This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/TM56q_Km90IofYyolcjUGG4s9_E.roa File: TM56q_Km90IofYyolcjUGG4s9_E.roa (raw, json) Hash identifier: +vMdN883JqiJ4BCwwMasiDlvt3eGgHHdJPYkXZCMObo= Subject key identifier: 4C:CE:7A:AB:F2:A6:F7:42:28:7D:8C:A8:95:C8:D4:18:6E:2C:F7:F1 Certificate issuer: /CN=018cc6f466a241657bf5ec52a630daeb01222f85 Certificate serial: 019B79ECC9177B2F5CF9D65D0C60BD2C7B14 Authority key identifier: 01:8C:C6:F4:66:A2:41:65:7B:F5:EC:52:A6:30:DA:EB:01:22:2F:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/TM56q_Km90IofYyolcjUGG4s9_E.roa Signing time: Thu 01 Jan 2026 14:18:39 +0000 ROA not before: Thu 01 Jan 2026 14:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 23738 IP address blocks: 2a0f:d800::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:c9:17:7b:2f:5c:f9:d6:5d:0c:60:bd:2c:7b:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=018cc6f466a241657bf5ec52a630daeb01222f85 Validity Not Before: Jan 1 14:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4cce7aabf2a6f742287d8ca895c8d4186e2cf7f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ac:d8:f2:9c:13:39:86:4b:ed:4f:ba:b4:39: ca:5b:50:82:9a:5e:84:fb:b8:ae:8a:76:4f:1b:81: db:eb:07:ef:50:47:97:0e:af:4a:75:6a:7a:53:14: 7d:46:f0:73:e6:6c:39:4c:e8:7a:08:9d:42:e2:ca: 4d:4a:2a:ca:ea:79:7c:dd:96:5b:9d:73:ee:23:eb: 09:08:08:85:19:f1:88:12:90:cc:71:3e:a5:3e:ef: ad:d7:b7:cc:df:2b:88:5d:13:7b:2d:05:81:cc:0f: 75:74:33:e1:7a:e7:d2:d5:77:80:87:8f:a1:73:e1: 75:a9:97:6c:48:67:79:5b:a3:2d:a8:a1:7b:ea:13: 66:e7:99:8a:d9:5a:78:1c:08:1c:6a:d2:d5:ac:6a: ae:1f:d9:1f:45:03:67:d5:58:ae:d2:46:56:34:6f: 4b:25:e4:a5:45:13:e0:c2:d5:36:84:55:31:2e:22: f3:38:a9:87:e9:91:45:b0:ec:25:d8:2d:74:7b:b4: 77:5c:81:49:f3:be:ba:38:e0:ef:66:ba:c3:3c:58: 8d:5e:d8:f7:9e:68:03:f6:c3:b1:93:7e:4c:66:46: cf:b4:8e:8d:61:49:05:f7:4c:1d:a4:31:78:d4:6f: f0:1f:f5:10:a5:ed:64:65:d2:ea:a4:10:b7:25:da: d9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:CE:7A:AB:F2:A6:F7:42:28:7D:8C:A8:95:C8:D4:18:6E:2C:F7:F1 X509v3 Authority Key Identifier: keyid:01:8C:C6:F4:66:A2:41:65:7B:F5:EC:52:A6:30:DA:EB:01:22:2F:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/TM56q_Km90IofYyolcjUGG4s9_E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:d800::/29 Signature Algorithm: sha256WithRSAEncryption 7f:99:6b:29:a5:72:ed:e7:4f:52:29:17:fc:23:e1:5e:64:5b: 5a:23:d8:23:3e:a5:ef:97:e3:5f:34:0d:79:26:d8:65:78:b7: 