This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/T0XlvLPSE0rq8c-N7OAkkhLwUFg.roa File: T0XlvLPSE0rq8c-N7OAkkhLwUFg.roa (raw, json) Hash identifier: tcM1/9+Y0ysaMgq7228hAfu0hiNGpyhSmSnmef1IcbQ= Subject key identifier: 4F:45:E5:BC:B3:D2:13:4A:EA:F1:CF:8D:EC:E0:24:92:12:F0:50:58 Certificate issuer: /CN=6ab7b9cee004300eafe09bf12fcb6da1dd30a4d7 Certificate serial: 019B7BA50F86671E00F7585C93C6F7F9059B Authority key identifier: 6A:B7:B9:CE:E0:04:30:0E:AF:E0:9B:F1:2F:CB:6D:A1:DD:30:A4:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/T0XlvLPSE0rq8c-N7OAkkhLwUFg.roa Signing time: Thu 01 Jan 2026 22:19:33 +0000 ROA not before: Thu 01 Jan 2026 22:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214169 IP address blocks: 69.172.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.crl rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:0f:86:67:1e:00:f7:58:5c:93:c6:f7:f9:05:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ab7b9cee004300eafe09bf12fcb6da1dd30a4d7 Validity Not Before: Jan 1 22:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f45e5bcb3d2134aeaf1cf8dece0249212f05058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a9:88:22:b6:3d:57:12:76:d8:49:8f:74:ff: 5f:5f:ab:b0:65:a3:02:cf:09:e0:8e:95:cf:71:e4: 60:06:7a:3d:9d:24:13:eb:0a:0c:63:90:08:7a:e8: 08:c1:8a:2d:f4:a1:42:c2:c0:27:1a:13:fe:75:f9: 1e:5f:33:e9:31:d5:ab:a7:d6:93:7b:1b:27:a7:72: 86:38:0c:8e:e2:b1:a0:18:af:8b:cc:ed:b4:94:a8: d6:cf:bc:95:d3:93:97:58:23:5b:01:1b:64:9c:a9: 2b:2f:cc:30:7e:2e:b6:cf:c6:17:d6:72:f8:e2:93: 28:e8:62:a8:5e:7f:4c:f8:3b:6a:2e:84:98:1a:3b: 3c:7d:75:f8:8e:47:f3:ad:e8:17:11:70:8d:63:12: c9:fe:46:cf:85:06:19:20:c3:31:b4:56:72:10:eb: 02:5d:e2:09:00:34:3a:c9:24:cf:dd:c3:e6:6d:9d: 2a:cc:cf:af:b5:fa:e1:bf:4c:6e:ca:d6:7e:04:29: c0:4f:d6:b0:89:6b:a0:58:f5:e5:47:c8:92:6d:cd: 5b:c8:5d:03:62:38:a1:07:e0:cc:6c:13:1e:4a:d1: 63:e7:da:f0:06:e4:3f:89:2b:20:2b:70:e3:29:41: f3:00:01:72:32:84:65:8e:d0:c4:bd:a8:d0:8a:2a: 06:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:45:E5:BC:B3:D2:13:4A:EA:F1:CF:8D:EC:E0:24:92:12:F0:50:58 X509v3 Authority Key Identifier: keyid:6A:B7:B9:CE:E0:04:30:0E:AF:E0:9B:F1:2F:CB:6D:A1:DD:30:A4:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/T0XlvLPSE0rq8c-N7OAkkhLwUFg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.172.96.0/20 Signature Algorithm: sha256WithRSAEncryption 08:fe:b0:f7:19:09:88:5c:54:90:c3:f5:31:c5:0e:37:a6:0e: 