This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/tMTuUNH0SbtFDSs2xFUw5nOZU9k.roa File: tMTuUNH0SbtFDSs2xFUw5nOZU9k.roa (raw, json) Hash identifier: 4+Mq45Ayqs1X4gtbMXtaUmq2jveO0RDco7Qaees0X84= Subject key identifier: B4:C4:EE:50:D1:F4:49:BB:45:0D:2B:36:C4:55:30:E6:73:99:53:D9 Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071 Certificate serial: 019B7E3894900226373202C6317B055FDA0E Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/tMTuUNH0SbtFDSs2xFUw5nOZU9k.roa Signing time: Fri 02 Jan 2026 10:19:55 +0000 ROA not before: Fri 02 Jan 2026 10:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1136 IP address blocks: 2a04:9a00:1200::/42 maxlen: 48 2a07:3500:1020::/48 maxlen: 48 2a07:3500:11a0::/48 maxlen: 48 2a07:3500:1ac0::/48 maxlen: 48 2a07:3500:1b30::/48 maxlen: 48 2a07:3500:1b48::/48 maxlen: 48 2a07:3500:1bc0::/48 maxlen: 48 2a07:3500:1c00::/48 maxlen: 48 2a07:3500:1da8::/48 maxlen: 48 2a07:3501:1010::/48 maxlen: 48 2a07:3502:10e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 19:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:94:90:02:26:37:32:02:c6:31:7b:05:5f:da:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071 Validity Not Before: Jan 2 10:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4c4ee50d1f449bb450d2b36c45530e6739953d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4a:03:33:8f:7c:9a:d4:05:fb:e1:c4:38:4d: 2f:6c:b2:f3:89:8b:6e:b9:b6:f6:bb:9c:fd:06:bd: 45:b9:15:a1:b4:8d:e4:d4:90:e2:ba:f7:7d:1d:4c: 9c:42:cf:1c:dd:96:82:31:57:fe:c3:31:ae:a5:a4: 5c:62:e7:a8:71:d1:b6:51:53:e8:1a:06:82:a9:96: c7:89:3d:2b:3f:9b:89:e8:21:34:6b:39:a1:b6:9a: 02:3c:d2:a7:8e:63:44:c5:fa:53:62:38:36:43:29: fa:db:cc:20:ec:b1:77:54:d7:c1:3c:4a:38:d2:26: 7c:66:40:df:06:f4:60:9c:5c:73:d8:0f:2b:28:30: 46:84:ce:63:b8:83:59:f0:39:2d:25:54:94:5d:98: a6:3d:82:55:a4:df:a1:f2:d2:c3:19:e6:73:bb:03: a8:8f:c9:09:6b:e5:f8:92:fb:17:b3:48:ff:f7:5e: 3d:4b:b1:36:b9:5f:08:53:7b:5f:a2:9b:9a:55:c4: 0b:c7:2c:12:42:01:c0:e5:45:26:91:cb:01:cb:ee: 81:d6:09:08:cf:eb:35:c2:86:b9:97:95:81:1d:ce: e8:d6:a0:40:52:30:cf:b1:dc:e2:ac:4e:88:2b:9a: ac:d0:a5:e6:7d:47:82:54:68:30:c3:c4:51:a7:9d: f6:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C4:EE:50:D1:F4:49:BB:45:0D:2B:36:C4:55:30:E6:73:99:53:D9 X509v3 Authority Key Identifier: keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/tMTuUNH0SbtFDSs2xFUw5nOZU9k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:9a00:1200::/42 2a07:3500:1020::/48 2a07:3500:11a0::/48 2a07:3500:1ac0::/48 2a07:3500:1b30::/48 2a07:3500:1b48::/48 2a07:3500:1bc0::/48 2a07:3500:1c00::/48 