This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/tW-LG8p_My_QT_8i-gjOqmzJ1Ts.roa File: tW-LG8p_My_QT_8i-gjOqmzJ1Ts.roa (raw, json) Hash identifier: YItMICwV7cTxmKYQakjHX3JondYYmxrBy1kmJFx/JBA= Subject key identifier: B5:6F:8B:1B:CA:7F:33:2F:D0:4F:FF:22:FA:08:CE:AA:6C:C9:D5:3B Certificate issuer: /CN=d6c480bac972607fdab605593a84b8364c6ab1b0 Certificate serial: 019B7CED51C7331A920F6545AEA2985D9B46 Authority key identifier: D6:C4:80:BA:C9:72:60:7F:DA:B6:05:59:3A:84:B8:36:4C:6A:B1:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sSAuslyYH_atgVZOoS4NkxqsbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/tW-LG8p_My_QT_8i-gjOqmzJ1Ts.roa Signing time: Fri 02 Jan 2026 04:18:06 +0000 ROA not before: Fri 02 Jan 2026 04:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64449 IP address blocks: 2001:678:1d4::/48 maxlen: 48 2001:67c:d08::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/1sSAuslyYH_atgVZOoS4NkxqsbA.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/1sSAuslyYH_atgVZOoS4NkxqsbA.mft rsync://rpki.ripe.net/repository/DEFAULT/1sSAuslyYH_atgVZOoS4NkxqsbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:51:c7:33:1a:92:0f:65:45:ae:a2:98:5d:9b:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6c480bac972607fdab605593a84b8364c6ab1b0 Validity Not Before: Jan 2 04:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b56f8b1bca7f332fd04fff22fa08ceaa6cc9d53b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d7:94:a6:4b:35:7e:bc:a4:51:3e:b8:a4:ac: bf:5d:f1:52:01:03:a8:4e:3a:7a:65:73:8a:84:2b: 9a:60:e6:cc:de:f5:a8:37:d8:fe:46:8d:8d:bf:49: d6:fc:56:dd:f2:ba:d0:24:c3:7a:26:77:45:c7:a1: 34:e4:83:38:27:cb:2d:56:0e:ba:9b:c4:0b:53:34: a4:dd:b1:99:56:18:39:16:be:02:85:64:71:b5:e3: ed:35:b6:59:0d:cf:c1:10:c8:81:49:95:7e:bd:d7: 92:58:ec:5d:36:da:87:fb:38:f4:f5:b9:d6:cf:59: dd:9e:66:e7:eb:4d:7d:fe:1e:a3:b8:6e:6d:18:46: a4:ca:ea:91:ee:cc:06:b8:76:98:f0:35:5b:ee:3e: 3a:bc:92:99:6b:04:4f:c3:71:bb:b4:f6:9e:85:b3: 3d:0c:d8:ea:1c:49:1f:36:f0:7b:62:3c:72:0d:1e: 51:be:86:5e:96:1c:7f:e6:27:be:66:20:f0:b9:d0: c8:66:a6:97:97:f2:db:4a:f8:da:5f:fb:74:22:44: 33:af:df:f7:01:72:b0:d1:84:e2:e1:06:09:66:57: 8d:04:63:36:e8:4b:dd:55:a2:63:ff:29:f1:36:1a: 7e:8f:5c:ab:75:5d:c9:0f:9b:12:1a:ed:5c:f8:8b: 9c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:6F:8B:1B:CA:7F:33:2F:D0:4F:FF:22:FA:08:CE:AA:6C:C9:D5:3B X509v3 Authority Key Identifier: keyid:D6:C4:80:BA:C9:72:60:7F:DA:B6:05:59:3A:84:B8:36:4C:6A:B1:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sSAuslyYH_atgVZOoS4NkxqsbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/tW-LG8p_My_QT_8i-gjOqmzJ1Ts.