This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/t2F0RXR9rTrU9OB4kwjAZTh4ZEo.roa File: t2F0RXR9rTrU9OB4kwjAZTh4ZEo.roa (raw, json) Hash identifier: UydhtoR4+IQ54e3x5h5+w3ijtAQlUzFvVelsUAahRqo= Subject key identifier: B7:61:74:45:74:7D:AD:3A:D4:F4:E0:78:93:08:C0:65:38:78:64:4A Certificate issuer: /CN=593897174f967490dbf6189d479df2c9371bf404 Certificate serial: 019B77C74B4D7B070766C447DDCB6A47A0E9 Authority key identifier: 59:38:97:17:4F:96:74:90:DB:F6:18:9D:47:9D:F2:C9:37:1B:F4:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WTiXF0-WdJDb9hidR53yyTcb9AQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/t2F0RXR9rTrU9OB4kwjAZTh4ZEo.roa Signing time: Thu 01 Jan 2026 04:18:28 +0000 ROA not before: Thu 01 Jan 2026 04:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201681 IP address blocks: 2a05:bc1:8000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.mft rsync://rpki.ripe.net/repository/DEFAULT/WTiXF0-WdJDb9hidR53yyTcb9AQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:4b:4d:7b:07:07:66:c4:47:dd:cb:6a:47:a0:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=593897174f967490dbf6189d479df2c9371bf404 Validity Not Before: Jan 1 04:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7617445747dad3ad4f4e0789308c0653878644a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:23:e2:b8:3e:c6:26:ca:ec:eb:0e:22:ec:4c: 87:5f:48:b7:89:99:f1:7e:7a:2a:28:4d:08:67:ab: ee:9e:03:33:a5:7a:41:d6:4f:70:3c:2f:f5:dc:40: c4:4b:10:2a:fc:ea:0d:4d:73:dd:1b:b1:e4:64:d3: 45:0c:cb:62:12:4b:58:ca:26:76:ef:13:08:1f:cf: 6e:22:02:4a:d0:db:0d:0a:33:66:0c:dd:42:0e:d7: c8:14:80:25:db:91:89:51:61:d3:0e:3b:1a:58:d3: d4:bc:e6:fe:29:c1:32:1a:8e:59:74:35:40:0b:79: 57:22:28:ea:ea:1a:06:a2:f8:36:92:9d:07:4a:48: 05:6c:a2:80:60:0e:15:74:74:79:cc:a9:c0:3c:3d: 45:9c:14:2c:2c:e3:2e:1d:22:db:11:f2:a9:9a:a9: b6:d4:45:86:a7:8d:6c:e6:46:2c:92:fc:24:d0:fb: ef:6a:58:50:bb:91:ca:04:57:42:84:7c:e4:9c:1d: 7a:b2:f0:e7:9b:41:12:a6:5d:24:f9:23:6f:30:8c: 67:a8:6d:ef:a2:e7:c5:b4:fd:b4:d2:30:ed:60:88: 09:7f:ec:ba:fe:39:9a:ca:33:8f:2b:c7:28:9a:0d: 9b:ca:09:b1:4c:3f:70:56:51:6c:68:c1:fe:41:1a: 48:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:61:74:45:74:7D:AD:3A:D4:F4:E0:78:93:08:C0:65:38:78:64:4A X509v3 Authority Key Identifier: keyid:59:38:97:17:4F:96:74:90:DB:F6:18:9D:47:9D:F2:C9:37:1B:F4:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WTiXF0-WdJDb9hidR53yyTcb9AQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/t2F0RXR9rTrU9OB4kwjAZTh4ZEo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:bc1:8000::/48 