This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/tfaKP8IvgQkAwmU3RK8qZmHmzts.roa File: tfaKP8IvgQkAwmU3RK8qZmHmzts.roa (raw, json) Hash identifier: hyWKZ+AjnMpt6LR61ItU5+Wmy9Q8i+PxJ269z65RWH0= Subject key identifier: B5:F6:8A:3F:C2:2F:81:09:00:C2:65:37:44:AF:2A:66:61:E6:CE:DB Certificate issuer: /CN=c441738baab988b1d68693bb05e29bfbb4f0f671 Certificate serial: 019B79EBCBE87C5E93A1C501ED63C501D18D Authority key identifier: C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/tfaKP8IvgQkAwmU3RK8qZmHmzts.roa Signing time: Thu 01 Jan 2026 14:17:34 +0000 ROA not before: Thu 01 Jan 2026 14:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61201 IP address blocks: 2a00:eb0:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 23:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:cb:e8:7c:5e:93:a1:c5:01:ed:63:c5:01:d1:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c441738baab988b1d68693bb05e29bfbb4f0f671 Validity Not Before: Jan 1 14:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5f68a3fc22f810900c2653744af2a6661e6cedb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f7:5c:b3:68:b1:59:0c:3c:af:31:75:5e:6f: 0b:31:90:22:8b:10:1b:fd:36:a6:43:91:92:28:9a: 5b:a6:8f:59:e5:fe:6c:f5:b6:cd:fa:dd:8a:6f:d5: 1e:ce:38:d4:a2:9d:ad:b8:5c:8e:59:99:1d:a8:87: ab:6c:cd:93:fa:cb:2e:15:7e:9c:5c:30:c4:67:d5: de:a0:b0:de:10:07:39:98:10:21:c1:0c:a9:ff:29: 91:fd:31:c1:68:af:fa:01:e1:03:1f:4d:4a:13:06: 1e:c0:9e:0e:ac:fb:68:7f:31:0e:65:da:75:a1:e9: ac:a3:8b:6b:1a:f8:73:f1:74:64:c1:24:40:25:7b: 92:98:e0:f5:e8:8e:76:8b:fd:3f:dd:1d:76:69:04: 23:00:fe:8d:2a:73:b1:22:46:57:36:49:ab:2c:75: bd:f8:19:4d:3d:42:51:f2:d0:48:e0:e0:80:00:11: d5:94:3d:86:b1:d5:04:e7:03:28:9f:9d:43:53:61: 1e:1b:52:6a:6f:e9:b4:20:18:26:89:0f:5f:29:af: 2c:dc:ca:57:e0:03:78:1c:f8:ee:87:9d:7e:b5:e3: a4:55:13:ed:1d:72:23:63:5c:8b:c6:59:83:d9:48: b1:32:86:84:da:41:6f:a1:f7:8b:ec:43:9f:3f:0b: 81:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F6:8A:3F:C2:2F:81:09:00:C2:65:37:44:AF:2A:66:61:E6:CE:DB X509v3 Authority Key Identifier: keyid:C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/tfaKP8IvgQkAwmU3RK8qZmHmzts.