This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/TpDZ8IP6rdDoqNG2faUZ93mOnhY.roa File: TpDZ8IP6rdDoqNG2faUZ93mOnhY.roa (raw, json) Hash identifier: WauO2SokhDFlsHFeFhypHeCTlK3wDUgWAzshLZtKSQg= Subject key identifier: 4E:90:D9:F0:83:FA:AD:D0:E8:A8:D1:B6:7D:A5:19:F7:79:8E:9E:16 Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9 Certificate serial: 019B78A2FD686CEC818E162B4F7EC5768F70 Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/TpDZ8IP6rdDoqNG2faUZ93mOnhY.roa Signing time: Thu 01 Jan 2026 08:18:26 +0000 ROA not before: Thu 01 Jan 2026 08:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60262 IP address blocks: 2a11:c40::/29 maxlen: 29 2a11:1000::/29 maxlen: 29 2a11:1100::/29 maxlen: 29 2a11:1e80::/29 maxlen: 29 2a11:2040::/29 maxlen: 29 2a11:37c0::/29 maxlen: 29 2a11:4300::/29 maxlen: 29 2a11:4600::/29 maxlen: 29 2a11:4ec0::/29 maxlen: 29 2a11:74c0::/29 maxlen: 29 2a11:8580::/29 maxlen: 29 2a11:8d40::/29 maxlen: 29 2a11:9100::/29 maxlen: 29 2a11:bec0::/29 maxlen: 29 2a11:d300::/29 maxlen: 29 2a11:d780::/29 maxlen: 29 2a11:e240::/29 maxlen: 29 2a11:ea40::/29 maxlen: 29 2a12:700::/29 maxlen: 29 2a12:980::/29 maxlen: 29 2a12:1600::/29 maxlen: 29 2a12:6080::/29 maxlen: 29 2a12:6f80::/29 maxlen: 29 2a12:7b00::/29 maxlen: 29 2a12:c780::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:fd:68:6c:ec:81:8e:16:2b:4f:7e:c5:76:8f:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9 Validity Not Before: Jan 1 08:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e90d9f083faadd0e8a8d1b67da519f7798e9e16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d3:23:84:6c:32:79:9b:e5:b6:eb:85:13:3f: 2c:c9:e9:e3:25:47:02:5b:da:eb:f8:73:d7:bd:8c: 35:c3:e2:d6:77:22:0c:db:03:a5:3d:0e:97:cf:e3: c0:27:e0:f0:60:d3:87:10:e7:42:cd:c4:38:e3:08: 5c:02:66:f0:71:df:9b:0a:55:f5:6c:23:98:85:a1: 29:91:ea:14:61:62:26:13:5b:2a:0f:0c:54:60:5c: 31:eb:9a:1c:8a:d1:2e:0f:ad:14:03:50:c1:8a:d1: 19:ea:a1:44:6f:c9:ba:0c:f9:66:86:c9:56:ce:23: 95:71:3f:d4:c0:3e:95:3c:90:2b:eb:7e:ab:e7:21: 3a:f1:99:64:8c:29:5b:48:7f:5e:77:2e:a3:f1:1b: 5e:da:2a:fa:f6:cc:4e:91:4d:a0:71:e6:d3:6f:75: 0e:7d:de:3f:5e:4a:f3:da:a3:a8:65:82:2b:28:a8: 29:f0:04:23:e7:41:69:79:3f:0a:0d:de:59:b7:f6: 76:58:97:20:e7:49:d8:9d:b9:80:23:f7:fc:85:9f: 17:15:d5:d4:da:d9:c7:35:40:aa:e0:9d:02:06:23: 50:c6:9d:06:8d:6e:a5:80:95:7f:b2:cf:a4:bf:93: 16:63:5a:22:25:77:7a:26:f9:d3:68:9e:e7:0c:a1: 29:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:90:D9:F0:83:FA:AD:D0:E8:A8:D1:B6:7D:A5:19:F7:79:8E:9E:16 X509v3 Authority Key Identifier: keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/TpDZ8IP6rdDoqNG2faUZ93mOnhY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:c40::/29 2a11:1000::/29 2a11:1100::/29 2a11:1e80::/29 2a11:2040::/29 2a11:37c0::/29 2a11:4300::/29 2a11:4600::/29 2a11:4ec0::/29 2a11:74c0::/29 2a11:8580::/29 