This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TfzJChHd2rKeQ5z0xD6aT4yKRsQ.roa File: TfzJChHd2rKeQ5z0xD6aT4yKRsQ.roa (raw, json) Hash identifier: tD/9Wmfnt8IPgBzQ4bEOeyOl6Ra+S+caQUgk6nWcrGc= Subject key identifier: 4D:FC:C9:0A:11:DD:DA:B2:9E:43:9C:F4:C4:3E:9A:4F:8C:8A:46:C4 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B7FF1B04AFB8D1463D6DB2D0425CAEA24 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TfzJChHd2rKeQ5z0xD6aT4yKRsQ.roa Signing time: Fri 02 Jan 2026 18:21:44 +0000 ROA not before: Fri 02 Jan 2026 18:21:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 36352 IP address blocks: 2a0a:2d04:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:b0:4a:fb:8d:14:63:d6:db:2d:04:25:ca:ea:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 2 18:21:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4dfcc90a11dddab29e439cf4c43e9a4f8c8a46c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a4:48:69:77:d8:c9:ae:a3:f2:fc:14:91:b6: d0:1b:72:d7:19:ae:e2:81:10:12:22:71:82:b7:08: 9b:76:15:60:2a:5a:41:a2:26:2d:2b:a5:14:5d:57: f8:7b:90:8c:e0:e9:05:2b:6d:88:28:70:0a:29:53: 23:bf:5c:a6:99:47:75:f7:56:92:b0:cf:be:35:55: c9:59:b1:83:95:ea:18:19:19:8a:32:17:e5:d9:74: 17:92:33:5a:1a:8c:3e:67:ad:38:64:a0:dd:57:2f: f4:01:90:04:f9:91:b9:8b:49:44:22:49:5b:60:9f: 55:81:19:52:48:03:10:d7:b7:c4:3b:4f:45:4a:2d: 84:71:68:9b:72:b6:d8:e5:99:73:b6:41:75:5e:43: 32:0e:47:e1:b2:92:19:20:1c:f5:7d:6c:02:9e:a2: ea:4e:c6:6d:bd:19:bf:63:cc:1c:28:67:6e:9a:e0: 7d:9b:5f:4b:da:6b:0c:21:d0:de:71:f4:f9:84:a2: b2:d9:a8:b5:ec:01:24:8b:66:ab:4f:2a:dc:af:cc: a3:9b:26:6e:e3:aa:3f:ee:bf:3b:82:23:a9:dd:6a: b7:84:5f:9e:39:88:8d:8d:6e:9f:56:29:d4:48:43: 61:5a:c4:83:b6:0b:bd:7b:2e:28:a0:38:04:99:b6: 7e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:FC:C9:0A:11:DD:DA:B2:9E:43:9C:F4:C4:3E:9A:4F:8C:8A:46:C4 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TfzJChHd2rKeQ5z0xD6aT4yKRsQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:2d04:f::/48 Signature Algorithm: sha256WithRSAEncryption 45:ff:5a:df:e2:22:0c:8b:bd:d9:a0:5e:ee:cd:be:f7:13:1a: 35:80:d6:47:00:2d:f6:9f:33:af:42:97:62:e5:b4:8a:d3:d7: 34:9c:67:50:13:fe:c3:6d:96:d1:96:e6:a9:a5:80:4b:c4:34: 3d:18:0a:6b:c9:a9:ea:a4:ce:62:e2:48:b8:b5:5d:7e:27:de: b0:d5:ee:fd:d3:50:d7:90:30:a1:9f:27:94:53:22:e1:7a:4c: e2:29:c5:d2:db:3b:d6:dd:15:9f:45:52:6c:21:7b:fa:32:89: 17:32:91:69:7e:3c:d1:fb:e1:e6:68:2f:58:05:84:f2:25:9b: 33:76:20:46:a1:22:3f:05:4d:36:41:bb:db:28:b3:a5:56:3e: 0f:aa:c4:b5:93:0d:b1:e3:18:b3:8d:d4:14:2b:c8:13:c5:df: fa:f0:40:08:81:0d:1f:c0:fb:df:16:4e:d0:5f:11:6e:37:0d: ec:7e:9b:0b:89:5c:2c:0c:bd:1a:99:3a:7c:3e:57:94:eb:74: 4d:8a:3e:f6:b8:33:1b:a2:af:dd:71:37:6c:91:23:9f:37:3c: ce:74:4c:ff:7b:b2:59:4d:16:b2:97:40:e6:17:76:f0:ed:30: 29:de:94:12:6a:17:66:3f:7b:ec:27:08:d1:0a:a6:f3:4d:83: b9:54:66:b9 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/8bBK+40UY9bbLQQlyuokMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTAyMTgyMTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZGZjYzkwYTExZGRkYWIyOWU0MzljZjRjNDNlOWE0ZjhjOGE0NmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKRIaXfYya6j8vwUkbbQG3LXGa7i gRASInGCtwibdhVgKlpBoiYtK6UUXVf4e5CM4OkFK22IKHAKKVMjv1ymmUd191aS sM++NVXJWbGDleoYGRmKMhfl2XQXkjNaGow+Z604ZKDdVy/0AZAE+ZG5i0lEIklb YJ9VgRlSSAMQ17fEO09FSi2EcWibcrbY5ZlztkF1XkMyDkfhspIZIBz1fWwCnqLq TsZtvRm/Y8wcKGdumuB9m19L2msMIdDecfT5hKKy2ai17AEki2arTyrcr8yjmyZu 46o/7r87giOp3Wq3hF+eOYiNjW6fVinUSENhWsSDtgu9ey4ooDgEmbZ+xQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFE38yQoR3dqynkOc9MQ+mk+MikbEMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvVGZ6SkNoSGQycktlUTV6MHhENmFUNHlLUnNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgotBAAP MA0GCSqGSIb3DQEBCwUAA4IBAQBF/1rf4iIMi73ZoF7uzb73Exo1gNZHAC32nzOv Qpdi5bSK09c0nGdQE/7DbZbRluappYBLxDQ9GApryanqpM5i4ki4tV1+J96w1e79 01DXkDChnyeUUyLhekziKcXS2zvW3RWfRVJsIXv6MokXMpFpfjzR++HmaC9YBYTy JZszdiBGoSI/BU02QbvbKLOlVj4PqsS1kw2x4xizjdQUK8gTxd/68EAIgQ0fwPvf Fk7QXxFuNw3sfpsLiVwsDL0amTp8PleU63RNij72uDMboq/dcTdskSOfNzzOdEz/ e7JZTRayl0DmF3bw7TAp3pQSahdmP3vsJwjRCqbzTYO5VGa5 -----END CERTIFICATE-----Generated at Tue Jan 20 09:06:50 2026 by rpki-client