This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/TpaHwNI0EBaNPhIt_9NPWGX3c9c.roa File: TpaHwNI0EBaNPhIt_9NPWGX3c9c.roa (raw, json) Hash identifier: 3XHWImydnmO2TAPTSjesjzHF5/P0zYI8CHSB5cj7+6Q= Subject key identifier: 4E:96:87:C0:D2:34:10:16:8D:3E:12:2D:FF:D3:4F:58:65:F7:73:D7 Certificate issuer: /CN=01626ffd800eafa336bdf343141f03f7c393c364 Certificate serial: 019B797E322DAF1461E4AB75F369055DCD32 Authority key identifier: 01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/TpaHwNI0EBaNPhIt_9NPWGX3c9c.roa Signing time: Thu 01 Jan 2026 12:17:52 +0000 ROA not before: Thu 01 Jan 2026 12:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21433 IP address blocks: 2a02:ee80:40d4::/47 maxlen: 47 2a02:ee80:40d4::/48 maxlen: 48 2a02:ee80:40d5::/48 maxlen: 48 2a02:ee80:40d6::/47 maxlen: 47 2a02:ee80:40d6::/48 maxlen: 48 2a02:ee80:40d7::/48 maxlen: 48 2a02:ee80:4248::/47 maxlen: 47 2a02:ee80:4248::/48 maxlen: 48 2a02:ee80:4249::/48 maxlen: 48 2a02:ee80:4250::/47 maxlen: 47 2a02:ee80:4250::/48 maxlen: 48 2a02:ee80:4251::/48 maxlen: 48 2a02:ee80:436e::/47 maxlen: 47 2a02:ee80:436e::/48 maxlen: 48 2a02:ee80:436f::/48 maxlen: 48 2a02:ee80:4398::/47 maxlen: 47 2a02:ee80:4398::/48 maxlen: 48 2a02:ee80:4399::/48 maxlen: 48 2a02:ee80:439a::/47 maxlen: 47 2a02:ee80:439a::/48 maxlen: 48 2a02:ee80:439b::/48 maxlen: 48 2a02:ee80:439c::/47 maxlen: 47 2a02:ee80:439c::/48 maxlen: 48 2a02:ee80:439d::/48 maxlen: 48 2a02:ee80:439e::/47 maxlen: 47 2a02:ee80:439e::/48 maxlen: 48 2a02:ee80:439f::/48 maxlen: 48 2a02:ee80:43a0::/47 maxlen: 47 2a02:ee80:43a0::/48 maxlen: 48 2a02:ee80:43a1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:32:2d:af:14:61:e4:ab:75:f3:69:05:5d:cd:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01626ffd800eafa336bdf343141f03f7c393c364 Validity Not Before: Jan 1 12:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e9687c0d23410168d3e122dffd34f5865f773d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:dc:2b:c3:59:bd:26:2c:99:ce:cb:9e:42:55: fe:be:37:78:81:2b:f0:d6:fd:f7:9c:56:cb:0d:c1: 06:8f:47:57:19:10:53:53:4c:8f:b5:c1:0d:1f:07: d3:98:1d:86:89:8e:71:81:ac:77:7c:da:dc:4f:a1: c6:59:27:67:c6:14:80:94:a1:82:1a:1e:17:b4:d3: c7:ac:c3:7d:2d:84:86:dd:b3:f5:21:60:2c:35:a1: 7b:91:30:52:00:20:fe:0c:45:c2:ab:1f:75:d5:27: df:a6:a0:44:4c:c6:4f:ea:60:52:12:a3:a6:a4:c6: 07:34:4f:7d:ea:42:2d:56:3c:47:f6:5a:a0:da:b1: ae:98:c5:ec:29:34:8d:c5:cd:05:59:81:b4:af:ba: 05:da:29:f5:1c:b5:71:d5:b2:31:25:60:9a:50:db: ef:68:e9:83:ab:5e:ba:6f:f7:bb:ff:0d:c5:23:1e: d4:cb:a7:23:55:8e:ce:fe:eb:a8:6a:c0:8e:94:7b: e5:3f:40:f7:be:36:7c:57:2d:0e:18:1c:06:0a:4c: 77:f5:32:9e:51:b8:83:ee:55:64:57:e5:7c:3e:c5: 33:f7:10:3b:29:00:3c:97:65:2e:67:f4:ac:3c:15: f5:1c:d5:da:92:2d:c3:04:9b:dd:f6:c2:dc:30:b7: 70:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:96:87:C0:D2:34:10:16:8D:3E:12:2D:FF:D3:4F:58:65:F7:73:D7 X509v3 Authority