This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/tJZQp8XIexVHZkWYI64OXlJiYDU.roa File: tJZQp8XIexVHZkWYI64OXlJiYDU.roa (raw, json) Hash identifier: ZKMhCLGGD1szDN3Q9oTZAx2PHKvBPPm6eCV1roIOgT0= Subject key identifier: B4:96:50:A7:C5:C8:7B:15:47:66:45:98:23:AE:0E:5E:52:62:60:35 Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Certificate serial: 019B1C22EDC8DCD90DFD1AFE74126828B787 Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/tJZQp8XIexVHZkWYI64OXlJiYDU.roa Signing time: Sun 14 Dec 2025 09:13:29 +0000 ROA not before: Sun 14 Dec 2025 09:13:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 23507 IP address blocks: 2a0a:79c7:f400::/40 maxlen: 40 2a0a:79c7:f700::/40 maxlen: 40 2a0a:79c7:fb00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 19:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:22:ed:c8:dc:d9:0d:fd:1a:fe:74:12:68:28:b7:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Validity Not Before: Dec 14 09:13:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b49650a7c5c87b154766459823ae0e5e52626035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:69:d5:4c:c9:07:1f:29:5c:fa:1b:20:c1:11: a8:07:f1:ed:4e:90:50:6f:ed:00:b1:f1:99:2e:6b: b8:07:f6:7b:d0:2d:f6:a1:83:6c:32:52:82:4d:df: 2a:b4:0d:26:1e:dd:8c:d1:81:c7:42:20:5c:43:8c: 97:fa:32:93:5d:d5:ca:8a:3f:c8:d1:04:3a:8c:6b: e0:10:1d:67:26:dc:d0:6b:47:c4:af:9d:e3:73:4e: 4d:8a:fe:e0:6e:57:b7:e3:cb:8a:8e:f3:ee:4b:9e: 0f:39:de:cc:40:0d:eb:c7:94:27:67:2f:5c:d3:71: cb:5c:f4:0f:f6:87:6b:df:c5:81:db:67:fd:92:3a: 5b:07:a0:8c:ef:d3:b2:53:23:83:03:25:0a:19:ff: cc:c7:3a:ce:48:3d:e7:7c:9a:16:ef:88:dc:a7:57: df:f4:75:13:50:53:8f:c3:28:02:46:b0:39:fe:52: 94:07:be:ef:0b:9f:3b:85:a9:a0:6f:18:f5:73:f0: fe:35:62:e6:f7:b4:41:db:e9:de:7c:c9:6c:39:32: c7:03:37:f3:44:f9:26:2e:47:68:c6:2e:e8:db:ba: 5d:f6:54:c7:b0:8c:4d:d2:35:fa:bf:9a:ce:89:c0: 85:1c:8b:ca:ef:63:f5:d0:68:06:41:f0:3f:88:1f: d1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:96:50:A7:C5:C8:7B:15:47:66:45:98:23:AE:0E:5E:52:62:60:35 X509v3 Authority Key Identifier: keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/tJZQp8XIexVHZkWYI64OXlJiYDU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:79c7:f400::/40 2a0a:79c7:f700::/40 2a0a:79c7:fb00::/40 Signature Algorithm: sha256WithRSAEncryption 7d:3b:e6:33:69:41:1c:50:76:a8:b1:81:bf:5e:2a:7b:f1:58: ca:fc:ce:87:e6:f4:28:a5:cd:70:24:0c:93:98:99:fc:14:b2: 3e:2b:b8:11:87:81:c4:43:5b:ec:36:58:b1:49:99:87:2b:ad: d5:d9:3e:18:97:21:b6:1b:0b:70:ce:5e:3f:d9:12:7e:13:a3: d8:d1:89:aa:5d:96:f7:d5:26:e3:5d:7d:07:ad:e4:0b:11:6c: d4:57:a2:86:bd:b0:1f:33:03:20:b6:23:c9:61:f3:93:1e:1e: 30:f5:5f:2a:10:b2:93:07:0c:ad:15:72:97:6d:f3:6c:94:74: d8:86:9e:b6:95:a6:9d:74:9f:a7:43:ec:0f:bd:18:38:bd:fe: d4:5f:9d:df:61:58:8b:6e:f0:ad:1e:f6:44:1d:5a:40:3a:cb: 54:7c:54:b0:dd:7b:bd:0b:9e:c4:22:42:bc:fa:94:5c:10:18: ed:c7:ac:b7:f8:06:45:5a:3b:e6:51:4b:73:2f:eb:ff:1a:d2: ef:3e:00:55:9c:e4:26:6c:4b:f4:f8:c9:a0:02:19:52:33:c3: 41:24:05:91:c5:34:af:8c:82:1f:ea:a9:d4:e1:d2:74:56:87: 5c:88:d6:9a:65:0a:53:c1:d6:9f:8b:14:c4:d6:d1:8d:f3:2c: 36:1d:55:50 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZscIu3I3NkN/Rr+dBJoKLeHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl ZDc5NTQwHhcNMjUxMjE0MDkxMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDk2NTBhN2M1Yzg3YjE1NDc2NjQ1OTgyM2FlMGU1ZTUyNjI2MDM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGnVTMkHHylc+hsgwRGoB/HtTpBQ b+0AsfGZLmu4B/Z70C32oYNsMlKCTd8qtA0mHt2M0YHHQiBcQ4yX+jKTXdXKij/I 0QQ6jGvgEB1nJtzQa0fEr53jc05Niv7gble348uKjvPuS54POd7MQA3rx5QnZy9c 03HLXPQP9odr38WB22f9kjpbB6CM79OyUyODAyUKGf/MxzrOSD3nfJoW74jcp1ff 9HUTUFOPwygCRrA5/lKUB77vC587hamgbxj1c/D+NWLm97RB2+nefMlsOTLHAzfz RPkmLkdoxi7o27pd9lTHsIxN0jX6v5rOicCFHIvK72P10GgGQfA/iB/RpQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFLSWUKfFyHsVR2ZFmCOuDl5SYmA1MB8GA1UdIwQY MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt M2Q5MWVkZTViMmIxLzEvdEpaUXA4WElleFZIWmtXWUk2NE9YbEppWURVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAAjAYAwYAKgp5x/QD BgAqCnnH9wMGACoKecf7MA0GCSqGSIb3DQEBCwUAA4IBAQB9O+YzaUEcUHaosYG/ Xip78VjK/M6H5vQopc1wJAyTmJn8FLI+K7gRh4HEQ1vsNlixSZmHK63V2T4YlyG2 Gwtwzl4/2RJ+E6PY0YmqXZb31SbjXX0HreQLEWzUV6KGvbAfMwMgtiPJYfOTHh4w 9V8qELKTBwytFXKXbfNslHTYhp62laaddJ+nQ+wPvRg4vf7UX53fYViLbvCtHvZE HVpAOstUfFSw3Xu9C57EIkK8+pRcEBjtx6y3+AZFWjvmUUtzL+v/GtLvPgBVnOQm bEv0+MmgAhlSM8NBJAWRxTSvjIIf6qnU4dJ0VodciNaaZQpTwdafixTE1tGN8yw2 HVVQ -----END CERTIFICATE-----Generated at Wed Dec 17 01:13:50 2025 by rpki-client