This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TpksZG1D0dccYb1JZi0U1armIbo.roa File: TpksZG1D0dccYb1JZi0U1armIbo.roa (raw, json) Hash identifier: V1SDqkqcG6lScblU8j1cALpBNxh+eI0j1UASJu8SN8o= Subject key identifier: 4E:99:2C:64:6D:43:D1:D7:1C:61:BD:49:66:2D:14:D5:AA:E6:21:BA Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D0C13459D10D3BB6CB1FA12A2A2E0 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TpksZG1D0dccYb1JZi0U1armIbo.roa Signing time: Fri 02 Jan 2026 06:20:08 +0000 ROA not before: Fri 02 Jan 2026 06:20:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207596 IP address blocks: 2a0e:97c0:2f0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:0c:13:45:9d:10:d3:bb:6c:b1:fa:12:a2:a2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e992c646d43d1d71c61bd49662d14d5aae621ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:69:2a:af:88:67:c2:30:41:76:9c:08:fa:c5: 0a:ba:ae:e7:14:ca:f4:87:41:48:7e:d5:1f:a9:5d: de:cb:57:57:92:44:2a:bb:b9:ea:18:1f:41:69:43: c4:fa:61:d6:7d:12:d9:aa:65:9f:bb:e3:15:7d:7a: d4:11:2c:db:31:1b:92:dd:7f:ae:45:6c:5f:20:b8: 44:c2:22:4a:0d:f3:0c:07:7a:92:d8:5e:22:f8:be: 01:8a:52:b1:8c:ba:05:cb:65:60:57:42:4a:61:b2: 44:24:f1:94:a6:ef:46:bf:d0:d8:07:a9:12:a5:91: 59:0a:e3:4f:c8:a0:ed:8d:36:67:b4:6b:8e:07:b6: f8:58:80:d7:64:0a:19:12:68:fe:54:a7:e2:40:a5: 33:2a:0a:d0:aa:96:1d:ed:1e:1b:50:a2:a9:7f:e7: 0f:5e:b3:6f:8c:f1:32:b5:b5:cd:d8:d3:fb:cc:d4: 3f:c0:fe:4a:1f:20:91:d5:3b:61:48:a2:a7:c8:d4: ef:db:0f:a1:32:04:b8:ce:76:1a:b5:b2:5d:ce:3c: 81:e3:bb:98:6d:29:67:1e:80:a0:05:b3:3d:2f:3e: 47:02:7b:f0:2e:b7:ec:af:81:61:2f:30:da:70:5d: 8a:5d:5b:55:4c:ef:14:4a:b6:be:9d:06:4f:a5:5e: ac:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:99:2C:64:6D:43:D1:D7:1C:61:BD:49:66:2D:14:D5:AA:E6:21:BA X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TpksZG1D0dccYb1JZi0U1armIbo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:2f0::/44 Signature Algorithm: sha256WithRSAEncryption 39:d0:4b:31:ab:35:e6:42:61:6c:b8:87:fe:f5:55:fd:4a:6a: 2d:10:1b:e3:84:bf:05:e8:89:28:2b:5e:38:2e:2c:ef:50:77: fb:ea:d3:f4:a5:bd:69:22:02:dd:cb:c8:33:cd:4a:e2:f9:0b: d0:af:fb:b9:cb:93:cd:e2:5d:9f:ed:d4:9b:38:fb:38:0e:41: 68:55:a9:ab:e2:db:79:12:ef:78:b4:25:f7:fb:af:4f:0c:84: 56:76:51:c4:9e:cf:f7:06:c3:49:50:a6:d3:cb:2c:86:6a:29: c6:98:c3:e8:7f:db:38:b8:40:72:6d:d8:c2:d4:9e:73:76:3e: be:f1:74:82:69:50:d8:77:fe:ae:25:96:31:6a:1f:ae:40:68: 5b:4d:fb:17:88:b1:18:de:4c:d4:d2:70:2b:69:08:5a:79:94: de:d2:f1:b6:e2:44:43:b1:a2:7c:ba:e8:e9:4d:1a:eb:15:cc: 97:4f:4f:fe:00:34:df:b1:a6:7b:66:f2:a8:0e:0f:e2:c6:bf: 59:a8:34:3e:90:86:2b:24:f4:fb:5b:15:97:02:d1:58:e6:cf: 8e:01:a9:cb:46:71:8c:c4:04:70:6b:19:39:0f:6d:6d:8e:95: 84:6c:52:ea:a3:0f:97:17:69:f1:12:ba:1c:4f:a3:69:8d:4b: f8:78:bb:e1 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XQwTRZ0Q07tssfoSoqLgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTk5MmM2NDZkNDNkMWQ3MWM2MWJkNDk2NjJkMTRkNWFhZTYyMWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mkqr4hnwjBBdpwI+sUKuq7nFMr0 h0FIftUfqV3ey1dXkkQqu7nqGB9BaUPE+mHWfRLZqmWfu+MVfXrUESzbMRuS3X+u RWxfILhEwiJKDfMMB3qS2F4i+L4BilKxjLoFy2VgV0JKYbJEJPGUpu9Gv9DYB6kS pZFZCuNPyKDtjTZntGuOB7b4WIDXZAoZEmj+VKfiQKUzKgrQqpYd7R4bUKKpf+cP XrNvjPEytbXN2NP7zNQ/wP5KHyCR1TthSKKnyNTv2w+hMgS4znYatbJdzjyB47uY bSlnHoCgBbM9Lz5HAnvwLrfsr4FhLzDacF2KXVtVTO8USra+nQZPpV6sNQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFE6ZLGRtQ9HXHGG9SWYtFNWq5iG6MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvVHBrc1pHMUQwZGNjWWIxSlppMFUxYXJtSWJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwALw MA0GCSqGSIb3DQEBCwUAA4IBAQA50EsxqzXmQmFsuIf+9VX9SmotEBvjhL8F6Iko K144LizvUHf76tP0pb1pIgLdy8gzzUri+QvQr/u5y5PN4l2f7dSbOPs4DkFoVamr 4tt5Eu94tCX3+69PDIRWdlHEns/3BsNJUKbTyyyGainGmMPof9s4uEBybdjC1J5z dj6+8XSCaVDYd/6uJZYxah+uQGhbTfsXiLEY3kzU0nAraQhaeZTe0vG24kRDsaJ8 uujpTRrrFcyXT0/+ADTfsaZ7ZvKoDg/ixr9ZqDQ+kIYrJPT7WxWXAtFY5s+OAanL RnGMxARwaxk5D21tjpWEbFLqow+XF2nxErocT6NpjUv4eLvh -----END CERTIFICATE-----Generated at Mon Jan 12 01:58:38 2026 by rpki-client