This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/TujVxWk7elywpyXmIMnDKFw3mNo.roa File: TujVxWk7elywpyXmIMnDKFw3mNo.roa (raw, json) Hash identifier: Zvi/MCY8l+89SlTxrMXMYRwO5dgOTj98ivE3+1BLbBY= Subject key identifier: 4E:E8:D5:C5:69:3B:7A:5C:B0:A7:25:E6:20:C9:C3:28:5C:37:98:DA Certificate issuer: /CN=f4674b6ab3d5c6743d004ec0920a0371ce019758 Certificate serial: 019B79ED4E6E5729F8C20DA2EF0D00676D67 Authority key identifier: F4:67:4B:6A:B3:D5:C6:74:3D:00:4E:C0:92:0A:03:71:CE:01:97:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/TujVxWk7elywpyXmIMnDKFw3mNo.roa Signing time: Thu 01 Jan 2026 14:19:13 +0000 ROA not before: Thu 01 Jan 2026 14:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212828 IP address blocks: 2001:67c:a58::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:4e:6e:57:29:f8:c2:0d:a2:ef:0d:00:67:6d:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4674b6ab3d5c6743d004ec0920a0371ce019758 Validity Not Before: Jan 1 14:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ee8d5c5693b7a5cb0a725e620c9c3285c3798da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:06:87:ec:c2:2d:70:2e:d8:cc:53:9f:c2:20: 6b:54:54:e0:10:89:ab:62:2f:7c:ac:79:1b:76:f5: 39:3e:db:82:f1:b2:90:2a:07:99:e5:16:f6:b6:5c: 29:da:cb:ef:3d:2a:df:f3:3a:b5:66:31:83:f5:70: 2e:70:87:be:7e:63:20:fe:f8:7b:3b:94:b3:10:71: f1:10:fc:ea:ee:28:64:81:86:85:8e:be:4f:7e:a7: cb:aa:2e:88:a1:1e:1d:54:17:2d:a0:b4:12:9b:ea: c2:33:5c:87:9e:cd:90:b4:89:d3:18:62:07:a0:2b: 50:22:61:c2:08:f8:2e:f6:4e:f0:c8:1e:18:9b:b5: 95:0d:e8:e9:e5:26:1f:b6:65:e7:52:ca:7f:84:8a: 23:bd:45:05:3d:db:ef:55:ce:5d:65:89:b6:1c:54: 70:59:1f:1e:2e:15:9f:57:bc:0a:b9:d1:b5:ec:3b: 7c:43:62:c2:cf:e3:d4:a4:31:1a:15:4f:79:a2:66: a3:f6:57:8e:99:af:7f:7b:10:14:f6:2f:b9:87:9b: c6:59:46:8b:32:6a:60:4a:5b:72:d1:e3:a6:7b:1b: ce:e1:c0:f0:88:2e:3d:a4:44:42:cc:c8:ab:f5:51: 72:52:ca:15:c3:cb:bf:5e:53:d0:68:c4:7c:98:31: bc:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:E8:D5:C5:69:3B:7A:5C:B0:A7:25:E6:20:C9:C3:28:5C:37:98:DA X509v3 Authority Key Identifier: keyid:F4:67:4B:6A:B3:D5:C6:74:3D:00:4E:C0:92:0A:03:71:CE:01:97:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/TujVxWk7elywpyXmIMnDKFw3mNo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:a58::/48 Signature Algorithm: sha256WithRSAEncryption 13:8e:56:36:46:0f:06:00:d5:65:42:fe:cc:89:46:9e:37:6e: 5f:ae:aa:cc:c5:69:75:4c:b9:21:e5:8f:10:09:d1:60:4f:3b: 