03:36:aa:d2:84:31:9f:a6:62:02:57:b5:b7:cc:f6:9e:e2:8b: 7c:d2:74:bc:ba:2b:98:b1:34:93:38:8a:dc:a9:f0:f1:65:ae: 90:cd:11:9c:da:48:06:cf:b1:e5:b5:96:4d:97:a2:9c:03:da: 91:f4:d7:b4:99:ce:8c:b0:ce:35:28:83:54:d1:b4:0b:58:70: fe:72:1a:c6:9e:aa:6a:23:5f:4f:2c:b5:bf:f9:cd:6f:15:4c: ef:33:c6:e0:78:2f:c8:ea:84:26:2b:33:6d:f8:38:a8:96:15: 6c:24:ad:f7:3a:0d:2f:ba:2e:25:1e:2a:d4:5f:f4:2f:26:88: 20:41:64:cf:97:f9:db:aa:82:d7:1b:85:05:b7:44:7b:05:91: 7a:b8:74:59:ce:f4:35:fd:25:04:66:86:e7:bc:a6:84:d2:a1: 33:e6:dd:3a:93:a8:e6:de:38:36:57:25:55:16:50:83:08:9d: fa:17:95:f4:98:71:6a:0a:3b:79:05:12:ac:0e:3c:ec:99:36: 44:98:b1:64:12:53:5e:8d:4f:6a:0e:cd:a9:d1:e8:4a:ae:73: 6e:8b:22:93 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt57MkXey9c+dZdDGC9LHsUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxOGNjNmY0NjZhMjQxNjU3YmY1ZWM1MmE2MzBkYWViMDEy MjJmODUwHhcNMjYwMTAxMTQxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Y2NlN2FhYmYyYTZmNzQyMjg3ZDhjYTg5NWM4ZDQxODZlMmNmN2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsazY8pwTOYZL7U+6tDnKW1CCml6E +7iuinZPG4Hb6wfvUEeXDq9KdWp6UxR9RvBz5mw5TOh6CJ1C4spNSirK6nl83ZZb nXPuI+sJCAiFGfGIEpDMcT6lPu+t17fM3yuIXRN7LQWBzA91dDPheufS1XeAh4+h c+F1qZdsSGd5W6MtqKF76hNm55mK2Vp4HAgcatLVrGquH9kfRQNn1Viu0kZWNG9L JeSlRRPgwtU2hFUxLiLzOKmH6ZFFsOwl2C10e7R3XIFJ8766OODvZrrDPFiNXtj3 nmgD9sOxk35MZkbPtI6NYUkF90wdpDF41G/wH/UQpe1kZdLqpBC3JdrZ5QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFEzOeqvypvdCKH2MqJXI1BhuLPfxMB8GA1UdIwQY MBaAFAGMxvRmokFle/XsUqYw2usBIi+FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVl6RzlHYWlRV1Y3OWV4U3BqRGE2d0VpTDRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8zY2YyZmItY2Y0My00YzUyLWEyYTEt YmU4ZDhjNjdkZjk1LzEvVE01NnFfS205MElvZll5b2xjalVHRzRzOV9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8zY2YyZmItY2Y0My00YzUyLWEyYTEtYmU4ZDhjNjdkZjk1 LzEvQVl6RzlHYWlRV1Y3OWV4U3BqRGE2d0VpTDRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg/YADAN BgkqhkiG9w0BAQsFAAOCAQEAf5lrKaVy7edPUikX/CPhXmRbWiPYIz6l75fjXzQN eSbYZXi3Azaq0oQxn6ZiAle1t8z2nuKLfNJ0vLormLE0kziK3Knw8WWukM0RnNpI Bs+x5bWWTZeinAPakfTXtJnOjLDONSiDVNG0C1hw/nIaxp6qaiNfTyy1v/nNbxVM 7zPG4HgvyOqEJiszbfg4qJYVbCSt9zoNL7ouJR4q1F/0LyaIIEFkz5f526qC1xuF BbdEewWRerh0Wc70Nf0lBGaG57ymhNKhM+bdOpOo5t44NlclVRZQgwid+heV9Jhx ago7eQUSrA487Jk2RJixZBJTXo1Pag7NqdHoSq5zbosikw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:31 2026 by rpki-client