Key Identifier: keyid:01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/TpaHwNI0EBaNPhIt_9NPWGX3c9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:ee80:40d4::/46 2a02:ee80:4248::/47 2a02:ee80:4250::/47 2a02:ee80:436e::/47 2a02:ee80:4398::-2a02:ee80:43a1:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption a6:2d:97:87:af:f0:90:0c:15:c9:8f:6c:47:27:0b:75:5f:7c: a2:e9:80:44:3a:92:40:4c:e2:55:16:72:8a:fa:08:52:25:c7: c0:29:c3:67:84:33:4e:7b:08:24:32:2c:d9:51:6c:c5:98:cf: be:41:a1:01:66:e9:d8:da:6c:1d:10:f1:f9:26:64:15:68:f2: d4:8b:d6:65:18:bd:ad:27:83:74:41:8c:9a:6f:28:71:10:7f: 6b:64:5e:73:b1:7d:15:4a:12:9a:0d:8c:ac:15:47:d2:97:27: 1b:d0:38:f1:5f:bd:73:70:c4:9d:ad:d1:1f:74:6d:4b:cb:16: 2c:60:62:22:80:b2:3f:27:88:89:16:8e:7b:b8:2b:90:4e:c1: e7:82:01:b9:df:a9:99:b8:0e:29:ff:35:91:6d:2e:29:4e:35: 3a:89:53:95:aa:ff:43:14:8c:98:06:8b:2e:c4:23:19:67:b8: cc:20:d4:36:31:8a:ca:ab:f9:08:e7:c4:0f:a6:af:57:9c:99: b2:1a:d8:8d:72:a6:fa:33:b2:fe:8f:5f:92:6e:b3:34:0c:50: 43:e3:55:f5:3e:9e:16:93:f2:d9:cb:ae:43:f8:5c:0b:2c:eb: c1:a1:fa:a0:c3:37:ff:b2:cd:84:67:9f:93:76:a4:55:af:f8: 94:d6:ae:f4 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgISAZt5fjItrxRh5Kt182kFXc0yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNjI2ZmZkODAwZWFmYTMzNmJkZjM0MzE0MWYwM2Y3YzM5 M2MzNjQwHhcNMjYwMTAxMTIxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTk2ODdjMGQyMzQxMDE2OGQzZTEyMmRmZmQzNGY1ODY1Zjc3M2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/Nwrw1m9JiyZzsueQlX+vjd4gSvw 1v33nFbLDcEGj0dXGRBTU0yPtcENHwfTmB2GiY5xgax3fNrcT6HGWSdnxhSAlKGC Gh4XtNPHrMN9LYSG3bP1IWAsNaF7kTBSACD+DEXCqx911SffpqBETMZP6mBSEqOm pMYHNE996kItVjxH9lqg2rGumMXsKTSNxc0FWYG0r7oF2in1HLVx1bIxJWCaUNvv aOmDq166b/e7/w3FIx7Uy6cjVY7O/uuoasCOlHvlP0D3vjZ8Vy0OGBwGCkx39TKe UbiD7lVkV+V8PsUz9xA7KQA8l2UuZ/SsPBX1HNXaki3DBJvd9sLcMLdwkQIDAQAB o4ICOzCCAjcwHQYDVR0OBBYEFE6Wh8DSNBAWjT4SLf/TT1hl93PXMB8GA1UdIwQY MBaAFAFib/2ADq+jNr3zQxQfA/fDk8NkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVdKdl9ZQU9yNk0ydmZOREZCOEQ5OE9UdzJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jNGU1YTAtODIxOS00ZmY5LTgyODct MWY0YmVhMjNlNGM3LzEvVHBhSHdOSTBFQmFOUGhJdF85TlBXR1gzYzljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9jNGU1YTAtODIxOS00ZmY5LTgyODctMWY0YmVhMjNlNGM3 LzEvQVdKdl9ZQU9yNk0ydmZOREZCOEQ5OE9UdzJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAAjA4AwcCKgLugEDU AwcBKgLugEJIAwcBKgLugEJQAwcBKgLugENuMBIDBwMqAu6AQ5gDBwEqAu6AQ6Aw DQYJKoZIhvcNAQELBQADggEBAKYtl4ev8JAMFcmPbEcnC3VffKLpgEQ6kkBM4lUW cor6CFIlx8Apw2eEM057CCQyLNlRbMWYz75BoQFm6djabB0Q8fkmZBVo8tSL1mUY va0ng3RBjJpvKHEQf2tkXnOxfRVKEpoNjKwVR9KXJxvQOPFfvXNwxJ2t0R90bUvL FixgYiKAsj8niIkWjnu4K5BOweeCAbnfqZm4Din/NZFtLilONTqJU5Wq/0MUjJgG iy7EIxlnuMwg1DYxisqr+QjnxA+mr1ecmbIa2I1ypvozsv6PX5JuszQMUEPjVfU+ nhaT8tnLrkP4XAss68Gh+qDDN/+yzYRnn5N2pFWv+JTWrvQ= -----END CERTIFICATE-----Generated at Mon Jan 26 01:01:47 2026 by rpki-client