2a:3d:7b:71:c4:80:e0:de:91:ec:56:6c:c9:78:b3:9d:b9:24: 83:f0:0a:90:96:2b:d7:96:f3:38:3e:33:ac:1c:16:e1:44:ae: b5:10:05:d5:d2:ba:80:50:e6:71:ea:95:28:6c:b3:c6:da:cb: ce:94:b6:79:f0:87:e3:7d:0a:47:77:92:33:c4:ef:6d:04:29: 08:61:22:49:50:91:0f:99:0d:1f:c2:83:82:92:a4:c5:da:dd: 8a:8e:f3:2a:75:69:f6:b9:0e:fa:33:00:0b:01:55:c6:71:ea: ae:54:34:79:e1:27:83:70:d1:c4:27:17:0f:05:f7:d6:17:5e: 8c:cd:5a:b7:c8:0d:0a:55:e2:0b:e2:3e:05:cb:57:61:93:32: 96:39:ec:55:02:44:7b:e5:08:64:c3:f1:27:51:22:3e:c0:a3: f3:ed:3d:82:74:56:95:e1:80:5c:27:6e:e2:87:ee:72:aa:6b: 5f:aa:de:32:52:2b:7d:3d:e5:5e:ad:19:86:f3:fd:5a:b5:60: fc:53:bf:8a:a7:aa:5c:9a:75:68:3d:af:21:ad:b8:af:3d:26: 06:8d:d4:6a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57U5uVyn4wg2i7w0AZ21nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0Njc0YjZhYjNkNWM2NzQzZDAwNGVjMDkyMGEwMzcxY2Uw MTk3NTgwHhcNMjYwMTAxMTQxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZWU4ZDVjNTY5M2I3YTVjYjBhNzI1ZTYyMGM5YzMyODVjMzc5OGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgaH7MItcC7YzFOfwiBrVFTgEImr Yi98rHkbdvU5PtuC8bKQKgeZ5Rb2tlwp2svvPSrf8zq1ZjGD9XAucIe+fmMg/vh7 O5SzEHHxEPzq7ihkgYaFjr5PfqfLqi6IoR4dVBctoLQSm+rCM1yHns2QtInTGGIH oCtQImHCCPgu9k7wyB4Ym7WVDejp5SYftmXnUsp/hIojvUUFPdvvVc5dZYm2HFRw WR8eLhWfV7wKudG17Dt8Q2LCz+PUpDEaFU95omaj9leOma9/exAU9i+5h5vGWUaL MmpgSlty0eOmexvO4cDwiC49pERCzMir9VFyUsoVw8u/XlPQaMR8mDG8qwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFE7o1cVpO3pcsKcl5iDJwyhcN5jaMB8GA1UdIwQY MBaAFPRnS2qz1cZ0PQBOwJIKA3HOAZdYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUdkTGFyUFZ4blE5QUU3QWtnb0RjYzRCbDFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS83NDhlZGUtZGUzNy00MzA4LTg4NzIt Mzk1NzBkNmYwMDllLzEvVHVqVnhXazdlbHl3cHlYbUlNbkRLRnczbU5vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS83NDhlZGUtZGUzNy00MzA4LTg4NzItMzk1NzBkNmYwMDll LzEvOUdkTGFyUFZ4blE5QUU3QWtnb0RjYzRCbDFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfApY MA0GCSqGSIb3DQEBCwUAA4IBAQATjlY2Rg8GANVlQv7MiUaeN25frqrMxWl1TLkh 5Y8QCdFgTzsqPXtxxIDg3pHsVmzJeLOduSSD8AqQlivXlvM4PjOsHBbhRK61EAXV 0rqAUOZx6pUobLPG2svOlLZ58IfjfQpHd5IzxO9tBCkIYSJJUJEPmQ0fwoOCkqTF 2t2KjvMqdWn2uQ76MwALAVXGcequVDR54SeDcNHEJxcPBffWF16MzVq3yA0KVeIL 4j4Fy1dhkzKWOexVAkR75Qhkw/EnUSI+wKPz7T2CdFaV4YBcJ27ih+5yqmtfqt4y Uit9PeVerRmG8/1atWD8U7+Kp6pcmnVoPa8hrbivPSYGjdRq -----END CERTIFICATE-----Generated at Sun Jan 25 18:08:23 2026 by rpki-client