This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/tbYt_1HgZu11ZUlS_9RFIWiny-Q.roa File: tbYt_1HgZu11ZUlS_9RFIWiny-Q.roa (raw, json) Hash identifier: 0H367OeDFx32BeCSB2rFjNElX2FtZo0+OiydPHLocnQ= Subject key identifier: B5:B6:2D:FF:51:E0:66:ED:75:65:49:52:FF:D4:45:21:68:A7:CB:E4 Certificate issuer: /CN=ad9681f144db1430ac315c8306e1c14730c5fec2 Certificate serial: 019B7E37A4D4D48C6D556BB4CC949B049C8C Authority key identifier: AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/tbYt_1HgZu11ZUlS_9RFIWiny-Q.roa Signing time: Fri 02 Jan 2026 10:18:54 +0000 ROA not before: Fri 02 Jan 2026 10:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39164 IP address blocks: 2a10:8180::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:a4:d4:d4:8c:6d:55:6b:b4:cc:94:9b:04:9c:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad9681f144db1430ac315c8306e1c14730c5fec2 Validity Not Before: Jan 2 10:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5b62dff51e066ed75654952ffd4452168a7cbe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:34:7c:0b:49:d4:73:57:d0:1a:4e:b8:4c:bd: 97:e6:be:08:86:96:89:34:cc:24:99:21:51:5b:09: ab:5c:d2:0a:90:1e:cd:97:7e:53:27:a4:f2:41:9e: 10:b2:e7:06:59:98:e8:94:7e:48:5b:be:e4:19:46: da:1c:af:32:e7:50:f7:94:43:e0:f5:75:c2:9b:4e: 2d:a5:98:56:a1:3c:49:e5:35:b7:ca:4d:43:01:bb: 71:01:57:57:a9:94:38:3f:b0:8e:7d:50:d7:af:d2: cc:5a:6d:3a:ae:3f:3d:69:e6:c9:9a:d6:18:db:74: 75:06:32:57:58:94:26:6e:81:b2:f8:6d:c4:3a:7c: d4:0f:89:36:b6:55:54:c3:30:1b:43:63:29:6e:48: e8:04:ef:0b:0c:9a:f4:0e:18:bb:4b:f5:fc:75:63: c5:35:6e:61:57:c5:b2:b0:a1:a0:95:bc:f3:c9:ed: 87:c0:b0:49:e0:43:da:2c:59:15:7c:e2:94:d6:4c: 4b:b8:60:8c:df:91:06:3f:dd:fe:3a:23:cb:2f:e1: 7a:ba:83:e3:ab:0e:56:e1:3e:55:62:f6:05:d9:c9: 91:12:fc:c3:a0:b2:c1:5b:7d:18:c8:11:65:e6:7b: 27:25:df:eb:1e:68:7d:42:e3:36:e5:e8:cb:2a:44: ac:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B6:2D:FF:51:E0:66:ED:75:65:49:52:FF:D4:45:21:68:A7:CB:E4 X509v3 Authority Key Identifier: keyid:AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/tbYt_1HgZu11ZUlS_9RFIWiny-Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:8180::/29 Signature Algorithm: sha256WithRSAEncryption 73:69:84:da:2d:82:c0:45:6b:03:28:f3:b2:2c:7d:34:39:c5: 26:1a:c8:cc:ba:c5:38:d0:6a:9d:19:8f:99:95:b3:e4:dc:b3: 31:2d:70:51:16:81:8c:36:02:72:e3:bf:1b:08:b1:b6:22:5a: f0:00:cf:c2:28:a3:4a:d6:6b:8e:cb:47:62:4b:b7:5f:c1:bb: 7f:a5:a7:5a:4b:89:c8:bd:ee:30:bd:00:52:0d:e2:54:ec:8f: a5:25:5c:93:d4:7b:8a:14:cf:ef:57:6b:66:7e:20:94:da:fd: 69:08:e9:55:c2:a1:74:9b:9a:2d:88:36:98:99:33:d8:4f:a9: a4:7f:83:02:d7:50:e9:2d:59:e3:85:16:f3:71:1e:dc:13:d6: 6f:c0:55:01:21:16:5b:03:cb:65:35:a1:84:76:34:6c:59:82: f3:be:d1:b5:79:6c:79:59:e3:d3:0d:76:99:d6:bd:8c:65:f6: 74:ee:53:b7:c0:58:3b:c9:0b:f9:78:5d:f9:18:50:36:84:85: 8e:2d:66:b9:b3:62:e2:91:ab:a6:43:33:fa:4a:63:f9:13:ad: e5:52:30:c0:33:b7:c4:6b:c9:1e:65:77:a7:28:bf:6e:ef:0c: b0:2e:a4:e6:b5:36:68:c1:bf:a3:84:5f:36:8f:00:33:37:a4: 43:d8:00:6a -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+N6TU1IxtVWu0zJSbBJyMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkOTY4MWYxNDRkYjE0MzBhYzMxNWM4MzA2ZTFjMTQ3MzBj NWZlYzIwHhcNMjYwMTAyMTAxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNWI2MmRmZjUxZTA2NmVkNzU2NTQ5NTJmZmQ0NDUyMTY4YTdjYmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DR8C0nUc1fQGk64TL2X5r4IhpaJ NMwkmSFRWwmrXNIKkB7Nl35TJ6TyQZ4QsucGWZjolH5IW77kGUbaHK8y51D3lEPg 9XXCm04tpZhWoTxJ5TW3yk1DAbtxAVdXqZQ4P7COfVDXr9LMWm06rj89aebJmtYY 23R1BjJXWJQmboGy+G3EOnzUD4k2tlVUwzAbQ2MpbkjoBO8LDJr0Dhi7S/X8dWPF NW5hV8WysKGglbzzye2HwLBJ4EPaLFkVfOKU1kxLuGCM35EGP93+OiPLL+F6uoPj qw5W4T5VYvYF2cmREvzDoLLBW30YyBFl5nsnJd/rHmh9QuM25ejLKkSs1wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFLW2Lf9R4GbtdWVJUv/URSFop8vkMB8GA1UdIwQY MBaAFK2WgfFE2xQwrDFcgwbhwUcwxf7CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclphQjhVVGJGRENzTVZ5REJ1SEJSekRGX3NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy80MDViNWYtOGQyNi00ZWUzLWI4N2Yt YTNhMTNlM2E3ZDgwLzEvdGJZdF8xSGdadTExWlVsU185UkZJV2lueS1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy80MDViNWYtOGQyNi00ZWUzLWI4N2YtYTNhMTNlM2E3ZDgw LzEvclphQjhVVGJGRENzTVZ5REJ1SEJSekRGX3NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhCBgDAN BgkqhkiG9w0BAQsFAAOCAQEAc2mE2i2CwEVrAyjzsix9NDnFJhrIzLrFONBqnRmP mZWz5NyzMS1wURaBjDYCcuO/GwixtiJa8ADPwiijStZrjstHYku3X8G7f6WnWkuJ yL3uML0AUg3iVOyPpSVck9R7ihTP71drZn4glNr9aQjpVcKhdJuaLYg2mJkz2E+p pH+DAtdQ6S1Z44UW83Ee3BPWb8BVASEWWwPLZTWhhHY0bFmC877RtXlseVnj0w12 mda9jGX2dO5Tt8BYO8kL+Xhd+RhQNoSFji1mubNi4pGrpkMz+kpj+ROt5VIwwDO3 xGvJHmV3pyi/bu8MsC6k5rU2aMG/o4RfNo8AMzekQ9gAag== -----END CERTIFICATE-----Generated at Mon Jan 26 02:22:34 2026 by rpki-client