This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/TLi5DNB1nha4h6YESMgyGrCORWo.roa File: TLi5DNB1nha4h6YESMgyGrCORWo.roa (raw, json) Hash identifier: EUg1KiZtD+nVctjCGIesOCkqRzlFdgvGJVlZhMuO3Jw= Subject key identifier: 4C:B8:B9:0C:D0:75:9E:16:B8:87:A6:04:48:C8:32:1A:B0:8E:45:6A Certificate issuer: /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1 Certificate serial: 019B775897524BB982E66BB23BC69CA15946 Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/TLi5DNB1nha4h6YESMgyGrCORWo.roa Signing time: Thu 01 Jan 2026 02:17:33 +0000 ROA not before: Thu 01 Jan 2026 02:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 142418 IP address blocks: 2a0f:ca81:6960::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:97:52:4b:b9:82:e6:6b:b2:3b:c6:9c:a1:59:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1 Validity Not Before: Jan 1 02:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4cb8b90cd0759e16b887a60448c8321ab08e456a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:01:ae:55:ad:96:0b:58:c2:0f:c0:f5:e5:1c: 17:90:e5:da:2f:8a:f1:91:2d:d4:b6:5d:3d:55:43: 67:86:af:92:ff:99:ef:17:21:66:bf:43:d9:af:ae: 26:b8:35:5e:86:3a:b9:46:97:e0:38:c7:e8:a5:1b: 40:03:af:12:fb:c4:20:c2:04:42:d6:03:cb:dd:3c: a4:48:74:8a:05:6a:ca:b7:cc:1a:35:fc:45:7f:e3: 92:69:4f:86:ec:04:ad:42:6a:f0:8e:d5:de:bd:00: cb:79:f4:8c:e9:19:3d:62:67:8e:85:52:7c:0c:5e: 58:91:a6:7e:8c:17:a5:88:8b:cb:f7:f0:fc:2c:1f: 40:2b:53:f9:38:ab:8f:ea:dc:58:ce:c7:71:ec:ee: e3:71:00:80:92:03:86:e9:ae:e7:e9:fc:db:31:45: ff:4d:52:91:fe:8f:8e:b4:13:38:7f:b0:e9:8e:14: ae:0b:6c:4a:e7:66:f8:13:43:cc:8e:64:b5:7a:83: ef:c8:92:70:b2:47:a3:36:1d:b3:f9:83:c6:19:7e: c6:a5:62:62:0e:81:b1:95:fb:15:5a:37:9f:fa:5b: 97:98:15:06:ed:ed:3b:30:c8:9b:7a:d1:34:42:1b: f5:86:df:a0:96:3d:94:bd:e7:53:c7:06:b4:48:22: de:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B8:B9:0C:D0:75:9E:16:B8:87:A6:04:48:C8:32:1A:B0:8E:45:6A X509v3 Authority Key Identifier: keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/TLi5DNB1nha4h6YESMgyGrCORWo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:ca81:6960::/44 Signature Algorithm: sha256WithRSAEncryption 79:da:51:3a:33:40:5d:db:f8:09:0f:3f:5c:20:1a:fb:97:be: bf:5f:6c:72:ef:01:de:1a:06:01:eb:b2:a4:9f:36:e7:12:84: ec:c1:a2:73:ce:67:69:08:d3:17:02:f7:da:75:c2:18:08:67: 7a:f5:33:04:4d:23:a7:75:1a:f8:e9:5a:3d:db:3a:75:5a:ac: 93:96:87:fd:df:cf:da:02:3e:82:8f:9e:0e:0a:e9:88:e1:40: cc:52:5c:d5:28:e5:2e:27:0d:e4:4d:a2:50:7b:a8:b2:19:48: b7:7e:7b:5e:3f:ec:d2:97:e6:3e:29:e5:b8:56:ff:76:f5:53: 81:dd:99:fd:9a:8d:44:59:39:d1:c7:50:b9:88:0c:e9:9b:c9: fc:c2:08:7d:0b:da:81:33:19:9e:fb:66:bd:37:6e:23:4e:d5: 2c:7f:ea:86:5c:3f:eb:28:b6:51:9f:4b:cb:ec:5d:0e:9b:77: f3:55:dc:d7:ea:e3:57:2e:a3:f8:21:ab:c2:fb:df:05:8f:4a: c4:b4:41:31:d0:89:df:25:2d:6d:67:9f:c4:1c:0b:d8:88:fd: e5:18:f3:62:a5:4d:2c:7e:e8:5d:97:6f:fb:36:97:04:2e:ca: 96:98:55:76:65:88:1a:e1:75:d1:1b:4f:7f:5c:14:4a:79:fb: ae:ee:d2:9e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WJdSS7mC5muyO8acoVlGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZTZhYjhlMGM0NmU4NDFiNDRkMmI5YzZiMDNiYjY1ZjU2 MjFkYjEwHhcNMjYwMTAxMDIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Y2I4YjkwY2QwNzU5ZTE2Yjg4N2E2MDQ0OGM4MzIxYWIwOGU0NTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgGuVa2WC1jCD8D15RwXkOXaL4rx kS3Utl09VUNnhq+S/5nvFyFmv0PZr64muDVehjq5RpfgOMfopRtAA68S+8QgwgRC 1gPL3TykSHSKBWrKt8waNfxFf+OSaU+G7AStQmrwjtXevQDLefSM6Rk9YmeOhVJ8 DF5YkaZ+jBeliIvL9/D8LB9AK1P5OKuP6txYzsdx7O7jcQCAkgOG6a7n6fzbMUX/ TVKR/o+OtBM4f7DpjhSuC2xK52b4E0PMjmS1eoPvyJJwskejNh2z+YPGGX7GpWJi DoGxlfsVWjef+luXmBUG7e07MMibetE0Qhv1ht+glj2UvedTxwa0SCLeVwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEy4uQzQdZ4WuIemBEjIMhqwjkVqMB8GA1UdIwQY MBaAFNvmq44MRuhBtE0rnGsDu2X1Yh2xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2Mt ZmIxMDMwNjUxMDY3LzEvVExpNUROQjFuaGE0aDZZRVNNZ3lHckNPUldvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2MtZmIxMDMwNjUxMDY3 LzEvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg/KgWlg MA0GCSqGSIb3DQEBCwUAA4IBAQB52lE6M0Bd2/gJDz9cIBr7l76/X2xy7wHeGgYB 67KknzbnEoTswaJzzmdpCNMXAvfadcIYCGd69TMETSOndRr46Vo92zp1WqyTlof9 38/aAj6Cj54OCumI4UDMUlzVKOUuJw3kTaJQe6iyGUi3fnteP+zSl+Y+KeW4Vv92 9VOB3Zn9mo1EWTnRx1C5iAzpm8n8wgh9C9qBMxme+2a9N24jTtUsf+qGXD/rKLZR n0vL7F0Om3fzVdzX6uNXLqP4IavC+98Fj0rEtEEx0InfJS1tZ5/EHAvYiP3lGPNi pU0sfuhdl2/7NpcELsqWmFV2ZYga4XXRG09/XBRKefuu7tKe -----END CERTIFICATE-----Generated at Sun Jan 25 16:28:33 2026 by rpki-client