This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/TxNd5pJ27uJYq-599NEcjd3YSFE.roa File: TxNd5pJ27uJYq-599NEcjd3YSFE.roa (raw, json) Hash identifier: MKliCQJ8R1hwAnZ4kj94ssCz7Pi63lFdJSsHyJKq8Ko= Subject key identifier: 4F:13:5D:E6:92:76:EE:E2:58:AB:EE:7D:F4:D1:1C:8D:DD:D8:48:51 Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541 Certificate serial: 019B7C1336FECF78CAD1EEA3A6B6668C8E3C Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/TxNd5pJ27uJYq-599NEcjd3YSFE.roa Signing time: Fri 02 Jan 2026 00:19:52 +0000 ROA not before: Fri 02 Jan 2026 00:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60262 IP address blocks: 2a05:b1c0::/29 maxlen: 29 2a09:3940::/29 maxlen: 29 2a10:3c00::/29 maxlen: 29 2a11:240::/29 maxlen: 29 2a11:2000::/29 maxlen: 29 2a11:22c0::/29 maxlen: 29 2a11:3cc0::/29 maxlen: 29 2a11:4500::/29 maxlen: 29 2a11:4fc0::/29 maxlen: 29 2a11:5680::/29 maxlen: 29 2a11:5e00::/29 maxlen: 29 2a11:7940::/29 maxlen: 29 2a11:99c0::/29 maxlen: 29 2a11:9a80::/29 maxlen: 29 2a11:a400::/29 maxlen: 29 2a11:a700::/29 maxlen: 29 2a11:d3c0::/29 maxlen: 29 2a11:f3c0::/29 maxlen: 29 2a11:f600::/29 maxlen: 29 2a12:880::/29 maxlen: 29 2a12:5f80::/29 maxlen: 29 2a12:9b80::/29 maxlen: 29 2a12:bd00::/29 maxlen: 29 2a12:dc80::/29 maxlen: 29 2a12:ee00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:36:fe:cf:78:ca:d1:ee:a3:a6:b6:66:8c:8e:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541 Validity Not Before: Jan 2 00:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f135de69276eee258abee7df4d11c8dddd84851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:17:45:ab:8b:26:e5:92:0c:24:2f:03:ea:5a: 55:c9:b3:be:d0:c9:4a:f1:db:0b:e6:61:c8:f5:da: 6e:28:ca:c4:74:65:29:06:9f:04:49:bf:d8:8e:1f: af:98:c7:69:e4:04:c0:23:36:f4:7c:28:42:94:90: 87:d5:b3:23:63:18:9e:6e:f6:ce:6a:18:f7:62:be: 21:c8:b7:fa:5c:c6:19:54:7d:fb:e2:17:4f:6d:a1: e6:db:16:fd:bc:17:f8:d4:32:7b:f6:cf:3b:11:e1: 3c:66:ef:03:6a:1b:0d:1a:96:0f:99:00:92:10:84: ce:6f:ee:ba:c8:17:b9:e1:96:41:8f:88:91:b2:d7: d4:23:8f:89:d9:2b:11:65:b2:c1:f0:91:aa:24:03: a7:fb:8f:b0:0d:f9:8d:77:36:89:d6:92:bf:aa:ba: fb:1a:61:d3:47:3e:f4:d8:06:b2:00:2d:f8:bd:58: 87:f9:44:80:c4:35:ab:2d:1f:73:c4:31:1c:2d:6c: c1:d0:77:f6:bc:67:43:e8:62:97:4a:e5:97:66:13: 7f:47:f6:3a:53:c8:2e:b2:67:58:bb:20:76:4f:d5: a8:4b:3f:2f:9a:a3:ee:ee:69:16:c4:6a:56:7d:d3: 3b:c6:dc:c8:09:ff:81:23:22:97:6d:ec:33:ef:19: 3e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:13:5D:E6:92:76:EE:E2:58:AB:EE:7D:F4:D1:1C:8D:DD:D8:48:51 X509v3 Authority Key Identifier: keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/TxNd5pJ27uJYq-599NEcjd3YSFE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:b1c0::/29 2a09:3940::/29 2a10:3c00::/29 2a11:240::/29 2a11:2000::/29 2a11:22c0::/29 2a11:3cc0::/29 2a11:4500::/29 2a11:4fc0::/29 2a11:5680::/29 2a11:5e00::/29 