This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/trtlnARNU9GgYjNsg0NOVlqMz0s.roa
File: trtlnARNU9GgYjNsg0NOVlqMz0s.roa (raw, json)
Hash identifier: oIMDX6qf+vcOR+FsuwuvFIF1QJtf1WzL/kP1bXEC8h0=
Subject key identifier: B6:BB:65:9C:04:4D:53:D1:A0:62:33:6C:83:43:4E:56:5A:8C:CF:4B
Certificate issuer: /CN=fdad61d8e8c1abda8596930e21f18211a517681f
Certificate serial: 019B77C6E5936A6D24D01616C5812CB66150
Authority key identifier: FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/trtlnARNU9GgYjNsg0NOVlqMz0s.roa
Signing time: Thu 01 Jan 2026 04:18:02 +0000
ROA not before: Thu 01 Jan 2026 04:18:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199072
IP address blocks: 5.61.15.0/24 maxlen: 24
2a00:9801:e001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Feb 2026 01:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:e5:93:6a:6d:24:d0:16:16:c5:81:2c:b6:61:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdad61d8e8c1abda8596930e21f18211a517681f
Validity
Not Before: Jan 1 04:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b6bb659c044d53d1a062336c83434e565a8ccf4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:69:ae:61:60:35:f4:53:fa:e9:af:ac:68:7d:
a3:a6:41:2a:e4:8d:ad:cc:b1:a8:d9:dd:13:1a:23:
14:54:c1:ea:4e:dd:4a:ef:fe:72:8d:a7:f2:6b:40:
8e:30:c8:93:d7:a2:84:59:31:0a:04:ef:bf:a3:76:
d7:29:a9:29:8a:5d:fd:a5:c0:45:9d:28:1b:bc:9d:
fe:f2:a8:c8:fa:f4:f7:aa:52:f8:9f:68:ef:8b:07:
00:49:f6:73:f5:6d:9d:0f:cd:83:6f:fa:21:70:0e:
2d:4b:f7:52:c2:77:42:19:9e:5a:69:e7:68:a7:67:
b0:f0:a9:ef:aa:e3:e5:78:86:f7:13:4e:f7:b2:f6:
0f:6b:96:20:aa:0d:c0:81:33:5d:22:9d:a9:f4:1f:
ab:03:bb:12:71:c1:a7:68:b4:9a:28:1a:c1:83:54:
fc:48:32:71:04:b9:fd:08:67:86:c2:f3:52:7a:c3:
be:00:7a:ab:8d:47:d9:a4:c7:65:12:53:5b:e8:93:
0b:f4:0a:9e:d1:90:58:17:6a:98:2b:96:98:09:ec:
a7:d3:26:c0:ce:e0:12:ae:51:de:4c:d8:72:07:48:
3e:1b:e6:08:82:c3:2f:dc:6d:c9:4e:8a:b6:2a:65:
2b:2e:b4:85:65:39:2c:33:68:f3:f2:03:ed:71:5e:
0a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:BB:65:9C:04:4D:53:D1:A0:62:33:6C:83:43:4E:56:5A:8C:CF:4B
X509v3 Authority Key Identifier:
keyid:FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/trtlnARNU9GgYjNsg0NOVlqMz0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.15.0/24
IPv6:
2a00:9801:e001::/48
Signature Algorithm: sha256WithRSAEncryption
3c:c2:1f:03:97:3b:43:e7:6c:92:39:ed:f7:09:22:3e:78:a9:
20:84:8e:0c:a7:73:6f:61:80:b1:3f:7b:31:2c:c0:d6:7c:b7:
