This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/TBdPhr50EUWrOG4GNVNBnUdPRGs.roa File: TBdPhr50EUWrOG4GNVNBnUdPRGs.roa (raw, json) Hash identifier: OrQHqVNd59KyfREnmA/6Kz47GDMJkfTFfl+MAkyu4bg= Subject key identifier: 4C:17:4F:86:BE:74:11:45:AB:38:6E:06:35:53:41:9D:47:4F:44:6B Certificate issuer: /CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413 Certificate serial: 019B7AC7F82E30E725FB4447C5BF9955462B Authority key identifier: 0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/TBdPhr50EUWrOG4GNVNBnUdPRGs.roa Signing time: Thu 01 Jan 2026 18:18:04 +0000 ROA not before: Thu 01 Jan 2026 18:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35402 IP address blocks: 2a01:5c8:800::/48 maxlen: 48 2a01:5c8:801::/48 maxlen: 48 2a01:5c8:803::/48 maxlen: 48 2a01:5c8:804::/48 maxlen: 48 2a01:5c8:805::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:f8:2e:30:e7:25:fb:44:47:c5:bf:99:55:46:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413 Validity Not Before: Jan 1 18:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c174f86be741145ab386e063553419d474f446b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:62:4a:8c:8a:c8:c9:e9:e5:d1:d2:c0:a9:a7: 3c:f5:86:8d:a1:f6:4f:09:e0:7b:37:fb:ce:be:2b: 97:56:4d:32:41:cb:94:63:79:a3:1d:9f:72:78:f3: d4:0a:ef:af:c8:3c:34:98:69:73:06:55:b5:98:bf: de:ae:84:4f:d5:3e:2a:22:6b:f5:61:41:b2:c5:5f: e7:0f:e9:34:61:a3:65:d1:03:28:2f:c2:d6:27:a7: 54:e8:9a:ed:e5:e1:8e:ed:74:81:45:70:42:1e:ff: 6e:c6:8e:9e:f8:f2:13:05:74:b9:3b:f2:e5:3a:a9: 8f:f2:aa:b4:27:41:94:9d:c9:22:ed:43:84:b8:07: 68:79:13:7a:fc:fe:ef:b5:4a:22:89:3b:65:7c:35: 71:df:e3:f1:9b:77:ec:88:7b:46:01:79:68:80:ec: d8:73:6f:64:64:36:21:ad:7f:67:8e:1d:6f:be:4b: 6a:68:1f:74:e3:42:cc:96:a8:8d:6e:38:58:6e:1a: 8e:23:b2:19:c3:b2:0f:30:7e:03:2b:4b:1d:5e:0e: 1e:7a:08:cc:7f:2c:17:a8:37:0d:f1:f4:d3:c5:68: f4:cc:b3:10:cb:bf:f0:26:19:58:67:d7:2a:4c:07: 41:c8:aa:02:34:f6:04:18:9e:71:45:4a:a1:a7:99: 6b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:17:4F:86:BE:74:11:45:AB:38:6E:06:35:53:41:9D:47:4F:44:6B X509v3 Authority Key Identifier: keyid:0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/TBdPhr50EUWrOG4GNVNBnUdPRGs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:5c8:800::/47 2a01:5c8:803::-2a01:5c8:805:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 94:08:6d:d0:aa:68:31:df:53:b1:91:8c:a0:94:d6:07:df:5f: fb:7b:c0:f2:33:ba:44:e7:db:58:3a:dc:be:85:15:00:0d:62: 