2a11:7940::/29 2a11:99c0::/29 2a11:9a80::/29 2a11:a400::/29 2a11:a700::/29 2a11:d3c0::/29 2a11:f3c0::/29 2a11:f600::/29 2a12:880::/29 2a12:5f80::/29 2a12:9b80::/29 2a12:bd00::/29 2a12:dc80::/29 2a12:ee00::/29 Signature Algorithm: sha256WithRSAEncryption 45:d4:9a:3d:91:2a:6e:a3:f5:ce:98:c4:d0:d0:5d:26:fc:85: f5:05:1a:24:ee:3d:2e:de:8c:7d:2e:48:ef:7e:e5:77:2e:cd: 9a:a8:0e:df:db:07:2c:60:43:e8:20:b5:c7:54:f0:ca:01:8f: 82:a8:0b:c6:0b:e4:10:ff:44:82:ec:94:cc:96:7a:1a:f0:9f: 18:be:fc:8b:35:26:94:e0:f1:3f:5e:71:c0:cb:ca:6b:f4:96: 7c:70:cf:bd:65:ab:7f:65:ab:55:78:2e:14:0b:18:e8:9b:36: ef:cf:a1:9f:69:f6:b9:2e:7b:39:86:69:d7:31:d7:74:b3:25: 8b:5c:2d:d1:9e:f4:d1:94:95:91:27:64:c2:9c:74:54:ad:7e: 89:3b:78:db:24:32:25:b8:64:56:2b:3f:1b:9e:13:95:1f:fb: 7a:71:e5:0e:e0:9d:8b:83:64:bd:1d:a7:27:6b:45:fc:f2:4d: ec:68:29:8f:d2:bc:2d:1b:55:7d:f8:af:4c:e4:d4:00:ee:7f: 21:23:21:a0:6d:bf:a7:19:22:c7:b3:a8:b9:68:44:7e:5e:fe: 3a:1c:67:06:d6:3a:be:2b:61:63:69:74:a1:cd:ed:6a:14:93: 44:4a:73:5e:98:84:37:8f:68:d4:33:f3:1a:0a:45:e8:65:82: e8:da:d4:d2 -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgISAZt8Ezb+z3jK0e6jprZmjI48MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYzI4YWU5OTM3ZmY3ZTQ5ZWM0ZjEyMzRlNTNkOGI5ZGQ2 OTQ1NDEwHhcNMjYwMTAyMDAxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjEzNWRlNjkyNzZlZWUyNThhYmVlN2RmNGQxMWM4ZGRkZDg0ODUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRdFq4sm5ZIMJC8D6lpVybO+0MlK 8dsL5mHI9dpuKMrEdGUpBp8ESb/Yjh+vmMdp5ATAIzb0fChClJCH1bMjYxiebvbO ahj3Yr4hyLf6XMYZVH374hdPbaHm2xb9vBf41DJ79s87EeE8Zu8DahsNGpYPmQCS EITOb+66yBe54ZZBj4iRstfUI4+J2SsRZbLB8JGqJAOn+4+wDfmNdzaJ1pK/qrr7 GmHTRz702AayAC34vViH+USAxDWrLR9zxDEcLWzB0Hf2vGdD6GKXSuWXZhN/R/Y6 U8gusmdYuyB2T9WoSz8vmqPu7mkWxGpWfdM7xtzICf+BIyKXbewz7xk+TwIDAQAB o4ICtzCCArMwHQYDVR0OBBYEFE8TXeaSdu7iWKvuffTRHI3d2EhRMB8GA1UdIwQY MBaAFJ3CiumTf/fknsTxI05T2LndaUVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMt MTkyY2JkMDhkYjUxLzEvVHhOZDVwSjI3dUpZcS01OTlORWNqZDNZU0ZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMtMTkyY2JkMDhkYjUx LzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHMBggrBgEFBQcBBwEB/wSBvDCBuTCBtgQCAAIwga8DBQMq BbHAAwUDKgk5QAMFAyoQPAADBQMqEQJAAwUDKhEgAAMFAyoRIsADBQMqETzAAwUD KhFFAAMFAyoRT8ADBQMqEVaAAwUDKhFeAAMFAyoReUADBQMqEZnAAwUDKhGagAMF AyoRpAADBQMqEacAAwUDKhHTwAMFAyoR88ADBQMqEfYAAwUDKhIIgAMFAyoSX4AD BQMqEpuAAwUDKhK9AAMFAyoS3IADBQMqEu4AMA0GCSqGSIb3DQEBCwUAA4IBAQBF 1Jo9kSpuo/XOmMTQ0F0m/IX1BRok7j0u3ox9LkjvfuV3Ls2aqA7f2wcsYEPoILXH VPDKAY+CqAvGC+QQ/0SC7JTMlnoa8J8YvvyLNSaU4PE/XnHAy8pr9JZ8cM+9Zat/ ZatVeC4UCxjomzbvz6Gfafa5Lns5hmnXMdd0syWLXC3RnvTRlJWRJ2TCnHRUrX6J O3jbJDIluGRWKz8bnhOVH/t6ceUO4J2Lg2S9Hacna0X88k3saCmP0rwtG1V9+K9M 5NQA7n8hIyGgbb+nGSLHs6i5aER+Xv46HGcG1jq+K2FjaXShze1qFJNESnNemIQ3 j2jUM/MaCkXoZYLo2tTS -----END CERTIFICATE-----Generated at Sun Jan 25 17:47:49 2026 by rpki-client