This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/TQBDj7Zks0Fm2FL3Td3zR6ND-SQ.roa File: TQBDj7Zks0Fm2FL3Td3zR6ND-SQ.roa (raw, json) Hash identifier: gr5IW23RFNN3IAOqTCUEX95vD/VGxJTWiQyqhzBx/Xc= Subject key identifier: 4D:00:43:8F:B6:64:B3:41:66:D8:52:F7:4D:DD:F3:47:A3:43:F9:24 Certificate issuer: /CN=bb70b89281cdb761a04adcbc0ac41705413150e9 Certificate serial: 019B76EACCF35BB698BD419712CC4E8E94EB Authority key identifier: BB:70:B8:92:81:CD:B7:61:A0:4A:DC:BC:0A:C4:17:05:41:31:50:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/TQBDj7Zks0Fm2FL3Td3zR6ND-SQ.roa Signing time: Thu 01 Jan 2026 00:17:37 +0000 ROA not before: Thu 01 Jan 2026 00:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199545 IP address blocks: 2001:67c:bec::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:cc:f3:5b:b6:98:bd:41:97:12:cc:4e:8e:94:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb70b89281cdb761a04adcbc0ac41705413150e9 Validity Not Before: Jan 1 00:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d00438fb664b34166d852f74dddf347a343f924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b0:79:5a:63:6c:10:fa:25:1f:e8:9f:1c:24: 01:be:8c:07:db:85:b9:f7:8c:58:02:92:10:88:1b: 7d:18:d9:13:6c:46:51:11:85:d0:7b:90:52:4f:9b: 4f:84:65:33:84:e1:f6:0b:81:99:e7:40:32:9f:1d: 0b:4b:37:ef:0b:35:ee:53:31:cb:a0:c6:1a:4f:e3: ac:9d:42:8b:2b:d1:2c:7d:6f:ea:b9:c9:dc:fc:48: eb:9a:3f:5c:28:18:de:b7:6a:b0:8e:99:04:96:88: 0b:ea:ce:e3:88:72:d1:22:62:44:54:70:34:ca:76: d7:1c:58:4a:8c:53:a9:ee:38:f8:dc:6c:c6:63:0f: 35:06:ed:1c:e7:f5:84:ec:a7:53:7b:fa:0d:64:62: 2f:c3:c8:8c:97:20:7f:cd:65:1b:0d:64:b0:8f:2b: c4:93:44:c1:a5:5a:f4:5e:44:26:d3:76:40:ca:81: ac:7d:5c:6f:8d:9c:df:0b:1b:1c:24:90:71:b5:b9: 06:5f:e7:c0:7d:13:f4:76:c5:19:75:f0:79:3a:72: ff:2f:79:ad:00:ab:12:c5:39:fb:51:dd:5f:0b:d2: 7a:ac:02:ec:c8:80:24:4f:96:80:01:5a:c9:46:25: f1:28:4c:08:9d:a4:90:42:62:84:ba:0c:64:74:e0: 1b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:00:43:8F:B6:64:B3:41:66:D8:52:F7:4D:DD:F3:47:A3:43:F9:24 X509v3 Authority Key Identifier: keyid:BB:70:B8:92:81:CD:B7:61:A0:4A:DC:BC:0A:C4:17:05:41:31:50:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/TQBDj7Zks0Fm2FL3Td3zR6ND-SQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:bec::/48 Signature Algorithm: sha256WithRSAEncryption 7c:94:85:72:2d:c6:93:3b:01:96:de:f1:d3:cc:09:f8:eb:63: f9:7d:55:79:f4:e9:1e:a5:dc:21:64:a3:68:48:11:20:cb:47: 