2a11:8d40::/29 2a11:9100::/29 2a11:bec0::/29 2a11:d300::/29 2a11:d780::/29 2a11:e240::/29 2a11:ea40::/29 2a12:700::/29 2a12:980::/29 2a12:1600::/29 2a12:6080::/29 2a12:6f80::/29 2a12:7b00::/29 2a12:c780::/29 Signature Algorithm: sha256WithRSAEncryption 35:f5:d6:ec:03:37:58:bb:4b:e7:e1:2c:03:35:af:a2:c8:f5: cb:f3:a1:28:5d:18:05:95:2c:79:47:15:72:27:3b:d1:86:b9: 3b:f3:f8:97:6b:57:95:88:e5:60:7b:49:e8:fb:dc:0c:6e:6c: 31:07:49:45:9a:68:21:c9:ff:92:37:b8:1e:e1:9d:69:c7:9b: 96:92:99:12:12:a9:16:28:d1:43:5d:5c:5a:fd:94:b4:b1:c7: 78:4b:9c:2e:68:44:db:e9:1c:da:16:e5:09:c1:d9:16:f1:fa: 63:e6:0f:90:a6:1f:6f:95:21:17:03:ea:a6:d7:8a:c6:9b:61: b8:db:8a:6f:78:e2:98:28:b0:0f:f4:2c:84:c7:52:d0:69:5c: ac:bf:3d:2a:9d:72:04:50:fe:ca:a0:98:70:f5:e7:b9:a2:d1: 05:8c:a7:0d:c4:56:8e:54:e3:31:0d:3e:31:4d:cf:86:58:f6: 09:40:3b:48:cc:0f:3e:22:7e:1c:1a:62:ec:36:96:12:fa:ad: 3a:3a:0d:e7:6d:40:4d:59:f3:bc:cb:8e:61:01:ca:ab:58:a6: 2a:44:55:d5:6e:d7:c7:85:45:45:c2:2a:d9:d9:a7:a5:cd:64: 4a:cd:e8:87:d4:20:d2:81:cc:51:1e:f3:d8:b3:42:b1:e9:a7: 97:c0:4b:90 -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgISAZt4ov1obOyBjhYrT37Fdo9wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2N2YzYmQ0YmZiZDMwNzFjMzhjZDRkNzA5MmJkMzQ5MDky MGMzZDkwHhcNMjYwMTAxMDgxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTkwZDlmMDgzZmFhZGQwZThhOGQxYjY3ZGE1MTlmNzc5OGU5ZTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudMjhGwyeZvltuuFEz8syenjJUcC W9rr+HPXvYw1w+LWdyIM2wOlPQ6Xz+PAJ+DwYNOHEOdCzcQ44whcAmbwcd+bClX1 bCOYhaEpkeoUYWImE1sqDwxUYFwx65ocitEuD60UA1DBitEZ6qFEb8m6DPlmhslW ziOVcT/UwD6VPJAr636r5yE68ZlkjClbSH9edy6j8Rte2ir69sxOkU2gcebTb3UO fd4/Xkrz2qOoZYIrKKgp8AQj50FpeT8KDd5Zt/Z2WJcg50nYnbmAI/f8hZ8XFdXU 2tnHNUCq4J0CBiNQxp0GjW6lgJV/ss+kv5MWY1oiJXd6JvnTaJ7nDKEp3QIDAQAB o4ICtzCCArMwHQYDVR0OBBYEFE6Q2fCD+q3Q6KjRtn2lGfd5jp4WMB8GA1UdIwQY MBaAFHZ/O9S/vTBxw4zU1wkr00kJIMPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgt NGZiNTU5YjNiOWIzLzEvVHBEWjhJUDZyZERvcU5HMmZhVVo5M21PbmhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgtNGZiNTU5YjNiOWIz LzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHMBggrBgEFBQcBBwEB/wSBvDCBuTCBtgQCAAIwga8DBQMq EQxAAwUDKhEQAAMFAyoREQADBQMqER6AAwUDKhEgQAMFAyoRN8ADBQMqEUMAAwUD KhFGAAMFAyoRTsADBQMqEXTAAwUDKhGFgAMFAyoRjUADBQMqEZEAAwUDKhG+wAMF AyoR0wADBQMqEdeAAwUDKhHiQAMFAyoR6kADBQMqEgcAAwUDKhIJgAMFAyoSFgAD BQMqEmCAAwUDKhJvgAMFAyoSewADBQMqEseAMA0GCSqGSIb3DQEBCwUAA4IBAQA1 9dbsAzdYu0vn4SwDNa+iyPXL86EoXRgFlSx5RxVyJzvRhrk78/iXa1eViOVge0no +9wMbmwxB0lFmmghyf+SN7ge4Z1px5uWkpkSEqkWKNFDXVxa/ZS0scd4S5wuaETb 6RzaFuUJwdkW8fpj5g+Qph9vlSEXA+qm14rGm2G424pveOKYKLAP9CyEx1LQaVys vz0qnXIEUP7KoJhw9ee5otEFjKcNxFaOVOMxDT4xTc+GWPYJQDtIzA8+In4cGmLs NpYS+q06Og3nbUBNWfO8y45hAcqrWKYqRFXVbtfHhUVFwirZ2aelzWRKzeiH1CDS gcxRHvPYs0Kx6aeXwEuQ -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:38 2026 by rpki-client