20:cf:8c:ee:79:3c:85: 68:9f:eb:16:d3:66:5d:b0:b2:84:30:4a:ac:da:22:41:8e:85: e1:98:75:8d:af:54:46:f8:bb:d7:98:db:7b:10:36:83:14:95: 3f:ad:b1:2a:a7:5f:64:de:7b:23:a9:d6:72:c5:d7:0d:99:3c: 67:8c:76:d0:ab:8a:74:d2:a2:01:85:a5:15:c8:ba:aa:2c:bb: ec:71:13:2a:0e:c5:eb:2a:a7:17:3b:79:a6:0d:9a:02:3f:68: 33:0e:84:c5:a7:54:a0:fa:d7:73:28:60:6f:06:77:ff:99:98: ae:99:2b:85:e3:15:4a:a0:26:d4:1c:f5:16:a0:15:49:29:25: 76:6c:21:3d:d4:8d:53:d0:7e:85:24:b2:d6:f6:c1:c0:5c:d5: d7:90:c4:56:1b:5b:ef:a4:5a:92:52:a4:30:96:f0:13:30:af: 2d:7f:4d:a0:67:ec:cf:60:90:2d:1d:dc:8f:e8:d9:1e:8e:b4: ba:b8:b6:85:c7:17:fe:86:fc:71:59:21:33:5c:a9:36:a5:81: c9:bc:66:74 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x0L97cbfuhvC+8CfpSSXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx NjQ2NGEwHhcNMjYwMTAxMDQxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZGE2OTNjNGVhOGU2MjhlZjVmZGRiNTE5MDdmOWE5OGFlZGViMGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuifqbN8c7xowe8s3/SjbFjSgGwkE 75hQ80dX9p2gYlf0id1SK2Tpc5U4DKlz/0OLcq0JLJWqXKH/4ukM1lMrSOYYZaH6 xl2qPjht+itMhpu5a2AMWrhCKlJxMpyk7O4uaj0hNHnqiKillJumeBhiRypnCELc ZfThoSuGzRS0rcE+YArrBvJWPYIhElvgdB5oLxyFE4k8UqYpBFoJmXQlIXDLuZPk 55v5MadG0ca3kVPCQwr6G8lVaab7gwPnFbPcoCPG9SlpcZ9Uvfg7mWHaed8k00sy 3l+rdgchSXi3CBz/moXPMNkoVjr+a3N9y+Ml+wNKEZ1UfqEnFVnv+sBv2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE2mk8TqjmKO9f3bUZB/mpiu3rDhMB8GA1UdIwQY MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt OWU5YTFlMDM3MzhlLzEvVGFhVHhPcU9ZbzcxX2R0UmtILWFtSzdlc09FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQtOWU5YTFlMDM3Mzhl LzEvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPkwJMA0G CSqGSIb3DQEBCwUAA4IBAQARkEvm6U4ISc3ExWCfNZ+rYXy62pN64AFZj+sIwgVi hRnDK5SZCQdeVzWf1z23WyDPjO55PIVon+sW02ZdsLKEMEqs2iJBjoXhmHWNr1RG +LvXmNt7EDaDFJU/rbEqp19k3nsjqdZyxdcNmTxnjHbQq4p00qIBhaUVyLqqLLvs cRMqDsXrKqcXO3mmDZoCP2gzDoTFp1Sg+tdzKGBvBnf/mZiumSuF4xVKoCbUHPUW oBVJKSV2bCE91I1T0H6FJLLW9sHAXNXXkMRWG1vvpFqSUqQwlvATMK8tf02gZ+zP YJAtHdyP6NkejrS6uLaFxxf+hvxxWSEzXKk2pYHJvGZ0 -----END CERTIFICATE-----Generated at Sun Jan 25 21:16:01 2026 by rpki-client