This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/TJ4d2WYpIjH4mLA1Jef3zbs5h1w.roa File: TJ4d2WYpIjH4mLA1Jef3zbs5h1w.roa (raw, json) Hash identifier: bvpYF9UPs3HZjo44Cry+9B0U6H15yPL3VjfGpzCMqks= Subject key identifier: 4C:9E:1D:D9:66:29:22:31:F8:98:B0:35:25:E7:F7:CD:BB:39:87:5C Certificate issuer: /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f Certificate serial: 019B7DCB5E65F9D73B883D6ED3F8621648C2 Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/TJ4d2WYpIjH4mLA1Jef3zbs5h1w.roa Signing time: Fri 02 Jan 2026 08:20:38 +0000 ROA not before: Fri 02 Jan 2026 08:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209958 IP address blocks: 2a12:4940::/32 maxlen: 48 2a12:4946:3000::/48 maxlen: 48 2a12:4946:4940::/44 maxlen: 48 2a12:4946:6960::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:5e:65:f9:d7:3b:88:3d:6e:d3:f8:62:16:48:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f Validity Not Before: Jan 2 08:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c9e1dd966292231f898b03525e7f7cdbb39875c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:25:6e:c6:e7:f0:db:dd:ce:23:63:c9:2a:72: 17:ea:c2:1c:bb:3d:f1:ee:84:6d:fd:e1:99:d2:e0: 04:57:7a:b2:89:53:b0:a2:83:5e:b8:80:a9:23:65: 74:c8:c5:85:6e:3f:d7:2b:f0:1c:aa:d7:7e:2d:69: f7:70:91:35:b6:b5:53:96:cd:9e:b2:82:a6:66:66: e4:cd:bb:7d:33:4d:20:7c:28:ad:83:f4:81:1e:e5: 4a:99:15:b6:34:7c:de:8f:f9:f6:4e:40:e1:e7:16: eb:86:69:26:4d:2f:80:d3:94:4d:5d:09:df:d5:71: b6:1f:b3:f1:37:16:b1:1b:61:84:17:52:59:cd:18: 82:cc:f1:77:28:86:5e:ba:e5:48:e5:88:33:ce:95: c2:81:b8:1e:77:5c:69:45:c6:d1:6b:0f:a4:24:6f: d7:e0:f8:42:e6:ad:a1:7c:8c:c3:c5:20:d0:00:b2: 9c:dc:f1:69:b6:d2:a1:f8:ce:6f:b1:8e:af:66:51: 45:51:d7:14:fe:77:75:f0:cc:ad:82:12:a8:34:94: 62:8e:1d:71:0e:b6:b9:d7:98:b1:d7:74:e3:b1:30: 58:97:70:c7:61:6e:b3:e0:d9:40:4d:a9:01:26:04: b0:d0:9b:61:71:22:dd:bd:ae:2e:8d:60:99:66:d9: 13:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:9E:1D:D9:66:29:22:31:F8:98:B0:35:25:E7:F7:CD:BB:39:87:5C X509v3 Authority Key Identifier: keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/TJ4d2WYpIjH4mLA1Jef3zbs5h1w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:4940::/32 2a12:4946:3000::/48 2a12:4946:4940::/44 2a12:4946:6960::/44 Signature Algorithm: sha256WithRSAEncryption 59:18:77:eb:59:08:12:6d:16:1f:7b:27:54:0b:bd:f3:fd:61: 14:ee:9b:23:d9:00:8b:42:0c:ac:1e:39:91:2f:13:05:68:61: 06:28:2a:55:e2:1d:dd:1d:87:a5:2d:99:90:ef:63:a6:9d:05: 36:e9:95:67:47:03:4a:af:24:86:d8:db:c8:d2:9e:c3:86:7a: d5:05:e5:f9:70:7d:5a:41:cc:97:5c:0f:48:8f:f5:49:23:20: 1f:dd:69:e2:85:a3:4a:3f:19:8a:cd:46:e2:d6:fe:9d:bc:97: 76:15:f0:18:99:34:be:fb:87:09:75:fa:d8:b2:85:8d:c3:b4: 50:1b:70:61:31:bf:d6:08:73:43:b1:a2:57:45:df:10:e1:c3: 35:ec:48:d3:a6:f2:ae:77:a6:36:47:6d:6e:5e:db:21:14:a4: 34:0c:54:ec:2c:2d:2f:26:fc:93:03:4a:fd:28:d9:a1:6e:00: 9b:95:37:5d:3a:e7:8e:74:87:0e:8a:2d:88:1a:46:73:e4:b3: 92:e7:fd:90:6e:77:1f:dd:f5:07:f5:f5:9a:24:a8:a8:ab:59: 7a:c2:1c:fb:e4:6e:68:d0:b9:ee:e4:cc:28:90:8f:da:42:7d: 73:d2:5b:99:da:98:d0:15:08:e8:35:f7:d0:6d:24:de:67:ac: ed:7d:87:34 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt9y15l+dc7iD1u0/hiFkjCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NjM5NWMxMjY3MmFkOTU4OTIxYjYyYjlkYzliMmJjZDhh NjhhOWYwHhcNMjYwMTAyMDgyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzllMWRkOTY2MjkyMjMxZjg5OGIwMzUyNWU3ZjdjZGJiMzk4NzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSVuxufw293OI2PJKnIX6sIcuz3x 7oRt/eGZ0uAEV3qyiVOwooNeuICpI2V0yMWFbj/XK/Acqtd+LWn3cJE1trVTls2e soKmZmbkzbt9M00gfCitg/SBHuVKmRW2NHzej/n2TkDh5xbrhmkmTS+A05RNXQnf 1XG2H7PxNxaxG2GEF1JZzRiCzPF3KIZeuuVI5YgzzpXCgbged1xpRcbRaw+kJG/X 4PhC5q2hfIzDxSDQALKc3PFpttKh+M5vsY6vZlFFUdcU/nd18MytghKoNJRijh1x Dra515ix13TjsTBYl3DHYW6z4NlATakBJgSw0JthcSLdva4ujWCZZtkTIQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFEyeHdlmKSIx+JiwNSXn9827OYdcMB8GA1UdIwQY MBaAFHRjlcEmcq2ViSG2K53JsrzYpoqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85ZTIzNTEtOGRkMC00YjcwLWE1ZmMt ZmI3NzRhYmRmYWMyLzEvVEo0ZDJXWXBJakg0bUxBMUplZjN6YnM1aDF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi85ZTIzNTEtOGRkMC00YjcwLWE1ZmMtZmI3NzRhYmRmYWMy LzEvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAAjAiAwUAKhJJQAMH ACoSSUYwAAMHBCoSSUZJQAMHBCoSSUZpYDANBgkqhkiG9w0BAQsFAAOCAQEAWRh3 61kIEm0WH3snVAu98/1hFO6bI9kAi0IMrB45kS8TBWhhBigqVeId3R2HpS2ZkO9j pp0FNumVZ0cDSq8khtjbyNKew4Z61QXl+XB9WkHMl1wPSI/1SSMgH91p4oWjSj8Z is1G4tb+nbyXdhXwGJk0vvuHCXX62LKFjcO0UBtwYTG/1ghzQ7GiV0XfEOHDNexI 06byrnemNkdtbl7bIRSkNAxU7CwtLyb8kwNK/SjZoW4Am5U3XTrnjnSHDootiBpG c+Szkuf9kG53H931B/X1miSoqKtZesIc++RuaNC57uTMKJCP2kJ9c9JbmdqY0BUI 6DX30G0k3mes7X2HNA== -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:13 2026 by rpki-client