This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/TgSjezapMuuWq8pkF-TYK4ScMuU.roa File: TgSjezapMuuWq8pkF-TYK4ScMuU.roa (raw, json) Hash identifier: L7EiiwNxhqPHXZRioPwC6ataSR9LkN3gVKQcN0YntoM= Subject key identifier: 4E:04:A3:7B:36:A9:32:EB:96:AB:CA:64:17:E4:D8:2B:84:9C:32:E5 Certificate issuer: /CN=f1e57e350d3a6db8a580559299f0b9d38bcc5952 Certificate serial: 019B79106C15CC1E8DE58763CEAFB3A6F61C Authority key identifier: F1:E5:7E:35:0D:3A:6D:B8:A5:80:55:92:99:F0:B9:D3:8B:CC:59:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8eV-NQ06bbilgFWSmfC504vMWVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/TgSjezapMuuWq8pkF-TYK4ScMuU.roa Signing time: Thu 01 Jan 2026 10:17:58 +0000 ROA not before: Thu 01 Jan 2026 10:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 2a12:dd40::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.mft rsync://rpki.ripe.net/repository/DEFAULT/8eV-NQ06bbilgFWSmfC504vMWVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:6c:15:cc:1e:8d:e5:87:63:ce:af:b3:a6:f6:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1e57e350d3a6db8a580559299f0b9d38bcc5952 Validity Not Before: Jan 1 10:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e04a37b36a932eb96abca6417e4d82b849c32e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:af:6e:97:e7:49:d2:d0:cc:cf:06:f5:3b:78: 78:51:6c:82:4b:39:81:92:d3:7d:15:cb:90:b7:69: 57:9d:34:ef:1d:e7:b9:60:f1:fe:9e:b7:80:9d:49: fd:24:2d:e8:e6:e3:ec:6a:90:e9:e2:b4:22:fc:2d: 11:42:8b:cc:21:5a:36:f2:9c:8b:6c:78:f6:88:64: ea:c7:7d:d8:5c:bf:df:a7:84:ae:23:b2:4f:4f:b6: 6e:4b:b9:80:19:8a:86:70:2a:97:3b:15:9b:7d:e2: ea:ad:49:f9:a1:9e:3b:de:79:b2:d9:95:ca:ae:1c: b7:6f:27:27:af:81:f7:60:92:ff:45:68:3a:a3:08: 5a:72:aa:9e:49:c0:c0:e7:37:8e:eb:98:98:7c:0b: bf:c6:38:48:0e:c8:1b:64:2c:a1:80:4a:f3:18:c3: f2:1f:21:3b:2d:58:39:8a:33:af:c4:84:8e:30:85: dd:70:74:a7:cc:fe:3c:a1:9f:a7:3c:be:4d:b1:5f: b7:ab:38:d6:ea:53:48:ab:5d:fa:71:8b:c6:9e:c2: c9:d5:a8:9e:51:25:68:cf:77:e7:57:33:94:e8:4a: fb:ae:ed:70:59:96:52:0f:5e:94:f0:ec:9b:b5:45: 76:0f:ad:93:3c:90:7b:e5:16:3d:b0:8e:66:3d:af: 13:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:04:A3:7B:36:A9:32:EB:96:AB:CA:64:17:E4:D8:2B:84:9C:32:E5 X509v3 Authority Key Identifier: keyid:F1:E5:7E:35:0D:3A:6D:B8:A5:80:55:92:99:F0:B9:D3:8B:CC:59:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8eV-NQ06bbilgFWSmfC504vMWVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/TgSjezapMuuWq8pkF-TYK4ScMuU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:dd40::/29 Signature