This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/tsRs_smMGnXJS6Ngg5EdidV6amo.roa File: tsRs_smMGnXJS6Ngg5EdidV6amo.roa (raw, json) Hash identifier: s9qZIcL7Vpb5CW9P2b/OUKeQv+DX4uJC5U3wk2Lpo2c= Subject key identifier: B6:C4:6C:FE:C9:8C:1A:75:C9:4B:A3:60:83:91:1D:89:D5:7A:6A:6A Certificate issuer: /CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42 Certificate serial: 019B77596455B520E698B7D4B6201E7D8AFA Authority key identifier: 32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/tsRs_smMGnXJS6Ngg5EdidV6amo.roa Signing time: Thu 01 Jan 2026 02:18:25 +0000 ROA not before: Thu 01 Jan 2026 02:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208753 IP address blocks: 2a09:b280:ff60::/48 maxlen: 48 2a09:b280:ff61::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 02:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:64:55:b5:20:e6:98:b7:d4:b6:20:1e:7d:8a:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42 Validity Not Before: Jan 1 02:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b6c46cfec98c1a75c94ba36083911d89d57a6a6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:69:d8:38:e9:4c:5f:fa:e8:a0:e3:6b:4b:b6: d1:5b:a5:a5:d3:7a:64:50:cc:ca:b1:81:ad:d7:a3: c8:6a:c6:4e:7d:62:97:6b:1e:83:4d:8a:91:f6:7a: f9:1c:78:2c:16:76:2e:6a:7d:fc:1d:c9:96:68:e7: 2e:cf:ec:fe:04:42:5c:f4:48:6a:4a:50:45:dc:95: 4d:4b:82:08:c0:ee:73:60:3f:03:f8:12:27:17:e3: 8a:ca:2b:88:b9:37:b4:7e:de:6d:8c:dc:b8:97:60: 71:62:1e:95:35:41:10:90:9b:1e:68:e0:a0:f3:ee: d0:fa:0d:0c:fb:80:f4:44:9c:83:3d:d2:d3:be:75: 6f:25:13:27:bf:1d:67:62:3d:f0:35:de:78:c2:30: a6:6a:1c:12:71:07:7f:6c:88:94:cd:b3:f0:e6:eb: 27:04:10:17:5e:49:37:33:7b:fb:50:a9:12:11:4b: c1:a9:16:64:07:b7:d5:6c:77:72:1a:1c:80:3f:84: 34:7d:35:86:46:88:59:a2:df:ab:34:66:7e:6e:c7: 73:0d:2b:fd:d6:a6:00:b2:1c:c6:fa:f7:4d:0d:e0: 27:c1:0d:b6:1d:1c:1b:b9:85:2e:77:59:d9:5b:02: f8:04:fd:ef:39:f1:92:b8:38:fd:ba:0c:b9:e5:ce: fb:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:C4:6C:FE:C9:8C:1A:75:C9:4B:A3:60:83:91:1D:89:D5:7A:6A:6A X509v3 Authority Key Identifier: keyid:32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/tsRs_smMGnXJS6Ngg5EdidV6amo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:b280:ff60::/47 Signature Algorithm: sha256WithRSAEncryption 6c:36:4d:78:85:77:a6:85:c8:01:2e:e8:9f:87:1b:77:cd:87: b4:c1:b7:8d:44:c0:7f:77:22:56:27:b2:8d:29:ee:de:09:89: dd:21:f5:c9:f2:fd:61:c9:6d:d3:58:0f:01:a7:59:5d:ac:5b: 7f:3c:6d:19:d1:b7:fd:eb:0f:7a:b2:5c:93:b0:3a:d2:91:0b: 18:47:2a:23:dd:55:52:75:73:ee:84:06:fe:de:84:cd:95:92: 47:90:e8:0a:22:e4:f8:9a:a5:01:ff:88:34:92:aa:2c:85:7b: 8c:c4:63:2a:5d:3c:59:87:f4:06:91:4d:33:98:60:99:fa:b8: 23:a7:7d:f5:81:9c:06:81:ed:f2:f2:d3:b0:66:2d:70:4e:32: a6:f5:cb:1c:e0:3b:85:f2:bf:2c:47:d9:14:87:fa:6a:6e:ad: 1b:ad:c4:21:fd:14:85:83:4f:e4:85:96:10:07:da:be:f7:35: ee:60:e9:af:d7:83:04:e6:81:6a:66:5f:93:5b:88:7a:1e:82: d6:59:32:bd:0f:21:70:4c:c0:09:5b:87:a1:44:17:1f:ad:76: c2:b7:95:08:7c:3b:02:c7:0e:41:c1:c5:98:6c:a7:99:99:50: 09:b7:5b:5d:07:84:9e:95:e2:a9:6a:cd:9a:82:ca:74:ac:fa: df:64:98:cb -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WWRVtSDmmLfUtiAefYr6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNTA4ZmI3ODFjYTZkYmQ4MjIxZjJjMmY5NTRhM2E3NDQ2 YjJiNDIwHhcNMjYwMTAxMDIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNmM0NmNmZWM5OGMxYTc1Yzk0YmEzNjA4MzkxMWQ4OWQ1N2E2YTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mnYOOlMX/rooONrS7bRW6Wl03pk UMzKsYGt16PIasZOfWKXax6DTYqR9nr5HHgsFnYuan38HcmWaOcuz+z+BEJc9Ehq SlBF3JVNS4IIwO5zYD8D+BInF+OKyiuIuTe0ft5tjNy4l2BxYh6VNUEQkJseaOCg 8+7Q+g0M+4D0RJyDPdLTvnVvJRMnvx1nYj3wNd54wjCmahwScQd/bIiUzbPw5usn BBAXXkk3M3v7UKkSEUvBqRZkB7fVbHdyGhyAP4Q0fTWGRohZot+rNGZ+bsdzDSv9 1qYAshzG+vdNDeAnwQ22HRwbuYUud1nZWwL4BP3vOfGSuDj9ugy55c77JwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLbEbP7JjBp1yUujYIORHYnVempqMB8GA1UdIwQY MBaAFDJQj7eBym29giHywvlUo6dEaytCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDkt YzEyMjE4NzY1MTU0LzEvdHNSc19zbU1HblhKUzZOZ2c1RWRpZFY2YW1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDktYzEyMjE4NzY1MTU0 LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKgmygP9g MA0GCSqGSIb3DQEBCwUAA4IBAQBsNk14hXemhcgBLuifhxt3zYe0wbeNRMB/dyJW J7KNKe7eCYndIfXJ8v1hyW3TWA8Bp1ldrFt/PG0Z0bf96w96slyTsDrSkQsYRyoj 3VVSdXPuhAb+3oTNlZJHkOgKIuT4mqUB/4g0kqoshXuMxGMqXTxZh/QGkU0zmGCZ +rgjp331gZwGge3y8tOwZi1wTjKm9csc4DuF8r8sR9kUh/pqbq0brcQh/RSFg0/k hZYQB9q+9zXuYOmv14ME5oFqZl+TW4h6HoLWWTK9DyFwTMAJW4ehRBcfrXbCt5UI fDsCxw5BwcWYbKeZmVAJt1tdB4SeleKpas2agsp0rPrfZJjL -----END CERTIFICATE-----Generated at Tue Jan 13 12:59:03 2026 by rpki-client