This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/p_00TDJoC_df0xtW1aS0ds5xGjc.roa File: p_00TDJoC_df0xtW1aS0ds5xGjc.roa (raw, json) Hash identifier: INFP5QiogulQL7SH7SMy9hPl8oqUwzl8wp+SCc9XujY= Subject key identifier: A7:FD:34:4C:32:68:0B:F7:5F:D3:1B:56:D5:A4:B4:76:CE:71:1A:37 Certificate issuer: /CN=d826ca5d53c1b5308e2c9c791c630a0f22337943 Certificate serial: 019C052AB538B69CD8B3927C557945EF1206 Authority key identifier: D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/p_00TDJoC_df0xtW1aS0ds5xGjc.roa Signing time: Wed 28 Jan 2026 15:13:30 +0000 ROA not before: Wed 28 Jan 2026 15:13:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 109.68.67.0/24 maxlen: 24 109.68.69.0/24 maxlen: 24 109.68.70.0/24 maxlen: 24 109.68.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Feb 2026 21:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:05:2a:b5:38:b6:9c:d8:b3:92:7c:55:79:45:ef:12:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d826ca5d53c1b5308e2c9c791c630a0f22337943 Validity Not Before: Jan 28 15:13:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a7fd344c32680bf75fd31b56d5a4b476ce711a37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:60:e8:fa:48:7b:72:c4:71:cf:af:d3:fc:27: be:38:ad:1c:82:3e:a8:41:c3:59:40:d2:dd:27:12: cd:dd:f8:97:21:0d:6b:05:b7:fd:98:e7:20:38:21: 15:ce:a1:db:5b:f7:36:1f:82:0c:e2:3e:f4:22:a6: 83:9d:49:b2:4c:26:dd:2b:d5:86:dc:7c:b7:f1:18: de:d8:25:55:4d:81:8c:b3:b3:c1:f1:e2:b9:67:c3: a1:2c:b6:5d:d1:64:6c:5d:1e:ca:7a:3e:31:10:56: 35:20:9d:d7:ca:30:a9:78:b5:41:52:41:a5:f6:88: 5e:a2:09:f2:26:c0:46:51:09:c7:d4:3e:eb:37:ba: a0:51:61:82:e7:4d:fb:0f:78:c1:3a:53:0a:77:59: dc:e2:04:89:90:d7:f5:65:50:e0:63:2e:6e:17:16: 79:b3:da:87:55:84:49:cd:4f:93:1c:89:de:33:de: 80:e4:d9:f5:52:7c:fa:02:c5:fd:08:1b:25:00:63: e5:f7:9c:3e:3c:9f:b9:db:1f:d8:a8:41:8b:72:6f: 17:84:67:6d:33:ec:b0:c7:2c:bc:69:8d:9d:a5:c6: fe:d8:75:b8:42:f5:af:96:20:a4:03:36:cc:b9:36: d5:09:4c:2e:7b:d5:8b:b5:5c:08:a9:9c:3f:3d:07: 41:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:FD:34:4C:32:68:0B:F7:5F:D3:1B:56:D5:A4:B4:76:CE:71:1A:37 X509v3 Authority Key Identifier: keyid:D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/p_00TDJoC_df0xtW1aS0ds5xGjc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.68.67.0/24 109.68.69.0-109.68.71.255 Signature Algorithm: sha256WithRSAEncryption 0c:ee:d0:b2:bb:d0:f9:3f:55:10:66:ee:18:12:49:90:8e:7e: 49:bc:c3:cb:3a:0c:ae:e9:f8:ce:4e:d1:35:e5:92:6b:aa:2e: 