d0:d0:ce:b0:a3:8f:1d:f2:f3:58:7b:d5:e8:7d:07:de:ec:2f:
85:5d:65:65:80:d7:57:73:a0:0b:fb:ce:f6:31:a0:4b:51:00:
cb:a9:4c:7e:a5:04:75:a9:d9:3e:f1:29:26:f7:e7:c6:06:42:
34:3a:9b:6b:31:15:51:1f:d0:40:45:9b:7e:11:03:68:71:45:
58:90:63:34:d6:46:40:4c:1c:88:fc:1f:55:6e:9b:8e:78:48:
f4:61:1c:4c:60:e4:72:6b:19:80:06:84:36:9c:6b:7d:26:91:
90:64:66:b8:5d:81:41:e2:54:6f:38:18:05:c2:3f:87:dc:cb:
96:fb:e7:02:8c:59:40:b4:29:70:ad:29:7d:4a:a1:37:c5:b5:
a0:4b:a9:d7:0e:83:0b:14:f9:4e:fe:b7:37:b9:0e:49:64:af:
76:5e:4c:a5:8c:91:95:94:59:5e:68:0e:5e:eb:c8:83:ce:dd:
07:da:36:94:3c:20:81:76:d4:a5:d7:94:31:42:06:d6:dd:03:
53:03:82:ff:66:46:09:27:53:a4:68:e2:96:09:bc:81:91:d1:
78:59:60:2a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZt3xuWTam0k0BYWxYEstmFQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkYWQ2MWQ4ZThjMWFiZGE4NTk2OTMwZTIxZjE4MjExYTUx
NzY4MWYwHhcNMjYwMTAxMDQxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNmJiNjU5YzA0NGQ1M2QxYTA2MjMzNmM4MzQzNGU1NjVhOGNjZjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9WmuYWA19FP66a+saH2jpkEq5I2t
zLGo2d0TGiMUVMHqTt1K7/5yjafya0COMMiT16KEWTEKBO+/o3bXKakpil39pcBF
nSgbvJ3+8qjI+vT3qlL4n2jviwcASfZz9W2dD82Db/ohcA4tS/dSwndCGZ5aaedo
p2ew8KnvquPleIb3E073svYPa5Ygqg3AgTNdIp2p9B+rA7sSccGnaLSaKBrBg1T8
SDJxBLn9CGeGwvNSesO+AHqrjUfZpMdlElNb6JML9Aqe0ZBYF2qYK5aYCeyn0ybA
zuASrlHeTNhyB0g+G+YIgsMv3G3JToq2KmUrLrSFZTksM2jz8gPtcV4KvwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLa7ZZwETVPRoGIzbINDTlZajM9LMB8GA1UdIwQY
MBaAFP2tYdjowavahZaTDiHxghGlF2gfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2ExaDJPakJxOXFGbHBNT0lmR0NFYVVYYUI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9hNDZjODYtNGIwOC00ODJiLTkyY2Et
ODRlZTIyYTNlZTViLzEvdHJ0bG5BUk5VOUdnWWpOc2cwTk9WbHFNejBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9hNDZjODYtNGIwOC00ODJiLTkyY2EtODRlZTIyYTNlZTVi
LzEvX2ExaDJPakJxOXFGbHBNT0lmR0NFYVVYYUI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQABT0PMA8E
AgACMAkDBwAqAJgB4AEwDQYJKoZIhvcNAQELBQADggEBADzCHwOXO0PnbJI57fcJ
Ij54qSCEjgync29hgLE/ezEswNZ8t9DQzrCjjx3y81h71eh9B97sL4VdZWWA11dz
oAv7zvYxoEtRAMupTH6lBHWp2T7xKSb358YGQjQ6m2sxFVEf0EBFm34RA2hxRViQ
YzTWRkBMHIj8H1Vum454SPRhHExg5HJrGYAGhDaca30mkZBkZrhdgUHiVG84GAXC
P4fcy5b75wKMWUC0KXCtKX1KoTfFtaBLqdcOgwsU+U7+tze5Dklkr3ZeTKWMkZWU
WV5oDl7ryIPO3QfaNpQ8IIF21KXXlDFCBtbdA1MDgv9mRgknU6Ro4pYJvIGR0XhZ
YCo=
-----END CERTIFICATE-----
Generated at Mon Feb 2 09:39:55 2026 by rpki-client