This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/T-8JhhcHQ5cIwEg6IG4tP0d0W4I.roa File: T-8JhhcHQ5cIwEg6IG4tP0d0W4I.roa (raw, json) Hash identifier: 9CdFc+e0Ar1W8fwX0HTyCIb5Mdz7Fe3CEQ/bMI8Efhw= Subject key identifier: 4F:EF:09:86:17:07:43:97:08:C0:48:3A:20:6E:2D:3F:47:74:5B:82 Certificate issuer: /CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c Certificate serial: 019B7F81499A24CBDC13EB4F3AB3EAFAEEDD Authority key identifier: D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/T-8JhhcHQ5cIwEg6IG4tP0d0W4I.roa Signing time: Fri 02 Jan 2026 16:18:57 +0000 ROA not before: Fri 02 Jan 2026 16:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 193.155.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 17 Jan 2026 22:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:49:9a:24:cb:dc:13:eb:4f:3a:b3:ea:fa:ee:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c Validity Not Before: Jan 2 16:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4fef09861707439708c0483a206e2d3f47745b82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b6:f5:96:69:25:6f:4b:7d:b4:f9:19:ac:95: a2:45:ca:0f:75:04:fa:53:db:7c:1b:06:91:b5:d3: 65:8f:be:d0:79:1f:5e:cd:ab:ff:ad:12:da:f0:6d: 85:25:d0:d4:6b:14:5f:3e:49:cb:60:de:0c:53:48: af:f6:45:3a:61:7e:ea:1a:1f:d7:35:48:77:54:78: ed:25:e3:65:3d:65:0c:b6:85:ac:b4:55:93:b5:66: ba:fc:33:32:40:60:52:e0:4f:99:8c:c2:d6:09:ae: d9:ea:a3:3b:a6:a4:82:95:68:6b:19:ec:7b:f7:28: a1:13:51:16:a0:b6:f7:5d:49:0f:bc:8a:5c:9b:26: ae:1a:ce:06:5d:b7:fd:1d:7c:38:2b:64:23:c1:80: 16:8a:8e:cc:6a:92:a2:82:f0:9d:96:9d:e2:63:e5: 39:02:64:41:68:d8:78:4a:ff:bb:ab:d2:09:b6:c4: 06:56:9d:1e:21:00:76:f6:19:95:67:90:f4:49:64: e1:b6:41:8c:4d:d4:75:69:46:a3:24:e6:4d:c3:6b: 69:0a:62:80:d4:79:02:c0:3c:82:b9:8d:ad:7b:be: a2:24:cb:e2:35:f1:f4:52:5a:6f:d8:42:39:28:31: 36:0a:6d:b2:ae:6a:6f:7d:53:e2:9c:73:1a:66:35: e2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:EF:09:86:17:07:43:97:08:C0:48:3A:20:6E:2D:3F:47:74:5B:82 X509v3 Authority Key Identifier: keyid:D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/T-8JhhcHQ5cIwEg6IG4tP0d0W4I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.155.237.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:b5:b2:6a:7f:fc:5a:ca:a1:ad:f2:5f:a4:5f:68:43:2d:fb: 2d:35:c7:f2:df:23:f8:79:07:4a:65:fa:2a:d7:0e:80:11:1f: 13:1c:19:a5:0a:fb:ff:d8:57:da:c7:77:6b:41:23:84:ec:5f: f5:41:61:4c:45:26:72:73:30:16:c3:8e:3b:b7:bc:77:57:0a: 0a:7e:ec:f5:48:b7:57:8b:d2:17:8c:f4:2d:55:5f:fa:a3:df: 53:a8:21:06:3d:37:c9:0a:15:23:4e:11:a5:c0:63:23:17:de: c2:8f:39:62:b4:45:d9:5d:e4:8c:95:47:df:38:93:34:2a:b9: da:8d:cc:a6:1e:13:22:58:2c:57:5a:9c:6a:77:2e:fc:8b:6a: d5:e8:c3:78:b6:ff:47:44:3a:65:c7:71:aa:7b:98:c4:f7:51: c4:d2:41:c3:ec:41:33:35:d4:15:4c:33:89:0c:1d:9b:13:9d: 7e:75:85:22:a9:3b:d5:16:73:d4:bd:91:6f:8f:07:5d:45:9d: 88:8d:56:ec:a1:ab:07:e6:42:a6:bf:5f:76:e3:97:06:f7:ba: 1b:56:47:65:69:5e:dc:65:3c:9e:72:bc:a7:83:ce:14:54:31: fb:3b:89:cb:e0:72:8b:fd:3b:82:1c:8e:7c:5c:87:23:95:4a: b5:2b:09:b5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gUmaJMvcE+tPOrPq+u7dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxMmQ0ZDJmYjc1YTc1NTlhMjBmNzk1NDhjNDU4NTQyZmQw YTlhNGMwHhcNMjYwMTAyMTYxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZmVmMDk4NjE3MDc0Mzk3MDhjMDQ4M2EyMDZlMmQzZjQ3NzQ1YjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Lb1lmklb0t9tPkZrJWiRcoPdQT6 U9t8GwaRtdNlj77QeR9ezav/rRLa8G2FJdDUaxRfPknLYN4MU0iv9kU6YX7qGh/X NUh3VHjtJeNlPWUMtoWstFWTtWa6/DMyQGBS4E+ZjMLWCa7Z6qM7pqSClWhrGex7 9yihE1EWoLb3XUkPvIpcmyauGs4GXbf9HXw4K2QjwYAWio7MapKigvCdlp3iY+U5 AmRBaNh4Sv+7q9IJtsQGVp0eIQB29hmVZ5D0SWThtkGMTdR1aUajJOZNw2tpCmKA 1HkCwDyCuY2te76iJMviNfH0Ulpv2EI5KDE2Cm2yrmpvfVPinHMaZjXiJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE/vCYYXB0OXCMBIOiBuLT9HdFuCMB8GA1UdIwQY MBaAFNEtTS+3WnVZog95VIxFhUL9CppMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFMxTkw3ZGFkVm1pRDNsVWpFV0ZRdjBLbWt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi81NzViZWYtOTcwYS00YjM3LWIxMmUt MWVlY2Q1ODVkYjhjLzEvVC04SmhoY0hRNWNJd0VnNklHNHRQMGQwVzRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi81NzViZWYtOTcwYS00YjM3LWIxMmUtMWVlY2Q1ODVkYjhj LzEvMFMxTkw3ZGFkVm1pRDNsVWpFV0ZRdjBLbWt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwZvtMA0G CSqGSIb3DQEBCwUAA4IBAQButbJqf/xayqGt8l+kX2hDLfstNcfy3yP4eQdKZfoq 1w6AER8THBmlCvv/2Ffax3drQSOE7F/1QWFMRSZyczAWw447t7x3VwoKfuz1SLdX i9IXjPQtVV/6o99TqCEGPTfJChUjThGlwGMjF97CjzlitEXZXeSMlUffOJM0Krna jcymHhMiWCxXWpxqdy78i2rV6MN4tv9HRDplx3Gqe5jE91HE0kHD7EEzNdQVTDOJ DB2bE51+dYUiqTvVFnPUvZFvjwddRZ2IjVbsoasH5kKmv19245cG97obVkdlaV7c ZTyecryng84UVDH7O4nL4HKL/TuCHI58XIcjlUq1Kwm1 -----END CERTIFICATE-----Generated at Sat Jan 17 06:46:26 2026 by rpki-client