This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/tjlqpM7Grwa3ntR0hkW62RQoiUs.roa File: tjlqpM7Grwa3ntR0hkW62RQoiUs.roa (raw, json) Hash identifier: Hlku91Metogu7Ir6NyRMT083wklWP/gul25jTIpxWHw= Subject key identifier: B6:39:6A:A4:CE:C6:AF:06:B7:9E:D4:74:86:45:BA:D9:14:28:89:4B Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019AF2421B6B8757612120E22C5176EFF7FE Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/tjlqpM7Grwa3ntR0hkW62RQoiUs.roa Signing time: Sat 06 Dec 2025 06:03:29 +0000 ROA not before: Sat 06 Dec 2025 06:03:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 51396 IP address blocks: 2a05:9080:13::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:42:1b:6b:87:57:61:21:20:e2:2c:51:76:ef:f7:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Dec 6 06:03:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b6396aa4cec6af06b79ed4748645bad91428894b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:10:b2:ff:f7:49:6e:60:f9:a3:52:7e:6a:46: 29:b3:c3:3c:5b:cc:8e:5d:ee:f8:27:1f:c7:fc:16: 93:e0:e2:56:f2:91:0f:3d:c6:ac:26:43:85:93:ac: 96:64:e5:a2:c6:b6:a1:7d:92:d6:c9:bb:9e:87:3b: 12:33:8a:38:e1:26:fc:27:6b:6a:52:3d:48:32:b2: 53:1e:cf:09:e6:59:be:91:13:12:77:66:a6:00:3b: e2:c3:b7:4e:ad:87:08:df:32:a2:74:ba:40:84:4f: 3f:5e:3e:db:c0:97:e7:2d:94:ad:b8:16:76:df:96: 2f:1e:66:18:d0:b2:0d:7f:8d:99:bb:9a:90:ce:f3: 58:6a:a2:43:33:61:22:68:14:c2:31:1e:1a:01:5d: b7:8a:46:7c:8f:46:83:fa:a5:22:db:22:2b:53:03: d7:c3:26:72:99:99:f7:10:71:09:dc:44:6c:2d:53: 51:41:41:c6:51:28:88:44:45:da:b2:46:c3:f6:96: 65:02:da:c5:15:a6:b2:9b:31:91:36:55:91:de:1d: 78:4b:3f:52:e6:11:a6:1d:e5:ea:1e:ca:d5:39:e0: 4b:29:f2:1a:cd:75:57:91:f8:7e:98:07:0d:fe:41: 10:14:5e:54:29:f4:c4:04:52:34:2d:f8:10:f6:34: d4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:39:6A:A4:CE:C6:AF:06:B7:9E:D4:74:86:45:BA:D9:14:28:89:4B X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/tjlqpM7Grwa3ntR0hkW62RQoiUs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:9080:13::/48 Signature Algorithm: sha256WithRSAEncryption 62:6f:96:e2:5f:2c:ec:89:64:55:2d:be:92:48:b4:7d:f7:c1: 8f:fc:59:9d:50:42:fb:a1:9a:9e:55:f7:04:86:59:32:52:6c: 55:7c:d1:9f:99:0a:a3:9f:f8:ec:fd:05:47:0f:6f:62:68:4b: 42:37:1b:fd:aa:cc:17:6a:b9:a6:47:d0:79:08:de:08:e4:ce: 9c:f9:28:c9:87:40:ef:a4:03:c6:63:d7:06:2b:6d:a3:73:5f: 56:a3:d0:45:ee:21:7f:7b:13:7a:9d:93:6b:86:de:5c:2c:23: fb:17:36:e1:67:50:6b:f7:7a:70:04:d6:83:a4:02:8e:f6:b4: 40:0d:bf:d5:65:88:db:d0:67:d6:a4:64:38:fb:e3:3f:af:b6: 4b:83:a3:dd:51:70:27:37:b9:bd:68:ed:81:9a:39:66:56:7a: 5d:78:94:00:86:62:e3:7d:c1:93:d2:cc:b7:ed:c7:71:47:0b: e6:10:26:04:d7:4e:df:8c:d9:e0:c1:1f:96:e7:6a:69:65:e0: 18:0a:2e:8c:4c:10:d1:46:14:5a:71:01:4e:31:81:aa:2c:8c: c6:70:71:df:57:1d:d6:b8:59:04:f7:9f:88:fd:3c:79:8b:86: 98:1e:a6:f2:22:37:e8:8f:95:54:89:cd:51:52:72:5c:36:9b: 5d:9d:37:0f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZryQhtrh1dhISDiLFF27/f+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjUxMjA2MDYwMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjM5NmFhNGNlYzZhZjA2Yjc5ZWQ0NzQ4NjQ1YmFkOTE0Mjg4OTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxCy//dJbmD5o1J+akYps8M8W8yO Xe74Jx/H/BaT4OJW8pEPPcasJkOFk6yWZOWixrahfZLWybuehzsSM4o44Sb8J2tq Uj1IMrJTHs8J5lm+kRMSd2amADviw7dOrYcI3zKidLpAhE8/Xj7bwJfnLZStuBZ2 35YvHmYY0LINf42Zu5qQzvNYaqJDM2EiaBTCMR4aAV23ikZ8j0aD+qUi2yIrUwPX wyZymZn3EHEJ3ERsLVNRQUHGUSiIREXaskbD9pZlAtrFFaaymzGRNlWR3h14Sz9S 5hGmHeXqHsrVOeBLKfIazXVXkfh+mAcN/kEQFF5UKfTEBFI0LfgQ9jTUUQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLY5aqTOxq8Gt57UdIZFutkUKIlLMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvdGpscXBNN0dyd2EzbnRSMGhrVzYyUlFvaVVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgWQgAAT MA0GCSqGSIb3DQEBCwUAA4IBAQBib5biXyzsiWRVLb6SSLR998GP/FmdUEL7oZqe VfcEhlkyUmxVfNGfmQqjn/js/QVHD29iaEtCNxv9qswXarmmR9B5CN4I5M6c+SjJ h0DvpAPGY9cGK22jc19Wo9BF7iF/exN6nZNrht5cLCP7FzbhZ1Br93pwBNaDpAKO 9rRADb/VZYjb0GfWpGQ4++M/r7ZLg6PdUXAnN7m9aO2BmjlmVnpdeJQAhmLjfcGT 0sy37cdxRwvmECYE107fjNngwR+W52ppZeAYCi6MTBDRRhRacQFOMYGqLIzGcHHf Vx3WuFkE95+I/Tx5i4aYHqbyIjfoj5VUic1RUnJcNptdnTcP -----END CERTIFICATE-----Generated at Sat Dec 6 18:47:08 2025 by rpki-client