This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/TcpPyEFzwI8rUBBER7anO-H4FSQ.roa File: TcpPyEFzwI8rUBBER7anO-H4FSQ.roa (raw, json) Hash identifier: tRzYpPue0i0+G7s8flugimh7qo6EHI4LN+LVk75e9Tg= Subject key identifier: 4D:CA:4F:C8:41:73:C0:8F:2B:50:10:44:47:B6:A7:3B:E1:F8:15:24 Certificate issuer: /CN=615758aea479d4f32a9e89e9808f30edfc23b2e7 Certificate serial: 019BE65507ED4E40F5B942E00A3BC1731AB4 Authority key identifier: 61:57:58:AE:A4:79:D4:F3:2A:9E:89:E9:80:8F:30:ED:FC:23:B2:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YVdYrqR51PMqnonpgI8w7fwjsuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/TcpPyEFzwI8rUBBER7anO-H4FSQ.roa Signing time: Thu 22 Jan 2026 15:31:30 +0000 ROA not before: Thu 22 Jan 2026 15:31:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 2a07:8241::/36 maxlen: 36 2a07:8241:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.mft rsync://rpki.ripe.net/repository/DEFAULT/YVdYrqR51PMqnonpgI8w7fwjsuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e6:55:07:ed:4e:40:f5:b9:42:e0:0a:3b:c1:73:1a:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615758aea479d4f32a9e89e9808f30edfc23b2e7 Validity Not Before: Jan 22 15:31:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4dca4fc84173c08f2b50104447b6a73be1f81524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3a:42:fa:2f:ae:4f:3a:9d:a5:6e:c6:14:24: 4d:e5:a5:76:ac:0d:03:e2:7d:07:2d:d8:4c:d7:06: 45:57:0c:db:a6:45:e5:91:b5:83:3f:ca:47:71:ef: f5:18:fb:1c:ba:06:26:eb:b6:2e:1a:19:8f:f2:54: 4f:cf:14:67:af:24:a5:eb:03:d9:83:38:1b:8c:a8: 8d:af:db:97:ac:8a:f1:96:53:41:2b:70:ea:d2:dd: 2f:00:2a:5c:3b:c2:e3:83:21:fb:05:65:b7:55:10: ab:ca:c5:f2:ba:61:bb:c0:f3:e0:c3:08:4c:fa:7c: 61:ec:ab:f7:14:99:be:d9:44:00:2e:9f:99:18:64: d4:10:4c:15:aa:0a:41:52:ad:27:16:0a:8d:21:95: bd:b9:ff:2e:82:a0:da:bf:ab:68:83:3f:37:72:1e: 44:c1:df:5b:78:9a:3a:a4:05:b3:06:93:e1:4d:84: 59:33:8e:f7:f0:db:97:d3:21:39:6b:c3:26:ab:d7: e6:ce:58:90:ce:88:35:f4:b2:2d:89:ec:7d:9e:27: c1:04:a8:ed:50:b7:7c:95:36:15:17:2a:73:4a:c4: 82:b1:ad:f8:51:0e:42:b8:6f:b3:9f:9b:c0:37:1f: 14:ef:77:66:47:63:1a:68:2e:3e:2f:8a:99:80:de: 93:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:CA:4F:C8:41:73:C0:8F:2B:50:10:44:47:B6:A7:3B:E1:F8:15:24 X509v3 Authority Key Identifier: keyid:61:57:58:AE:A4:79:D4:F3:2A:9E:89:E9:80:8F:30:ED:FC:23:B2:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YVdYrqR51PMqnonpgI8w7fwjsuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/TcpPyEFzwI8rUBBER7anO-H4FSQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:8241::/35 