This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/TlCjshw48MI80zaCqZRdp10HXmU.roa File: TlCjshw48MI80zaCqZRdp10HXmU.roa (raw, json) Hash identifier: IUaeg0F1EJZvlebFMhAdUjihSrKer72rVZfI7a/WmYI= Subject key identifier: 4E:50:A3:B2:1C:38:F0:C2:3C:D3:36:82:A9:94:5D:A7:5D:07:5E:65 Certificate issuer: /CN=20264d51a112d0bc22cea7314cb06cf5a1ae33e9 Certificate serial: 019B77C692139CFF12C233151E79DE5160C6 Authority key identifier: 20:26:4D:51:A1:12:D0:BC:22:CE:A7:31:4C:B0:6C:F5:A1:AE:33:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ICZNUaES0LwizqcxTLBs9aGuM-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/TlCjshw48MI80zaCqZRdp10HXmU.roa Signing time: Thu 01 Jan 2026 04:17:40 +0000 ROA not before: Thu 01 Jan 2026 04:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204896 IP address blocks: 2001:67c:4bc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft rsync://rpki.ripe.net/repository/DEFAULT/ICZNUaES0LwizqcxTLBs9aGuM-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:92:13:9c:ff:12:c2:33:15:1e:79:de:51:60:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20264d51a112d0bc22cea7314cb06cf5a1ae33e9 Validity Not Before: Jan 1 04:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e50a3b21c38f0c23cd33682a9945da75d075e65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3a:59:3a:eb:c7:ab:12:de:86:d5:63:78:22: 60:4b:29:9c:ca:de:37:5d:48:90:91:5e:53:a6:97: 53:3d:aa:94:0f:b9:f4:b5:01:89:3f:49:ed:b9:87: 36:10:41:da:36:98:d1:aa:a9:c7:94:7c:9d:79:cd: 06:f9:c8:72:45:fb:f1:00:7c:6d:64:08:41:2e:6d: 28:a6:e6:55:ae:15:c7:e5:27:c7:41:84:84:63:37: 55:3c:a9:95:74:53:bb:58:d9:59:b6:4c:74:bb:ad: e6:f1:91:a4:b2:3c:0e:8d:26:9c:2c:38:98:a4:05: 0a:04:d9:23:f0:4f:b2:f9:29:de:af:25:67:41:05: 68:5c:70:83:05:61:b6:f6:23:fb:5d:c1:94:ed:a9: 0e:3c:53:57:04:38:e0:6a:5d:f7:c7:6d:e2:1d:43: 3d:f8:ab:1b:ad:94:9f:c2:10:26:d6:f8:ae:7c:dc: 8a:e0:ea:40:9b:d7:b2:24:f8:05:c8:e2:8f:80:d1: 4e:55:60:67:67:51:2a:e0:94:71:d8:9e:f0:5e:84: be:be:80:35:60:9e:f1:cd:5f:2c:5d:b7:7a:77:e4: ff:a7:a6:86:a4:dd:ae:04:b5:bd:3a:26:f0:e2:82: 1a:fc:7e:0c:83:9f:41:dc:b5:b7:4c:44:76:2d:dc: ca:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:50:A3:B2:1C:38:F0:C2:3C:D3:36:82:A9:94:5D:A7:5D:07:5E:65 X509v3 Authority Key Identifier: keyid:20:26:4D:51:A1:12:D0:BC:22:CE:A7:31:4C:B0:6C:F5:A1:AE:33:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ICZNUaES0LwizqcxTLBs9aGuM-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/TlCjshw48MI80zaCqZRdp10HXmU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:4bc::/48 