This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/tp2VAgTi6H7UsWr3WWiFgob6-Yg.roa File: tp2VAgTi6H7UsWr3WWiFgob6-Yg.roa (raw, json) Hash identifier: CPo8RNxtFyI7EIPAUaIjkVpI3fVg5oAaTxsNnGEN0eI= Subject key identifier: B6:9D:95:02:04:E2:E8:7E:D4:B1:6A:F7:59:68:85:82:86:FA:F9:88 Certificate issuer: /CN=6b1a157e20adca3b44067ba8d8dcabae698a8bec Certificate serial: 019B7AC80397FD60E4AD4B994A65B2B83732 Authority key identifier: 6B:1A:15:7E:20:AD:CA:3B:44:06:7B:A8:D8:DC:AB:AE:69:8A:8B:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/tp2VAgTi6H7UsWr3WWiFgob6-Yg.roa Signing time: Thu 01 Jan 2026 18:18:07 +0000 ROA not before: Thu 01 Jan 2026 18:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199429 IP address blocks: 2001:67c:11d0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:03:97:fd:60:e4:ad:4b:99:4a:65:b2:b8:37:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1a157e20adca3b44067ba8d8dcabae698a8bec Validity Not Before: Jan 1 18:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b69d950204e2e87ed4b16af75968858286faf988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:40:20:3c:a8:a8:1d:af:47:58:fb:8f:2e:07: 4e:91:17:20:64:04:4a:7a:e0:ec:95:db:97:7c:69: 6a:af:f8:c0:10:a8:12:a6:c9:23:0f:6f:5b:65:04: e6:d1:f1:3c:1a:2c:e7:88:64:82:cc:3b:67:19:6d: 38:e1:9b:9e:d5:d3:fa:af:f0:d4:20:68:90:c7:65: fa:11:02:24:bb:4b:00:e1:fb:db:4e:7f:df:f0:5a: 5d:4a:44:df:3e:8f:d8:85:e7:59:be:f5:15:03:18: 0a:26:50:e6:50:bd:fb:34:00:2b:02:39:40:3b:3d: e0:6c:9f:e2:53:00:a7:37:42:2f:8e:2b:12:96:24: 9a:7d:83:57:e0:8d:43:03:ed:4e:d4:0d:d0:ff:5e: 6c:30:8c:5f:f4:51:a2:83:c3:c5:69:d8:91:0a:a6: 3c:1b:75:8a:c3:63:58:11:c0:bc:ff:29:77:13:ec: d4:51:7c:4f:66:81:fe:f5:30:5b:94:72:6b:45:c1: b0:f8:94:5b:e4:e2:05:98:c9:25:0e:d6:fd:81:90: 92:67:6c:7a:95:13:90:34:3d:0b:e0:2e:20:2e:f9: 32:ba:83:65:df:f0:b7:47:ab:cd:14:ef:88:59:3a: b3:8f:8a:20:7f:55:b2:aa:7a:d2:aa:9a:1c:4b:45: 14:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:9D:95:02:04:E2:E8:7E:D4:B1:6A:F7:59:68:85:82:86:FA:F9:88 X509v3 Authority Key Identifier: keyid:6B:1A:15:7E:20:AD:CA:3B:44:06:7B:A8:D8:DC:AB:AE:69:8A:8B:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/tp2VAgTi6H7UsWr3WWiFgob6-Yg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:11d0::/48 Signature Algorithm: sha256WithRSAEncryption 42:6a:66:59:e9:4d:da:38:da:f8:7c:ae:0c:6b:ca:a2:bd:7d: 3a:2a:7d:3e:2b:57:14:7f:34:50:8c:da:02:f4:0c:b5:bf:bb: 