This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/183182-430b-4d68-9149-3513992ebea9/1/TJFXtC-1rQPQ0Z6bh_HrT8s_4I4.roa
File: TJFXtC-1rQPQ0Z6bh_HrT8s_4I4.roa (raw, json)
Hash identifier: 5KQuFX+E0BuuThyT34kOU6fnZW9hIrSYJx607gSANTI=
Subject key identifier: 4C:91:57:B4:2F:B5:AD:03:D0:D1:9E:9B:87:F1:EB:4F:CB:3F:E0:8E
Certificate issuer: /CN=156f67d500ca96a48d0e4b6a47c41b233b7466bd
Certificate serial: 019C22EA0F8110110CEF3AA11520F7B2FAFA
Authority key identifier: 15:6F:67:D5:00:CA:96:A4:8D:0E:4B:6A:47:C4:1B:23:3B:74:66:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FW9n1QDKlqSNDktqR8QbIzt0Zr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/183182-430b-4d68-9149-3513992ebea9/1/TJFXtC-1rQPQ0Z6bh_HrT8s_4I4.roa
Signing time: Tue 03 Feb 2026 09:51:30 +0000
ROA not before: Tue 03 Feb 2026 09:51:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60404
IP address blocks: 2a0b:b600:1000::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/183182-430b-4d68-9149-3513992ebea9/1/FW9n1QDKlqSNDktqR8QbIzt0Zr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/183182-430b-4d68-9149-3513992ebea9/1/FW9n1QDKlqSNDktqR8QbIzt0Zr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FW9n1QDKlqSNDktqR8QbIzt0Zr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:22:ea:0f:81:10:11:0c:ef:3a:a1:15:20:f7:b2:fa:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=156f67d500ca96a48d0e4b6a47c41b233b7466bd
Validity
Not Before: Feb 3 09:51:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c9157b42fb5ad03d0d19e9b87f1eb4fcb3fe08e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6c:91:85:3f:be:5f:15:9a:9d:1b:f3:b8:82:
3b:b1:75:9a:78:04:78:7e:20:e7:11:c3:31:2c:01:
d0:6c:84:6c:77:0d:1c:3c:3d:dc:3c:9e:2e:ac:09:
85:7a:99:49:d0:86:78:64:73:ed:72:aa:3c:82:c8:
cf:66:15:a5:e9:65:11:39:40:80:30:d4:1d:1f:05:
af:cb:41:cc:3a:dd:fa:b0:7a:8f:0a:84:d6:25:9e:
36:4f:b5:9b:65:41:20:78:87:3e:a4:b7:cf:f9:93:
ef:0e:cb:2c:41:5c:b5:f9:91:79:0c:1d:92:5f:2a:
95:7b:a1:99:01:b4:ee:d0:67:1d:7f:94:1f:e6:cf:
16:6c:40:96:03:b1:70:07:66:0f:00:ca:50:87:89:
37:a2:f9:15:35:ba:02:d7:ae:53:69:e6:e7:55:a5:
89:45:f5:b3:26:33:ac:e1:38:06:a5:b7:76:52:1e:
66:63:1c:a6:3b:ee:3e:56:d7:70:24:35:b9:5a:e8:
f8:1c:35:8a:9d:09:0b:e5:b0:19:8c:fb:93:97:65:
6b:c1:7d:48:3e:45:bc:35:a0:95:4b:0f:8f:4d:2b:
2c:09:3b:5e:51:02:31:28:8e:b7:0a:c1:4a:0f:a7:
f1:6d:59:fe:c1:c5:90:38:38:cc:b7:1f:85:14:7e:
92:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:91:57:B4:2F:B5:AD:03:D0:D1:9E:9B:87:F1:EB:4F:CB:3F:E0:8E
X509v3 Authority Key Identifier:
keyid:15:6F:67:D5:00:CA:96:A4:8D:0E:4B:6A:47:C4:1B:23:3B:74:66:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FW9n1QDKlqSNDktqR8QbIzt0Zr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/183182-430b-4d68-9149-3513992ebea9/1/TJFXtC-1rQPQ0Z6bh_HrT8s_4I4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/183182-430b-4d68-9149-3513992ebea9/1/FW9n1QDKlqSNDktqR8QbIzt0Zr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b600:1000::/38
Signature Algorithm: sha256WithRSAEncryption
41:0a:1c:60:77:8e:a7:b7:6c:7f:29:92:45:50:73:3c:9d:37:
ec:74:08:96:39:bc:00:e9:b3:88:da:7d:7b:00:87:76:19:36:
59:f1:3d:ff:4e:76:44:18:b8:e1:b9:5b:e7:c9:9b:f4:e4:cf:
b8:90:ab:79:88:97:6d:0b:f2:d3:90:29:70:51:da:e4:8a:80:
6e:38:4e:f1:e5:8d:88:e3:51:ee:36:bb:c3:5c:94:fb:20:22:
30:6b:97:ba:b8:1d:36:08:fa:b3:19:de:d1:3c:41:81:b5:04:
b1:33:ff:10:c6:40:df:65:c0:4b:29:6b:e0:2c:59:c2:1e:c7:
a2:05:20:10:4f:e6:bd:80:a1:e7:b2:64:03:70:5c:6b:53:3a:
b7:99:52:44:d5:5d:f5:ca:ba:8e:57:62:19:e0:8e:c7:5e:4f:
9d:2c:0c:1f:55:01:12:00:a9:b3:23:0d:96:e0:2b:48:f4:29:
db:b0:fb:e1:22:63:ac:3a:5c:93:ff:3f:db:b6:4e:80:fc:bf:
e8:32:b7:d6:a8:29:37:38:d7:b8:8d:b1:f9:77:88:23:28:1b:
e7:f7:9c:67:f1:78:73:11:57:f4:76:e2:4a:a7:e3:09:a6:a0:
f1:cd:e0:58:3b:58:68:dd:8d:4c:eb:2d:dd:a5:0d:46:17:79:
03:0a:4d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:23:22 2026 by rpki-client