This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/t-JixdgR2KW6mLeZ2M5qWg6yCfQ.roa File: t-JixdgR2KW6mLeZ2M5qWg6yCfQ.roa (raw, json) Hash identifier: qx2Rz+KR5H2gFTlz4zjvnr2rqQPHC17WGAVsmy+ZNSI= Subject key identifier: B7:E2:62:C5:D8:11:D8:A5:BA:98:B7:99:D8:CE:6A:5A:0E:B2:09:F4 Certificate issuer: /CN=6041072ee1a1b1c068412dfb0355d2759932c5f5 Certificate serial: 019B7F1582C012E2DAA2C891B5F723893480 Authority key identifier: 60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/t-JixdgR2KW6mLeZ2M5qWg6yCfQ.roa Signing time: Fri 02 Jan 2026 14:21:14 +0000 ROA not before: Fri 02 Jan 2026 14:21:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29302 IP address blocks: 146.185.16.0/20 maxlen: 20 2a01:5a80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:82:c0:12:e2:da:a2:c8:91:b5:f7:23:89:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6041072ee1a1b1c068412dfb0355d2759932c5f5 Validity Not Before: Jan 2 14:21:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7e262c5d811d8a5ba98b799d8ce6a5a0eb209f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bd:1a:13:4e:e2:46:f7:63:20:46:67:38:2f: 60:e8:fd:1f:df:f0:2d:4d:e1:ba:14:ef:5c:3e:fa: ac:ed:86:4d:16:08:ef:a5:dd:b4:90:8f:12:db:ed: 37:aa:f5:ec:e1:79:08:4c:f9:70:3f:11:85:ae:91: 7e:ed:1e:d1:b1:88:33:89:23:8e:fa:cf:c6:55:0f: b5:fd:97:9d:d6:a9:ce:00:2d:ca:6d:95:dd:6e:2f: 39:c4:eb:8f:d0:3e:d3:4e:71:a0:63:b7:b4:e8:c5: 46:e9:9e:8a:85:9a:bc:24:f9:7a:2a:ff:cd:0d:8e: 27:91:d0:28:f0:0c:d3:10:58:ab:31:a6:75:8d:96: 52:17:94:62:fa:87:90:54:ad:91:b4:c9:7a:a7:cc: 82:12:4c:5d:7d:e9:dc:32:d9:8b:b2:f4:2d:0d:ac: e1:07:42:8c:53:09:28:de:a8:42:bc:18:1e:34:35: 35:66:85:4f:c7:a2:fc:16:52:8d:10:0c:ff:fb:0a: b4:7d:b8:76:eb:92:aa:fc:9f:59:4f:96:71:2e:8f: d8:28:70:d7:fd:cd:fd:5d:8c:94:56:b0:4c:79:21: 62:86:91:70:35:e2:74:4b:bf:0d:71:34:ec:49:e8: 22:8e:21:f4:44:9a:3c:a2:b0:c0:f4:50:25:ba:0a: 52:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E2:62:C5:D8:11:D8:A5:BA:98:B7:99:D8:CE:6A:5A:0E:B2:09:F4 X509v3 Authority Key Identifier: keyid:60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/t-JixdgR2KW6mLeZ2M5qWg6yCfQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.185.16.0/20 IPv6: 2a01:5a80::/32 Signature Algorithm: sha256WithRSAEncryption 1f:b1:30:28:e7:b4:ed:40:10:b1:73:02:8e:ab:a5:4a:d1:ac: bf:b4:db:d1:ad:19:5e:16:44:4f:e1:e3:10:da:cd:4e:05:0e: 2a:6c:f1:47:63:6d:a1:40:95:94:f6:3a:be:9b:b4:42:8f:2f: b9:b5:cc:d5:bd:08:a7:00:a3:28:86:5a:59:e4:9f:f2:7f:ea: bd:2c:44:49:49:cc:92:58:53:ab:88:6c:cc:a5:2e:a9:a0:67: 93:3d:9a:fb:23:7c:71:d8:6e:fb:42:d5:7d:dd:81:ce:9c:5d: 77:ff:89:01:85:3b:1f:a8:24:7c:b9:e0:34:e3:8a:80:70:8a: 1c:aa:63:d5:01:23:66:58:c6:e6:dd:70:d8:e8:90:fe:1d:17: 3d:6e:f5:95:a7:0a:88:c8:b2:35:b0:b1:9e:55:af:4a:4a:c3: 69:bc:8a:3a:e7:a9:b2:e1:27:97:ea:09:d4:00:96:e0:3c:9c: a1:7d:cd:b4:52:bc:31:87:75:a0:16:5e:f3:e4:aa:89:bf:b5: 42:fd:cf:09:aa:f1:c4:d1:9a:85:2c:c1:34:7e:70:22:e9:f5: 15:aa:87:b8:65:76:2e:e6:e5:e4:c6:65:f6:ea:43:37:b3:2c: 5e:89:33:64:0f:e9:ef:b8:a5:79:17:7f:6e:15:cd:9a:b2:7f: cf:86:10:39 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/FYLAEuLaosiRtfcjiTSAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNDEwNzJlZTFhMWIxYzA2ODQxMmRmYjAzNTVkMjc1OTkz MmM1ZjUwHhcNMjYwMTAyMTQyMTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2UyNjJjNWQ4MTFkOGE1YmE5OGI3OTlkOGNlNmE1YTBlYjIwOWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr70aE07iRvdjIEZnOC9g6P0f3/At TeG6FO9cPvqs7YZNFgjvpd20kI8S2+03qvXs4XkITPlwPxGFrpF+7R7RsYgziSOO +s/GVQ+1/Zed1qnOAC3KbZXdbi85xOuP0D7TTnGgY7e06MVG6Z6KhZq8JPl6Kv/N DY4nkdAo8AzTEFirMaZ1jZZSF5Ri+oeQVK2RtMl6p8yCEkxdfencMtmLsvQtDazh B0KMUwko3qhCvBgeNDU1ZoVPx6L8FlKNEAz/+wq0fbh265Kq/J9ZT5ZxLo/YKHDX /c39XYyUVrBMeSFihpFwNeJ0S78NcTTsSegijiH0RJo8orDA9FAlugpSAQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLfiYsXYEdilupi3mdjOaloOsgn0MB8GA1UdIwQY MBaAFGBBBy7hobHAaEEt+wNV0nWZMsX1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUVFSEx1R2hzY0JvUVMzN0ExWFNkWmt5eGZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84ZGZhMzAtMmE4NS00YjQ2LTk1MzMt NGQ1Zjc2MzdlZmNlLzEvdC1KaXhkZ1IyS1c2bUxlWjJNNXFXZzZ5Q2ZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC84ZGZhMzAtMmE4NS00YjQ2LTk1MzMtNGQ1Zjc2MzdlZmNl LzEvWUVFSEx1R2hzY0JvUVMzN0ExWFNkWmt5eGZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQEkrkQMA0E AgACMAcDBQAqAVqAMA0GCSqGSIb3DQEBCwUAA4IBAQAfsTAo57TtQBCxcwKOq6VK 0ay/tNvRrRleFkRP4eMQ2s1OBQ4qbPFHY22hQJWU9jq+m7RCjy+5tczVvQinAKMo hlpZ5J/yf+q9LERJScySWFOriGzMpS6poGeTPZr7I3xx2G77QtV93YHOnF13/4kB hTsfqCR8ueA044qAcIocqmPVASNmWMbm3XDY6JD+HRc9bvWVpwqIyLI1sLGeVa9K SsNpvIo656my4SeX6gnUAJbgPJyhfc20Urwxh3WgFl7z5KqJv7VC/c8JqvHE0ZqF LME0fnAi6fUVqoe4ZXYu5uXkxmX26kM3syxeiTNkD+nvuKV5F39uFc2asn/PhhA5 -----END CERTIFICATE-----Generated at Mon Jan 26 01:15:17 2026 by rpki-client