This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-TJax66jcdYvADODQm3BVKy65Hk.roa File: 1-TJax66jcdYvADODQm3BVKy65Hk.roa (raw, json) Hash identifier: eGqMjcPP6gugBBopB+Y4ewReZRZkUGDv+BNHJbBE4iA= Subject key identifier: F9:32:5A:C7:AE:A3:71:D6:2F:00:33:83:42:6D:C1:54:AC:BA:E4:79 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B7FF1AABDE2FAEDD49250394CB78DDCEA Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-TJax66jcdYvADODQm3BVKy65Hk.roa Signing time: Fri 02 Jan 2026 18:21:42 +0000 ROA not before: Fri 02 Jan 2026 18:21:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29226 IP address blocks: 2a0a:2d01::/32 maxlen: 32 2a0f:7d03::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:aa:bd:e2:fa:ed:d4:92:50:39:4c:b7:8d:dc:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 2 18:21:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9325ac7aea371d62f003383426dc154acbae479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f8:84:d6:53:6f:aa:99:65:fb:b8:43:d2:69: 6b:71:46:e4:af:5a:46:78:3c:9f:3e:74:f9:17:80: f8:7f:b2:5a:29:f3:e2:2a:aa:26:ca:13:e3:95:dd: 4d:77:5d:eb:a2:c2:44:9a:4b:9b:54:95:67:5d:95: f4:4e:03:e1:78:1e:9b:79:68:bc:03:af:47:09:2a: 1b:96:bd:61:22:3b:6f:cb:95:9e:bc:73:57:01:88: 79:bb:84:dc:67:b6:44:5d:b0:e9:72:39:a7:f6:4b: 48:4b:84:3b:aa:8b:fd:01:04:40:d8:f8:10:a0:3a: 47:22:c0:e1:68:75:7a:5f:83:40:6b:54:22:c6:c6: a9:ac:12:8c:18:f3:9a:60:5e:47:d0:d7:7f:79:eb: ea:10:24:54:e2:36:d4:21:56:be:cb:03:7b:6e:a5: c5:2b:b4:c6:f7:67:d1:3c:0c:88:83:e2:c5:df:7b: 77:81:00:5d:04:d9:d4:fc:d1:53:44:37:19:73:8c: b3:74:24:e9:2d:bd:9e:14:eb:72:bd:2c:9f:a9:99: 03:14:0a:c8:2a:85:f5:82:01:d4:9d:96:c6:62:71: 7d:9a:38:fd:b5:11:2f:8c:05:4e:d5:6b:e0:6b:79: ab:45:4c:29:5f:9e:f6:5e:1d:29:12:af:f9:16:1c: a6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:32:5A:C7:AE:A3:71:D6:2F:00:33:83:42:6D:C1:54:AC:BA:E4:79 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-TJax66jcdYvADODQm3BVKy65Hk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:2d01::/32 2a0f:7d03::/32 Signature Algorithm: sha256WithRSAEncryption 87:71:2b:03:c9:02:e3:ad:22:5c:6f:b2:0c:ed:43:ea:72:38: 5b:d5:73:75:86:93:98:aa:17:c6:e0:90:17:6e:8b:74:31:16: ba:5a:95:46:e4:b8:bd:0e:43:07:6d:db:05:3f:64:a0:de:d6: 36:9a:d3:76:9d:41:ce:24:6c:e3:0d:e0:d0:1d:a2:1e:e6:fc: 4f:ef:d5:01:e6:79:b0:00:6c:c2:e6:3a:3e:06:c1:7d:2a:21: 42:67:05:39:5b:b9:5b:69:4e:8d:40:22:36:57:be:b9:db:7f: 8b:45:dc:65:73:31:48:18:4c:85:01:15:d4:a7:c0:65:ef:ee: 83:8d:89:25:26:1c:d9:6b:1a:ff:5c:15:f4:71:7f:d0:3f:f0: c5:a0:7d:a4:8e:dc:95:d2:1a:32:53:ee:87:47:26:21:2e:bd: a0:c6:db:dd:fb:f3:a4:c3:84:a7:82:64:ca:f3:48:d9:18:44: 2f:b6:e1:3b:69:23:f9:3a:37:9d:1d:c9:a7:d5:b1:e9:81:a2: 9b:0f:a5:27:71:dd:c1:b0:72:fa:bf:96:68:81:fa:bc:98:e8: 4e:0b:73:e8:8a:fb:a9:30:6d:f5:96:58:55:35:29:c9:67:a4: b9:2f:62:8f:67:08:b6:c1:ae:c4:1b:12:e4:a9:64:ca:c4:d4: cb:f9:6a:a6 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgISAZt/8aq94vrt1JJQOUy3jdzqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTAyMTgyMTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTMyNWFjN2FlYTM3MWQ2MmYwMDMzODM0MjZkYzE1NGFjYmFlNDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyviE1lNvqpll+7hD0mlrcUbkr1pG eDyfPnT5F4D4f7JaKfPiKqomyhPjld1Nd13rosJEmkubVJVnXZX0TgPheB6beWi8 A69HCSoblr1hIjtvy5WevHNXAYh5u4TcZ7ZEXbDpcjmn9ktIS4Q7qov9AQRA2PgQ oDpHIsDhaHV6X4NAa1QixsaprBKMGPOaYF5H0Nd/eevqECRU4jbUIVa+ywN7bqXF K7TG92fRPAyIg+LF33t3gQBdBNnU/NFTRDcZc4yzdCTpLb2eFOtyvSyfqZkDFArI KoX1ggHUnZbGYnF9mjj9tREvjAVO1Wvga3mrRUwpX572Xh0pEq/5FhymrwIDAQAB o4ICEjCCAg4wHQYDVR0OBBYEFPkyWseuo3HWLwAzg0JtwVSsuuR5MB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvMS1USmF4NjZqY2RZdkFET0RRbTNCVkt5NjVIay5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYzAvNDlhZGM2LWJhODktNDAzZi1hZGE5LThjNTAwN2MyYTRi Ni8xL2ZWV2FyN19Ba3hKQzRkWTNLWXp4M1NJLVRDWS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQYMBYwFAQCAAIwDgMFACoKLQED BQAqD30DMA0GCSqGSIb3DQEBCwUAA4IBAQCHcSsDyQLjrSJcb7IM7UPqcjhb1XN1 hpOYqhfG4JAXbot0MRa6WpVG5Li9DkMHbdsFP2Sg3tY2mtN2nUHOJGzjDeDQHaIe 5vxP79UB5nmwAGzC5jo+BsF9KiFCZwU5W7lbaU6NQCI2V76523+LRdxlczFIGEyF ARXUp8Bl7+6DjYklJhzZaxr/XBX0cX/QP/DFoH2kjtyV0hoyU+6HRyYhLr2gxtvd +/Okw4SngmTK80jZGEQvtuE7aSP5OjedHcmn1bHpgaKbD6Uncd3BsHL6v5Zogfq8 mOhOC3PoivupMG31llhVNSnJZ6S5L2KPZwi2wa7EGxLkqWTKxNTL+Wqm -----END CERTIFICATE-----Generated at Tue Jan 20 09:05:52 2026 by rpki-client