This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/TTCwApiEQAeKWTc5BiOUMPL6Ik0.roa File: TTCwApiEQAeKWTc5BiOUMPL6Ik0.roa (raw, json) Hash identifier: fI6BVqo8RniHbiOVWZbTUBpJZ0C+Wx1WVAjNDB9Eti8= Subject key identifier: 4D:30:B0:02:98:84:40:07:8A:59:37:39:06:23:94:30:F2:FA:22:4D Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20 Certificate serial: 019B7D5BEABC512669A3ED3F87C476845FEA Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/TTCwApiEQAeKWTc5BiOUMPL6Ik0.roa Signing time: Fri 02 Jan 2026 06:18:54 +0000 ROA not before: Fri 02 Jan 2026 06:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29226 IP address blocks: 2a11:f840::/29 maxlen: 29 2a12:9c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:ea:bc:51:26:69:a3:ed:3f:87:c4:76:84:5f:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20 Validity Not Before: Jan 2 06:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d30b002988440078a59373906239430f2fa224d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:98:a3:35:bf:1b:04:31:8d:45:5a:05:8c:5a: 01:a2:53:06:ec:57:74:df:c3:6f:19:3f:88:f9:64: ad:a6:f5:eb:ed:69:c1:06:68:63:b7:9a:4d:fd:51: e1:92:cc:f4:05:8d:b7:26:25:27:00:ff:5f:b3:ef: b6:b2:0e:e5:da:10:61:a6:c8:f1:4e:31:8d:0a:ed: 41:9c:3a:f8:a2:c1:9b:09:ea:71:a0:99:55:39:ba: 53:c7:22:18:b1:a3:65:1d:49:20:be:a3:8b:da:cf: cb:cc:66:71:4e:4b:d5:a7:2d:c8:ef:75:e8:0e:54: 38:5e:22:4e:ee:44:43:67:1e:f6:1e:70:06:b0:c5: 7c:cb:70:5c:f7:9a:e5:d9:35:8c:24:10:e8:f5:67: f3:2e:03:6b:e5:44:8a:eb:e4:68:6f:b7:af:13:ea: 9f:e7:3b:38:0c:41:91:38:30:32:fb:7a:44:1e:a2: 25:8b:f7:03:e2:0b:fa:0e:92:b9:b3:2c:99:0c:04: a8:6f:4d:58:f5:80:12:f0:f3:1c:c1:76:f0:04:f2: 03:6f:73:c7:23:b1:91:2c:d8:97:31:ef:3c:90:e3: 6a:16:64:7d:0a:40:63:26:36:64:63:25:a1:2f:fe: a6:23:2f:69:8a:15:ab:ac:c3:21:48:f6:dc:37:8f: d9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:30:B0:02:98:84:40:07:8A:59:37:39:06:23:94:30:F2:FA:22:4D X509v3 Authority Key Identifier: keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/TTCwApiEQAeKWTc5BiOUMPL6Ik0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:f840::/29 2a12:9c0::/29 Signature Algorithm: sha256WithRSAEncryption 52:7c:6e:aa:68:c7:e2:52:e6:8a:0d:b4:6e:4d:6e:c9:3e:11: 65:67:a4:f0:b7:6f:6b:b2:20:a6:85:07:1f:0d:d7:2e:cb:25: 82:77:16:fb:fc:1d:19:fe:b0:be:9e:8c:36:7e:9d:bc:34:64: 85:59:9d:8f:46:02:a1:60:3c:ed:b9:78:a1:e7:be:ad:b4:e7: 7e:99:45:df:20:cf:3a:22:70:ff:25:6d:28:c4:e5:82:4c:87: 2e:b9:a1:ad:ae:74:69:83:af:b8:78:43:24:3f:d0:5f:04:be: ee:ff:90:2a:98:c9:7a:b4:e9:f1:2a:3b:43:de:23:ae:44:c5: 47:d1:85:2e:72:48:a1:9a:41:f0:f0:57:6a:e6:ad:58:d7:07: f7:81:c4:42:4c:56:84:09:14:7b:ba:51:7b:ec:a6:e0:82:b9: 8d:85:54:7c:77:f8:5f:0a:d0:87:14:d8:3d:28:3e:43:7d:61: 1f:3c:98:f4:3f:e2:ae:7f:11:91:65:d5:bb:8e:46:49:f8:45: 3f:6d:2d:c6:a1:47:7b:83:44:cd:41:b7:5f:e5:2d:25:a1:47: a2:81:62:0f:dd:1d:72:6f:b3:f7:58:84:e6:56:60:ab:f4:8d: 4c:1e:68:e0:64:db:d6:f7:21:6a:aa:af:5b:35:26:4d:41:ac: 3d:5a:43:fa -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt9W+q8USZpo+0/h8R2hF/qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2Mzc2OWY4NjQ0YTVhNzE4YWU2MmIwNThkZDFmYjYyY2I1 YTNjMjAwHhcNMjYwMTAyMDYxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDMwYjAwMjk4ODQ0MDA3OGE1OTM3MzkwNjIzOTQzMGYyZmEyMjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJijNb8bBDGNRVoFjFoBolMG7Fd0 38NvGT+I+WStpvXr7WnBBmhjt5pN/VHhksz0BY23JiUnAP9fs++2sg7l2hBhpsjx TjGNCu1BnDr4osGbCepxoJlVObpTxyIYsaNlHUkgvqOL2s/LzGZxTkvVpy3I73Xo DlQ4XiJO7kRDZx72HnAGsMV8y3Bc95rl2TWMJBDo9WfzLgNr5USK6+Rob7evE+qf 5zs4DEGRODAy+3pEHqIli/cD4gv6DpK5syyZDASob01Y9YAS8PMcwXbwBPIDb3PH I7GRLNiXMe88kONqFmR9CkBjJjZkYyWhL/6mIy9pihWrrMMhSPbcN4/ZVwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFE0wsAKYhEAHilk3OQYjlDDy+iJNMB8GA1UdIwQY MBaAFDY3afhkSlpxiuYrBY3R+2LLWjwgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYt Mzk5ZmM5NjkzYjIyLzEvVFRDd0FwaUVRQWVLV1RjNUJpT1VNUEw2SWswLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYtMzk5ZmM5NjkzYjIy LzEvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDKhH4QAMF AyoSCcAwDQYJKoZIhvcNAQELBQADggEBAFJ8bqpox+JS5ooNtG5Nbsk+EWVnpPC3 b2uyIKaFBx8N1y7LJYJ3Fvv8HRn+sL6ejDZ+nbw0ZIVZnY9GAqFgPO25eKHnvq20 536ZRd8gzzoicP8lbSjE5YJMhy65oa2udGmDr7h4QyQ/0F8Evu7/kCqYyXq06fEq O0PeI65ExUfRhS5ySKGaQfDwV2rmrVjXB/eBxEJMVoQJFHu6UXvspuCCuY2FVHx3 +F8K0IcU2D0oPkN9YR88mPQ/4q5/EZFl1buORkn4RT9tLcahR3uDRM1Bt1/lLSWh R6KBYg/dHXJvs/dYhOZWYKv0jUweaOBk29b3IWqqr1s1Jk1BrD1aQ/o= -----END CERTIFICATE-----Generated at Sun Jan 25 14:31:08 2026 by rpki-client