This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/Tthj6IAisEXh8B7T83zOvQFpSgE.roa File: Tthj6IAisEXh8B7T83zOvQFpSgE.roa (raw, json) Hash identifier: swp/iMSfoovOUEacEZNjOCFIiISihBeFVFi87XAxBPg= Subject key identifier: 4E:D8:63:E8:80:22:B0:45:E1:F0:1E:D3:F3:7C:CE:BD:01:69:4A:01 Certificate issuer: /CN=65f0120ee3b6f0f8db52d0db81c01e4447d8e4ba Certificate serial: 019B797DD87F777609031F90D3555AD374D4 Authority key identifier: 65:F0:12:0E:E3:B6:F0:F8:DB:52:D0:DB:81:C0:1E:44:47:D8:E4:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZfASDuO28PjbUtDbgcAeREfY5Lo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/Tthj6IAisEXh8B7T83zOvQFpSgE.roa Signing time: Thu 01 Jan 2026 12:17:29 +0000 ROA not before: Thu 01 Jan 2026 12:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34784 IP address blocks: 80.81.208.0/20 maxlen: 20 2a02:698::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft rsync://rpki.ripe.net/repository/DEFAULT/ZfASDuO28PjbUtDbgcAeREfY5Lo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:d8:7f:77:76:09:03:1f:90:d3:55:5a:d3:74:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65f0120ee3b6f0f8db52d0db81c01e4447d8e4ba Validity Not Before: Jan 1 12:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ed863e88022b045e1f01ed3f37ccebd01694a01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8a:e7:28:6b:bd:34:b2:c2:98:48:f4:7a:45: b6:64:10:6e:9e:5a:28:69:22:de:d3:d1:96:e7:02: a9:74:b4:a3:26:5f:5e:c9:d3:c0:41:e6:f2:a8:70: 0a:07:ab:63:8d:1a:78:2e:33:cd:34:de:f0:97:14: e8:a3:57:0a:dc:bb:d9:20:53:fb:5a:cd:b2:77:f5: ad:c9:67:1d:24:65:20:4c:f7:de:10:b4:97:4d:d3: 8c:04:35:1a:fa:81:f2:5c:33:d6:3d:8a:8f:dd:39: a2:5a:4d:d2:e0:a4:e9:25:05:fa:35:30:d4:5d:23: 0c:7e:12:0b:e3:2f:bd:24:0c:f2:76:99:07:fa:95: d0:5c:5c:70:82:ef:9e:a4:ed:33:4d:7b:45:ca:8c: 1c:c6:de:c6:46:df:7c:8a:50:b2:1e:3d:11:17:23: 72:82:8b:92:ff:b0:97:1c:54:a1:96:96:24:4d:17: 12:8c:29:51:89:ef:00:8b:42:63:73:8b:d5:9e:57: cd:ae:93:06:d1:71:c5:30:a5:90:79:cd:8e:6c:30: f6:3f:e2:79:b7:94:3d:11:6d:89:07:75:52:13:02: 50:e0:39:c5:76:1d:bf:b7:8d:a7:7f:52:ff:18:ec: e0:52:45:62:d6:6a:a4:5f:f1:51:cc:b2:67:2e:d5: 49:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:D8:63:E8:80:22:B0:45:E1:F0:1E:D3:F3:7C:CE:BD:01:69:4A:01 X509v3 Authority Key Identifier: keyid:65:F0:12:0E:E3:B6:F0:F8:DB:52:D0:DB:81:C0:1E:44:47:D8:E4:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZfASDuO28PjbUtDbgcAeREfY5Lo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/Tthj6IAisEXh8B7T83zOvQFpSgE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.81.208.0/20 IPv6: 