This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/taRmnaIWL0Lvnk8-ztV91eCLqRU.roa File: taRmnaIWL0Lvnk8-ztV91eCLqRU.roa (raw, json) Hash identifier: Duq2TEYTpeDcixHF5tGgiY61uowG5KKhAb2ieJRR8c4= Subject key identifier: B5:A4:66:9D:A2:16:2F:42:EF:9E:4F:3E:CE:D5:7D:D5:E0:8B:A9:15 Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Certificate serial: 019B7758EB78C66F0B9DC988DAB56AE59ADF Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/taRmnaIWL0Lvnk8-ztV91eCLqRU.roa Signing time: Thu 01 Jan 2026 02:17:54 +0000 ROA not before: Thu 01 Jan 2026 02:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206607 IP address blocks: 2a04:ff00:500::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:eb:78:c6:6f:0b:9d:c9:88:da:b5:6a:e5:9a:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Validity Not Before: Jan 1 02:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5a4669da2162f42ef9e4f3eced57dd5e08ba915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4b:78:ff:fd:bb:3c:fe:e0:20:c4:0f:54:2f: 8e:a1:a3:41:f7:8f:0b:83:cd:c2:9a:dd:0a:71:a8: c9:ab:0d:5d:4e:e5:d4:2b:5e:71:71:3d:8e:1a:f6: c1:8e:81:59:3d:5a:7c:e1:c4:fa:2f:a9:ea:68:a0: 1d:89:5b:85:05:f0:10:10:69:05:c4:37:99:dd:eb: ca:91:01:7f:1c:5f:d0:3c:c8:86:bd:dc:bc:14:51: d0:3c:33:a7:73:14:b6:31:c4:b0:90:38:ff:ed:43: 6c:37:d6:f4:4f:ba:86:8a:c6:de:75:cd:56:c7:a5: 30:91:6b:b3:4f:8c:1e:66:ba:da:4e:e1:2b:28:e5: 3c:5c:e9:81:0e:38:e6:a8:bc:fb:e1:07:77:45:df: 3a:0c:2d:49:3c:aa:0e:01:d1:b4:7b:a4:58:4d:f6: 8a:81:33:b7:1d:c0:39:84:be:17:1c:6a:5b:3c:21: 0d:be:fc:1d:3b:11:e1:26:c0:e8:21:37:32:9c:c4: 26:a8:e0:b1:6a:2c:c2:58:9f:4c:5b:21:f8:63:2c: 3d:a7:01:93:dc:a7:81:e5:54:a9:8f:64:bf:b3:1e: 7b:35:ca:32:92:51:09:c3:4e:cf:61:d3:bf:c7:25: 5b:63:d0:e5:41:43:44:ab:31:c5:16:78:25:4c:55: dd:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:A4:66:9D:A2:16:2F:42:EF:9E:4F:3E:CE:D5:7D:D5:E0:8B:A9:15 X509v3 Authority Key Identifier: keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/taRmnaIWL0Lvnk8-ztV91eCLqRU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:ff00:500::/40 Signature Algorithm: sha256WithRSAEncryption 0e:79:c8:58:e3:5a:67:5d:dd:a7:c7:25:66:ac:d1:40:e7:81: a9:e4:b7:35:44:12:1a:ca:f0:18:e6:68:f4:75:60:63:cb:14: b8:39:d6:5f:fd:ca:7c:c6:a5:d5:ba:b3:c9:0a:d7:be:62:5d: 53:68:66:84:16:9c:e7:a9:32:df:60:7a:79:1b:b8:63:b0:41: 95:d9:9a:38:b1:7f:1d:31:b8:68:9d:41:99:19:6c:ba:10:df: 0d:33:fd:a6:d9:09:2c:78:e4:77:0b:c8:e4:d2:c7:f5:8d:93: fc:2a:c3:39:bb:0c:99:75:5e:bd:38:2a:42:b5:28:44:9d:ea: 51:ad:16:69:2e:1d:c4:fb:58:c2:a7:61:c0:19:1d:06:20:20: 13:4c:93:e1:89:b3:42:47:dc:33:3a:62:44:5b:16:11:7f:31: 88:98:dd:23:19:5c:c6:2c:93:2c:f1:73:f6:10:69:30:2f:3a: cd:12:ff:d5:e6:ca:42:d0:65:f2:24:de:50:74:a7:cd:a8:84: f0:f8:4e:12:36:e7:2b:16:10:3d:f6:0c:b3:b2:5d:2d:93:25: 64:5c:c3:7f:d5:cf:c5:6e:95:da:74:8a:8a:eb:34:a1:89:2c: 7b:d6:62:58:84:50:b3:49:68:f2:e7:01:71:8d:5b:89:5d:12: 5b:db:67:17 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WOt4xm8LncmI2rVq5ZrfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDRjMjVjMmY4YjQ3ZTVkYWY1MmQxYzRjNWE1MDk5OWRk MGEwYTkwHhcNMjYwMTAxMDIxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNWE0NjY5ZGEyMTYyZjQyZWY5ZTRmM2VjZWQ1N2RkNWUwOGJhOTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEt4//27PP7gIMQPVC+OoaNB948L g83Cmt0KcajJqw1dTuXUK15xcT2OGvbBjoFZPVp84cT6L6nqaKAdiVuFBfAQEGkF xDeZ3evKkQF/HF/QPMiGvdy8FFHQPDOncxS2McSwkDj/7UNsN9b0T7qGisbedc1W x6UwkWuzT4weZrraTuErKOU8XOmBDjjmqLz74Qd3Rd86DC1JPKoOAdG0e6RYTfaK gTO3HcA5hL4XHGpbPCENvvwdOxHhJsDoITcynMQmqOCxaizCWJ9MWyH4Yyw9pwGT 3KeB5VSpj2S/sx57NcoyklEJw07PYdO/xyVbY9DlQUNEqzHFFnglTFXdBQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFLWkZp2iFi9C755PPs7VfdXgi6kVMB8GA1UdIwQY MBaAFH0Ewlwvi0fl2vUtHExaUJmd0KCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMt ZTYzZTk0Y2JhMDlmLzEvdGFSbW5hSVdMMEx2bms4LXp0VjkxZUNMcVJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMtZTYzZTk0Y2JhMDlm LzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgT/AAUw DQYJKoZIhvcNAQELBQADggEBAA55yFjjWmdd3afHJWas0UDnganktzVEEhrK8Bjm aPR1YGPLFLg51l/9ynzGpdW6s8kK175iXVNoZoQWnOepMt9genkbuGOwQZXZmjix fx0xuGidQZkZbLoQ3w0z/abZCSx45HcLyOTSx/WNk/wqwzm7DJl1Xr04KkK1KESd 6lGtFmkuHcT7WMKnYcAZHQYgIBNMk+GJs0JH3DM6YkRbFhF/MYiY3SMZXMYskyzx c/YQaTAvOs0S/9XmykLQZfIk3lB0p82ohPD4ThI25ysWED32DLOyXS2TJWRcw3/V z8Vuldp0iorrNKGJLHvWYliEULNJaPLnAXGNW4ldElvbZxc= -----END CERTIFICATE-----Generated at Sun Jan 25 20:30:23 2026 by rpki-client