This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/t0dJBq5tyuef8sqhfZjuaOUjwGk.roa File: t0dJBq5tyuef8sqhfZjuaOUjwGk.roa (raw, json) Hash identifier: TOFTPGQ61BbJrcBH4fsixoKiOEv8Y7aIrVJWORJmIls= Subject key identifier: B7:47:49:06:AE:6D:CA:E7:9F:F2:CA:A1:7D:98:EE:68:E5:23:C0:69 Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c Certificate serial: 019B78A2B3B81B9381AA1B7C0A365CB155DE Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/t0dJBq5tyuef8sqhfZjuaOUjwGk.roa Signing time: Thu 01 Jan 2026 08:18:07 +0000 ROA not before: Thu 01 Jan 2026 08:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 22773 IP address blocks: 2a10:5a80::/29 maxlen: 29 2a10:5c80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:b3:b8:1b:93:81:aa:1b:7c:0a:36:5c:b1:55:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c Validity Not Before: Jan 1 08:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7474906ae6dcae79ff2caa17d98ee68e523c069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:97:57:97:34:22:57:8c:ad:d2:a7:7d:a3:f0: a1:56:43:f6:6b:25:5d:d0:5a:8e:b2:9f:2e:20:9d: 15:91:13:54:bd:46:f6:48:cd:ae:4e:06:fd:da:a6: 1c:d8:4d:aa:50:9e:d7:f4:fb:8e:f9:7b:a7:04:96: d8:57:f6:de:aa:b8:e8:18:e5:94:00:e0:9c:7a:39: c0:89:ad:90:f8:e7:07:81:2e:53:5c:33:bc:38:5f: e6:c6:3b:d1:bf:40:26:d6:25:43:b1:ad:cd:7b:25: e0:fe:6b:80:38:05:87:0c:3e:52:e7:22:58:ba:00: dd:87:4c:04:32:07:55:ac:76:03:a7:d3:65:64:96: d3:79:ed:7d:22:dd:fb:8d:74:22:39:56:c2:53:76: f0:06:94:6b:4e:d1:32:c1:56:6c:e9:26:da:f1:86: bb:35:fb:c9:db:1c:fc:44:24:b1:2b:3f:08:3f:d1: 7b:9e:32:ad:c7:8b:6b:3b:99:66:cc:17:e9:d9:f8: 9a:7e:2e:14:48:cf:5f:6a:bb:85:3a:29:69:e5:de: 23:d8:11:f3:87:18:0f:4c:d8:35:e1:3b:0f:e4:84: ad:7d:d6:b6:f6:62:9e:20:83:8d:44:90:c2:5d:b4: 98:f3:2d:f5:6f:83:00:35:05:74:f1:70:50:09:34: 49:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:47:49:06:AE:6D:CA:E7:9F:F2:CA:A1:7D:98:EE:68:E5:23:C0:69 X509v3 Authority Key Identifier: keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/t0dJBq5tyuef8sqhfZjuaOUjwGk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:5a80::/29 2a10:5c80::/29 Signature Algorithm: sha256WithRSAEncryption 1d:6f:be:3b:ba:5a:8f:62:83:72:5f:4d:cb:4b:c5:89:36:f1: 40:99:e3:5a:ea:4d:30:ac:51:94:82:b8:20:de:54:b9:08:7f: 87:18:db:7c:9f:ac:0a:e7:59:6e:08:61:8e:d9:18:f2:32:94: e6:09:14:d5:b6:ae:fb:47:8b:27:bf:c5:51:78:cb:c0:89:c5: 03:7b:f1:86:6c:35:0c:5b:b6:55:d5:4c:65:46:08:30:e0:7e: 3e:66:ac:37:33:62:a3:61:ac:80:cd:a5:65:ff:5d:20:52:ec: fa:a3:53:69:bd:c7:77:28:35:89:f9:87:d1:01:63:8e:f0:3d: 12:28:e3:89:9c:a6:44:0b:fc:b8:68:dd:e3:61:b0:8c:53:d6: 0c:8a:c9:77:da:4c:c3:47:79:fd:ba:77:46:b0:52:84:7c:30: 65:68:20:3a:fc:84:d3:d4:eb:48:9f:00:00:09:c9:c3:42:6b: bf:a7:70:68:6e:8d:2a:f1:6f:a3:ce:e3:6a:0c:d9:04:aa:fd: bc:4c:81:35:de:bf:26:bd:f1:c0:5a:0a:bf:29:7b:1f:5d:ae: 3b:f2:69:e9:3b:73:86:8b:77:9a:17:f2:53:5b:67:d8:3e:a5: fc:99:05:7e:38:51:d0:45:ce:10:ea:3f:3b:fe:68:90:ec:51: cd:94:7e:eb -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt4orO4G5OBqht8CjZcsVXeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZDIxZTgwNGFiNzcxM2FkNzg3N2RkZTYwM2FhNzgyNGIz MTk4M2MwHhcNMjYwMTAxMDgxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzQ3NDkwNmFlNmRjYWU3OWZmMmNhYTE3ZDk4ZWU2OGU1MjNjMDY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJdXlzQiV4yt0qd9o/ChVkP2ayVd 0FqOsp8uIJ0VkRNUvUb2SM2uTgb92qYc2E2qUJ7X9PuO+XunBJbYV/beqrjoGOWU AOCcejnAia2Q+OcHgS5TXDO8OF/mxjvRv0Am1iVDsa3NeyXg/muAOAWHDD5S5yJY ugDdh0wEMgdVrHYDp9NlZJbTee19It37jXQiOVbCU3bwBpRrTtEywVZs6Sba8Ya7 NfvJ2xz8RCSxKz8IP9F7njKtx4trO5lmzBfp2fiafi4USM9faruFOilp5d4j2BHz hxgPTNg14TsP5IStfda29mKeIIONRJDCXbSY8y31b4MANQV08XBQCTRJEQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFLdHSQaubcrnn/LKoX2Y7mjlI8BpMB8GA1UdIwQY MBaAFMLSHoBKt3E614d93mA6p4JLMZg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYt NTlhZTA5ZWRiZWI5LzEvdDBkSkJxNXR5dWVmOHNxaGZaanVhT1Vqd0drLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYtNTlhZTA5ZWRiZWI5 LzEvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDKhBagAMF AyoQXIAwDQYJKoZIhvcNAQELBQADggEBAB1vvju6Wo9ig3JfTctLxYk28UCZ41rq TTCsUZSCuCDeVLkIf4cY23yfrArnWW4IYY7ZGPIylOYJFNW2rvtHiye/xVF4y8CJ xQN78YZsNQxbtlXVTGVGCDDgfj5mrDczYqNhrIDNpWX/XSBS7PqjU2m9x3coNYn5 h9EBY47wPRIo44mcpkQL/Lho3eNhsIxT1gyKyXfaTMNHef26d0awUoR8MGVoIDr8 hNPU60ifAAAJycNCa7+ncGhujSrxb6PO42oM2QSq/bxMgTXevya98cBaCr8pex9d rjvyaek7c4aLd5oX8lNbZ9g+pfyZBX44UdBFzhDqPzv+aJDsUc2Ufus= -----END CERTIFICATE-----Generated at Sun Jan 25 09:18:33 2026 by rpki-client