Signature Algorithm: sha256WithRSAEncryption 7a:5b:22:a2:0f:48:a1:a9:c6:f7:b9:be:67:0f:25:8d:8a:57: f0:b4:59:50:bf:fa:f8:27:76:62:19:b8:16:34:0a:75:bf:4a: a6:58:e2:bd:39:39:fe:7f:6f:f1:4a:8e:2a:88:6d:39:b8:a2: cf:ff:f7:c3:58:2b:aa:68:0f:e9:46:a1:1a:3a:ae:b5:5a:2c: 22:3f:83:39:07:51:e5:fb:67:5c:15:30:0d:e1:68:16:66:1c: cc:e2:4c:64:42:46:75:a4:14:22:20:6f:be:14:d4:60:c1:3c: 95:d4:34:6d:b8:c5:24:e0:d5:21:5c:65:d9:06:76:7a:ea:bf: a5:74:47:aa:6c:31:bb:db:ea:98:58:2b:5b:14:49:b4:9a:f0: f6:79:48:6a:ae:15:6e:63:3c:3a:c8:68:6f:52:06:5f:d6:21: 60:80:71:ef:1c:6c:59:28:cc:4c:8e:07:a7:3d:10:4f:dc:5c: 66:8e:26:fa:8e:4e:69:22:89:20:bf:68:ec:aa:82:e8:c2:4b: a3:9b:a8:8c:90:da:01:2e:78:64:4d:41:99:31:4a:49:16:c4: 59:41:7e:28:9b:fc:29:2d:af:65:71:44:16:0b:b9:b5:6c:88: 63:1b:5a:f8:1a:83:dc:2c:2d:5b:9d:bb:c7:6a:3c:d9:4c:92: d6:5b:5e:6c -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZvmVQftTkD1uULgCjvBcxq0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNTc1OGFlYTQ3OWQ0ZjMyYTllODllOTgwOGYzMGVkZmMy M2IyZTcwHhcNMjYwMTIyMTUzMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZGNhNGZjODQxNzNjMDhmMmI1MDEwNDQ0N2I2YTczYmUxZjgxNTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujpC+i+uTzqdpW7GFCRN5aV2rA0D 4n0HLdhM1wZFVwzbpkXlkbWDP8pHce/1GPscugYm67YuGhmP8lRPzxRnrySl6wPZ gzgbjKiNr9uXrIrxllNBK3Dq0t0vACpcO8LjgyH7BWW3VRCrysXyumG7wPPgwwhM +nxh7Kv3FJm+2UQALp+ZGGTUEEwVqgpBUq0nFgqNIZW9uf8ugqDav6togz83ch5E wd9beJo6pAWzBpPhTYRZM4738NuX0yE5a8Mmq9fmzliQzog19LItiex9nifBBKjt ULd8lTYVFypzSsSCsa34UQ5CuG+zn5vANx8U73dmR2MaaC4+L4qZgN6TiwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFE3KT8hBc8CPK1AQREe2pzvh+BUkMB8GA1UdIwQY MBaAFGFXWK6kedTzKp6J6YCPMO38I7LnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVZkWXJxUjUxUE1xbm9ucGdJOHc3Zndqc3VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9hMWM5NWYtZjNlMy00NTMxLWE0NjUt ZTkwZDk4MzBlOGM1LzEvVGNwUHlFRnp3SThyVUJCRVI3YW5PLUg0RlNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9hMWM5NWYtZjNlMy00NTMxLWE0NjUtZTkwZDk4MzBlOGM1 LzEvWVZkWXJxUjUxUE1xbm9ucGdJOHc3Zndqc3VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFKgeCQQAw DQYJKoZIhvcNAQELBQADggEBAHpbIqIPSKGpxve5vmcPJY2KV/C0WVC/+vgndmIZ uBY0CnW/SqZY4r05Of5/b/FKjiqIbTm4os//98NYK6poD+lGoRo6rrVaLCI/gzkH UeX7Z1wVMA3haBZmHMziTGRCRnWkFCIgb74U1GDBPJXUNG24xSTg1SFcZdkGdnrq v6V0R6psMbvb6phYK1sUSbSa8PZ5SGquFW5jPDrIaG9SBl/WIWCAce8cbFkozEyO B6c9EE/cXGaOJvqOTmkiiSC/aOyqgujCS6ObqIyQ2gEueGRNQZkxSkkWxFlBfiib /Cktr2VxRBYLubVsiGMbWvgag9wsLVudu8dqPNlMktZbXmw= -----END CERTIFICATE-----Generated at Sun Jan 25 15:12:53 2026 by rpki-client