This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/TZUj41Zk_a4ctgh6bkXXZRSBnwo.roa File: TZUj41Zk_a4ctgh6bkXXZRSBnwo.roa (raw, json) Hash identifier: SlDdEwpdjEtSII8TXEBDIBic9lrt5T7OD2GqENaMep4= Subject key identifier: 4D:95:23:E3:56:64:FD:AE:1C:B6:08:7A:6E:45:D7:65:14:81:9F:0A Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b Certificate serial: 019B7CEE56848AF02E9F236A37DC11E85F68 Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/TZUj41Zk_a4ctgh6bkXXZRSBnwo.roa Signing time: Fri 02 Jan 2026 04:19:13 +0000 ROA not before: Fri 02 Jan 2026 04:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213252 IP address blocks: 2a0f:6580:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:56:84:8a:f0:2e:9f:23:6a:37:dc:11:e8:5f:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b Validity Not Before: Jan 2 04:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d9523e35664fdae1cb6087a6e45d76514819f0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bd:06:3a:82:ef:3d:08:bd:23:98:52:77:30: 30:b2:dc:eb:e0:6d:e2:32:3b:a7:b7:09:7c:5a:fe: 74:be:ff:15:8e:04:88:c2:f3:9b:87:21:5d:4d:ea: 26:cf:f4:b6:dc:f9:70:ed:59:21:cd:3d:e1:e5:08: 2b:a9:f1:ae:0e:71:3f:5a:c9:be:7f:fa:b2:f7:70: 94:cd:5f:0f:6a:b9:21:64:8f:de:c7:77:69:ec:0d: d8:39:3e:49:42:2c:a0:71:8b:f8:f2:6b:d4:14:be: 77:a2:0c:cc:91:94:59:dd:63:61:93:9b:b5:01:e9: 37:e1:e4:20:de:75:09:3b:86:f9:be:1f:15:88:c8: a5:ac:f0:bf:ed:ed:50:fa:5b:49:8d:16:51:c2:ff: c0:42:7f:47:76:bf:10:6a:c7:60:93:4d:d3:2c:1e: bb:80:9d:74:be:f5:5e:44:d1:c9:bc:5b:eb:60:b2: 05:6f:c5:40:62:94:cd:7f:4a:e0:0b:bd:c9:50:71: cc:1e:86:62:a2:90:6f:a1:ea:f5:8d:cc:59:80:18: e8:7a:74:ba:3c:79:c7:7f:9c:bc:8a:7d:75:53:56: 7e:08:3b:17:7a:2e:52:13:52:cf:42:c9:79:7e:79: 4b:ae:16:31:cd:50:ca:fa:62:4f:15:1c:ed:1a:88: 70:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:95:23:E3:56:64:FD:AE:1C:B6:08:7A:6E:45:D7:65:14:81:9F:0A X509v3 Authority Key Identifier: keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/TZUj41Zk_a4ctgh6bkXXZRSBnwo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6580:100::/48 Signature Algorithm: sha256WithRSAEncryption 68:e0:ce:69:bd:4e:c2:f2:f6:6f:de:07:d7:06:be:cf:9e:30: 39:66:d0:46:f8:f7:36:2e:24:ce:2d:e6:94:56:da:87:f6:be: 1f:5e:b4:94:79:ae:63:80:de:de:45:ac:b8:35:3b:96:d0:23: 74:4c:6f:b3:92:80:93:6f:93:65:7e:f2:a5:9b:a5:0c:74:6c: e2:97:46:73:e9:41:02:35:1c:76:73:95:be:a2:ff:b6:b2:9b: 95:32:9f:56:97:8e:51:0c:88:d5:4e:25:8d:ee:f1:8c:eb:85: e9:0a:88:ea:0a:69:a9:d3:65:5d:a0:ce:82:11:65:ee:49:c0: 34:59:ce:87:43:81:31:61:82:c6:cb:a3:7a:a8:06:cf:3d:59: b3:97:4b:da:06:1d:17:c5:a9:19:40:b8:18:09:a8:1b:6f:f9: 34:54:f1:e6:28:de:9b:3c:86:5e:93:cc:3b:cf:c8:fa:f0:3a: e7:82:74:ad:67:2e:a1:63:40:f8:e2:43:fd:a4:23:08:ff:84: 0e:88:61:e8:d6:13:1a:d7:21:e2:65:de:87:af:95:1d:f1:d8: 7c:fc:91:49:3b:c5:7c:e2:13:85:b9:9a:b5:50:c5:39:96:ac: 0c:65:e5:a0:50:79:dd:78:4d:bc:ad:61:44:eb:62:14:6e:c6: 8d:73:6b:50 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt87laEivAunyNqN9wR6F9oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMGIwNWY0MGE2OTE2Mzk0NzgyMzAyZDFiNTY2MDczNzI1 N2E0OGIwHhcNMjYwMTAyMDQxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDk1MjNlMzU2NjRmZGFlMWNiNjA4N2E2ZTQ1ZDc2NTE0ODE5ZjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwL0GOoLvPQi9I5hSdzAwstzr4G3i Mjuntwl8Wv50vv8VjgSIwvObhyFdTeomz/S23Plw7VkhzT3h5QgrqfGuDnE/Wsm+ f/qy93CUzV8ParkhZI/ex3dp7A3YOT5JQiygcYv48mvUFL53ogzMkZRZ3WNhk5u1 Aek34eQg3nUJO4b5vh8ViMilrPC/7e1Q+ltJjRZRwv/AQn9Hdr8Qasdgk03TLB67 gJ10vvVeRNHJvFvrYLIFb8VAYpTNf0rgC73JUHHMHoZiopBvoer1jcxZgBjoenS6 PHnHf5y8in11U1Z+CDsXei5SE1LPQsl5fnlLrhYxzVDK+mJPFRztGohwIQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFE2VI+NWZP2uHLYIem5F12UUgZ8KMB8GA1UdIwQY MBaAFDoLBfQKaRY5R4IwLRtWYHNyV6SLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGIt YjIwZTI4ZjUxODhmLzEvVFpVajQxWmtfYTRjdGdoNmJrWFhaUlNCbndvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGItYjIwZTI4ZjUxODhm LzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9lgAEA MA0GCSqGSIb3DQEBCwUAA4IBAQBo4M5pvU7C8vZv3gfXBr7PnjA5ZtBG+Pc2LiTO LeaUVtqH9r4fXrSUea5jgN7eRay4NTuW0CN0TG+zkoCTb5NlfvKlm6UMdGzil0Zz 6UECNRx2c5W+ov+2spuVMp9Wl45RDIjVTiWN7vGM64XpCojqCmmp02VdoM6CEWXu ScA0Wc6HQ4ExYYLGy6N6qAbPPVmzl0vaBh0XxakZQLgYCagbb/k0VPHmKN6bPIZe k8w7z8j68DrngnStZy6hY0D44kP9pCMI/4QOiGHo1hMa1yHiZd6Hr5Ud8dh8/JFJ O8V84hOFuZq1UMU5lqwMZeWgUHndeE28rWFE62IUbsaNc2tQ -----END CERTIFICATE-----Generated at Mon Jan 26 01:01:43 2026 by rpki-client