This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/tOUQl2J5Wpm8LcDuYGUnej7OiFY.roa File: tOUQl2J5Wpm8LcDuYGUnej7OiFY.roa (raw, json) Hash identifier: 3SzovpialpEoSK1tVIj0K+EFB6CyFsxOHbtKDkoQSb8= Subject key identifier: B4:E5:10:97:62:79:5A:99:BC:2D:C0:EE:60:65:27:7A:3E:CE:88:56 Certificate issuer: /CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d Certificate serial: 019B7E392036EB1777A1FC2E007DB41C7868 Authority key identifier: C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/tOUQl2J5Wpm8LcDuYGUnej7OiFY.roa Signing time: Fri 02 Jan 2026 10:20:31 +0000 ROA not before: Fri 02 Jan 2026 10:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214123 IP address blocks: 2001:67c:f20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:20:36:eb:17:77:a1:fc:2e:00:7d:b4:1c:78:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d Validity Not Before: Jan 2 10:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4e5109762795a99bc2dc0ee6065277a3ece8856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5d:f6:6d:19:cf:3a:4c:b0:12:f3:d1:aa:5b: 98:0e:44:75:bd:23:d8:53:96:85:59:df:6b:f9:b3: f6:0b:80:1e:cf:34:7c:fd:44:90:24:11:4b:b8:ba: d7:85:4b:d9:52:f0:bb:a0:7d:5b:5f:f8:68:cd:93: 38:e4:a7:f6:34:d4:32:5f:9f:2d:7f:84:a6:a2:0d: 19:37:94:c7:bb:8b:64:70:f1:c5:e2:bf:79:a5:4b: 12:5b:e4:80:36:02:55:72:56:44:47:ee:b6:e7:90: 4f:66:fd:ef:a4:ae:62:15:3d:48:85:0d:b8:27:da: 0b:60:c9:16:9e:14:1c:df:57:b6:8c:10:36:30:ca: 87:ae:77:af:5c:39:f5:d7:48:c3:ee:a9:54:1b:e2: e5:13:3d:ec:9c:a7:7c:33:9b:37:5d:9e:72:4d:4c: 2b:a5:16:69:43:a3:03:af:b0:dd:df:a6:e3:89:64: 9e:af:e2:c8:cf:16:4f:20:5e:1e:2e:2d:4f:68:00: 92:66:20:f0:7f:c6:22:45:b1:54:09:a1:65:0a:a9: bb:6d:a0:c2:99:80:39:2d:2b:4d:8f:a2:9e:84:05: f5:10:61:c3:df:1b:78:e8:12:f6:91:78:ab:01:69: 04:31:a9:0f:2c:51:0a:c3:6a:9f:59:8b:ea:e1:ea: 50:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:E5:10:97:62:79:5A:99:BC:2D:C0:EE:60:65:27:7A:3E:CE:88:56 X509v3 Authority Key Identifier: keyid:C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/tOUQl2J5Wpm8LcDuYGUnej7OiFY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:f20::/48 Signature Algorithm: sha256WithRSAEncryption 01:a8:3b:af:2b:42:03:af:6f:39:34:ff:e7:c1:bd:89:80:1c: 45:52:fd:d3:88:ed:e1:10:ba:82:bd:b8:17:3b:74:c8:42:48: 4e:23:f8:21:4f:3f:f9:69:c4:c7:0e:43:7c:d8:f6:f2:7c:82: b6:33:4b:18:96:9c:c3:4e:f2:c2:e9:d4:6e:34:f5:82:37:ed: 10:73:c6:a6:58:03:54:b1:7a:a7:24:dc:51:bf:a0:af:25:7c: 34:13:fa:db:e8:07:1d:a7:47:96:c9:ad:68:d2:58:20:a2:99: a9:04:90:69:b8:5f:b4:9c:3a:34:b3:de:24:62:ea:cf:97:c1: b3:57:5c:0c:6e:30:24:68:fa:a5:39:92:7e:d4:eb:3d:0f:01: 97:a1:b1:67:fd:96:19:8c:6e:1b:2b:e9:fc:cb:97:76:7d:66: f5:73:01:43:84:26:82:38:d6:8b:24:96:2e:69:6e:6d:a8:e3: 28:9b:c7:31:5c:1f:03:e2:8f:99:f2:99:4f:7f:ce:de:29:d4: f7:f8:ec:a3:63:55:f1:fc:5b:08:6f:af:22:1c:55:51:af:17: b7:de:13:4d:05:29:50:bf:d1:bb:c0:f5:b6:7c:ea:2d:e5:0f: 3a:a5:a1:94:eb:85:30:d8:66:12:bc:d1:7f:a0:c1:7c:0f:f1: 2a:20:a9:4e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OSA26xd3ofwuAH20HHhoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MmQ1NzM3MjRjYjFjMDk1YjliNjFiMmRmMDVlZTNmYzFh ODcxNmQwHhcNMjYwMTAyMTAyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGU1MTA5NzYyNzk1YTk5YmMyZGMwZWU2MDY1Mjc3YTNlY2U4ODU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1F32bRnPOkywEvPRqluYDkR1vSPY U5aFWd9r+bP2C4AezzR8/USQJBFLuLrXhUvZUvC7oH1bX/hozZM45Kf2NNQyX58t f4Smog0ZN5THu4tkcPHF4r95pUsSW+SANgJVclZER+6255BPZv3vpK5iFT1IhQ24 J9oLYMkWnhQc31e2jBA2MMqHrnevXDn110jD7qlUG+LlEz3snKd8M5s3XZ5yTUwr pRZpQ6MDr7Dd36bjiWSer+LIzxZPIF4eLi1PaACSZiDwf8YiRbFUCaFlCqm7baDC mYA5LStNj6KehAX1EGHD3xt46BL2kXirAWkEMakPLFEKw2qfWYvq4epQ8QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLTlEJdieVqZvC3A7mBlJ3o+zohWMB8GA1UdIwQY MBaAFMYtVzckyxwJW5thst8F7j/BqHFtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGkxWE55VExIQWxibTJHeTN3WHVQOEdvY1cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMmNmMTEtYmYxNC00MjA0LWFmODgt ZjY3ZWNjNTg1YmI4LzEvdE9VUWwySjVXcG04TGNEdVlHVW5lajdPaUZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9mMmNmMTEtYmYxNC00MjA0LWFmODgtZjY3ZWNjNTg1YmI4 LzEveGkxWE55VExIQWxibTJHeTN3WHVQOEdvY1cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA8g MA0GCSqGSIb3DQEBCwUAA4IBAQABqDuvK0IDr285NP/nwb2JgBxFUv3TiO3hELqC vbgXO3TIQkhOI/ghTz/5acTHDkN82PbyfIK2M0sYlpzDTvLC6dRuNPWCN+0Qc8am WANUsXqnJNxRv6CvJXw0E/rb6Acdp0eWya1o0lggopmpBJBpuF+0nDo0s94kYurP l8GzV1wMbjAkaPqlOZJ+1Os9DwGXobFn/ZYZjG4bK+n8y5d2fWb1cwFDhCaCONaL JJYuaW5tqOMom8cxXB8D4o+Z8plPf87eKdT3+OyjY1Xx/FsIb68iHFVRrxe33hNN BSlQv9G7wPW2fOot5Q86paGU64Uw2GYSvNF/oMF8D/EqIKlO -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:25 2026 by rpki-client