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/1sSAuslyYH_atgVZOoS4NkxqsbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:1d4::/48 2001:67c:d08::/48 Signature Algorithm: sha256WithRSAEncryption 60:f9:da:3b:2b:b4:5f:43:b4:1b:cf:a5:42:0c:47:cd:d4:43: 74:86:3b:60:3d:15:8f:c5:97:91:75:3e:89:7e:68:fa:42:10: f6:a3:51:6a:8d:bb:e9:89:3b:c6:22:d1:0a:a6:5f:3f:c7:cf: 9f:43:fe:ca:62:5a:11:78:63:ed:c7:ea:0b:82:78:c7:94:66: e8:70:67:89:4b:72:23:dd:bc:1a:79:d6:35:f2:dc:13:55:af: 37:fb:bc:c0:bc:1f:4a:80:73:6a:26:44:bb:69:0a:2f:27:c8: ce:52:c1:e5:08:a4:16:52:e0:19:3c:79:66:e1:0e:b9:a4:49: 28:c7:f1:bc:ea:c3:05:9d:97:91:48:4c:7b:1e:76:27:de:97: 24:6c:c3:f2:ea:e8:9e:87:86:ac:85:a3:18:5a:68:01:ce:ff: 1b:0b:f5:af:8b:a7:c9:2a:6f:e1:ee:76:6f:ba:86:45:85:2a: 5f:1c:c8:c9:2d:f9:bb:f7:17:23:45:9b:30:0f:c7:68:1c:5b: 4c:13:59:6e:d3:c7:a1:81:d7:6b:ac:77:0b:19:04:3a:4d:6a: 08:c5:bd:cc:68:c4:11:9f:57:7c:9d:9e:b9:70:da:17:24:af: f4:43:51:16:76:b5:b4:46:45:7a:35:14:57:ab:aa:e2:05:f5: 98:18:48:64 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt87VHHMxqSD2VFrqKYXZtGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2YzQ4MGJhYzk3MjYwN2ZkYWI2MDU1OTNhODRiODM2NGM2 YWIxYjAwHhcNMjYwMTAyMDQxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTZmOGIxYmNhN2YzMzJmZDA0ZmZmMjJmYTA4Y2VhYTZjYzlkNTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNeUpks1frykUT64pKy/XfFSAQOo Tjp6ZXOKhCuaYObM3vWoN9j+Ro2Nv0nW/Fbd8rrQJMN6JndFx6E05IM4J8stVg66 m8QLUzSk3bGZVhg5Fr4ChWRxtePtNbZZDc/BEMiBSZV+vdeSWOxdNtqH+zj09bnW z1ndnmbn6019/h6juG5tGEakyuqR7swGuHaY8DVb7j46vJKZawRPw3G7tPaehbM9 DNjqHEkfNvB7YjxyDR5RvoZelhx/5ie+ZiDwudDIZqaXl/LbSvjaX/t0IkQzr9/3 AXKw0YTi4QYJZleNBGM26EvdVaJj/ynxNhp+j1yrdV3JD5sSGu1c+IucXwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLVvixvKfzMv0E//IvoIzqpsydU7MB8GA1UdIwQY MBaAFNbEgLrJcmB/2rYFWTqEuDZMarGwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXNTQXVzbHlZSF9hdGdWWk9vUzROa3hxc2JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy84OTE4ZmEtZjRhYi00YjE5LTk0NTMt OTdjNzNiZTkzYmNkLzEvdFctTEc4cF9NeV9RVF84aS1nak9xbXpKMVRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy84OTE4ZmEtZjRhYi00YjE5LTk0NTMtOTdjNzNiZTkzYmNk LzEvMXNTQXVzbHlZSF9hdGdWWk9vUzROa3hxc2JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAIAEGeAHU AwcAIAEGfA0IMA0GCSqGSIb3DQEBCwUAA4IBAQBg+do7K7RfQ7Qbz6VCDEfN1EN0 hjtgPRWPxZeRdT6Jfmj6QhD2o1FqjbvpiTvGItEKpl8/x8+fQ/7KYloReGPtx+oL gnjHlGbocGeJS3Ij3bwaedY18twTVa83+7zAvB9KgHNqJkS7aQovJ8jOUsHlCKQW UuAZPHlm4Q65pEkox/G86sMFnZeRSEx7HnYn3pckbMPy6uieh4ashaMYWmgBzv8b C/Wvi6fJKm/h7nZvuoZFhSpfHMjJLfm79xcjRZswD8doHFtME1lu08ehgddrrHcL GQQ6TWoIxb3MaMQRn1d8nZ65cNoXJK/0Q1EWdrW0RkV6NRRXq6riBfWYGEhk -----END CERTIFICATE-----Generated at Mon Feb 9 20:02:51 2026 by rpki-client