2a07:3500:1da8::/48 2a07:3501:1010::/48 2a07:3502:10e0::/48 Signature Algorithm: sha256WithRSAEncryption 94:90:71:09:72:7c:28:97:6f:a3:f3:1f:dc:c7:74:12:f6:17: 44:65:64:fe:e2:c0:ba:e5:40:d3:6c:39:62:ce:11:20:41:6a: 54:02:4b:4b:4e:61:19:7b:3d:32:96:6a:10:87:8e:19:7f:4c: 25:0e:d0:4f:20:f0:ce:b6:12:18:8a:d6:6b:42:05:79:81:db: 91:7c:2b:43:74:3e:2c:58:d1:bf:35:97:10:f1:31:d0:04:99: 53:54:4c:01:b5:72:9a:42:10:a4:ad:18:c7:8b:7a:56:65:04: 95:07:35:1c:d0:26:b2:f9:2a:dc:17:7d:79:9f:b7:06:31:22: 98:7c:a7:d7:fb:9f:92:ca:ae:4c:44:2a:91:db:ff:5d:c2:b6: 0c:ed:fc:92:92:c1:ea:ae:d7:76:61:7a:e1:72:20:7e:75:24: 01:0e:97:a3:3d:7b:be:a2:80:3a:fe:71:17:8e:f5:a8:07:24: e0:10:32:b4:aa:90:8a:87:a2:f2:f2:81:2b:fe:ed:c3:96:26: 12:9a:12:8c:3d:fd:01:b8:a5:40:d4:24:c2:b2:75:01:e2:f7: 1d:df:71:cf:3d:d3:c0:5f:29:8d:7a:57:d6:3d:8e:c5:38:ff: 2b:31:47:8d:00:bb:f2:d4:b7:48:60:34:c0:26:3f:f8:89:13: 87:65:89:15 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgISAZt+OJSQAiY3MgLGMXsFX9oOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNWQyOGQxNjYyNmJjNWRjYWJmMmU5MTU0MzU3ODJiOTZl MTQwNzEwHhcNMjYwMTAyMTAxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGM0ZWU1MGQxZjQ0OWJiNDUwZDJiMzZjNDU1MzBlNjczOTk1M2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0oDM498mtQF++HEOE0vbLLziYtu ubb2u5z9Br1FuRWhtI3k1JDiuvd9HUycQs8c3ZaCMVf+wzGupaRcYueocdG2UVPo GgaCqZbHiT0rP5uJ6CE0azmhtpoCPNKnjmNExfpTYjg2Qyn628wg7LF3VNfBPEo4 0iZ8ZkDfBvRgnFxz2A8rKDBGhM5juINZ8DktJVSUXZimPYJVpN+h8tLDGeZzuwOo j8kJa+X4kvsXs0j/9149S7E2uV8IU3tfopuaVcQLxywSQgHA5UUmkcsBy+6B1gkI z+s1woa5l5WBHc7o1qBAUjDPsdzirE6IK5qs0KXmfUeCVGgww8RRp532jQIDAQAB o4ICZjCCAmIwHQYDVR0OBBYEFLTE7lDR9Em7RQ0rNsRVMOZzmVPZMB8GA1UdIwQY MBaAFLBdKNFmJrxdyr8ukVQ1eCuW4UBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEt YWQ1NzU1MjJiMzY1LzEvdE1UdVVOSDBTYnRGRFNzMnhGVXc1bk9aVTlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEtYWQ1NzU1MjJiMzY1 LzEvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHwGCCsGAQUFBwEHAQH/BG0wazBpBAIAAjBjAwcGKgSaABIA AwcAKgc1ABAgAwcAKgc1ABGgAwcAKgc1ABrAAwcAKgc1ABswAwcAKgc1ABtIAwcA Kgc1ABvAAwcAKgc1ABwAAwcAKgc1AB2oAwcAKgc1ARAQAwcAKgc1AhDgMA0GCSqG SIb3DQEBCwUAA4IBAQCUkHEJcnwol2+j8x/cx3QS9hdEZWT+4sC65UDTbDlizhEg QWpUAktLTmEZez0ylmoQh44Zf0wlDtBPIPDOthIYitZrQgV5gduRfCtDdD4sWNG/ NZcQ8THQBJlTVEwBtXKaQhCkrRjHi3pWZQSVBzUc0Cay+SrcF315n7cGMSKYfKfX +5+Syq5MRCqR2/9dwrYM7fySksHqrtd2YXrhciB+dSQBDpejPXu+ooA6/nEXjvWo ByTgEDK0qpCKh6Ly8oEr/u3DliYSmhKMPf0BuKVA1CTCsnUB4vcd33HPPdPAXymN elfWPY7FOP8rMUeNALvy1LdIYDTAJj/4iROHZYkV -----END CERTIFICATE-----Generated at Tue Jan 20 04:47:58 2026 by rpki-client