This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/tP-BnXsZN6NQdPQ-Vw8Twys00WM.roa File: tP-BnXsZN6NQdPQ-Vw8Twys00WM.roa (raw, json) Hash identifier: DBCyB76gWKM0oz1E9E5WPf89Ch3ozcREuCeQGSM5Iw4= Subject key identifier: B4:FF:81:9D:7B:19:37:A3:50:74:F4:3E:57:0F:13:C3:2B:34:D1:63 Certificate issuer: /CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d Certificate serial: 019B783554F8DEC42D6F13C2EDA96D500F80 Authority key identifier: BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/tP-BnXsZN6NQdPQ-Vw8Twys00WM.roa Signing time: Thu 01 Jan 2026 06:18:39 +0000 ROA not before: Thu 01 Jan 2026 06:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215375 IP address blocks: 2a13:ccc5:e000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:54:f8:de:c4:2d:6f:13:c2:ed:a9:6d:50:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d Validity Not Before: Jan 1 06:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4ff819d7b1937a35074f43e570f13c32b34d163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0e:24:48:1e:80:7b:e2:4d:f6:56:b1:cf:5f: 47:91:51:d7:67:60:b0:92:9d:2a:08:27:55:e6:5f: f5:73:46:a2:9d:b9:3f:81:91:b9:5a:49:81:72:16: 2b:23:bc:4c:da:1f:54:0e:7e:9c:3d:5e:a4:22:c1: 9d:81:95:83:d4:30:8d:ec:19:e9:08:c3:b6:91:9b: da:8f:db:78:eb:ea:06:5d:0f:0c:ea:9b:62:a4:d3: f1:3c:03:6e:11:0a:f2:f0:12:83:ff:ab:f4:bb:01: 44:43:7c:22:89:27:c4:d7:68:8d:8f:8b:9f:d0:72: 04:5f:3c:da:15:23:8e:de:55:9d:e8:b0:dd:c7:d0: 1c:c7:4b:9f:29:ed:71:7e:a1:ea:4e:8c:a3:c7:73: af:9b:0d:0d:cb:57:ab:31:74:7d:5e:48:18:56:62: a2:4b:d0:12:a9:8d:9a:3e:47:6c:73:ca:0d:a7:6b: bd:52:62:99:37:b7:b1:58:a8:c0:31:0c:12:4d:ef: bb:22:97:a7:e7:23:72:4e:13:d4:93:71:76:61:92: 2e:f5:47:7e:01:11:b0:fc:d3:fa:65:5d:e4:3b:b5: c0:2a:6d:7d:d7:8b:20:2f:20:c1:21:c0:28:b6:4c: 00:c3:c0:9f:a0:2b:f9:f4:ce:e4:0a:0d:76:5d:ba: b9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:FF:81:9D:7B:19:37:A3:50:74:F4:3E:57:0F:13:C3:2B:34:D1:63 X509v3 Authority Key Identifier: keyid:BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/tP-BnXsZN6NQdPQ-Vw8Twys00WM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:ccc5:e000::/36 Signature Algorithm: sha256WithRSAEncryption 6b:4a:0c:1d:92:29:74:00:57:44:b9:14:c0:cd:1a:24:ad:2f: 57:7c:ca:2a:e3:83:cf:01:06:0b:8c:d9:d9:0b:af:37:a3:74: f1:50:62:cc:3d:96:a1:c4:ca:2a:94:2b:82:d1:06:86:4a:27: f7:05:f1:6a:ff:a3:db:2f:a1:35:50:66:94:db:f3:94:4d:f0: 0a:b9:86:28:a2:b4:df:af:ea:ae:40:4f:3d:bc:71:83:38:99: 27:8f:40:55:19:73:6e:23:72:bd:42:01:fd:7b:c4:9b:9b:a2: cd:fc:c0:97:11:e2:16:a7:fb:f5:70:83:13:32:28:75:3f:cd: 8c:96:a6:83:a0:cd:78:b6:e0:6e:e4:8a:17:bc:b9:90:b3:38: 60:90:f2:f8:57:6b:73:60:87:f9:08:0d:34:e2:b5:4f:06:7d: 01:4b:b5:4e:32:76:1e:ef:c4:cf:95:ef:dd:42:09:0a:7a:a8: 9e:78:42:ce:5d:4b:e8:7f:3e:94:b1:20:7b:ee:23:5f:9a:da: 82:d7:a0:fd:04:87:0f:b6:3b:9b:85:04:10:a4:0c:60:93:6d: e2:0c:7d:2f:3b:34:6b:f2:38:2c:71:b8:4d:dc:aa:11:57:f6: ce:c7:d4:f3:98:90:b5:ca:85:bc:94:19:33:93:82:6f:7f:69: 7b:bf:48:51 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt4NVT43sQtbxPC7altUA+AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYWE3NDhiYTE0YTc2ZTVkOGE2ZWRhY2I1NDI2MDgyYTU2 ZjVlM2QwHhcNMjYwMTAxMDYxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGZmODE5ZDdiMTkzN2EzNTA3NGY0M2U1NzBmMTNjMzJiMzRkMTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAow4kSB6Ae+JN9laxz19HkVHXZ2Cw kp0qCCdV5l/1c0ainbk/gZG5WkmBchYrI7xM2h9UDn6cPV6kIsGdgZWD1DCN7Bnp CMO2kZvaj9t46+oGXQ8M6ptipNPxPANuEQry8BKD/6v0uwFEQ3wiiSfE12iNj4uf 0HIEXzzaFSOO3lWd6LDdx9Acx0ufKe1xfqHqToyjx3Ovmw0Ny1erMXR9XkgYVmKi S9ASqY2aPkdsc8oNp2u9UmKZN7exWKjAMQwSTe+7Ipen5yNyThPUk3F2YZIu9Ud+ ARGw/NP6ZV3kO7XAKm1914sgLyDBIcAotkwAw8CfoCv59M7kCg12Xbq5ewIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFLT/gZ17GTejUHT0PlcPE8MrNNFjMB8GA1UdIwQY MBaAFLqqdIuhSnbl2KbtrLVCYIKlb149MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFwMGk2RktkdVhZcHUyc3RVSmdncVZ2WGowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9hOGU0NWItMTdjNi00MzZkLTgxYTgt YzUxOTUxNjJlM2JlLzEvdFAtQm5Yc1pONk5RZFBRLVZ3OFR3eXMwMFdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9hOGU0NWItMTdjNi00MzZkLTgxYTgtYzUxOTUxNjJlM2Jl LzEvdXFwMGk2RktkdVhZcHUyc3RVSmdncVZ2WGowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKhPMxeAw DQYJKoZIhvcNAQELBQADggEBAGtKDB2SKXQAV0S5FMDNGiStL1d8yirjg88BBguM 2dkLrzejdPFQYsw9lqHEyiqUK4LRBoZKJ/cF8Wr/o9svoTVQZpTb85RN8Aq5hiii tN+v6q5ATz28cYM4mSePQFUZc24jcr1CAf17xJubos38wJcR4han+/VwgxMyKHU/ zYyWpoOgzXi24G7kihe8uZCzOGCQ8vhXa3Ngh/kIDTTitU8GfQFLtU4ydh7vxM+V 791CCQp6qJ54Qs5dS+h/PpSxIHvuI1+a2oLXoP0Ehw+2O5uFBBCkDGCTbeIMfS87 NGvyOCxxuE3cqhFX9s7H1POYkLXKhbyUGTOTgm9/aXu/SFE= -----END CERTIFICATE-----Generated at Sun Jan 25 10:08:12 2026 by rpki-client