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:eb0:100::/48 Signature Algorithm: sha256WithRSAEncryption 63:d4:14:a1:a9:ec:b4:70:90:10:24:52:7d:24:9e:91:2f:f0: 6a:99:e4:6e:4b:2b:8c:8f:41:02:5b:c0:6d:81:89:5b:2d:a3: 66:2b:ef:fc:b4:7f:04:f6:52:06:67:a7:2b:d7:b4:66:0b:57: c3:54:40:5a:0d:c3:a8:41:f7:06:d7:93:06:bc:cb:49:96:d6: 09:80:13:c0:af:1a:2c:0e:0f:db:02:58:49:67:de:ac:f3:7b: a8:06:1a:59:51:ce:82:2f:76:c1:23:5e:0a:7b:b0:7f:d8:b1: 2d:9c:6b:f8:e3:2b:0a:cc:18:ca:0c:37:cb:73:dc:ae:13:e4: b6:d9:98:96:ef:b1:90:30:9f:25:f3:7c:49:e2:29:38:18:f2: 28:8b:b2:a8:f6:d4:49:4c:1a:4f:fb:46:4f:7a:8d:06:d3:e3: dd:d7:cb:dd:6f:f0:a1:fb:32:3f:31:89:b3:0a:a7:6f:59:77: 37:93:78:e5:07:d2:88:10:87:67:33:5d:c8:aa:a4:f3:19:c2: 5c:b0:59:3a:1c:17:20:69:88:99:b8:e4:b0:da:7d:1e:2a:29: b7:79:09:db:c7:25:3c:d5:c8:9f:a4:f2:bf:d0:e7:2e:99:34: cf:2d:f6:5d:66:8a:51:12:b9:71:66:56:28:c5:b5:fb:8f:05: 95:d5:75:55 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt568vofF6TocUB7WPFAdGNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NDE3MzhiYWFiOTg4YjFkNjg2OTNiYjA1ZTI5YmZiYjRm MGY2NzEwHhcNMjYwMTAxMTQxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNWY2OGEzZmMyMmY4MTA5MDBjMjY1Mzc0NGFmMmE2NjYxZTZjZWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/dcs2ixWQw8rzF1Xm8LMZAiixAb /TamQ5GSKJpbpo9Z5f5s9bbN+t2Kb9UezjjUop2tuFyOWZkdqIerbM2T+ssuFX6c XDDEZ9XeoLDeEAc5mBAhwQyp/ymR/THBaK/6AeEDH01KEwYewJ4OrPtofzEOZdp1 oemso4trGvhz8XRkwSRAJXuSmOD16I52i/0/3R12aQQjAP6NKnOxIkZXNkmrLHW9 +BlNPUJR8tBI4OCAABHVlD2GsdUE5wMon51DU2EeG1Jqb+m0IBgmiQ9fKa8s3MpX 4AN4HPjuh51+teOkVRPtHXIjY1yLxlmD2UixMoaE2kFvofeL7EOfPwuBCwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLX2ij/CL4EJAMJlN0SvKmZh5s7bMB8GA1UdIwQY MBaAFMRBc4uquYix1oaTuwXim/u08PZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEVGemk2cTVpTEhXaHBPN0JlS2ItN1R3OW5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9mODMxNGUtYTNiYy00NWU5LWE5ZjUt NGM5OGQ5YTUxNDA1LzEvdGZhS1A4SXZnUWtBd21VM1JLOHFabUhtenRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9mODMxNGUtYTNiYy00NWU5LWE5ZjUtNGM5OGQ5YTUxNDA1 LzEveEVGemk2cTVpTEhXaHBPN0JlS2ItN1R3OW5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgAOsAEA MA0GCSqGSIb3DQEBCwUAA4IBAQBj1BShqey0cJAQJFJ9JJ6RL/BqmeRuSyuMj0EC W8BtgYlbLaNmK+/8tH8E9lIGZ6cr17RmC1fDVEBaDcOoQfcG15MGvMtJltYJgBPA rxosDg/bAlhJZ96s83uoBhpZUc6CL3bBI14Ke7B/2LEtnGv44ysKzBjKDDfLc9yu E+S22ZiW77GQMJ8l83xJ4ik4GPIoi7Ko9tRJTBpP+0ZPeo0G0+Pd18vdb/Ch+zI/ MYmzCqdvWXc3k3jlB9KIEIdnM13IqqTzGcJcsFk6HBcgaYiZuOSw2n0eKim3eQnb xyU81cifpPK/0OcumTTPLfZdZopRErlxZlYoxbX7jwWV1XVV -----END CERTIFICATE-----Generated at Mon Jan 26 08:57:37 2026 by rpki-client