76:9c:8c:13:07:ad:c4:9a:2d:aa:66:19:19:82:ae:79:43:a6: 8b:74:fd:3a:f2:6c:4e:d6:ce:a2:07:46:9e:e4:55:a7:3f:16: a2:17:04:88:8b:6c:bb:03:5b:40:98:4c:33:53:de:42:4a:36: 01:52:e0:df:69:f5:72:16:74:17:68:be:91:eb:c4:c7:f9:63: 49:4d:ed:38:c5:57:f5:a4:11:3d:19:34:fb:9a:29:75:3a:f7: 9d:c5:f4:c9:1b:44:2b:f4:78:0f:cb:76:48:96:1e:cc:98:14: 70:17:0d:c0:cc:c6:ff:05:2c:04:78:ab:24:49:26:fe:b2:b9: 86:76:e9:24:0d:0d:92:87:df:62:ed:2b:ba:f9:d7:26:e5:d0: 32:28:9e:8a:97:00:7e:24:7a:ac:8b:51:da:48:0f:ef:09:20: 49:bd:80:d2:d3:52:67:4f:97:20:f9:b0:d8:cb:74:bd:38:87: 91:c1:72:8d:ed:75:31:97:52:a1:87:32:23:9a:4b:d8:89:fa: b0:a4:25:01:d3:80:03:e6:30:6d:71:61:ff:e8:86:7a:ef:ce: 9c:9e:97:4a -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt6x/guMOcl+0RHxb+ZVUYrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMWQ3MmFjMDgyNmUwOWJjMGQxN2RkZWU4YmE4N2Q5NzMx ZGQ0MTMwHhcNMjYwMTAxMTgxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzE3NGY4NmJlNzQxMTQ1YWIzODZlMDYzNTUzNDE5ZDQ3NGY0NDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWJKjIrIyenl0dLAqac89YaNofZP CeB7N/vOviuXVk0yQcuUY3mjHZ9yePPUCu+vyDw0mGlzBlW1mL/eroRP1T4qImv1 YUGyxV/nD+k0YaNl0QMoL8LWJ6dU6Jrt5eGO7XSBRXBCHv9uxo6e+PITBXS5O/Ll OqmP8qq0J0GUncki7UOEuAdoeRN6/P7vtUoiiTtlfDVx3+Pxm3fsiHtGAXlogOzY c29kZDYhrX9njh1vvktqaB9040LMlqiNbjhYbhqOI7IZw7IPMH4DK0sdXg4eegjM fywXqDcN8fTTxWj0zLMQy7/wJhlYZ9cqTAdByKoCNPYEGJ5xRUqhp5lrXQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFEwXT4a+dBFFqzhuBjVTQZ1HT0RrMB8GA1UdIwQY MBaAFAodcqwIJuCbwNF93ui6h9lzHdQTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2gxeXJBZ200SnZBMFgzZTZMcUgyWE1kMUJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC82MzQxZGEtMmIzNC00ZDQ1LTljMTct OTU4MTEyYTQ4OWE0LzEvVEJkUGhyNTBFVVdyT0c0R05WTkJuVWRQUkdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC82MzQxZGEtMmIzNC00ZDQ1LTljMTctOTU4MTEyYTQ4OWE0 LzEvQ2gxeXJBZ200SnZBMFgzZTZMcUgyWE1kMUJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAjBAIAAjAdAwcBKgEFyAgA MBIDBwAqAQXICAMDBwEqAQXICAQwDQYJKoZIhvcNAQELBQADggEBAJQIbdCqaDHf U7GRjKCU1gffX/t7wPIzukTn21g63L6FFQANYnacjBMHrcSaLapmGRmCrnlDpot0 /TrybE7WzqIHRp7kVac/FqIXBIiLbLsDW0CYTDNT3kJKNgFS4N9p9XIWdBdovpHr xMf5Y0lN7TjFV/WkET0ZNPuaKXU6953F9MkbRCv0eA/LdkiWHsyYFHAXDcDMxv8F LAR4qyRJJv6yuYZ26SQNDZKH32LtK7r51ybl0DIonoqXAH4keqyLUdpID+8JIEm9 gNLTUmdPlyD5sNjLdL04h5HBco3tdTGXUqGHMiOaS9iJ+rCkJQHTgAPmMG1xYf/o hnrvzpyel0o= -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:06 2026 by rpki-client