Signature Algorithm: sha256WithRSAEncryption 2a:96:9a:e6:94:7d:4e:36:8f:21:76:53:6f:f5:4e:72:63:9e: 2c:98:a3:b2:00:30:db:fd:70:a5:1b:21:54:46:61:05:b3:85: 99:59:7a:ef:ca:ce:04:6c:63:2a:c0:3e:cb:d0:ec:9a:fd:68: ad:7c:8b:88:36:f4:93:73:cd:3d:b7:2e:41:80:ac:81:9a:7d: d0:b4:44:02:3d:4a:1d:66:89:a0:0a:2d:4c:9a:03:52:d1:a1: 68:d4:d4:6b:d7:bc:06:91:59:04:94:87:43:35:59:f2:7a:8b: dd:bb:00:9a:0e:17:6e:1f:92:9a:c4:13:02:dd:3e:29:aa:24: f7:d0:3c:1f:33:49:56:6d:51:ef:94:2a:f3:58:37:95:8b:bd: 8b:16:2f:33:30:fd:8b:db:e6:cc:d6:6b:8e:90:68:63:50:90: e5:ce:68:62:31:e0:dc:82:e3:0c:b9:1c:f2:46:4d:a0:a0:f1: db:ac:09:a5:44:4a:84:4f:3a:6a:dc:fd:06:d5:97:e6:0b:26: a0:ff:6f:6d:91:92:4c:78:85:f2:fb:70:70:dc:7f:8a:89:9f: 2b:e7:81:f1:95:2c:da:5e:e1:99:46:6a:8a:96:32:54:2b:d4: 47:57:bb:6c:f5:9a:c6:6f:75:98:36:ad:23:2a:0e:6d:45:0a: 57:65:81:8e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3x0tNewcHZsRH3ctqR6DpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5Mzg5NzE3NGY5Njc0OTBkYmY2MTg5ZDQ3OWRmMmM5Mzcx YmY0MDQwHhcNMjYwMTAxMDQxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzYxNzQ0NTc0N2RhZDNhZDRmNGUwNzg5MzA4YzA2NTM4Nzg2NDRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCPiuD7GJsrs6w4i7EyHX0i3iZnx fnoqKE0IZ6vungMzpXpB1k9wPC/13EDESxAq/OoNTXPdG7HkZNNFDMtiEktYyiZ2 7xMIH89uIgJK0NsNCjNmDN1CDtfIFIAl25GJUWHTDjsaWNPUvOb+KcEyGo5ZdDVA C3lXIijq6hoGovg2kp0HSkgFbKKAYA4VdHR5zKnAPD1FnBQsLOMuHSLbEfKpmqm2 1EWGp41s5kYskvwk0PvvalhQu5HKBFdChHzknB16svDnm0ESpl0k+SNvMIxnqG3v oufFtP200jDtYIgJf+y6/jmayjOPK8comg2bygmxTD9wVlFsaMH+QRpIbQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLdhdEV0fa061PTgeJMIwGU4eGRKMB8GA1UdIwQY MBaAFFk4lxdPlnSQ2/YYnUed8sk3G/QEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1RpWEYwLVdkSkRiOWhpZFI1M3l5VGNiOUFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kY2Y5NzYtMDA3ZC00NTQyLWIwZTIt NWY4ZmM3MDc4MzZhLzEvdDJGMFJYUjlyVHJVOU9CNGt3akFaVGg0WkVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9kY2Y5NzYtMDA3ZC00NTQyLWIwZTItNWY4ZmM3MDc4MzZh LzEvV1RpWEYwLVdkSkRiOWhpZFI1M3l5VGNiOUFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgULwYAA MA0GCSqGSIb3DQEBCwUAA4IBAQAqlprmlH1ONo8hdlNv9U5yY54smKOyADDb/XCl GyFURmEFs4WZWXrvys4EbGMqwD7L0Oya/WitfIuINvSTc809ty5BgKyBmn3QtEQC PUodZomgCi1MmgNS0aFo1NRr17wGkVkElIdDNVnyeovduwCaDhduH5KaxBMC3T4p qiT30DwfM0lWbVHvlCrzWDeVi72LFi8zMP2L2+bM1muOkGhjUJDlzmhiMeDcguMM uRzyRk2goPHbrAmlREqETzpq3P0G1ZfmCyag/29tkZJMeIXy+3Bw3H+KiZ8r54Hx lSzaXuGZRmqKljJUK9RHV7ts9ZrGb3WYNq0jKg5tRQpXZYGO -----END CERTIFICATE-----Generated at Mon Jan 26 13:45:51 2026 by rpki-client