This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/TUH1WFunSlx5iFEZycHTCHZei8E.roa File: TUH1WFunSlx5iFEZycHTCHZei8E.roa (raw, json) Hash identifier: iBZJZe1JHdN82qT6TFSlGkE415rYPVPO8VurIxFFH2Q= Subject key identifier: 4D:41:F5:58:5B:A7:4A:5C:79:88:51:19:C9:C1:D3:08:76:5E:8B:C1 Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B2398AE008F75F3C0C6C095E6B8BD Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/TUH1WFunSlx5iFEZycHTCHZei8E.roa Signing time: Fri 02 Jan 2026 06:18:03 +0000 ROA not before: Fri 02 Jan 2026 06:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207691 IP address blocks: 78.142.3.0/24 maxlen: 24 185.43.56.0/23 maxlen: 24 185.43.56.0/24 maxlen: 24 185.43.57.0/24 maxlen: 24 217.174.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:23:98:ae:00:8f:75:f3:c0:c6:c0:95:e6:b8:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d41f5585ba74a5c79885119c9c1d308765e8bc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d5:d2:2b:a9:79:a4:1e:68:bf:67:ef:7f:71: 6a:28:71:fb:1c:08:b5:d7:3e:3c:3d:e7:3a:8a:cf: 33:c5:19:91:34:ca:5f:15:a7:1b:9d:97:3e:49:bf: e9:68:98:f1:df:a6:85:f9:a8:d8:12:50:30:be:73: da:4b:90:64:77:00:31:3d:2b:7c:b0:44:c8:3d:9c: 08:d3:82:8a:ba:33:c0:d6:0e:af:e0:80:cd:2e:f5: 61:0c:31:87:d1:8f:4e:b7:f2:c6:8b:de:00:06:cf: 78:50:9f:44:ed:0a:da:64:b2:50:f6:7e:f9:87:0f: 95:6f:52:da:a1:d1:f9:3a:31:94:1e:c9:c4:05:42: 0f:39:d5:a1:c1:ca:f5:9b:02:cb:ac:7e:72:44:c9: 09:1e:7e:4c:97:74:e3:4d:e7:67:8a:96:e3:10:02: de:37:6e:12:a3:d4:7e:2d:c1:17:fd:5e:78:73:63: 3b:77:70:46:9d:40:75:4b:80:81:cc:4e:52:70:0d: 0a:2d:38:e5:9c:f8:56:9f:10:6b:0f:62:a3:c6:5b: 6e:06:06:67:62:ea:91:a2:60:17:64:19:13:7c:a7: 69:ae:0f:a3:4b:da:cd:7b:73:2f:60:cb:51:92:5a: 09:b6:7d:6f:3e:d5:23:97:ed:61:ab:dc:3b:40:ab: 94:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:41:F5:58:5B:A7:4A:5C:79:88:51:19:C9:C1:D3:08:76:5E:8B:C1 X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/TUH1WFunSlx5iFEZycHTCHZei8E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.142.3.0/24 185.43.56.0/23 217.174.145.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:fb:4e:d7:56:1a:fc:5b:15:95:d2:68:6e:91:a2:0d:e7:f3: 1b:d8:20:f2:96:23:ac:45:c5:fe:15:f5:88:bd:72:7b:4d:b4: f1:87:c3:cb:36:85:3a:33:e0:1b:ea:dc:1d:72:cf:86:33:0c: 38:3f:da:5a:9c:7c:69:41:c5:96:8d:b6:02:e5:ca:11:c1:2a: 9c:c4:93:9b:8b:d1:dc:e1:80:76:cb:8b:4f:3a:64:e1:02:92: 06:1b:6c:b3:52:81:e5:68:e1:db:6d:d0:90:2e:18:d5:58:64: 7c:f3:6e:03:2c:99:cb:05:7d:88:66:97:b8:af:2b:b2:bc:2c: e3:6a:e3:00:1a:be:89:c8:65:50:a2:e5:10:cf:a4:97:32:0d: 03:19:55:61:d8:5e:cd:56:da:84:15:da:90:47:ae:48:e7:aa: d3:06:a3:f3:33:c5:3f:e9:d3:bd:a8:8c:8e:9a:49:8c:ab:7f: 14:f9:1e:4a:83:bd:40:15:22:63:83:1e:83:51:f4:ed:33:d8: f7:11:e2:37:07:cc:e3:b7:0d:0b:9a:be:18:8d:82:4a:9b:72: db:94:e2:38:6f:46:c4:4f:f4:4a:94:60:64:dc:0c:30:2e:3a: c1:65:28:af:e2:64:ac:20:40:e3:ec:de:fa:67:b3:88:ac:b4: 51:86:a5:29 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9WyOYrgCPdfPAxsCV5ri9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDQxZjU1ODViYTc0YTVjNzk4ODUxMTljOWMxZDMwODc2NWU4YmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9XSK6l5pB5ov2fvf3FqKHH7HAi1 1z48Pec6is8zxRmRNMpfFacbnZc+Sb/paJjx36aF+ajYElAwvnPaS5BkdwAxPSt8 sETIPZwI04KKujPA1g6v4IDNLvVhDDGH0Y9Ot/LGi94ABs94UJ9E7QraZLJQ9n75 hw+Vb1LaodH5OjGUHsnEBUIPOdWhwcr1mwLLrH5yRMkJHn5Ml3TjTednipbjEALe N24So9R+LcEX/V54c2M7d3BGnUB1S4CBzE5ScA0KLTjlnPhWnxBrD2KjxltuBgZn YuqRomAXZBkTfKdprg+jS9rNe3MvYMtRkloJtn1vPtUjl+1hq9w7QKuU8wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFE1B9Vhbp0pceYhRGcnB0wh2XovBMB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvVFVIMVdGdW5TbHg1aUZFWnljSFRDSFplaThFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATo4DAwQB uSs4AwQA2a6RMA0GCSqGSIb3DQEBCwUAA4IBAQCN+07XVhr8WxWV0mhukaIN5/Mb 2CDyliOsRcX+FfWIvXJ7TbTxh8PLNoU6M+Ab6twdcs+GMww4P9panHxpQcWWjbYC 5coRwSqcxJObi9Hc4YB2y4tPOmThApIGG2yzUoHlaOHbbdCQLhjVWGR8824DLJnL BX2IZpe4ryuyvCzjauMAGr6JyGVQouUQz6SXMg0DGVVh2F7NVtqEFdqQR65I56rT BqPzM8U/6dO9qIyOmkmMq38U+R5Kg71AFSJjgx6DUfTtM9j3EeI3B8zjtw0Lmr4Y jYJKm3LblOI4b0bET/RKlGBk3AwwLjrBZSiv4mSsIEDj7N76Z7OIrLRRhqUp -----END CERTIFICATE-----Generated at Fri Jan 23 18:47:13 2026 by rpki-client