This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/TaW1xof2_FS-y1oMd64DHywlLM8.roa File: TaW1xof2_FS-y1oMd64DHywlLM8.roa (raw, json) Hash identifier: wpTtq6XsXybW5bFqRgDMjejQMJ2CiWnuwczXgfVlZ+M= Subject key identifier: 4D:A5:B5:C6:87:F6:FC:54:BE:CB:5A:0C:77:AE:03:1F:2C:25:2C:CF Certificate issuer: /CN=8452b03e1b01709638940d9592983cde77ecab77 Certificate serial: 019B78A21CC4C182843210BA477CDB6A18EC Authority key identifier: 84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/TaW1xof2_FS-y1oMd64DHywlLM8.roa Signing time: Thu 01 Jan 2026 08:17:28 +0000 ROA not before: Thu 01 Jan 2026 08:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197035 IP address blocks: 2a02:2000:3c5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:1c:c4:c1:82:84:32:10:ba:47:7c:db:6a:18:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8452b03e1b01709638940d9592983cde77ecab77 Validity Not Before: Jan 1 08:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4da5b5c687f6fc54becb5a0c77ae031f2c252ccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7c:d5:ac:6f:74:d1:b0:ae:43:4a:cd:f3:6a: 06:ff:b0:91:69:b5:c3:0f:1c:ad:9f:a3:af:77:cd: a0:92:7e:6d:7a:8c:56:0a:ef:bb:60:97:7f:9c:8f: a1:c9:68:24:62:56:f8:25:45:08:17:86:f6:e4:ca: c4:ee:75:94:47:22:11:3a:3a:fd:5b:32:ea:bf:fd: c7:e7:0e:17:dc:4c:06:f4:5d:3a:48:83:95:b5:5d: 16:f4:34:4b:5a:69:d8:66:ae:4d:8d:6c:4b:19:31: 7e:1e:e6:41:86:3f:c3:38:15:29:d6:b8:c4:23:6e: 17:83:01:aa:51:af:f9:82:75:78:a5:17:ca:95:07: 2c:45:fb:fa:a4:16:ad:33:79:11:28:bc:46:ff:ab: da:a4:a1:e5:dc:93:ad:84:3f:c7:b6:bf:e2:44:5b: b1:69:95:15:f1:b9:04:cc:cc:54:3f:38:36:a5:c9: db:e1:bf:e7:61:6c:b1:cb:98:55:43:38:38:6d:55: 68:fa:81:d5:8a:d3:bc:0a:dd:c9:dc:e3:96:49:27: 23:2c:38:75:72:86:9e:6a:dd:5b:fd:92:f0:e8:d6: 3e:b6:f1:e7:56:13:d1:62:59:2d:83:8a:24:06:96: 85:6b:07:05:c0:0e:89:cb:2f:07:62:d0:44:f7:89: e6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A5:B5:C6:87:F6:FC:54:BE:CB:5A:0C:77:AE:03:1F:2C:25:2C:CF X509v3 Authority Key Identifier: keyid:84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/TaW1xof2_FS-y1oMd64DHywlLM8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:2000:3c5::/48 Signature Algorithm: sha256WithRSAEncryption 92:0f:65:a7:fa:41:96:3f:ea:6a:8b:0c:01:5b:a6:82:f4:f6: a8:0d:ee:a3:2e:50:2a:a4:69:7e:dc:5c:2d:83:3f:7c:5a:e1: a1:92:29:7f:09:21:0f:cf:d4:96:04:3a:46:dd:60:4f:a4:b0: 83:31:4c:b3:4f:c7:b7:e4:10:d7:e7:7b:de:6d:c6:44:e4:ca: f5:a2:ae:e6:1d:6a:41:5c:5c:33:02:0a:11:93:75:59:ec:54: 52:66:03:d2:f7:73:59:d1:54:25:87:32:19:20:9f:87:ac:15: 80:9d:13:cc:f1:0e:7c:77:2f:42:c3:4a:60:29:c3:6a:01:73: da:40:23:7d:74:0a:72:72:ef:63:3a:4d:09:0f:af:35:24:4f: 4c:0b:98:d2:31:d9:b7:10:3e:19:41:65:49:ac:fe:13:b7:7f: fd:87:a5:49:c7:4c:71:1a:ba:f8:4d:ac:ed:c8:5b:68:d5:a1: 2e:2c:d6:c0:b2:bb:e2:7a:d2:c3:41:12:46:5c:31:04:81:14: 6b:d8:7f:e1:ef:45:52:4f:ca:18:3d:e6:bd:ff:72:bf:01:0e: ba:c1:a3:2b:36:a0:a5:51:19:d4:a1:ac:7e:cb:4d:84:35:9a: 91:01:6a:ae:a0:bb:88:70:cd:7a:19:02:56:33:7e:84:36:12: 66:6f:bc:4e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4ohzEwYKEMhC6R3zbahjsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NTJiMDNlMWIwMTcwOTYzODk0MGQ5NTkyOTgzY2RlNzdl Y2FiNzcwHhcNMjYwMTAxMDgxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZGE1YjVjNjg3ZjZmYzU0YmVjYjVhMGM3N2FlMDMxZjJjMjUyY2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnzVrG900bCuQ0rN82oG/7CRabXD Dxytn6Ovd82gkn5teoxWCu+7YJd/nI+hyWgkYlb4JUUIF4b25MrE7nWURyIROjr9 WzLqv/3H5w4X3EwG9F06SIOVtV0W9DRLWmnYZq5NjWxLGTF+HuZBhj/DOBUp1rjE I24XgwGqUa/5gnV4pRfKlQcsRfv6pBatM3kRKLxG/6vapKHl3JOthD/Htr/iRFux aZUV8bkEzMxUPzg2pcnb4b/nYWyxy5hVQzg4bVVo+oHVitO8Ct3J3OOWSScjLDh1 coaeat1b/ZLw6NY+tvHnVhPRYlktg4okBpaFawcFwA6Jyy8HYtBE94nmdQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFE2ltcaH9vxUvstaDHeuAx8sJSzPMB8GA1UdIwQY MBaAFIRSsD4bAXCWOJQNlZKYPN537Kt3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8wMTFmNmUtZTkyOC00ZjJiLWFhMjQt MjAwZmMyNzRjYjAxLzEvVGFXMXhvZjJfRlMteTFvTWQ2NERIeXdsTE04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8wMTFmNmUtZTkyOC00ZjJiLWFhMjQtMjAwZmMyNzRjYjAx LzEvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgIgAAPF MA0GCSqGSIb3DQEBCwUAA4IBAQCSD2Wn+kGWP+pqiwwBW6aC9PaoDe6jLlAqpGl+ 3Fwtgz98WuGhkil/CSEPz9SWBDpG3WBPpLCDMUyzT8e35BDX53vebcZE5Mr1oq7m HWpBXFwzAgoRk3VZ7FRSZgPS93NZ0VQlhzIZIJ+HrBWAnRPM8Q58dy9Cw0pgKcNq AXPaQCN9dApycu9jOk0JD681JE9MC5jSMdm3ED4ZQWVJrP4Tt3/9h6VJx0xxGrr4 TaztyFto1aEuLNbAsrvietLDQRJGXDEEgRRr2H/h70VST8oYPea9/3K/AQ66waMr NqClURnUoax+y02ENZqRAWquoLuIcM16GQJWM36ENhJmb7xO -----END CERTIFICATE-----Generated at Tue Jan 27 02:50:38 2026 by rpki-client