This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/TJ-NxfDDAC6I8oepMl_uJgBKeY4.roa File: TJ-NxfDDAC6I8oepMl_uJgBKeY4.roa (raw, json) Hash identifier: LQb2DMXHpcDAYFTx6JeAZ71tuwMz9N0jPtDCjoOf9gM= Subject key identifier: 4C:9F:8D:C5:F0:C3:00:2E:88:F2:87:A9:32:5F:EE:26:00:4A:79:8E Certificate issuer: /CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3 Certificate serial: 019B79ECE85190F77070124BA7D79C15EE03 Authority key identifier: 02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/TJ-NxfDDAC6I8oepMl_uJgBKeY4.roa Signing time: Thu 01 Jan 2026 14:18:47 +0000 ROA not before: Thu 01 Jan 2026 14:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208911 IP address blocks: 2a11:8280::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:e8:51:90:f7:70:70:12:4b:a7:d7:9c:15:ee:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3 Validity Not Before: Jan 1 14:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c9f8dc5f0c3002e88f287a9325fee26004a798e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e9:b4:52:c9:43:de:da:7b:d0:2d:66:76:76: e2:8a:95:97:85:c1:2b:08:89:3f:7d:e6:aa:7a:52: 95:53:7f:23:6d:ba:32:f9:fe:fb:cc:36:c3:be:b7: f4:1e:28:e2:97:42:4f:37:51:61:ff:90:71:11:72: 76:29:ed:79:bb:26:0f:83:01:86:aa:7f:29:81:0d: 66:7d:80:99:bc:6b:b0:74:1e:40:a9:15:93:36:84: 2a:b5:1b:f8:ba:d8:c2:3a:8d:c8:66:9f:67:f9:a8: 47:fe:10:93:ed:89:a1:04:a1:24:9c:5c:d0:ce:f0: e1:a8:cc:ab:56:25:ca:4f:8b:59:23:e6:fd:f3:14: a4:2e:bd:ac:7a:35:25:05:b3:1e:f4:9b:8e:81:68: a0:57:ba:db:48:58:45:91:74:57:3b:37:ad:2b:ee: df:db:29:f8:a5:e9:74:84:cf:44:70:c9:1d:56:e0: b8:e0:08:ab:42:4a:c9:47:77:ca:f1:bc:1c:ac:5d: 7c:54:14:30:58:76:dc:ac:f1:12:dc:90:0b:dc:8c: 44:80:49:c2:f8:32:d8:d6:7c:9a:0b:83:1c:be:bd: f8:e4:d7:ea:c7:6f:10:00:8b:90:18:d4:93:34:07: 5b:0e:e0:6f:b6:3c:8d:4f:23:31:61:76:dc:81:a8: c3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:9F:8D:C5:F0:C3:00:2E:88:F2:87:A9:32:5F:EE:26:00:4A:79:8E X509v3 Authority Key Identifier: keyid:02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/TJ-NxfDDAC6I8oepMl_uJgBKeY4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:8280::/29 Signature Algorithm: sha256WithRSAEncryption 5f:cd:eb:b7:fd:f4:bf:84:69:cc:5b:03:48:a5:c7:31:02:ca: 85:1f:c2:19:3f:9a:91:0f:2c:ca:c1:f7:0b:77:32:68:6c:94: e0:c7:80:ee:1f:ce:06:57:bc:97:94:34:7b:f9:a7:c3:37:14: a2:95:a5:97:47:2c:1a:eb:dc:39:ac:a5:01:67:ac:2a:79:df: 7e:23:8f:c5:69:08:38:bf:35:98:ae:72:16:29:39:c9:58:23: d5:54:00:4d:89:ae:0c:9d:96:1b:78:ad:53:d5:cd:dc:f1:ac: c0:83:b4:9a:88:b6:a9:24:87:d1:33:12:6c:0f:c1:81:be:88: 4f:1a:bc:f4:40:91:af:be:71:ff:3f:f5:92:72:45:1e:fa:92: de:d2:5a:f0:fd:6d:8b:ca:43:a6:88:c2:9a:4a:4d:fb:89:af: 27:0b:86:45:f2:22:26:d0:1f:ca:85:ee:48:4d:d1:7e:21:44: 30:82:07:d5:86:c9:0a:1d:bb:6a:43:ba:f3:c9:9d:98:86:40: be:b0:d7:7f:e9:9f:c4:44:cc:e0:41:92:3a:f3:c6:9d:51:a4: c5:44:fe:cc:25:56:d0:73:cd:b4:34:05:45:79:2f:bb:ff:06: 0f:e8:64:f0:cc:3e:28:cd:78:72:83:b6:f5:89:8f:2c:5d:33: 1f:31:c2:20 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt57OhRkPdwcBJLp9ecFe4DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyNWYyYTkzZGIxMGYyZGQ1ZjZhNTViYjJhNDQwZjY3NDg2 Y2QxYTMwHhcNMjYwMTAxMTQxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzlmOGRjNWYwYzMwMDJlODhmMjg3YTkzMjVmZWUyNjAwNGE3OThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsem0UslD3tp70C1mdnbiipWXhcEr CIk/feaqelKVU38jbboy+f77zDbDvrf0Hijil0JPN1Fh/5BxEXJ2Ke15uyYPgwGG qn8pgQ1mfYCZvGuwdB5AqRWTNoQqtRv4utjCOo3IZp9n+ahH/hCT7YmhBKEknFzQ zvDhqMyrViXKT4tZI+b98xSkLr2sejUlBbMe9JuOgWigV7rbSFhFkXRXOzetK+7f 2yn4pel0hM9EcMkdVuC44AirQkrJR3fK8bwcrF18VBQwWHbcrPES3JAL3IxEgEnC +DLY1nyaC4Mcvr345Nfqx28QAIuQGNSTNAdbDuBvtjyNTyMxYXbcgajD2wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFEyfjcXwwwAuiPKHqTJf7iYASnmOMB8GA1UdIwQY MBaAFAJfKpPbEPLdX2pVuypED2dIbNGjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWw4cWs5c1E4dDFmYWxXN0trUVBaMGhzMGFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yMDVkMjQtMDA5Zi00ODZhLTk3NmYt MmVjZGExMWRlMTUzLzEvVEotTnhmRERBQzZJOG9lcE1sX3VKZ0JLZVk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8yMDVkMjQtMDA5Zi00ODZhLTk3NmYtMmVjZGExMWRlMTUz LzEvQWw4cWs5c1E4dDFmYWxXN0trUVBaMGhzMGFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhGCgDAN BgkqhkiG9w0BAQsFAAOCAQEAX83rt/30v4RpzFsDSKXHMQLKhR/CGT+akQ8sysH3 C3cyaGyU4MeA7h/OBle8l5Q0e/mnwzcUopWll0csGuvcOaylAWesKnnffiOPxWkI OL81mK5yFik5yVgj1VQATYmuDJ2WG3itU9XN3PGswIO0moi2qSSH0TMSbA/Bgb6I Txq89ECRr75x/z/1knJFHvqS3tJa8P1ti8pDpojCmkpN+4mvJwuGRfIiJtAfyoXu SE3RfiFEMIIH1YbJCh27akO688mdmIZAvrDXf+mfxETM4EGSOvPGnVGkxUT+zCVW 0HPNtDQFRXkvu/8GD+hk8Mw+KM14coO29YmPLF0zHzHCIA== -----END CERTIFICATE-----Generated at Mon Jan 26 02:25:09 2026 by rpki-client