This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/Tx4nNjRtwFbSFmUyNe0g3ERtKlw.roa File: Tx4nNjRtwFbSFmUyNe0g3ERtKlw.roa (raw, json) Hash identifier: kCLOm6CnSZXutMZvLsHNUNkxlqUEdGOIfaDrL0BbKRI= Subject key identifier: 4F:1E:27:36:34:6D:C0:56:D2:16:65:32:35:ED:20:DC:44:6D:2A:5C Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071 Certificate serial: 019B7E389B8B896B47F8943AB437DD4D3A7D Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/Tx4nNjRtwFbSFmUyNe0g3ERtKlw.roa Signing time: Fri 02 Jan 2026 10:19:57 +0000 ROA not before: Fri 02 Jan 2026 10:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34108 IP address blocks: 2a07:3500:1100::/48 maxlen: 48 2a07:3500:1460::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 19:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:9b:8b:89:6b:47:f8:94:3a:b4:37:dd:4d:3a:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071 Validity Not Before: Jan 2 10:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f1e2736346dc056d216653235ed20dc446d2a5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2b:14:48:f1:1e:38:94:59:ea:55:e3:e2:17: 5f:99:74:fc:9b:48:ae:8e:f9:60:9f:90:87:ab:a4: 12:81:51:b1:05:ed:36:7b:af:82:e8:8a:e9:1e:90: 22:d2:d1:9f:14:04:10:de:22:23:75:1c:68:57:13: 36:4a:a4:24:77:17:ef:05:2e:06:12:3b:7c:57:65: 4f:32:eb:34:db:08:1e:ac:b7:64:24:14:fa:5f:66: cb:8c:32:a9:e6:b8:52:71:d7:94:f5:51:d1:d8:0f: 75:21:ed:0a:b5:01:c3:ef:58:4a:0b:d5:f1:fb:77: ea:ed:e9:bb:c4:ce:ea:d2:12:17:4b:f6:52:3d:6d: 55:cc:64:d5:8a:cf:a7:cd:d9:0a:a8:e9:cd:d3:52: 06:2f:83:b2:95:72:bc:90:ac:0d:78:96:50:b5:6e: 2a:86:ab:d0:2a:e3:e0:6a:ff:35:dc:b5:c6:51:12: 8c:67:cb:f6:b8:fa:7c:26:1e:09:22:31:1e:54:97: ee:7a:43:59:d7:a1:55:3d:ef:ec:30:4b:0a:c0:fc: 90:dd:bc:6c:7b:1f:3c:35:19:7c:80:ce:74:d9:47: 07:e0:b2:cc:8a:96:f3:e8:b4:c8:37:35:67:e1:08: c5:46:f2:16:0b:be:8e:7e:0e:f7:7a:bd:b6:60:2c: c5:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:1E:27:36:34:6D:C0:56:D2:16:65:32:35:ED:20:DC:44:6D:2A:5C X509v3 Authority Key Identifier: keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/Tx4nNjRtwFbSFmUyNe0g3ERtKlw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:3500:1100::/48 2a07:3500:1460::/48 Signature Algorithm: sha256WithRSAEncryption 8f:2d:f4:a5:07:dd:12:78:98:4f:9a:9f:f0:2a:29:f8:1c:be: cf:41:cb:85:55:04:61:35:28:f1:fe:61:f2:66:36:06:98:d0: c3:f0:49:b2:61:4c:bb:c8:a0:a8:b4:b5:ba:a8:09:37:9b:e9: 9a:75:e7:9b:fd:cf:c8:4b:b2:b0:e9:30:0d:aa:6e:8a:a6:aa: 2a:9b:3f:a7:37:7a:eb:27:23:ba:13:83:e0:be:12:8a:79:57: 0f:2c:04:96:41:6b:50:32:30:da:3a:ab:97:7c:77:9f:93:1d: 71:b8:97:e8:cc:f5:9d:0a:44:fa:53:45:db:ce:79:25:f0:c8: 95:25:5e:11:88:61:ce:72:7c:f2:8d:74:05:91:e5:9d:5b:00: 7d:8b:3c:e0:39:44:28:c5:ad:dd:a7:08:2a:6e:2d:d4:cb:8d: 0d:7c:c9:20:2f:71:c5:d4:5a:9a:b7:b1:59:37:16:b7:32:e6: 71:67:db:f0:8c:21:32:ad:9e:c1:1d:15:9a:fd:6d:69:da:10: 3d:4e:22:25:05:7e:a6:69:94:d8:f9:ac:37:ce:fc:09:27:98: 36:c5:1b:2f:15:06:89:18:da:dd:61:e5:72:6b:cf:6f:65:ea: 90:91:67:6b:8b:88:7a:6a:37:d9:54:c5:10:8e:73:59:fc:61: 56:3b:64:d0 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+OJuLiWtH+JQ6tDfdTTp9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNWQyOGQxNjYyNmJjNWRjYWJmMmU5MTU0MzU3ODJiOTZl MTQwNzEwHhcNMjYwMTAyMTAxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjFlMjczNjM0NmRjMDU2ZDIxNjY1MzIzNWVkMjBkYzQ0NmQyYTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSsUSPEeOJRZ6lXj4hdfmXT8m0iu jvlgn5CHq6QSgVGxBe02e6+C6IrpHpAi0tGfFAQQ3iIjdRxoVxM2SqQkdxfvBS4G Ejt8V2VPMus02wgerLdkJBT6X2bLjDKp5rhScdeU9VHR2A91Ie0KtQHD71hKC9Xx +3fq7em7xM7q0hIXS/ZSPW1VzGTVis+nzdkKqOnN01IGL4OylXK8kKwNeJZQtW4q hqvQKuPgav813LXGURKMZ8v2uPp8Jh4JIjEeVJfuekNZ16FVPe/sMEsKwPyQ3bxs ex88NRl8gM502UcH4LLMipbz6LTINzVn4QjFRvIWC76Ofg73er22YCzFvQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFE8eJzY0bcBW0hZlMjXtINxEbSpcMB8GA1UdIwQY MBaAFLBdKNFmJrxdyr8ukVQ1eCuW4UBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEt YWQ1NzU1MjJiMzY1LzEvVHg0bk5qUnR3RmJTRm1VeU5lMGczRVJ0S2x3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEtYWQ1NzU1MjJiMzY1 LzEvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgc1ABEA AwcAKgc1ABRgMA0GCSqGSIb3DQEBCwUAA4IBAQCPLfSlB90SeJhPmp/wKin4HL7P QcuFVQRhNSjx/mHyZjYGmNDD8EmyYUy7yKCotLW6qAk3m+madeeb/c/IS7Kw6TAN qm6Kpqoqmz+nN3rrJyO6E4PgvhKKeVcPLASWQWtQMjDaOquXfHefkx1xuJfozPWd CkT6U0Xbznkl8MiVJV4RiGHOcnzyjXQFkeWdWwB9izzgOUQoxa3dpwgqbi3Uy40N fMkgL3HF1Fqat7FZNxa3MuZxZ9vwjCEyrZ7BHRWa/W1p2hA9TiIlBX6maZTY+aw3 zvwJJ5g2xRsvFQaJGNrdYeVya89vZeqQkWdri4h6ajfZVMUQjnNZ/GFWO2TQ -----END CERTIFICATE-----Generated at Tue Jan 20 04:48:49 2026 by rpki-client