This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/03b1e7-3113-48d6-9b78-b2884888ad3f/1/TVBO-lJKWmTEkVLXsGwSSk-jKo8.roa File: TVBO-lJKWmTEkVLXsGwSSk-jKo8.roa (raw, json) Hash identifier: AXXvKEKrezYez/eJWad4+cg0zDr/M6222BjCfKR3WSg= Subject key identifier: 4D:50:4E:FA:52:4A:5A:64:C4:91:52:D7:B0:6C:12:4A:4F:A3:2A:8F Certificate issuer: /CN=eb764111aeffa86bd1ec3ca885b63de7f5650f6e Certificate serial: 019B79ED485E9539B0DDCA17587ED01A30BA Authority key identifier: EB:76:41:11:AE:FF:A8:6B:D1:EC:3C:A8:85:B6:3D:E7:F5:65:0F:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63ZBEa7_qGvR7DyohbY95_VlD24.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/03b1e7-3113-48d6-9b78-b2884888ad3f/1/TVBO-lJKWmTEkVLXsGwSSk-jKo8.roa Signing time: Thu 01 Jan 2026 14:19:12 +0000 ROA not before: Thu 01 Jan 2026 14:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211207 IP address blocks: 2001:67c:b08::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/03b1e7-3113-48d6-9b78-b2884888ad3f/1/63ZBEa7_qGvR7DyohbY95_VlD24.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/03b1e7-3113-48d6-9b78-b2884888ad3f/1/63ZBEa7_qGvR7DyohbY95_VlD24.mft rsync://rpki.ripe.net/repository/DEFAULT/63ZBEa7_qGvR7DyohbY95_VlD24.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:48:5e:95:39:b0:dd:ca:17:58:7e:d0:1a:30:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb764111aeffa86bd1ec3ca885b63de7f5650f6e Validity Not Before: Jan 1 14:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d504efa524a5a64c49152d7b06c124a4fa32a8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:39:09:8e:9f:19:60:b1:aa:23:93:36:a3:08: cd:f3:db:e3:d1:f6:21:d8:c8:6e:96:c2:3a:90:82: f6:76:39:e1:e4:4b:19:c9:43:f2:f6:f1:c4:ab:2f: a2:48:8c:93:31:c3:31:89:24:ad:18:a9:65:a6:28: 90:02:a1:d8:c2:f1:e4:fd:12:03:e5:d4:f4:dc:a5: d6:40:c6:80:fe:d7:00:f6:27:82:19:00:dd:9d:93: 3a:63:44:b7:14:bc:bd:2a:9c:f2:fd:24:c3:e5:3d: 2a:0a:0a:94:c4:51:9c:33:be:61:64:c5:23:ff:05: 12:6b:0d:ed:0a:20:f1:21:3c:e6:bb:c3:79:e2:7f: 4f:18:4b:d5:f4:0a:09:38:cc:54:85:39:d7:70:b7: 6a:78:f7:a4:4e:5f:d5:0f:67:38:39:f9:f3:eb:88: e6:d1:15:dc:12:34:e3:40:25:c3:9e:d4:c4:2e:db: 00:06:bd:a5:a5:9d:d2:2b:2d:16:41:a7:6f:82:02: ba:b4:af:2a:40:37:11:41:0d:5a:4a:34:7e:cc:9e: a1:26:5c:99:03:3f:24:9a:ec:88:58:55:e1:3f:7b: d7:fb:a6:0b:90:8e:24:8a:92:25:f0:90:6a:5d:2b: 56:e3:8b:91:25:be:ad:3d:ee:27:59:e7:d0:ff:86: 05:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:50:4E:FA:52:4A:5A:64:C4:91:52:D7:B0:6C:12:4A:4F:A3:2A:8F X509v3 Authority Key Identifier: keyid:EB:76:41:11:AE:FF:A8:6B:D1:EC:3C:A8:85:B6:3D:E7:F5:65:0F:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63ZBEa7_qGvR7DyohbY95_VlD24.