Algorithm: sha256WithRSAEncryption 84:70:05:fb:98:12:33:9e:9d:dc:b6:f4:87:4d:27:21:8a:11: 22:52:42:c2:c6:5d:8c:e9:05:aa:2a:26:1a:7d:d4:08:fb:e5: 7d:cb:a6:5c:ce:4d:1e:bc:c6:3f:6c:f5:24:90:1f:9f:bf:b6: 19:ea:fb:d7:0b:0e:db:39:b7:f8:68:d9:a5:85:3f:e6:7d:64: 71:8f:f1:32:59:47:9d:95:29:30:74:fd:28:5a:8d:e6:85:dc: e3:15:39:5b:60:4f:2a:d1:73:a3:bd:41:a1:a4:3d:55:5d:ed: 09:46:30:8e:39:63:16:d7:3b:d7:92:d8:fe:64:e3:69:f9:a0: 23:0e:aa:df:ba:59:75:8e:a3:35:ea:09:73:d3:d5:2b:7a:a0: b0:d6:f4:d9:ce:ea:50:a5:4d:cc:8c:2e:c1:e3:e6:1e:eb:9e: 20:24:9b:0b:1d:49:be:60:8d:60:3c:02:e5:cc:30:ea:e8:73: 26:0c:b0:7e:f4:1f:80:9c:6e:d9:97:eb:c5:6b:8a:b1:81:21: 2f:8c:13:16:e3:2b:5f:b0:d2:2d:4d:d9:35:eb:8d:e3:f0:31: 08:d5:db:c8:58:43:1c:03:1a:6a:cc:44:44:99:a2:40:9b:06: e9:3a:f6:1f:d4:3f:81:78:cc:9b:bd:34:e2:5a:bf:bf:11:62: 4e:11:5b:6e -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt5EGwVzB6N5Ydjzq+zpvYcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZTU3ZTM1MGQzYTZkYjhhNTgwNTU5Mjk5ZjBiOWQzOGJj YzU5NTIwHhcNMjYwMTAxMTAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTA0YTM3YjM2YTkzMmViOTZhYmNhNjQxN2U0ZDgyYjg0OWMzMmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+q9ul+dJ0tDMzwb1O3h4UWyCSzmB ktN9FcuQt2lXnTTvHee5YPH+nreAnUn9JC3o5uPsapDp4rQi/C0RQovMIVo28pyL bHj2iGTqx33YXL/fp4SuI7JPT7ZuS7mAGYqGcCqXOxWbfeLqrUn5oZ473nmy2ZXK rhy3bycnr4H3YJL/RWg6owhacqqeScDA5zeO65iYfAu/xjhIDsgbZCyhgErzGMPy HyE7LVg5ijOvxISOMIXdcHSnzP48oZ+nPL5NsV+3qzjW6lNIq136cYvGnsLJ1aie USVoz3fnVzOU6Er7ru1wWZZSD16U8OybtUV2D62TPJB75RY9sI5mPa8TCwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFE4Eo3s2qTLrlqvKZBfk2CuEnDLlMB8GA1UdIwQY MBaAFPHlfjUNOm24pYBVkpnwudOLzFlSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGVWLU5RMDZiYmlsZ0ZXU21mQzUwNHZNV1ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8yMjJkZjItNjIyNS00MDQxLTljYjAt MGNkOWZhYTU2NTNlLzEvVGdTamV6YXBNdXVXcThwa0YtVFlLNFNjTXVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8yMjJkZjItNjIyNS00MDQxLTljYjAtMGNkOWZhYTU2NTNl LzEvOGVWLU5RMDZiYmlsZ0ZXU21mQzUwNHZNV1ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhLdQDAN BgkqhkiG9w0BAQsFAAOCAQEAhHAF+5gSM56d3Lb0h00nIYoRIlJCwsZdjOkFqiom Gn3UCPvlfcumXM5NHrzGP2z1JJAfn7+2Ger71wsO2zm3+GjZpYU/5n1kcY/xMllH nZUpMHT9KFqN5oXc4xU5W2BPKtFzo71BoaQ9VV3tCUYwjjljFtc715LY/mTjafmg Iw6q37pZdY6jNeoJc9PVK3qgsNb02c7qUKVNzIwuwePmHuueICSbCx1JvmCNYDwC 5cww6uhzJgywfvQfgJxu2ZfrxWuKsYEhL4wTFuMrX7DSLU3ZNeuN4/AxCNXbyFhD HAMaasxERJmiQJsG6Tr2H9Q/gXjMm7004lq/vxFiThFbbg== -----END CERTIFICATE-----Generated at Fri Jan 9 00:57:53 2026 by rpki-client