77:ee:f4:04:92:7b:0f:ff:f6:0a:b6:27:d1:99:17:d9:4d:77: 7e:0a:57:dd:8a:68:8e:bc:7c:99:6a:93:d7:a5:01:e5:f0:de: 55:97:bf:bb:9c:12:d2:54:81:d8:90:4f:81:e2:6a:68:30:45: e5:15:91:c6:ec:3d:c8:fd:96:a4:1c:6b:62:b6:4b:e3:e9:61: 37:07:0a:2f:ee:19:48:c7:0c:85:fc:8c:fe:40:44:0c:36:5f: 6c:32:9e:de:79:01:0f:f2:13:62:d1:6f:1c:2e:52:35:46:58: e4:19:13:94:f8:ca:af:59:70:47:ff:8c:3a:83:6b:24:56:71: 95:2e:4f:d9:f2:72:f8:2b:2a:eb:78:b6:bf:e5:25:f5:ac:41: 3a:92:a8:59:ab:22:8c:62:ca:2b:4d:bf:b2:5b:ae:16:7a:30: db:ff:32:4f:71:15:97:2f:d3:83:ff:61:d5:0d:f5:48:48:23: bf:b5:b9:0b:60:a8:ef:c8:d9:53:dd:5f:8f:a5:95:91:ce:89: af:4d:f6:32:05:63:93:c2:e7:11:a9:5f:03:b5:ab:f7:0c:c8: 1c:39:ac:a8:ac:18:a9:90:80:60:58:12:07:2f:20:28:ec:55: 2c:c6:80:6e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pQ+GZx4A91hck8b3+QWbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhYjdiOWNlZTAwNDMwMGVhZmUwOWJmMTJmY2I2ZGExZGQz MGE0ZDcwHhcNMjYwMTAxMjIxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjQ1ZTViY2IzZDIxMzRhZWFmMWNmOGRlY2UwMjQ5MjEyZjA1MDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqamIIrY9VxJ22EmPdP9fX6uwZaMC zwngjpXPceRgBno9nSQT6woMY5AIeugIwYot9KFCwsAnGhP+dfkeXzPpMdWrp9aT exsnp3KGOAyO4rGgGK+LzO20lKjWz7yV05OXWCNbARtknKkrL8wwfi62z8YX1nL4 4pMo6GKoXn9M+DtqLoSYGjs8fXX4jkfzregXEXCNYxLJ/kbPhQYZIMMxtFZyEOsC XeIJADQ6ySTP3cPmbZ0qzM+vtfrhv0xuytZ+BCnAT9awiWugWPXlR8iSbc1byF0D YjihB+DMbBMeStFj59rwBuQ/iSsgK3DjKUHzAAFyMoRljtDEvajQiioGzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE9F5byz0hNK6vHPjezgJJIS8FBYMB8GA1UdIwQY MBaAFGq3uc7gBDAOr+Cb8S/LbaHdMKTXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXJlNXp1QUVNQTZ2NEp2eEw4dHRvZDB3cE5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83ZDExZTItNTI3NC00NDdlLTlmZTYt ODhhYTZmZDBhYThlLzEvVDBYbHZMUFNFMHJxOGMtTjdPQWtraEx3VUZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS83ZDExZTItNTI3NC00NDdlLTlmZTYtODhhYTZmZDBhYThl LzEvYXJlNXp1QUVNQTZ2NEp2eEw4dHRvZDB3cE5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERaxgMA0G CSqGSIb3DQEBCwUAA4IBAQAI/rD3GQmIXFSQw/UxxQ43pg537vQEknsP//YKtifR mRfZTXd+ClfdimiOvHyZapPXpQHl8N5Vl7+7nBLSVIHYkE+B4mpoMEXlFZHG7D3I /ZakHGtitkvj6WE3Bwov7hlIxwyF/Iz+QEQMNl9sMp7eeQEP8hNi0W8cLlI1Rljk GROU+MqvWXBH/4w6g2skVnGVLk/Z8nL4KyrreLa/5SX1rEE6kqhZqyKMYsorTb+y W64WejDb/zJPcRWXL9OD/2HVDfVISCO/tbkLYKjvyNlT3V+PpZWRzomvTfYyBWOT wucRqV8Dtav3DMgcOayorBipkIBgWBIHLyAo7FUsxoBu -----END CERTIFICATE-----Generated at Mon Jan 26 11:27:33 2026 by rpki-client