This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/Tiep9o7nu-3UD2LQ2KlA4H_AVOA.roa File: Tiep9o7nu-3UD2LQ2KlA4H_AVOA.roa (raw, json) Hash identifier: srGhNLrtSKjES9Z435nanlziO6TyKryBA1aEQKUzlHs= Subject key identifier: 4E:27:A9:F6:8E:E7:BB:ED:D4:0F:62:D0:D8:A9:40:E0:7F:C0:54:E0 Certificate issuer: /CN=8ef7c09c1a3f73ebe61740ab65e589f91655bded Certificate serial: 019B7F84F4B7464D434CFE406ADBE961D110 Authority key identifier: 8E:F7:C0:9C:1A:3F:73:EB:E6:17:40:AB:65:E5:89:F9:16:55:BD:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/Tiep9o7nu-3UD2LQ2KlA4H_AVOA.roa Signing time: Fri 02 Jan 2026 16:22:58 +0000 ROA not before: Fri 02 Jan 2026 16:22:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198154 IP address blocks: 2a14:2340::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:f4:b7:46:4d:43:4c:fe:40:6a:db:e9:61:d1:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ef7c09c1a3f73ebe61740ab65e589f91655bded Validity Not Before: Jan 2 16:22:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e27a9f68ee7bbedd40f62d0d8a940e07fc054e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1c:29:b1:e9:f1:85:96:f8:db:8b:75:75:cb: 89:fc:51:76:51:03:03:1f:e9:05:ca:41:33:df:75: 9f:6c:ad:4f:9c:39:9b:d0:f5:01:b1:6c:25:d8:4d: 09:a9:e3:e7:e7:02:d6:db:53:6d:15:2f:7b:d4:26: 3d:70:16:9a:31:5a:b6:d0:cc:42:7e:61:55:75:8a: ee:84:9d:4d:24:d6:96:d5:fe:56:7e:88:e7:ac:1e: 0b:e9:2c:94:1b:1c:78:cb:86:a5:fd:f6:20:a4:2d: 37:72:4a:18:f6:1f:d5:ed:dc:d9:fd:73:65:65:e6: 7a:53:bc:aa:47:09:b2:02:60:64:81:c9:78:30:d3: f2:4c:f0:52:bc:0a:a1:ce:46:0b:7f:a2:53:fa:dc: c1:12:4a:25:f7:97:c6:6d:b6:b2:a7:c2:82:7e:3a: 18:90:cf:82:ed:c2:19:5f:e5:fd:21:0d:94:12:fa: 28:b1:d4:94:9e:c6:07:d3:02:46:22:fa:96:92:ad: 59:09:85:4c:eb:6e:37:1a:a2:39:64:5b:4f:69:66: 29:75:03:13:e6:fb:b4:70:4d:77:b0:4f:cb:eb:7d: 35:42:cc:82:5c:76:3d:c6:da:c4:b1:8e:e0:8f:17: a1:39:17:d6:32:6f:22:37:3b:06:47:75:6a:0c:2c: 85:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:27:A9:F6:8E:E7:BB:ED:D4:0F:62:D0:D8:A9:40:E0:7F:C0:54:E0 X509v3 Authority Key Identifier: keyid:8E:F7:C0:9C:1A:3F:73:EB:E6:17:40:AB:65:E5:89:F9:16:55:BD:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/Tiep9o7nu-3UD2LQ2KlA4H_AVOA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:2340::/48 Signature Algorithm: sha256WithRSAEncryption 40:f9:c5:43:8d:6d:7c:17:a3:51:ec:60:09:c5:e6:22:6f:42: bc:dd:7d:1e:c5:40:f8:01:8a:db:09:81:34:f8:3e:7a:e8:d4: c8:0a:f8:d0:dc:fd:2c:09:13:e1:e6:ef:a0:1c:8c:0f:0c:ab: 56:ec:a1:08:e1:0d:60:2d:70:e1:3c:01:ff:c7:de:03:10:bf: 30:90:0a:30:2a:61:1d:25:fb:9e:75:f5:16:57:81:f7:db:7c: 3c:a9:01:84:40:5b:38:50:04:b1:e4:15:0b:20:08:fb:14:b8: 40:04:2e:c7:c1:63:78:6f:6b:81:fc:1d:98:78:48:16:3f:3c: 7c:cd:9a:f3:15:b6:42:37:a8:bf:6d:ac:08:43:13:b1:c0:96: 8c:4b:37:72:29:84:4c:76:e8:94:cf:9a:6f:fc:63:3b:e7:98: c5:d1:59:6f:75:74:63:7e:9c:69:ff:a0:a3:ad:08:e7:85:5c: c2:55:11:a1:b4:67:63:7e:e7:8c:1b:c5:a9:87:61:dc:02:24: 8e:76:12:00:91:be:59:54:fa:ad:bb:26:e6:3a:cc:f4:4a:26: 60:ce:71:fd:67:6d:14:5d:7e:db:27:49:95:84:f5:c8:23:6e: b2:7f:53:3a:9f:88:d1:5b:a8:13:b7:49:1f:d6:c2:fe:05:d0: cb:2c:4e:53 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/hPS3Rk1DTP5AatvpYdEQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlZjdjMDljMWEzZjczZWJlNjE3NDBhYjY1ZTU4OWY5MTY1 NWJkZWQwHhcNMjYwMTAyMTYyMjU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTI3YTlmNjhlZTdiYmVkZDQwZjYyZDBkOGE5NDBlMDdmYzA1NGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRwpsenxhZb424t1dcuJ/FF2UQMD H+kFykEz33WfbK1PnDmb0PUBsWwl2E0JqePn5wLW21NtFS971CY9cBaaMVq20MxC fmFVdYruhJ1NJNaW1f5WfojnrB4L6SyUGxx4y4al/fYgpC03ckoY9h/V7dzZ/XNl ZeZ6U7yqRwmyAmBkgcl4MNPyTPBSvAqhzkYLf6JT+tzBEkol95fGbbayp8KCfjoY kM+C7cIZX+X9IQ2UEvoosdSUnsYH0wJGIvqWkq1ZCYVM6243GqI5ZFtPaWYpdQMT 5vu0cE13sE/L6301QsyCXHY9xtrEsY7gjxehORfWMm8iNzsGR3VqDCyFRQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFE4nqfaO57vt1A9i0NipQOB/wFTgMB8GA1UdIwQY MBaAFI73wJwaP3Pr5hdAq2XlifkWVb3tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanZmQW5Cb19jLXZtRjBDclplV0otUlpWdmUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS84YzZkODgtNTJjMy00N2U2LTgwMDkt ZjYyYmU5ZThhNjcxLzEvVGllcDlvN251LTNVRDJMUTJLbEE0SF9BVk9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS84YzZkODgtNTJjMy00N2U2LTgwMDktZjYyYmU5ZThhNjcx LzEvanZmQW5Cb19jLXZtRjBDclplV0otUlpWdmUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhQjQAAA MA0GCSqGSIb3DQEBCwUAA4IBAQBA+cVDjW18F6NR7GAJxeYib0K83X0exUD4AYrb CYE0+D566NTICvjQ3P0sCRPh5u+gHIwPDKtW7KEI4Q1gLXDhPAH/x94DEL8wkAow KmEdJfuedfUWV4H323w8qQGEQFs4UASx5BULIAj7FLhABC7HwWN4b2uB/B2YeEgW Pzx8zZrzFbZCN6i/bawIQxOxwJaMSzdyKYRMduiUz5pv/GM755jF0VlvdXRjfpxp /6CjrQjnhVzCVRGhtGdjfueMG8Wph2HcAiSOdhIAkb5ZVPqtuybmOsz0SiZgznH9 Z20UXX7bJ0mVhPXII26yf1M6n4jRW6gTt0kf1sL+BdDLLE5T -----END CERTIFICATE-----Generated at Sun Jan 25 17:33:56 2026 by rpki-client