This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/tkxYbwLzW57rtbTL3HAb4gik620.roa File: tkxYbwLzW57rtbTL3HAb4gik620.roa (raw, json) Hash identifier: gE/XZLF/hHQla0+c26dZTm+olAmW2YqbYW49t6axXdU= Subject key identifier: B6:4C:58:6F:02:F3:5B:9E:EB:B5:B4:CB:DC:70:1B:E2:08:A4:EB:6D Certificate issuer: /CN=334f9f83d2d74c0c0fd00da735578f737dd7da03 Certificate serial: 019B791144A3A1CC58A03140C60CAE5CEFE6 Authority key identifier: 33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/tkxYbwLzW57rtbTL3HAb4gik620.roa Signing time: Thu 01 Jan 2026 10:18:53 +0000 ROA not before: Thu 01 Jan 2026 10:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211001 IP address blocks: 2a12:5343:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:44:a3:a1:cc:58:a0:31:40:c6:0c:ae:5c:ef:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=334f9f83d2d74c0c0fd00da735578f737dd7da03 Validity Not Before: Jan 1 10:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b64c586f02f35b9eebb5b4cbdc701be208a4eb6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b5:e3:42:2d:03:25:1d:12:8a:e3:af:98:75: fd:67:59:dd:79:62:5e:15:de:71:4e:35:06:63:16: fb:62:a4:1b:5c:92:0b:42:af:d6:9a:3c:dd:e7:06: 3f:a2:f5:ce:08:14:7e:10:33:0a:89:a5:6b:7d:3a: 33:31:ff:f3:5c:b4:7a:14:57:25:1b:39:26:8b:82: 8b:3e:f9:6c:3a:c3:a7:80:36:51:dd:4f:c5:eb:03: 36:04:3e:3b:8b:e3:ee:53:76:89:8a:0d:86:ee:88: f3:54:25:63:22:4f:9d:9b:25:18:12:36:c2:c1:82: 21:ec:1f:1f:97:b6:0a:28:d6:9a:95:22:ac:ed:4c: 1d:09:87:ce:e5:e8:33:bc:01:34:c8:d7:30:51:5c: 99:3f:f5:81:17:36:7d:32:35:a9:16:2d:07:8b:56: af:ba:fa:3b:3e:45:fc:3e:fe:54:df:69:e3:ea:20: 21:bb:80:78:3d:aa:6d:57:4e:be:aa:b7:45:50:0a: 1f:d7:6b:cf:6e:0b:19:21:eb:bd:95:e5:b9:6e:1a: 26:c7:bd:af:65:5f:9e:47:e8:07:56:76:23:c1:d4: 60:48:2b:b5:84:62:5a:7b:b8:0a:db:43:83:5c:23: 58:c9:0d:2e:db:8d:e7:19:52:c1:a6:13:a1:d1:d7: 64:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:4C:58:6F:02:F3:5B:9E:EB:B5:B4:CB:DC:70:1B:E2:08:A4:EB:6D X509v3 Authority Key Identifier: keyid:33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/tkxYbwLzW57rtbTL3HAb4gik620.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:5343:8::/48 Signature Algorithm: sha256WithRSAEncryption 84:d8:78:df:52:90:65:6e:11:14:1e:1e:3a:70:31:74:76:c9: fb:10:4a:79:f2:9a:95:dd:9f:05:e5:c5:c3:42:4b:65:33:13: 59:44:a8:02:98:64:28:5b:73:e9:c2:86:65:83:28:13:9b:51: 76:7f:9b:59:27:1b:a6:2e:fe:07:66:83:fc:c5:f4:18:ce:5b: d2:fe:51:d6:36:2a:b1:2d:4f:e5:7e:c7:b1:fe:ff:9f:15:34: f2:f6:08:4b:75:c9:c1:48:de:90:e9:c5:1f:1b:80:59:92:dc: 58:dd:b7:8b:12:16:27:fb:0c:51:d8:7f:bd:c9:9d:80:4e:ad: 90:af:4c:f2:14:2d:45:19:ba:32:9e:20:3c:64:75:88:43:c6: b6:86:13:6f:9d:89:76:63:37:07:91:f0:1c:dd:ab:65:e3:16: 8d:21:59:18:89:13:6b:be:a4:8b:92:89:7c:b7:15:52:4e:9d: 73:d0:28:0c:4f:36:2c:fc:c2:ed:43:87:02:02:7d:2c:62:30: ec:d2:28:98:48:ad:4a:26:c1:7b:af:51:cb:9a:d2:d7:74:b3: af:8a:e7:14:80:8f:da:a1:e2:b5:0b:de:b8:84:7c:9a:ce:62: fc:26:91:b9:e6:07:62:e3:83:9c:b3:b0:04:62:a9:21:5d:eb: f3:2a:39:a9 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EUSjocxYoDFAxgyuXO/mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNGY5ZjgzZDJkNzRjMGMwZmQwMGRhNzM1NTc4ZjczN2Rk N2RhMDMwHhcNMjYwMTAxMTAxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjRjNTg2ZjAyZjM1YjllZWJiNWI0Y2JkYzcwMWJlMjA4YTRlYjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLXjQi0DJR0SiuOvmHX9Z1ndeWJe Fd5xTjUGYxb7YqQbXJILQq/Wmjzd5wY/ovXOCBR+EDMKiaVrfTozMf/zXLR6FFcl Gzkmi4KLPvlsOsOngDZR3U/F6wM2BD47i+PuU3aJig2G7ojzVCVjIk+dmyUYEjbC wYIh7B8fl7YKKNaalSKs7UwdCYfO5egzvAE0yNcwUVyZP/WBFzZ9MjWpFi0Hi1av uvo7PkX8Pv5U32nj6iAhu4B4PaptV06+qrdFUAof12vPbgsZIeu9leW5bhomx72v ZV+eR+gHVnYjwdRgSCu1hGJae7gK20ODXCNYyQ0u243nGVLBphOh0ddkIQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLZMWG8C81ue67W0y9xwG+IIpOttMB8GA1UdIwQY MBaAFDNPn4PS10wMD9ANpzVXj3N919oDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTAtZmc5TFhUQXdQMEEybk5WZVBjMzNYMmdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85YzVmMDYtNTlhNy00NTg4LWFjMjgt ZWZkMjBmNmMyZWMzLzEvdGt4WWJ3THpXNTdydGJUTDNIQWI0Z2lrNjIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS85YzVmMDYtNTlhNy00NTg4LWFjMjgtZWZkMjBmNmMyZWMz LzEvTTAtZmc5TFhUQXdQMEEybk5WZVBjMzNYMmdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhJTQwAI MA0GCSqGSIb3DQEBCwUAA4IBAQCE2HjfUpBlbhEUHh46cDF0dsn7EEp58pqV3Z8F 5cXDQktlMxNZRKgCmGQoW3PpwoZlgygTm1F2f5tZJxumLv4HZoP8xfQYzlvS/lHW NiqxLU/lfsex/v+fFTTy9ghLdcnBSN6Q6cUfG4BZktxY3beLEhYn+wxR2H+9yZ2A Tq2Qr0zyFC1FGboyniA8ZHWIQ8a2hhNvnYl2YzcHkfAc3atl4xaNIVkYiRNrvqSL kol8txVSTp1z0CgMTzYs/MLtQ4cCAn0sYjDs0iiYSK1KJsF7r1HLmtLXdLOviucU gI/aoeK1C964hHyazmL8JpG55gdi44Ocs7AEYqkhXevzKjmp -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:52 2026 by rpki-client