This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/tkDo3ZU0uU50tRqmy_OtbPqQ45I.roa File: tkDo3ZU0uU50tRqmy_OtbPqQ45I.roa (raw, json) Hash identifier: oFn0sS2KIEC+fcfgS1boOcIBmwWzk50WRGkvZp+ryXo= Subject key identifier: B6:40:E8:DD:95:34:B9:4E:74:B5:1A:A6:CB:F3:AD:6C:FA:90:E3:92 Certificate issuer: /CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148 Certificate serial: 019B791072AF78B4AE54393DD292BBCD0861 Authority key identifier: AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/tkDo3ZU0uU50tRqmy_OtbPqQ45I.roa Signing time: Thu 01 Jan 2026 10:17:59 +0000 ROA not before: Thu 01 Jan 2026 10:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208559 IP address blocks: 2a02:f28:23::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:72:af:78:b4:ae:54:39:3d:d2:92:bb:cd:08:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148 Validity Not Before: Jan 1 10:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b640e8dd9534b94e74b51aa6cbf3ad6cfa90e392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:bf:30:ba:83:73:6e:08:87:42:d7:dd:d2:20: 21:d1:80:88:9f:b3:96:68:99:fb:06:30:90:cd:65: c7:48:61:71:71:64:18:7d:c4:79:64:0b:48:ef:11: 80:a3:b9:7c:42:0c:4a:45:e7:64:9c:54:88:6f:65: 72:fa:5d:c3:79:73:b1:62:69:d2:00:57:3d:f1:66: d5:6f:bc:af:13:b9:41:7e:bf:e7:7e:44:dc:0d:0c: 92:83:46:4c:64:fd:53:d9:d1:af:c6:1b:c4:cb:87: 49:06:24:57:4e:4e:ae:df:6a:bf:14:50:8a:52:01: 7e:24:1d:c3:7c:9f:e1:2e:bc:89:b7:cb:eb:a0:76: 4e:ac:87:fa:93:6c:96:d4:ed:75:6d:6b:f8:5f:af: 89:ff:fd:33:36:a9:81:a5:9b:30:39:8e:68:37:16: 42:60:3b:ad:22:c4:ff:01:48:09:60:f2:19:10:31: 55:f3:ab:88:63:7b:b2:2b:4b:68:0a:dd:25:6c:a5: 83:4f:47:35:97:8a:13:34:33:35:8e:e7:61:04:6c: b3:ff:70:66:0b:8c:a6:79:30:7d:1a:56:e0:9b:d7: e2:7d:be:0b:ba:38:da:0f:fb:3e:f9:9b:43:f3:95: 6e:48:6e:2b:dd:7d:e4:25:38:41:6e:87:7a:80:1d: 62:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:40:E8:DD:95:34:B9:4E:74:B5:1A:A6:CB:F3:AD:6C:FA:90:E3:92 X509v3 Authority Key Identifier: keyid:AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/tkDo3ZU0uU50tRqmy_OtbPqQ45I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:f28:23::/48 Signature Algorithm: sha256WithRSAEncryption a2:57:4a:03:96:53:01:32:8d:79:79:68:fd:b6:c3:cb:1f:bd: ad:07:e6:28:f8:12:04:b5:62:49:57:85:cc:11:18:e0:87:e8: 40:6c:97:1e:23:0a:a5:c6:97:3a:aa:1b:16:41:be:6b:04:eb: 74:61:85:18:57:a5:57:d1:e5:49:dc:8e:79:5b:d7:9a:30:7c: 78:c7:fd:d0:8f:43:9e:63:14:56:52:e8:a0:7e:96:b1:6c:2d: 0a:5d:16:28:0e:13:b5:7c:c1:40:bf:97:fc:f3:26:91:5f:ff: bf:fe:ca:d9:df:db:24:f7:7e:85:f8:0f:8a:65:44:84:b5:06: eb:1b:de:d7:f4:e5:4d:12:90:45:9f:ab:11:3a:f4:74:75:9b: 99:04:98:cd:63:74:f6:d5:43:a5:f6:2e:5e:7c:8f:9b:9e:a2: e0:91:f9:16:67:6b:d2:18:59:72:e5:2c:29:99:5b:80:e8:a6: d9:b4:43:06:63:65:33:17:44:4e:41:5b:a1:3f:d3:75:52:7e: 80:94:86:45:b2:d3:57:dd:4b:6e:37:82:4b:4c:28:13:44:63: 5b:0b:62:32:c0:a0:b7:8b:84:3e:d2:51:f2:7e:3f:57:05:94: d5:0d:6d:7c:85:45:2a:af:55:80:e8:db:45:2c:ad:20:23:c6: 27:c4:f1:f3 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EHKveLSuVDk90pK7zQhhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhMzVmOTA3ZWM3ZGJmOWM2NWI4MTVhYTNkNzIwMmI2ZGZh ZTMxNDgwHhcNMjYwMTAxMTAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjQwZThkZDk1MzRiOTRlNzRiNTFhYTZjYmYzYWQ2Y2ZhOTBlMzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0r8wuoNzbgiHQtfd0iAh0YCIn7OW aJn7BjCQzWXHSGFxcWQYfcR5ZAtI7xGAo7l8QgxKRedknFSIb2Vy+l3DeXOxYmnS AFc98WbVb7yvE7lBfr/nfkTcDQySg0ZMZP1T2dGvxhvEy4dJBiRXTk6u32q/FFCK UgF+JB3DfJ/hLryJt8vroHZOrIf6k2yW1O11bWv4X6+J//0zNqmBpZswOY5oNxZC YDutIsT/AUgJYPIZEDFV86uIY3uyK0toCt0lbKWDT0c1l4oTNDM1judhBGyz/3Bm C4ymeTB9Glbgm9fifb4LujjaD/s++ZtD85VuSG4r3X3kJThBbod6gB1i5wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLZA6N2VNLlOdLUapsvzrWz6kOOSMB8GA1UdIwQY MBaAFKo1+Qfsfb+cZbgVqj1yArbfrjFIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWpYNUIteDl2NXhsdUJXcVBYSUN0dC11TVVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iMWM1MGUtYWYyNy00YTYyLWFlMjMt YjZmMWNmYWE2OTg1LzEvdGtEbzNaVTB1VTUwdFJxbXlfT3RiUHFRNDVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9iMWM1MGUtYWYyNy00YTYyLWFlMjMtYjZmMWNmYWE2OTg1 LzEvcWpYNUIteDl2NXhsdUJXcVBYSUN0dC11TVVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgIPKAAj MA0GCSqGSIb3DQEBCwUAA4IBAQCiV0oDllMBMo15eWj9tsPLH72tB+Yo+BIEtWJJ V4XMERjgh+hAbJceIwqlxpc6qhsWQb5rBOt0YYUYV6VX0eVJ3I55W9eaMHx4x/3Q j0OeYxRWUuigfpaxbC0KXRYoDhO1fMFAv5f88yaRX/+//srZ39sk936F+A+KZUSE tQbrG97X9OVNEpBFn6sROvR0dZuZBJjNY3T21UOl9i5efI+bnqLgkfkWZ2vSGFly 5SwpmVuA6KbZtEMGY2UzF0ROQVuhP9N1Un6AlIZFstNX3UtuN4JLTCgTRGNbC2Iy wKC3i4Q+0lHyfj9XBZTVDW18hUUqr1WA6NtFLK0gI8YnxPHz -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:57 2026 by rpki-client