This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/T1Qo8WmC2aCCqOCMUh67DuTBuTk.roa File: T1Qo8WmC2aCCqOCMUh67DuTBuTk.roa (raw, json) Hash identifier: EXMc+NyZ+giQpQZ4Q2AoNJpqDInV4TgrJv4LDOsjdHw= Subject key identifier: 4F:54:28:F1:69:82:D9:A0:82:A8:E0:8C:52:1E:BB:0E:E4:C1:B9:39 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B7FF1CF7AAC2CE7237E99BB4151A5C5C4 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/T1Qo8WmC2aCCqOCMUh67DuTBuTk.roa Signing time: Fri 02 Jan 2026 18:21:52 +0000 ROA not before: Fri 02 Jan 2026 18:21:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214216 IP address blocks: 2a0f:a00::/29 maxlen: 29 2a0f:2300::/29 maxlen: 29 2a0f:3f80::/29 maxlen: 29 2a0f:e140::/29 maxlen: 29 2a0f:e240::/29 maxlen: 29 2a0f:e540::/29 maxlen: 29 2a0f:e9c0::/29 maxlen: 29 2a0f:fc00::/29 maxlen: 29 2a11:7a40::/29 maxlen: 29 2a11:cb40::/29 maxlen: 29 2a12:eb40::/29 maxlen: 29 2a13:600::/29 maxlen: 29 2a13:2ec0::/29 maxlen: 29 2a13:7b00::/29 maxlen: 29 2a13:a100::/29 maxlen: 29 2a13:d300::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:cf:7a:ac:2c:e7:23:7e:99:bb:41:51:a5:c5:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 2 18:21:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f5428f16982d9a082a8e08c521ebb0ee4c1b939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f8:f0:de:db:6b:67:36:fd:32:c6:e8:00:f9: 9c:83:5b:11:ca:35:19:7f:cc:fc:b5:32:6f:2e:cc: de:02:e2:4a:ef:76:b7:9f:f0:f0:1e:c3:c6:ea:8d: 5e:93:26:a3:f2:77:e3:b0:ba:b9:01:0d:31:46:bd: 45:01:ee:46:c5:9e:56:75:a3:3a:23:83:86:33:06: 32:b1:b9:3b:81:14:b4:ab:f7:fc:8f:94:f2:55:93: b8:31:1a:aa:05:3c:dc:79:63:f5:a6:fc:65:46:30: fe:ec:6e:fa:4e:b4:16:5e:83:d7:98:a2:e3:a9:24: 88:f2:35:3c:68:9d:5f:88:31:84:7e:97:26:dc:cd: a4:e9:23:d5:05:12:2e:0e:86:5b:23:5b:aa:a7:a1: c4:36:77:61:96:ea:8d:9c:48:1c:b6:cb:c0:d7:f6: 82:a6:a0:86:fb:af:05:ee:47:a4:09:15:bf:48:97: 1a:2e:bd:90:b7:db:1c:41:cb:e2:17:3b:02:b1:c7: c7:2c:23:d3:69:f0:04:fd:48:68:f7:1a:5d:0b:e8: 91:75:7e:ca:0b:00:d3:e2:8a:d7:34:3d:52:a8:49: 4f:64:2c:d9:10:43:0a:57:51:7d:3a:1b:f3:a1:d9: 4e:d7:d1:c4:00:f9:b2:b8:df:46:7b:e9:cf:03:d6: 15:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:54:28:F1:69:82:D9:A0:82:A8:E0:8C:52:1E:BB:0E:E4:C1:B9:39 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/T1Qo8WmC2aCCqOCMUh67DuTBuTk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:a00::/29 2a0f:2300::/29 2a0f:3f80::/29 2a0f:e140::/29 2a0f:e240::/29 2a0f:e540::/29 2a0f:e9c0::/29 