This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/tfNYSfcjjVNQZ7Nozoxi8vtYoQI.roa File: tfNYSfcjjVNQZ7Nozoxi8vtYoQI.roa (raw, json) Hash identifier: 90A2V1FDFjQXXaZa2JClp+Rs0WfwS0IiJKxXHKmBH2g= Subject key identifier: B5:F3:58:49:F7:23:8D:53:50:67:B3:68:CE:8C:62:F2:FB:58:A1:02 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B7FF1BDEDB913C31B6635B2FBF5566373 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/tfNYSfcjjVNQZ7Nozoxi8vtYoQI.roa Signing time: Fri 02 Jan 2026 18:21:47 +0000 ROA not before: Fri 02 Jan 2026 18:21:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197730 IP address blocks: 2a0f:3d80:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:bd:ed:b9:13:c3:1b:66:35:b2:fb:f5:56:63:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 2 18:21:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5f35849f7238d535067b368ce8c62f2fb58a102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:da:2a:b2:f3:0e:4e:97:8a:54:1b:b2:2b:f2: 5f:c7:86:c8:f1:ba:ae:19:9a:75:6d:2b:ec:f0:28: 0b:04:a9:fe:47:d8:57:6d:6a:e2:37:e3:d5:32:9a: 99:a2:fd:68:7c:3d:0e:5e:a4:08:33:91:63:85:8a: b5:16:a0:60:1b:30:73:c1:31:ac:a9:75:ae:7e:b7: 12:73:41:6f:ce:11:c2:81:48:7f:22:48:44:44:90: a4:0c:42:c4:39:9e:83:d0:58:21:d8:e6:ba:1b:3a: f5:24:c7:cc:66:dd:da:97:d6:f5:db:fb:a4:aa:c3: 98:eb:90:b2:60:a5:c0:58:bd:e2:cb:35:5f:47:7f: ad:ba:b5:8d:e5:dc:43:3b:ca:61:87:76:c5:46:dd: 66:a7:95:d6:b1:0e:80:4f:67:03:5b:8a:bd:01:e2: 98:f1:a8:6c:fb:e2:52:8b:d6:ae:db:8d:5c:60:8c: 54:74:73:df:79:c1:62:78:60:77:1c:88:58:8f:78: fc:af:b6:15:3b:4a:1e:05:61:8e:07:3d:a6:8d:6a: 16:f7:82:d3:5a:79:b7:3a:89:4b:36:23:ea:5a:3b: f2:46:3c:66:33:0d:76:2b:cf:f0:19:ff:08:17:cc: 04:a1:2f:bf:a0:55:66:b7:93:56:af:0d:e1:6f:54: 1d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F3:58:49:F7:23:8D:53:50:67:B3:68:CE:8C:62:F2:FB:58:A1:02 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/tfNYSfcjjVNQZ7Nozoxi8vtYoQI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:3d80:3::/48 Signature Algorithm: sha256WithRSAEncryption 18:0c:b4:bc:d9:4e:c5:e9:c9:96:5d:a1:d4:00:a6:e9:59:82: 4a:e0:b7:93:e5:9c:ae:b3:68:99:2c:68:01:cd:85:58:88:ad: 9f:07:c4:76:48:c0:ea:2b:24:90:ab:a4:e0:d3:8e:9d:64:9d: 2f:24:45:58:f4:ae:e8:68:bf:55:fb:12:d3:4b:37:0a:b7:a1: 54:ea:c7:81:6d:ef:96:69:74:c6:93:ee:56:b8:8e:00:6d:46: 33:3c:1d:8f:f6:d2:ab:ee:f9:f1:57:78:ee:28:8c:34:4b:ef: 04:a3:c4:b8:a7:9f:c9:a3:d9:eb:49:25:73:a7:00:5e:88:13: e2:72:e2:f0:74:48:82:e8:e4:97:c1:96:54:77:98:ba:b5:60: b9:f0:1d:01:8f:de:0c:44:a7:ff:90:70:bc:8c:4e:cb:f2:3c: 63:95:13:71:40:4b:d2:92:be:fe:f1:7c:26:8a:57:9a:1a:b5: ea:a1:29:f4:6b:63:04:11:ff:0a:27:e1:2a:8f:d3:dc:47:6b: 3c:3c:3c:07:c8:77:46:ae:c7:1a:11:dc:fc:09:bf:c3:08:ee: 55:cb:bb:09:14:5c:59:9b:c7:15:bd:2f:be:68:32:0e:68:42: a3:dd:21:63:2a:18:79:a6:2c:fc:09:14:e6:a0:c1:b6:e5:b8: c5:24:0f:2b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/8b3tuRPDG2Y1svv1VmNzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTAyMTgyMTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNWYzNTg0OWY3MjM4ZDUzNTA2N2IzNjhjZThjNjJmMmZiNThhMTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNoqsvMOTpeKVBuyK/Jfx4bI8bqu GZp1bSvs8CgLBKn+R9hXbWriN+PVMpqZov1ofD0OXqQIM5FjhYq1FqBgGzBzwTGs qXWufrcSc0FvzhHCgUh/IkhERJCkDELEOZ6D0Fgh2Oa6Gzr1JMfMZt3al9b12/uk qsOY65CyYKXAWL3iyzVfR3+turWN5dxDO8phh3bFRt1mp5XWsQ6AT2cDW4q9AeKY 8ahs++JSi9au241cYIxUdHPfecFieGB3HIhYj3j8r7YVO0oeBWGOBz2mjWoW94LT Wnm3OolLNiPqWjvyRjxmMw12K8/wGf8IF8wEoS+/oFVmt5NWrw3hb1QdFwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLXzWEn3I41TUGezaM6MYvL7WKECMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvdGZOWVNmY2pqVk5RWjdOb3pveGk4dnRZb1FJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg89gAAD MA0GCSqGSIb3DQEBCwUAA4IBAQAYDLS82U7F6cmWXaHUAKbpWYJK4LeT5Zyus2iZ LGgBzYVYiK2fB8R2SMDqKySQq6Tg046dZJ0vJEVY9K7oaL9V+xLTSzcKt6FU6seB be+WaXTGk+5WuI4AbUYzPB2P9tKr7vnxV3juKIw0S+8Eo8S4p5/Jo9nrSSVzpwBe iBPicuLwdEiC6OSXwZZUd5i6tWC58B0Bj94MRKf/kHC8jE7L8jxjlRNxQEvSkr7+ 8XwmileaGrXqoSn0a2MEEf8KJ+Eqj9PcR2s8PDwHyHdGrscaEdz8Cb/DCO5Vy7sJ FFxZm8cVvS++aDIOaEKj3SFjKhh5piz8CRTmoMG25bjFJA8r -----END CERTIFICATE-----Generated at Tue Jan 20 09:07:45 2026 by rpki-client