This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/TPFA9ANmjeizoRraD4Ig8TEK1SU.roa File: TPFA9ANmjeizoRraD4Ig8TEK1SU.roa (raw, json) Hash identifier: kT6UPV2xN7mmP7EqC+AR1+y3Fgn76QDWPblq40BQx1o= Subject key identifier: 4C:F1:40:F4:03:66:8D:E8:B3:A1:1A:DA:0F:82:20:F1:31:0A:D5:25 Certificate issuer: /CN=ecc8a1aad0205943a4572389bb74334e1ca28485 Certificate serial: 019B77C66A08BC06D6661787039667935E51 Authority key identifier: EC:C8:A1:AA:D0:20:59:43:A4:57:23:89:BB:74:33:4E:1C:A2:84:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/TPFA9ANmjeizoRraD4Ig8TEK1SU.roa Signing time: Thu 01 Jan 2026 04:17:30 +0000 ROA not before: Thu 01 Jan 2026 04:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29442 IP address blocks: 2a02:cac0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:6a:08:bc:06:d6:66:17:87:03:96:67:93:5e:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecc8a1aad0205943a4572389bb74334e1ca28485 Validity Not Before: Jan 1 04:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4cf140f403668de8b3a11ada0f8220f1310ad525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:95:5d:98:6b:17:7a:80:39:a0:d8:62:d9:5f: d7:0f:75:dc:96:4b:5d:e1:e9:5b:3a:a2:13:10:e7: ba:d8:08:53:01:12:8f:c4:69:e3:c6:e5:93:68:9f: 0f:f7:85:ed:58:0f:a8:e2:d3:00:e8:bc:40:1e:f8: cd:0b:e9:7c:7c:3b:77:af:92:e7:0e:cd:5b:29:91: 23:0f:a0:3a:48:57:21:9f:3b:72:df:95:c7:e9:fd: 00:1a:1c:04:77:8e:c2:f5:25:15:de:b6:b9:b5:f3: 92:53:22:f5:e6:dc:21:1d:db:7a:38:23:c2:66:e8: a0:90:1a:a3:ca:cd:c9:dc:38:47:54:c9:7e:9a:4b: ea:69:fe:94:16:21:0e:34:a1:7b:69:eb:a5:9a:c0: 39:cb:61:ec:84:11:f9:e6:90:43:ea:c0:22:f4:80: e5:9f:61:f8:6e:79:26:14:47:2d:1a:44:fc:62:66: 25:3a:03:ed:f9:c2:c3:d6:53:43:e8:90:13:db:8c: 8b:db:e2:d7:5b:de:05:2d:11:40:55:45:9b:72:7d: c0:4f:10:02:46:b7:83:22:14:89:e7:4e:75:c1:f4: 1c:a2:4d:82:53:f2:d9:2e:06:82:f6:a5:ac:41:21: f3:ef:64:af:ef:23:8d:9b:21:f4:9b:5d:2b:e2:ad: 44:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F1:40:F4:03:66:8D:E8:B3:A1:1A:DA:0F:82:20:F1:31:0A:D5:25 X509v3 Authority Key Identifier: keyid:EC:C8:A1:AA:D0:20:59:43:A4:57:23:89:BB:74:33:4E:1C:A2:84:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/TPFA9ANmjeizoRraD4Ig8TEK1SU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:cac0::/29 Signature Algorithm: sha256WithRSAEncryption 01:15:ba:23:4f:89:45:a9:98:10:04:19:4a:7f:aa:08:8e:8e: b2:d4:95:d5:bd:fa:30:2b:bc:af:e1:65:64:ba:3a:02:50:ad: ac:5c:f4:40:0a:b7:5c:38:a6:21:69:31:bc:85:11:2d:c0:5e: 06:de:15:18:01:79:16:fd:08:ff:d9:98:19:a5:db:c5:2a:67: 3c:f2:24:57:0d:12:4c:72:41:bd:08:05:ab:51:ec:b9:a9:ec: ae:33:4c:1d:72:d1:e6:30:63:5d:34:cf:02:3e:cf:ea:25:8c: ab:24:e0:36:54:e4:d2:2f:45:78:ad:57:d6:30:e6:ce:fe:29: c2:f1:d0:84:92:cc:e1:89:04:d6:91:4c:87:ea:d7:2a:0c:f8: ea:2a:5b:bb:a1:fe:a9:d4:11:ce:45:33:0a:9a:17:f1:c9:7c: 76:a7:f4:09:b2:ea:d1:52:7f:f4:65:ac:78:2b:bb:57:4d:12: 7d:42:15:e5:bc:b0:96:e1:9b:9b:4f:fa:de:28:47:ef:10:65: 87:88:8f:7e:c9:3e:75:99:f2:c4:83:0b:be:c5:c9:b4:aa:ae: fa:64:54:8c:b7:80:21:0c:b0:a4:b9:31:19:fd:81:66:c3:31: da:36:6e:7e:ad:2e:e5:b9:d5:aa:56:17:d7:35:5e:cd:c6:62: 65:c3:c4:45 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt3xmoIvAbWZheHA5Znk15RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjYzhhMWFhZDAyMDU5NDNhNDU3MjM4OWJiNzQzMzRlMWNh Mjg0ODUwHhcNMjYwMTAxMDQxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Y2YxNDBmNDAzNjY4ZGU4YjNhMTFhZGEwZjgyMjBmMTMxMGFkNTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJVdmGsXeoA5oNhi2V/XD3Xclktd 4elbOqITEOe62AhTARKPxGnjxuWTaJ8P94XtWA+o4tMA6LxAHvjNC+l8fDt3r5Ln Ds1bKZEjD6A6SFchnzty35XH6f0AGhwEd47C9SUV3ra5tfOSUyL15twhHdt6OCPC ZuigkBqjys3J3DhHVMl+mkvqaf6UFiEONKF7aeulmsA5y2HshBH55pBD6sAi9IDl n2H4bnkmFEctGkT8YmYlOgPt+cLD1lND6JAT24yL2+LXW94FLRFAVUWbcn3ATxAC RreDIhSJ5051wfQcok2CU/LZLgaC9qWsQSHz72Sv7yONmyH0m10r4q1EpwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFEzxQPQDZo3os6Ea2g+CIPExCtUlMB8GA1UdIwQY MBaAFOzIoarQIFlDpFcjibt0M04cooSFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN01paHF0QWdXVU9rVnlPSnUzUXpUaHlpaElVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9iMzI5OGItOWM1YS00ZTM4LTgxMzEt NGE2OGYyMzVjMzg4LzEvVFBGQTlBTm1qZWl6b1JyYUQ0SWc4VEVLMVNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9iMzI5OGItOWM1YS00ZTM4LTgxMzEtNGE2OGYyMzVjMzg4 LzEvN01paHF0QWdXVU9rVnlPSnUzUXpUaHlpaElVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgLKwDAN BgkqhkiG9w0BAQsFAAOCAQEAARW6I0+JRamYEAQZSn+qCI6OstSV1b36MCu8r+Fl ZLo6AlCtrFz0QAq3XDimIWkxvIURLcBeBt4VGAF5Fv0I/9mYGaXbxSpnPPIkVw0S THJBvQgFq1HsuansrjNMHXLR5jBjXTTPAj7P6iWMqyTgNlTk0i9FeK1X1jDmzv4p wvHQhJLM4YkE1pFMh+rXKgz46ipbu6H+qdQRzkUzCpoX8cl8dqf0CbLq0VJ/9GWs eCu7V00SfUIV5bywluGbm0/63ihH7xBlh4iPfsk+dZnyxIMLvsXJtKqu+mRUjLeA IQywpLkxGf2BZsMx2jZufq0u5bnVqlYX1zVezcZiZcPERQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:43:56 2026 by rpki-client