This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/TrdJEenqgtHhdFelNOTUIFotJQw.roa File: TrdJEenqgtHhdFelNOTUIFotJQw.roa (raw, json) Hash identifier: Dr0F+aTEx7ePrr0l9Z8JmKO/N1C2g7VZ2b2KhzfPrQQ= Subject key identifier: 4E:B7:49:11:E9:EA:82:D1:E1:74:57:A5:34:E4:D4:20:5A:2D:25:0C Certificate issuer: /CN=8c856557c4146a8b50dc4d94424b06680cef755b Certificate serial: 019B77C757858C3EC7A1E17B0003E5ADB2A5 Authority key identifier: 8C:85:65:57:C4:14:6A:8B:50:DC:4D:94:42:4B:06:68:0C:EF:75:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/TrdJEenqgtHhdFelNOTUIFotJQw.roa Signing time: Thu 01 Jan 2026 04:18:31 +0000 ROA not before: Thu 01 Jan 2026 04:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49846 IP address blocks: 2a01:348:317:8000::/49 maxlen: 49 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:57:85:8c:3e:c7:a1:e1:7b:00:03:e5:ad:b2:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c856557c4146a8b50dc4d94424b06680cef755b Validity Not Before: Jan 1 04:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4eb74911e9ea82d1e17457a534e4d4205a2d250c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bb:08:3e:8e:cc:56:f3:fa:70:f1:10:30:b3: 7b:e5:fa:2b:be:a6:ae:f6:3c:25:98:9a:30:c1:35: 12:96:a1:ed:16:79:ea:5a:dd:fa:cc:80:06:0e:2e: 83:88:0f:90:19:b2:45:9c:d3:c3:1d:64:b9:d1:0b: 5a:c3:61:e4:2e:6f:6a:d6:29:5b:3e:eb:92:d2:50: ab:5c:eb:57:09:07:c5:71:f3:7c:99:ce:09:93:a5: 29:18:dc:92:80:a1:12:63:72:da:fb:d1:59:5f:eb: 90:9f:82:7f:f9:e0:3f:37:f1:9b:0e:dc:55:c7:33: 79:4c:95:af:11:71:f1:2c:75:a7:e6:07:31:9c:b6: 7d:9a:a2:61:6a:9f:21:16:54:0c:4b:9c:3c:27:0e: f5:76:b1:0a:92:f2:e5:dd:b2:c6:d9:aa:d9:6a:2f: fb:b1:0b:04:ef:d9:68:aa:70:5c:ff:bf:ad:ac:16: c8:ae:98:24:49:17:35:18:0b:ef:9b:90:8d:16:e8: f2:ed:ac:c6:d4:7a:67:83:22:ec:7f:21:5d:07:6e: d3:c2:e4:11:3f:1f:7c:2c:ce:9b:a9:57:d6:2d:50: b6:5c:36:a1:6b:f6:4d:c2:fe:cf:02:05:9c:c4:7a: b7:58:ec:2e:43:ef:6e:03:78:46:1d:2b:af:ed:9b: ae:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:B7:49:11:E9:EA:82:D1:E1:74:57:A5:34:E4:D4:20:5A:2D:25:0C X509v3 Authority Key Identifier: keyid:8C:85:65:57:C4:14:6A:8B:50:DC:4D:94:42:4B:06:68:0C:EF:75:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/TrdJEenqgtHhdFelNOTUIFotJQw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:348:317:8000::/49 Signature Algorithm: sha256WithRSAEncryption b0:ad:94:05:e6:69:6f:e8:46:e9:ce:b2:a6:33:9e:e4:7b:25: 04:29:0e:e6:b4:04:d8:bc:93:16:e1:4c:67:70:88:88:01:63: 