74:ef:71:5b:6f:75:eb:fb:66:d6:1a:4a:84:7a:97:f9:94:05: 4d:b9:51:b0:33:20:8d:e6:b8:07:81:1b:60:f4:56:07:e9:d5: 74:0c:00:51:4b:a7:2b:25:e1:4e:97:af:8c:e1:9f:59:a0:38: d5:0d:44:be:20:3c:4e:df:09:60:44:22:d5:ad:0c:2c:2e:05: 4f:cf:a4:f2:da:aa:26:81:12:2a:48:fa:98:56:f9:e4:ca:05: a4:16:6c:f4:4b:e6:a7:45:1f:f2:5a:f8:ae:04:f3:89:15:75: 01:26:0a:3f:20:71:7f:45:e9:ab:d8:90:6c:2c:a0:a0:02:18: ac:06:9f:68:3f:6b:10:27:f6:0b:b7:3c:ca:9a:61:d3:27:14: 90:8e:55:dc:62:40:54:2d:5c:1b:33:a0:46:b7:ee:d6:24:02: 53:cf:69:93:8d:55:03:19:bc:e5:2a:63:8f:62:a6:47:aa:38: 1c:50:23:58:66:cf:ed:b1:2c:2f:0d:a8:ba:9b:83:35:58:f2: 62:0c:0a:6d:45:f3:05:f4:96:ea:8a:ec:2b:1a:36:ef:fe:0d: 1d:cd:92:f4 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt26szzW7aYvUGXEsxOjpTrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiNzBiODkyODFjZGI3NjFhMDRhZGNiYzBhYzQxNzA1NDEz MTUwZTkwHhcNMjYwMTAxMDAxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDAwNDM4ZmI2NjRiMzQxNjZkODUyZjc0ZGRkZjM0N2EzNDNmOTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLB5WmNsEPolH+ifHCQBvowH24W5 94xYApIQiBt9GNkTbEZREYXQe5BST5tPhGUzhOH2C4GZ50Aynx0LSzfvCzXuUzHL oMYaT+OsnUKLK9EsfW/qucnc/Ejrmj9cKBjet2qwjpkElogL6s7jiHLRImJEVHA0 ynbXHFhKjFOp7jj43GzGYw81Bu0c5/WE7KdTe/oNZGIvw8iMlyB/zWUbDWSwjyvE k0TBpVr0XkQm03ZAyoGsfVxvjZzfCxscJJBxtbkGX+fAfRP0dsUZdfB5OnL/L3mt AKsSxTn7Ud1fC9J6rALsyIAkT5aAAVrJRiXxKEwInaSQQmKEugxkdOAbkQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFE0AQ4+2ZLNBZthS903d80ejQ/kkMB8GA1UdIwQY MBaAFLtwuJKBzbdhoErcvArEFwVBMVDpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTNDNGtvSE50MkdnU3R5OENzUVhCVUV4VU9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8xMjA3MTUtMjY4OS00YjFjLWE2Yjgt NDE3MzIwY2JhZTU1LzEvVFFCRGo3WmtzMEZtMkZMM1RkM3pSNk5ELVNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8xMjA3MTUtMjY4OS00YjFjLWE2YjgtNDE3MzIwY2JhZTU1 LzEvdTNDNGtvSE50MkdnU3R5OENzUVhCVUV4VU9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAvs MA0GCSqGSIb3DQEBCwUAA4IBAQB8lIVyLcaTOwGW3vHTzAn462P5fVV59Okepdwh ZKNoSBEgy0d073Fbb3Xr+2bWGkqEepf5lAVNuVGwMyCN5rgHgRtg9FYH6dV0DABR S6crJeFOl6+M4Z9ZoDjVDUS+IDxO3wlgRCLVrQwsLgVPz6Ty2qomgRIqSPqYVvnk ygWkFmz0S+anRR/yWviuBPOJFXUBJgo/IHF/Remr2JBsLKCgAhisBp9oP2sQJ/YL tzzKmmHTJxSQjlXcYkBULVwbM6BGt+7WJAJTz2mTjVUDGbzlKmOPYqZHqjgcUCNY Zs/tsSwvDai6m4M1WPJiDAptRfMF9JbqiuwrGjbv/g0dzZL0 -----END CERTIFICATE-----Generated at Sun Jan 25 18:09:11 2026 by rpki-client