60:4a:5f:8f:92:9c:99:e8:5e:f2:47:53:8d:3f:3b:94:19:01: a5:e1:70:9f:f9:81:c9:7a:af:68:50:f0:a9:f8:69:0d:98:72: 0e:20:09:14:8e:c3:a1:a7:9f:d4:42:3c:91:2c:de:d2:28:bc: ea:4a:70:37:2b:90:a0:a8:a9:53:3b:f1:a4:5e:c4:87:73:0d: ea:5a:fe:af:80:88:90:0a:3d:32:e4:ae:32:0c:00:6a:a2:80: 2b:01:2c:a7:9d:38:b0:ad:f5:08:38:df:90:6a:fb:cb:38:f6: 7d:94:f6:63:2c:d8:f1:ee:9b:95:43:42:89:59:a0:cd:6b:9f: 75:37:63:5e:3e:ef:1e:b1:dc:41:44:02:df:6e:af:f8:6e:4a: 18:dc:e2:90:5c:aa:fd:7f:83:52:6f:3c:58:f3:57:77:b3:c2: e9:25:4e:58:fe:d8:26:3e:ea:8b:bd:d0:d8:2b:8f:27:b0:f9: c6:a0:69:dc:cd:fb:fb:1d:70:21:85:e2:32:af:5b:5f:7c:04: 74:db:1f:fa:a7:df:97:db:69:0f:3c:e4:bf:9f:45:d2:13:db: c6:0a:f0:49 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZwFKrU4tpzYs5J8VXlF7xIGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MjZjYTVkNTNjMWI1MzA4ZTJjOWM3OTFjNjMwYTBmMjIz Mzc5NDMwHhcNMjYwMTI4MTUxMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2ZkMzQ0YzMyNjgwYmY3NWZkMzFiNTZkNWE0YjQ3NmNlNzExYTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GDo+kh7csRxz6/T/Ce+OK0cgj6o QcNZQNLdJxLN3fiXIQ1rBbf9mOcgOCEVzqHbW/c2H4IM4j70IqaDnUmyTCbdK9WG 3Hy38Rje2CVVTYGMs7PB8eK5Z8OhLLZd0WRsXR7Kej4xEFY1IJ3XyjCpeLVBUkGl 9oheognyJsBGUQnH1D7rN7qgUWGC5037D3jBOlMKd1nc4gSJkNf1ZVDgYy5uFxZ5 s9qHVYRJzU+THIneM96A5Nn1Unz6AsX9CBslAGPl95w+PJ+52x/YqEGLcm8XhGdt M+ywxyy8aY2dpcb+2HW4QvWvliCkAzbMuTbVCUwue9WLtVwIqZw/PQdBvwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFKf9NEwyaAv3X9MbVtWktHbOcRo3MB8GA1UdIwQY MBaAFNgmyl1TwbUwjiyceRxjCg8iM3lDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkNiS1hWUEJ0VENPTEp4NUhHTUtEeUl6ZVVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS80YjU0NGUtNjUzNS00YWY4LWJiZGIt NThkMmVlOTgyODc5LzEvcF8wMFRESm9DX2RmMHh0VzFhUzBkczV4R2pjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS80YjU0NGUtNjUzNS00YWY4LWJiZGItNThkMmVlOTgyODc5 LzEvMkNiS1hWUEJ0VENPTEp4NUhHTUtEeUl6ZVVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAbURDMAwD BABtREUDBANtREAwDQYJKoZIhvcNAQELBQADggEBAAzu0LK70Pk/VRBm7hgSSZCO fkm8w8s6DK7p+M5O0TXlkmuqLmBKX4+SnJnoXvJHU40/O5QZAaXhcJ/5gcl6r2hQ 8Kn4aQ2Ycg4gCRSOw6Gnn9RCPJEs3tIovOpKcDcrkKCoqVM78aRexIdzDepa/q+A iJAKPTLkrjIMAGqigCsBLKedOLCt9Qg435Bq+8s49n2U9mMs2PHum5VDQolZoM1r n3U3Y14+7x6x3EFEAt9ur/huShjc4pBcqv1/g1JvPFjzV3ezwuklTlj+2CY+6ou9 0Ngrjyew+cagadzN+/sdcCGF4jKvW198BHTbH/qn35fbaQ885L+fRdIT28YK8Ek= -----END CERTIFICATE-----Generated at Mon Feb 16 06:36:58 2026 by rpki-client