38:9a:89:4f:6b:59:76:86:0d:ac:cb:ea:ff:0c:75:ee:00:59: c6:df:95:8d:40:df:c4:02:08:e1:53:95:c1:f8:09:23:ac:cc: 0e:b6:14:c7:e3:ee:9b:97:76:b0:a4:bb:85:62:0f:77:95:5c: 37:e9:ff:f4:89:43:f7:31:0b:ae:99:53:6e:3b:03:69:b1:25: f7:a7:63:06:cc:8c:4b:c9:e1:bc:a3:7d:ac:6d:6b:e6:ef:ff: a0:7c:a9:4d:4f:5c:8d:2e:55:0e:f1:a6:2c:8b:8d:72:dc:66: e6:9c:71:f3:84:39:dd:b6:45:c8:04:fd:af:8b:95:6c:c1:7b: f5:8e:d9:fe:f1:89:bd:ee:2c:a8:dc:e3:c3:28:b0:f8:ac:79: a2:a7:0b:a0:8e:ac:af:8b:c2:09:f8:28:9e:2a:42:9b:49:b4: 35:65:8c:88:2c:0d:8b:df:09:a1:9b:96:9d:7e:7e:2c:73:92: 09:1f:3f:cc:70:01:e9:72:c7:43:1d:98:7d:00:25:f5:c0:6e: 9e:10:d8:24:42:14:f0:9f:e0:d3:a4:b4:69:ad:5e:3d:af:05: 5f:5e:91:8f -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZt3x1eFjD7HoeF7AAPlrbKlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjODU2NTU3YzQxNDZhOGI1MGRjNGQ5NDQyNGIwNjY4MGNl Zjc1NWIwHhcNMjYwMTAxMDQxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZWI3NDkxMWU5ZWE4MmQxZTE3NDU3YTUzNGU0ZDQyMDVhMmQyNTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorsIPo7MVvP6cPEQMLN75forvqau 9jwlmJowwTUSlqHtFnnqWt36zIAGDi6DiA+QGbJFnNPDHWS50Qtaw2HkLm9q1ilb PuuS0lCrXOtXCQfFcfN8mc4Jk6UpGNySgKESY3La+9FZX+uQn4J/+eA/N/GbDtxV xzN5TJWvEXHxLHWn5gcxnLZ9mqJhap8hFlQMS5w8Jw71drEKkvLl3bLG2arZai/7 sQsE79loqnBc/7+trBbIrpgkSRc1GAvvm5CNFujy7azG1HpngyLsfyFdB27TwuQR Px98LM6bqVfWLVC2XDaha/ZNwv7PAgWcxHq3WOwuQ+9uA3hGHSuv7ZuuZQIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFE63SRHp6oLR4XRXpTTk1CBaLSUMMB8GA1UdIwQY MBaAFIyFZVfEFGqLUNxNlEJLBmgM73VbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaklWbFY4UVVhb3RRM0UyVVFrc0dhQXp2ZFZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8zMDZhZGItN2FhNy00YjgyLWIwNWEt MmE2YjlhMGNjYWJkLzEvVHJkSkVlbnFndEhoZEZlbE5PVFVJRm90SlF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8zMDZhZGItN2FhNy00YjgyLWIwNWEtMmE2YjlhMGNjYWJk LzEvaklWbFY4UVVhb3RRM0UyVVFrc0dhQXp2ZFZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAAjAKAwgHKgEDSAMX gDANBgkqhkiG9w0BAQsFAAOCAQEAsK2UBeZpb+hG6c6ypjOe5HslBCkO5rQE2LyT FuFMZ3CIiAFjOJqJT2tZdoYNrMvq/wx17gBZxt+VjUDfxAII4VOVwfgJI6zMDrYU x+Pum5d2sKS7hWIPd5VcN+n/9IlD9zELrplTbjsDabEl96djBsyMS8nhvKN9rG1r 5u//oHypTU9cjS5VDvGmLIuNctxm5pxx84Q53bZFyAT9r4uVbMF79Y7Z/vGJve4s qNzjwyiw+Kx5oqcLoI6sr4vCCfgonipCm0m0NWWMiCwNi98JoZuWnX5+LHOSCR8/ zHAB6XLHQx2YfQAl9cBunhDYJEIU8J/g06S0aa1ePa8FX16Rjw== -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:26 2026 by rpki-client