This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/MR-TaWWn4lHnPBNNw4lTIvLNpqc.roa File: MR-TaWWn4lHnPBNNw4lTIvLNpqc.roa (raw, json) Hash identifier: Y9aYFZU2HCNzQnAyTtx7dtrBQZRdTDSp9t076Yfi8ac= Subject key identifier: 31:1F:93:69:65:A7:E2:51:E7:3C:13:4D:C3:89:53:22:F2:CD:A6:A7 Certificate issuer: /CN=4df0970484eb26bc59fd8fa8d5bf7c3c7212d011 Certificate serial: 019AB601145D4F98A00B268D2845B2DF5A1E Authority key identifier: 4D:F0:97:04:84:EB:26:BC:59:FD:8F:A8:D5:BF:7C:3C:72:12:D0:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfCXBITrJrxZ_Y-o1b98PHIS0BE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/MR-TaWWn4lHnPBNNw4lTIvLNpqc.roa Signing time: Mon 24 Nov 2025 13:15:15 +0000 ROA not before: Mon 24 Nov 2025 13:15:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205692 IP address blocks: 2a0b:4ec0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.crl rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft rsync://rpki.ripe.net/repository/DEFAULT/TfCXBITrJrxZ_Y-o1b98PHIS0BE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b6:01:14:5d:4f:98:a0:0b:26:8d:28:45:b2:df:5a:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4df0970484eb26bc59fd8fa8d5bf7c3c7212d011 Validity Not Before: Nov 24 13:15:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=311f936965a7e251e73c134dc3895322f2cda6a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:43:7e:8b:44:97:ba:55:e5:26:82:f3:ee:1a: 8f:bf:8f:67:f6:7c:bc:ba:6c:b2:08:e3:1b:ba:92: 89:c4:cd:60:c3:22:61:db:30:65:a6:75:9d:d1:91: fe:63:f4:59:05:69:7b:90:10:97:61:30:24:0a:ff: a3:c6:76:42:55:3f:65:7c:83:23:eb:7d:2f:da:e2: 51:5e:02:07:91:34:6c:96:11:a2:2b:66:7e:df:f1: 4e:81:59:df:21:f7:ca:5d:2a:60:b4:d5:d1:29:9b: ec:aa:ca:78:b9:37:09:6a:d2:d4:c8:ee:2c:e1:83: c2:63:81:3d:ec:c2:ae:42:a8:0c:eb:d1:db:59:b0: 1b:c1:c1:9f:94:34:f3:65:03:f9:e2:2b:88:4c:2d: 47:2f:bc:de:37:ef:18:22:ce:14:53:49:9f:62:26: 36:b7:b5:36:6a:99:f5:b8:46:d5:5d:65:4b:39:96: 64:b1:40:7f:c2:e3:7d:af:61:39:b3:e8:d4:15:b1: 62:fc:67:d6:3d:5c:ef:b5:06:93:d2:09:4b:04:ce: bf:8c:98:b6:12:9f:5f:6b:98:67:b7:8d:e1:37:db: cd:ef:94:89:82:a2:a0:94:d0:84:45:99:e3:9b:0e: cc:3b:7e:01:66:49:0c:dd:4a:21:2c:85:8d:f8:9a: 67:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:1F:93:69:65:A7:E2:51:E7:3C:13:4D:C3:89:53:22:F2:CD:A6:A7 X509v3 Authority Key Identifier: keyid:4D:F0:97:04:84:EB:26:BC:59:FD:8F:A8:D5:BF:7C:3C:72:12:D0:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfCXBITrJrxZ_Y-o1b98PHIS0BE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/MR-TaWWn4lHnPBNNw4lTIvLNpqc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4ec0::/29 