2a0f:fc00::/29 2a11:7a40::/29 2a11:cb40::/29 2a12:eb40::/29 2a13:600::/29 2a13:2ec0::/29 2a13:7b00::/29 2a13:a100::/29 2a13:d300::/29 Signature Algorithm: sha256WithRSAEncryption 0c:50:e9:78:57:d4:78:1f:3e:19:b7:78:bc:47:3c:9d:81:90: 8a:ec:22:c0:2a:6c:f6:54:ca:f6:17:a7:e0:7a:a1:40:0c:95: 82:11:83:e9:dd:76:de:da:b7:a6:42:99:88:57:37:b4:57:b6: 8f:79:a5:31:9f:59:4b:a0:82:6b:38:b0:1e:b9:e2:93:fc:09: 20:48:4c:23:09:21:ee:ce:50:af:7b:39:60:2a:f5:85:4e:75: 2d:ca:80:20:44:4d:9d:6c:29:a9:9d:a1:51:5d:b6:fd:68:ed: c3:31:55:4d:36:98:e0:fc:26:57:64:34:86:cd:df:cc:c2:43: 2e:69:8b:d6:1b:cc:09:ef:ba:2f:7e:10:05:17:7b:9d:48:cb: 0f:b2:7d:f8:65:ad:f5:9b:b3:9e:fd:8e:0e:23:3a:a8:91:c8: 41:c4:c4:70:a8:05:47:04:e9:49:f5:4a:25:3e:21:a1:3e:6d: 4e:de:56:8d:05:fb:bd:09:7c:d0:b8:27:11:17:c7:ad:76:84: 07:0d:f0:ad:2c:ec:aa:4d:cf:5e:f0:92:24:99:01:11:1b:c5: e5:31:59:9e:ad:93:a1:c6:28:a4:88:ac:09:d3:33:4e:a6:a4: 86:93:14:98:10:a4:6e:d9:79:c9:8a:67:24:24:f8:9a:14:e1: 3f:25:db:bf -----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgISAZt/8c96rCznI36Zu0FRpcXEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTAyMTgyMTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjU0MjhmMTY5ODJkOWEwODJhOGUwOGM1MjFlYmIwZWU0YzFiOTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvjw3ttrZzb9MsboAPmcg1sRyjUZ f8z8tTJvLszeAuJK73a3n/DwHsPG6o1ekyaj8nfjsLq5AQ0xRr1FAe5GxZ5WdaM6 I4OGMwYysbk7gRS0q/f8j5TyVZO4MRqqBTzceWP1pvxlRjD+7G76TrQWXoPXmKLj qSSI8jU8aJ1fiDGEfpcm3M2k6SPVBRIuDoZbI1uqp6HENndhluqNnEgctsvA1/aC pqCG+68F7kekCRW/SJcaLr2Qt9scQcviFzsCscfHLCPTafAE/Uho9xpdC+iRdX7K CwDT4orXND1SqElPZCzZEEMKV1F9OhvzodlO19HEAPmyuN9Ge+nPA9YV4QIDAQAB o4ICdDCCAnAwHQYDVR0OBBYEFE9UKPFpgtmggqjgjFIeuw7kwbk5MB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvVDFRbzhXbUMyYUNDcU9DTVVoNjdEdVRCdVRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGJBggrBgEFBQcBBwEB/wR6MHgwdgQCAAIwcAMFAyoPCgAD BQMqDyMAAwUDKg8/gAMFAyoP4UADBQMqD+JAAwUDKg/lQAMFAyoP6cADBQMqD/wA AwUDKhF6QAMFAyoRy0ADBQMqEutAAwUDKhMGAAMFAyoTLsADBQMqE3sAAwUDKhOh AAMFAyoT0wAwDQYJKoZIhvcNAQELBQADggEBAAxQ6XhX1HgfPhm3eLxHPJ2BkIrs IsAqbPZUyvYXp+B6oUAMlYIRg+nddt7at6ZCmYhXN7RXto95pTGfWUuggms4sB65 4pP8CSBITCMJIe7OUK97OWAq9YVOdS3KgCBETZ1sKamdoVFdtv1o7cMxVU02mOD8 JldkNIbN38zCQy5pi9YbzAnvui9+EAUXe51Iyw+yffhlrfWbs579jg4jOqiRyEHE xHCoBUcE6Un1SiU+IaE+bU7eVo0F+70JfNC4JxEXx612hAcN8K0s7KpNz17wkiSZ AREbxeUxWZ6tk6HGKKSIrAnTM06mpIaTFJgQpG7ZecmKZyQk+JoU4T8l278= -----END CERTIFICATE-----Generated at Tue Jan 20 09:05:52 2026 by rpki-client