84:fc:c2:07:58:27:b1:3a:cb:43:cc:55:4c:71:ef:b4:55:94: dc:94:d5:0c:f3:f8:4b:00:c7:57:b7:6e:1d:62:8e:0d:1e:2c: 0b:eb:64:3c:dc:68:a4:38:74:26:03:1b:d4:50:8e:20:1b:5f: db:7b:b2:37:e4:25:a6:9d:47:ab:71:5a:8b:0b:b0:82:19:b0: db:bc:54:2a:03:26:bb:50:22:0d:a8:44:91:f5:e2:81:8d:5a: 5c:58:6e:bb:f4:f8:d5:00:c1:c6:bf:fa:37:10:1e:50:30:54: 5d:fc:be:16:88:fc:6a:2e:28:0d:02:34:72:d7:42:5b:12:07: ec:46:19:d8:95:cd:3c:6b:c0:3a:15:4c:79:ca:ec:75:c1:da: f4:89:4f:a2:42:1e:cc:9f:4f:ba:8e:8c:05:fe:f7:5d:42:63: 5f:d2:65:f2:ab:e9:71:37:d7:7b:cc:b5:4b:6b:6e:cc:e0:ae: 6c:c6:ff:e8:0b:ac:60:83:8d:07:5b:39:27:bd:8a:fb:4d:91: d4:19:34:57:66:ee:6a:86:42:9a:d6:a2:29:5f:e9:08:7d:e2: 84:bd:6e:14 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6yAOX/WDkrUuZSmWyuDcyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMWExNTdlMjBhZGNhM2I0NDA2N2JhOGQ4ZGNhYmFlNjk4 YThiZWMwHhcNMjYwMTAxMTgxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjlkOTUwMjA0ZTJlODdlZDRiMTZhZjc1OTY4ODU4Mjg2ZmFmOTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkAgPKioHa9HWPuPLgdOkRcgZARK euDslduXfGlqr/jAEKgSpskjD29bZQTm0fE8GizniGSCzDtnGW044Zue1dP6r/DU IGiQx2X6EQIku0sA4fvbTn/f8FpdSkTfPo/YhedZvvUVAxgKJlDmUL37NAArAjlA Oz3gbJ/iUwCnN0IvjisSliSafYNX4I1DA+1O1A3Q/15sMIxf9FGig8PFadiRCqY8 G3WKw2NYEcC8/yl3E+zUUXxPZoH+9TBblHJrRcGw+JRb5OIFmMklDtb9gZCSZ2x6 lROQND0L4C4gLvkyuoNl3/C3R6vNFO+IWTqzj4ogf1WyqnrSqpocS0UUpQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLadlQIE4uh+1LFq91lohYKG+vmIMB8GA1UdIwQY MBaAFGsaFX4grco7RAZ7qNjcq65piovsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXhvVmZpQ3R5anRFQm51bzJOeXJybW1LaS13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC84NzAzODMtZGY5YS00NzljLThlZTEt MzZkYzI4MDBmZGVkLzEvdHAyVkFnVGk2SDdVc1dyM1dXaUZnb2I2LVlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC84NzAzODMtZGY5YS00NzljLThlZTEtMzZkYzI4MDBmZGVk LzEvYXhvVmZpQ3R5anRFQm51bzJOeXJybW1LaS13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBHQ MA0GCSqGSIb3DQEBCwUAA4IBAQBCamZZ6U3aONr4fK4Ma8qivX06Kn0+K1cUfzRQ jNoC9Ay1v7uE/MIHWCexOstDzFVMce+0VZTclNUM8/hLAMdXt24dYo4NHiwL62Q8 3GikOHQmAxvUUI4gG1/be7I35CWmnUercVqLC7CCGbDbvFQqAya7UCINqESR9eKB jVpcWG679PjVAMHGv/o3EB5QMFRd/L4WiPxqLigNAjRy10JbEgfsRhnYlc08a8A6 FUx5yux1wdr0iU+iQh7Mn0+6jowF/vddQmNf0mXyq+lxN9d7zLVLa27M4K5sxv/o C6xgg40HWzknvYr7TZHUGTRXZu5qhkKa1qIpX+kIfeKEvW4U -----END CERTIFICATE-----Generated at Tue Jan 20 00:00:13 2026 by rpki-client