2a02:698::/32 Signature Algorithm: sha256WithRSAEncryption 28:a5:ac:0d:85:1f:19:fd:11:70:3e:c1:96:c2:80:6c:c6:6e: fc:c8:ab:5a:29:fd:27:8f:99:c5:49:ef:f8:1a:12:34:fa:c1: 1d:29:6c:e1:d3:62:56:1a:fc:b7:56:15:a8:ce:5e:b0:81:d6: b2:cc:19:bc:3b:e6:d3:cf:56:9b:d3:ed:5f:1e:d9:00:7a:90: 14:c8:fa:38:6a:ac:9c:2a:e3:7f:10:de:a6:d6:6a:2a:53:a8: 28:6c:67:9e:c1:93:ee:af:1d:58:19:f4:f7:bf:e8:30:4d:0e: dc:cb:2a:6f:0f:cd:fe:6e:b6:e4:fc:0f:db:5b:16:0a:e1:5e: b1:2b:84:e8:4b:aa:19:e0:0b:72:30:ef:32:7d:cb:d1:64:69: ab:22:2d:6a:98:86:de:94:9e:3c:39:05:27:63:dc:3c:b0:8b: fa:5c:2e:61:02:2a:fa:ad:eb:4b:48:d1:da:8b:f0:72:24:e9: 24:0c:66:42:bf:04:ae:d4:65:f4:b4:08:02:54:6e:8e:bf:de: 42:1f:51:0f:b7:5a:55:e3:44:08:a9:7b:87:44:fd:53:41:1f: 36:bb:df:79:62:58:58:a5:55:b3:23:df:46:e0:9b:91:6b:4d: c8:01:f0:48:c2:53:ec:89:79:b1:e6:a8:e7:59:33:d2:5e:e1: 1f:40:5c:09 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5fdh/d3YJAx+Q01Va03TUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ZjAxMjBlZTNiNmYwZjhkYjUyZDBkYjgxYzAxZTQ0NDdk OGU0YmEwHhcNMjYwMTAxMTIxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZWQ4NjNlODgwMjJiMDQ1ZTFmMDFlZDNmMzdjY2ViZDAxNjk0YTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4rnKGu9NLLCmEj0ekW2ZBBunloo aSLe09GW5wKpdLSjJl9eydPAQebyqHAKB6tjjRp4LjPNNN7wlxToo1cK3LvZIFP7 Ws2yd/WtyWcdJGUgTPfeELSXTdOMBDUa+oHyXDPWPYqP3TmiWk3S4KTpJQX6NTDU XSMMfhIL4y+9JAzydpkH+pXQXFxwgu+epO0zTXtFyowcxt7GRt98ilCyHj0RFyNy gouS/7CXHFShlpYkTRcSjClRie8Ai0Jjc4vVnlfNrpMG0XHFMKWQec2ObDD2P+J5 t5Q9EW2JB3VSEwJQ4DnFdh2/t42nf1L/GOzgUkVi1mqkX/FRzLJnLtVJPQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFE7YY+iAIrBF4fAe0/N8zr0BaUoBMB8GA1UdIwQY MBaAFGXwEg7jtvD421LQ24HAHkRH2OS6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmZBU0R1TzI4UGpiVXREYmdjQWVSRWZZNUxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9kMTQxOGMtN2NkOC00YWY5LTgxNjYt NTc3YzAzOTEwNzAxLzEvVHRoajZJQWlzRVhoOEI3VDgzek92UUZwU2dFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9kMTQxOGMtN2NkOC00YWY5LTgxNjYtNTc3YzAzOTEwNzAx LzEvWmZBU0R1TzI4UGpiVXREYmdjQWVSRWZZNUxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQEUFHQMA0E AgACMAcDBQAqAgaYMA0GCSqGSIb3DQEBCwUAA4IBAQAopawNhR8Z/RFwPsGWwoBs xm78yKtaKf0nj5nFSe/4GhI0+sEdKWzh02JWGvy3VhWozl6wgdayzBm8O+bTz1ab 0+1fHtkAepAUyPo4aqycKuN/EN6m1moqU6gobGeewZPurx1YGfT3v+gwTQ7cyypv D83+brbk/A/bWxYK4V6xK4ToS6oZ4AtyMO8yfcvRZGmrIi1qmIbelJ48OQUnY9w8 sIv6XC5hAir6retLSNHai/ByJOkkDGZCvwSu1GX0tAgCVG6Ov95CH1EPt1pV40QI qXuHRP1TQR82u995YlhYpVWzI99G4JuRa03IAfBIwlPsiXmx5qjnWTPSXuEfQFwJ -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:11 2026 by rpki-client