Signature Algorithm: sha256WithRSAEncryption 9b:93:ac:de:8a:6a:b6:e4:db:31:7f:7a:39:9b:90:14:92:54: c3:e0:9f:90:5c:91:91:4a:3e:97:57:d2:30:1c:14:6d:37:47: e3:f1:89:5f:21:93:b4:7d:b3:cd:0e:5c:a1:33:ef:54:38:25: cc:04:9d:3c:d5:b5:54:46:43:18:de:57:93:4e:e8:1a:1b:30: 2e:21:39:04:5c:98:45:fc:3d:84:26:41:69:31:36:24:91:b2: 6b:6e:45:10:b8:dd:41:63:42:8e:ff:7f:0f:c6:77:7a:12:ac: fc:56:bf:46:d9:36:71:a3:4c:86:55:7c:a8:bb:c6:48:0c:e9: a6:8e:80:4b:31:24:26:cd:10:f1:1a:b7:d0:c7:49:21:6a:9b: 39:76:fb:03:95:e7:e0:c0:98:08:a2:f3:da:75:df:8f:99:0c: 96:01:7f:35:3f:c2:97:41:41:78:12:ee:e7:8b:fd:2b:80:42: bd:61:d8:62:c3:59:91:99:06:e9:7e:fb:dc:5a:73:e7:04:c3: 21:80:c8:90:a8:23:33:11:77:8a:96:c3:4d:3b:ad:2a:30:df: cf:ea:31:f8:83:ef:76:d4:47:3e:40:54:f3:ce:93:ee:95:84: f9:17:a5:67:71:1a:80:49:06:f4:3c:f1:11:10:59:83:5d:bb: 2d:18:96:20 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZq2ARRdT5igCyaNKEWy31oeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZjA5NzA0ODRlYjI2YmM1OWZkOGZhOGQ1YmY3YzNjNzIx MmQwMTEwHhcNMjUxMTI0MTMxNTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTFmOTM2OTY1YTdlMjUxZTczYzEzNGRjMzg5NTMyMmYyY2RhNmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEN+i0SXulXlJoLz7hqPv49n9ny8 umyyCOMbupKJxM1gwyJh2zBlpnWd0ZH+Y/RZBWl7kBCXYTAkCv+jxnZCVT9lfIMj 630v2uJRXgIHkTRslhGiK2Z+3/FOgVnfIffKXSpgtNXRKZvsqsp4uTcJatLUyO4s 4YPCY4E97MKuQqgM69HbWbAbwcGflDTzZQP54iuITC1HL7zeN+8YIs4UU0mfYiY2 t7U2apn1uEbVXWVLOZZksUB/wuN9r2E5s+jUFbFi/GfWPVzvtQaT0glLBM6/jJi2 Ep9fa5hnt43hN9vN75SJgqKglNCERZnjmw7MO34BZkkM3UohLIWN+JpnqwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFDEfk2llp+JR5zwTTcOJUyLyzaanMB8GA1UdIwQY MBaAFE3wlwSE6ya8Wf2PqNW/fDxyEtARMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGZDWEJJVHJKcnhaX1ktbzFiOThQSElTMEJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC84ZTExOTgtZTUwZi00MTZmLTlkNmIt MWU5YmZmNWU0MDIxLzEvTVItVGFXV240bEhuUEJOTnc0bFRJdkxOcHFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC84ZTExOTgtZTUwZi00MTZmLTlkNmItMWU5YmZmNWU0MDIx LzEvVGZDWEJJVHJKcnhaX1ktbzFiOThQSElTMEJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgtOwDAN BgkqhkiG9w0BAQsFAAOCAQEAm5Os3opqtuTbMX96OZuQFJJUw+CfkFyRkUo+l1fS MBwUbTdH4/GJXyGTtH2zzQ5coTPvVDglzASdPNW1VEZDGN5Xk07oGhswLiE5BFyY Rfw9hCZBaTE2JJGya25FELjdQWNCjv9/D8Z3ehKs/Fa/Rtk2caNMhlV8qLvGSAzp po6ASzEkJs0Q8Rq30MdJIWqbOXb7A5Xn4MCYCKLz2nXfj5kMlgF/NT/Cl0FBeBLu 54v9K4BCvWHYYsNZkZkG6X773Fpz5wTDIYDIkKgjMxF3ipbDTTutKjDfz+ox+IPv dtRHPkBU886T7pWE+RelZ3EagEkG9DzxERBZg127LRiWIA== -----END CERTIFICATE-----Generated at Sun Dec 7 01:06:50 2025 by rpki-client