Signature Algorithm: sha256WithRSAEncryption 74:47:c6:21:5f:b4:67:d3:30:95:6e:73:b9:d2:af:55:b7:b5: 5c:f9:fa:78:8d:91:ae:b2:07:4b:9f:b4:34:11:a3:3d:71:1b: dc:1e:23:02:84:ad:ac:e4:f9:eb:0d:8a:c4:4e:d0:b7:d2:c0: 83:09:07:c4:fb:9e:bc:b2:6f:f5:49:9c:79:cf:10:46:00:ee: 29:65:c8:75:f4:0f:6f:fc:0e:2c:97:67:fb:a4:91:6b:89:08: 4a:7a:a6:d7:6a:43:c0:a6:db:2a:8d:f1:d2:f0:1b:bb:fe:5c: 6c:f8:a5:b8:bb:37:29:21:5d:b2:64:c2:59:bf:d0:94:15:1c: 6f:d3:4a:af:11:48:37:19:00:8e:e3:7c:d0:8c:ff:34:45:5e: 76:76:d3:51:1c:02:11:68:22:4c:0c:a0:07:50:62:c1:8f:9e: 4e:8a:fa:e5:f4:aa:8b:5d:76:02:bc:3d:41:54:80:58:72:65: 98:af:8b:ea:01:f3:a7:82:e1:71:d7:d4:20:c0:67:ef:83:49: b9:56:6d:07:e5:6f:64:04:8a:2b:33:f3:77:fd:27:58:23:3a: 97:eb:c7:3b:84:bd:4a:46:9d:b0:e7:66:55:a3:f2:37:50:1e: 67:91:c1:46:c4:a6:9c:18:c5:8c:cf:de:e9:6c:69:8b:62:ee: 3d:b6:db:d2 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3xpITnP8SwjMVHnneUWDGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwMjY0ZDUxYTExMmQwYmMyMmNlYTczMTRjYjA2Y2Y1YTFh ZTMzZTkwHhcNMjYwMTAxMDQxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTUwYTNiMjFjMzhmMGMyM2NkMzM2ODJhOTk0NWRhNzVkMDc1ZTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzpZOuvHqxLehtVjeCJgSymcyt43 XUiQkV5TppdTPaqUD7n0tQGJP0ntuYc2EEHaNpjRqqnHlHydec0G+chyRfvxAHxt ZAhBLm0opuZVrhXH5SfHQYSEYzdVPKmVdFO7WNlZtkx0u63m8ZGksjwOjSacLDiY pAUKBNkj8E+y+SneryVnQQVoXHCDBWG29iP7XcGU7akOPFNXBDjgal33x23iHUM9 +KsbrZSfwhAm1viufNyK4OpAm9eyJPgFyOKPgNFOVWBnZ1Eq4JRx2J7wXoS+voA1 YJ7xzV8sXbd6d+T/p6aGpN2uBLW9Oibw4oIa/H4Mg59B3LW3TER2LdzKOwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFE5Qo7IcOPDCPNM2gqmUXaddB15lMB8GA1UdIwQY MBaAFCAmTVGhEtC8Is6nMUywbPWhrjPpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUNaTlVhRVMwTHdpenFjeFRMQnM5YUd1TS1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy84ODc4ZDktNGYxYy00MjZiLThhNDAt NjU4MTIwYWU2OGUxLzEvVGxDanNodzQ4TUk4MHphQ3FaUmRwMTBIWG1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy84ODc4ZDktNGYxYy00MjZiLThhNDAtNjU4MTIwYWU2OGUx LzEvSUNaTlVhRVMwTHdpenFjeFRMQnM5YUd1TS1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAS8 MA0GCSqGSIb3DQEBCwUAA4IBAQB0R8YhX7Rn0zCVbnO50q9Vt7Vc+fp4jZGusgdL n7Q0EaM9cRvcHiMChK2s5PnrDYrETtC30sCDCQfE+568sm/1SZx5zxBGAO4pZch1 9A9v/A4sl2f7pJFriQhKeqbXakPAptsqjfHS8Bu7/lxs+KW4uzcpIV2yZMJZv9CU FRxv00qvEUg3GQCO43zQjP80RV52dtNRHAIRaCJMDKAHUGLBj55Oivrl9KqLXXYC vD1BVIBYcmWYr4vqAfOnguFx19QgwGfvg0m5Vm0H5W9kBIorM/N3/SdYIzqX68c7 hL1KRp2w52ZVo/I3UB5nkcFGxKacGMWMz97pbGmLYu49ttvS -----END CERTIFICATE-----Generated at Sun Jan 25 18:08:55 2026 by rpki-client