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/03b1e7-3113-48d6-9b78-b2884888ad3f/1/TVBO-lJKWmTEkVLXsGwSSk-jKo8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/03b1e7-3113-48d6-9b78-b2884888ad3f/1/63ZBEa7_qGvR7DyohbY95_VlD24.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:b08::/48 Signature Algorithm: sha256WithRSAEncryption 28:36:17:f3:09:fa:c3:b0:f9:c1:1f:e9:12:a6:5d:7b:8d:a9: 21:74:bb:65:81:72:59:10:b7:5b:dc:2c:72:fc:db:c4:a8:29: d2:6f:25:fd:a9:20:c6:e7:9d:a4:a7:b6:af:7f:4b:ed:19:9a: d8:20:2c:24:cf:98:e4:09:21:52:42:9e:e8:ea:f6:4e:2f:f8: 56:ac:c9:6f:d4:40:5c:64:26:29:cb:5e:4a:c3:35:cf:cd:c9: 9c:90:c8:f2:2b:5c:34:78:ca:21:55:ee:03:85:25:f2:b7:47: 7b:6f:cb:8d:46:51:4d:8d:6a:a9:0b:96:f4:a4:08:3b:14:f1: 1a:9d:0f:79:7e:d3:77:e3:08:1c:5d:ce:77:e3:d0:c1:87:4e: 11:5e:70:e1:c1:12:ed:8c:37:1f:d5:15:db:ce:cd:80:c1:76: cd:22:ad:55:79:8a:31:95:5f:0a:28:b0:3b:0c:6c:a5:fa:e5: d1:86:78:2d:78:34:66:a3:b2:5b:05:ce:8e:6c:d3:41:85:98: fa:a0:2b:3f:9d:fa:33:68:ca:0b:86:21:a6:da:fa:b7:d4:2e: f3:b9:4b:9a:34:fd:37:e3:a4:e3:bf:ad:f0:1f:e0:42:b6:09: 70:2b:41:a1:3e:07:d0:33:5a:88:55:0e:43:be:0f:fa:1d:fb: 99:75:88:98 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57UhelTmw3coXWH7QGjC6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViNzY0MTExYWVmZmE4NmJkMWVjM2NhODg1YjYzZGU3ZjU2 NTBmNmUwHhcNMjYwMTAxMTQxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDUwNGVmYTUyNGE1YTY0YzQ5MTUyZDdiMDZjMTI0YTRmYTMyYThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jkJjp8ZYLGqI5M2owjN89vj0fYh 2MhulsI6kIL2djnh5EsZyUPy9vHEqy+iSIyTMcMxiSStGKllpiiQAqHYwvHk/RID 5dT03KXWQMaA/tcA9ieCGQDdnZM6Y0S3FLy9Kpzy/STD5T0qCgqUxFGcM75hZMUj /wUSaw3tCiDxITzmu8N54n9PGEvV9AoJOMxUhTnXcLdqePekTl/VD2c4Ofnz64jm 0RXcEjTjQCXDntTELtsABr2lpZ3SKy0WQadvggK6tK8qQDcRQQ1aSjR+zJ6hJlyZ Az8kmuyIWFXhP3vX+6YLkI4kipIl8JBqXStW44uRJb6tPe4nWefQ/4YFtQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFE1QTvpSSlpkxJFS17BsEkpPoyqPMB8GA1UdIwQY MBaAFOt2QRGu/6hr0ew8qIW2Pef1ZQ9uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjNaQkVhN19xR3ZSN0R5b2hiWTk1X1ZsRDI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8wM2IxZTctMzExMy00OGQ2LTliNzgt YjI4ODQ4ODhhZDNmLzEvVFZCTy1sSktXbVRFa1ZMWHNHd1NTay1qS284LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi8wM2IxZTctMzExMy00OGQ2LTliNzgtYjI4ODQ4ODhhZDNm LzEvNjNaQkVhN19xR3ZSN0R5b2hiWTk1X1ZsRDI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAsI MA0GCSqGSIb3DQEBCwUAA4IBAQAoNhfzCfrDsPnBH+kSpl17jakhdLtlgXJZELdb 3Cxy/NvEqCnSbyX9qSDG552kp7avf0vtGZrYICwkz5jkCSFSQp7o6vZOL/hWrMlv 1EBcZCYpy15KwzXPzcmckMjyK1w0eMohVe4DhSXyt0d7b8uNRlFNjWqpC5b0pAg7 FPEanQ95ftN34wgcXc5349DBh04RXnDhwRLtjDcf1RXbzs2AwXbNIq1VeYoxlV8K KLA7DGyl+uXRhngteDRmo7JbBc6ObNNBhZj6oCs/nfozaMoLhiGm2vq31C7zuUua NP0346Tjv63wH+BCtglwK0GhPgfQM1qIVQ5Dvg/6HfuZdYiY -----END CERTIFICATE-----Generated at Tue Jan 27 07:38:45 2026 by rpki-client