This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/TAzsBCSWRRWP3sxoJPIFBh0QlYs.roa File: TAzsBCSWRRWP3sxoJPIFBh0QlYs.roa (raw, json) Hash identifier: y1ZUup4RV6VYrfrFEeKQot2GjsYXMJViBC6DIcYY0x8= Subject key identifier: 4C:0C:EC:04:24:96:45:15:8F:DE:CC:68:24:F2:05:06:1D:10:95:8B Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Certificate serial: 019B78A37DABCC09E05044699694AB499C42 Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/TAzsBCSWRRWP3sxoJPIFBh0QlYs.roa Signing time: Thu 01 Jan 2026 08:18:59 +0000 ROA not before: Thu 01 Jan 2026 08:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215730 IP address blocks: 2a0b:4142::/32 maxlen: 32 2a0b:4143::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:7d:ab:cc:09:e0:50:44:69:96:94:ab:49:9c:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Validity Not Before: Jan 1 08:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c0cec04249645158fdecc6824f205061d10958b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4d:ce:72:70:f3:4a:d0:08:ff:4c:e1:cb:d0: 23:e8:94:8d:ba:66:9f:e5:e2:51:d0:28:a2:e3:39: eb:83:ec:10:2a:ac:11:fd:62:40:71:48:a1:79:6e: 1b:03:45:1a:f0:16:ea:ac:11:a5:9e:19:c7:db:25: 6f:61:c0:47:ab:b9:21:0c:f4:81:04:6c:2b:51:9a: 48:ed:c3:e6:c7:28:d7:3d:7d:a6:db:14:d0:a2:48: 71:30:aa:88:e1:87:fd:27:d4:c8:f3:94:e5:47:90: d8:59:d9:52:bb:7f:8e:73:25:c3:9f:04:ca:6a:da: 61:d7:7a:05:83:19:3b:12:ef:40:15:cb:2f:67:ae: ca:d7:45:41:13:c9:d6:5d:c2:1a:8f:4f:c7:be:6f: de:34:03:33:f2:b5:91:30:6e:12:1c:f0:8c:11:ae: 7e:4f:3f:ea:df:50:53:4b:d8:0d:27:af:e1:9d:5d: 4f:73:8e:0e:ed:8b:d3:1a:27:90:ab:9f:63:da:0e: b2:f9:dc:db:8e:ff:43:09:0a:42:95:bd:1d:f5:ce: 69:04:67:e3:a8:80:20:ae:51:6b:92:73:dc:65:d2: e2:c0:0c:6f:53:c8:7e:80:89:22:c9:b9:d5:ed:9c: 7e:3c:79:7f:18:10:23:6b:0a:4a:fe:38:31:75:28: 71:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:0C:EC:04:24:96:45:15:8F:DE:CC:68:24:F2:05:06:1D:10:95:8B X509v3 Authority Key Identifier: keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/TAzsBCSWRRWP3sxoJPIFBh0QlYs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4142::/31 Signature Algorithm: sha256WithRSAEncryption 80:ad:a1:5c:2c:d6:11:ce:82:4a:a7:8f:4a:b8:b8:33:8e:fc: a6:c9:48:b4:5a:f9:3d:ad:ee:17:7b:04:92:d5:31:86:52:99: a8:e1:c9:92:5f:3d:2b:32:7f:c4:53:93:98:9d:90:91:77:ad: d9:0d:37:84:b0:18:a8:1a:3f:db:2a:8c:19:d9:17:3e:5a:63: aa:a6:6a:81:ee:01:36:dc:91:2d:d7:15:fa:9e:21:36:d7:2d: 32:04:a4:37:1c:b8:1d:ca:b9:7c:18:06:06:96:69:2d:36:3c: 64:48:62:a7:a2:12:7c:5e:5f:44:4f:e3:35:51:b3:b6:98:ed: aa:df:46:a9:b0:1c:1c:ac:20:be:4c:e6:79:c0:fd:da:c9:ba: 8e:44:39:d3:46:b5:9d:ef:f9:bd:4b:33:d4:96:56:19:a2:93: 02:1e:ed:ad:33:93:e3:f9:e9:80:da:01:ab:e7:61:d4:19:2c: 5a:5d:32:8e:74:63:97:df:13:0d:f9:a2:c8:93:9c:8d:d3:9f: 0f:ed:92:ea:f4:01:5d:cd:00:04:0c:e8:d6:f5:27:e1:90:eb: c9:15:fb:73:45:e8:bf:bc:23:fc:55:fe:e5:39:c2:86:27:86: ae:df:f4:f7:53:48:56:06:a4:b4:06:41:4d:a7:c6:9b:00:f9: bf:b4:3f:e4 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4o32rzAngUERplpSrSZxCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMGZmOGFhZjc0NTMxMTQxNDcwMjhkNTRhZTFjNjkzYThh MTQ3YmMwHhcNMjYwMTAxMDgxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzBjZWMwNDI0OTY0NTE1OGZkZWNjNjgyNGYyMDUwNjFkMTA5NThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoE3OcnDzStAI/0zhy9Aj6JSNumaf 5eJR0Cii4znrg+wQKqwR/WJAcUiheW4bA0Ua8BbqrBGlnhnH2yVvYcBHq7khDPSB BGwrUZpI7cPmxyjXPX2m2xTQokhxMKqI4Yf9J9TI85TlR5DYWdlSu3+OcyXDnwTK atph13oFgxk7Eu9AFcsvZ67K10VBE8nWXcIaj0/Hvm/eNAMz8rWRMG4SHPCMEa5+ Tz/q31BTS9gNJ6/hnV1Pc44O7YvTGieQq59j2g6y+dzbjv9DCQpClb0d9c5pBGfj qIAgrlFrknPcZdLiwAxvU8h+gIkiybnV7Zx+PHl/GBAjawpK/jgxdShxuwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFEwM7AQklkUVj97MaCTyBQYdEJWLMB8GA1UdIwQY MBaAFF4P+Kr3RTEUFHAo1UrhxpOooUe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEt ZDg3MjEzNzU2NDRhLzEvVEF6c0JDU1dSUldQM3N4b0pQSUZCaDBRbFlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEtZDg3MjEzNzU2NDRh LzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUBKgtBQjAN BgkqhkiG9w0BAQsFAAOCAQEAgK2hXCzWEc6CSqePSri4M478pslItFr5Pa3uF3sE ktUxhlKZqOHJkl89KzJ/xFOTmJ2QkXet2Q03hLAYqBo/2yqMGdkXPlpjqqZqge4B NtyRLdcV+p4hNtctMgSkNxy4Hcq5fBgGBpZpLTY8ZEhip6ISfF5fRE/jNVGztpjt qt9GqbAcHKwgvkzmecD92sm6jkQ500a1ne/5vUsz1JZWGaKTAh7trTOT4/npgNoB q+dh1BksWl0yjnRjl98TDfmiyJOcjdOfD+2S6vQBXc0ABAzo1vUn4ZDryRX7c0Xo v7wj/FX+5TnChieGrt/091NIVgaktAZBTafGmwD5v7Q/5A== -----END CERTIFICATE-----Generated at Sun Jan 25 16:28:21 2026 by rpki-client