This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TT_V7zM3m5L7KBI3CExNmJ1jVU4.roa File: TT_V7zM3m5L7KBI3CExNmJ1jVU4.roa (raw, json) Hash identifier: Z/LSHuHz0rktYOc3CUfSdIyuqPSHsgcCjvEXnbZ3ZB0= Subject key identifier: 4D:3F:D5:EF:33:37:9B:92:FB:28:12:37:08:4C:4D:98:9D:63:55:4E Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019C08D7E3B546DA338BBFFB7B25847A338C Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TT_V7zM3m5L7KBI3CExNmJ1jVU4.roa Signing time: Thu 29 Jan 2026 08:21:32 +0000 ROA not before: Thu 29 Jan 2026 08:21:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31898 IP address blocks: 2.59.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 11:23:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:08:d7:e3:b5:46:da:33:8b:bf:fb:7b:25:84:7a:33:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 29 08:21:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d3fd5ef33379b92fb281237084c4d989d63554e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ac:08:8f:ff:84:c3:c1:62:79:94:75:4c:6b: d3:1f:2c:b0:72:1a:fa:aa:91:9c:f9:1c:53:66:ab: f9:66:73:46:89:42:26:67:98:28:e4:71:40:c0:88: 21:0d:e4:b6:66:2e:d3:b0:c6:bd:e1:5f:6f:57:0e: ee:a5:02:33:43:21:21:fe:e0:7b:0a:63:6b:fa:8c: ed:ff:75:6c:ab:d7:db:99:1b:58:93:e7:82:b4:55: 7e:57:9c:6a:9f:8b:81:57:38:4e:6a:4d:13:f8:c2: a2:ea:ca:e0:07:78:f6:e5:73:f8:1d:c8:71:d7:a1: 6e:d4:71:12:f7:93:af:3f:3a:78:9d:68:63:52:e6: 25:9e:71:0b:f8:93:66:fa:de:af:81:0a:2e:1b:40: 43:2b:4c:15:4b:93:3c:c2:c3:50:fe:7b:c8:4f:f8: 2d:f4:41:b5:a7:a6:48:fb:57:de:64:3b:78:af:7a: a3:45:ac:6c:66:ec:d8:e1:39:e9:78:de:72:2a:f6: e5:6d:37:ef:de:2b:c4:5d:80:b5:0a:3e:19:ab:e3: 1b:dc:90:a3:60:20:c0:5c:ec:5e:47:1d:eb:03:d9: 7e:3d:d4:dc:bc:c9:99:fc:59:98:9d:de:59:e4:e9: 98:ae:eb:01:a3:d8:5d:28:be:7c:0c:9f:ec:de:6a: 7d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:3F:D5:EF:33:37:9B:92:FB:28:12:37:08:4C:4D:98:9D:63:55:4E X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TT_V7zM3m5L7KBI3CExNmJ1jVU4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.252.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:49:72:2c:95:56:a0:5d:58:17:93:66:2a:3c:f6:83:85:b1: 07:20:7f:76:fb:b2:62:2e:6e:07:00:9a:c9:17:aa:7b:15:85: a4:ab:87:be:c3:d7:a5:88:bf:a5:c4:47:81:f2:92:d4:b8:34: 9c:ab:c0:6d:b8:92:54:50:a7:f2:25:f7:f2:5c:cc:c9:f8:2a: cb:5e:65:2f:46:4c:7c:7c:c4:c0:ef:db:20:60:6b:76:1d:9b: 4e:07:73:9f:0d:d4:32:63:c2:0f:a5:51:dd:a1:1d:83:ce:0e: e1:13:96:40:4a:17:1c:e7:c7:9f:51:c6:c4:98:68:57:d3:83: 3c:f4:4f:5e:90:37:e9:eb:64:89:64:a1:0e:c4:dd:f5:f7:6e: b4:3c:d8:1c:15:8e:fd:76:79:fd:e8:b1:13:c5:9a:31:c9:fb: e4:d1:a0:33:f6:ab:f6:0d:ca:fa:dc:55:23:0a:c0:a8:2b:4d: d1:c1:de:2a:14:f8:17:9a:4f:c0:89:09:d2:e9:d2:90:56:41: 0e:a8:4a:af:c7:59:df:2a:f0:59:cb:68:89:04:f2:7e:af:6d: b1:4a:be:92:d9:19:d4:36:a6:72:a8:91:d9:dd:e6:d8:34:1f: 6a:a9:69:9d:56:cb:44:52:1c:ac:15:d5:67:1e:09:f4:52:2b: d6:d7:ad:7f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwI1+O1Rtozi7/7eyWEejOMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTI5MDgyMTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDNmZDVlZjMzMzc5YjkyZmIyODEyMzcwODRjNGQ5ODlkNjM1NTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA66wIj/+Ew8FieZR1TGvTHyywchr6 qpGc+RxTZqv5ZnNGiUImZ5go5HFAwIghDeS2Zi7TsMa94V9vVw7upQIzQyEh/uB7 CmNr+ozt/3Vsq9fbmRtYk+eCtFV+V5xqn4uBVzhOak0T+MKi6srgB3j25XP4Hchx 16Fu1HES95OvPzp4nWhjUuYlnnEL+JNm+t6vgQouG0BDK0wVS5M8wsNQ/nvIT/gt 9EG1p6ZI+1feZDt4r3qjRaxsZuzY4TnpeN5yKvblbTfv3ivEXYC1Cj4Zq+Mb3JCj YCDAXOxeRx3rA9l+PdTcvMmZ/FmYnd5Z5OmYrusBo9hdKL58DJ/s3mp9KwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE0/1e8zN5uS+ygSNwhMTZidY1VOMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvVFRfVjd6TTNtNUw3S0JJM0NFeE5tSjFqVlU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAjv8MA0G CSqGSIb3DQEBCwUAA4IBAQANSXIslVagXVgXk2YqPPaDhbEHIH92+7JiLm4HAJrJ F6p7FYWkq4e+w9eliL+lxEeB8pLUuDScq8BtuJJUUKfyJffyXMzJ+CrLXmUvRkx8 fMTA79sgYGt2HZtOB3OfDdQyY8IPpVHdoR2Dzg7hE5ZAShcc58efUcbEmGhX04M8 9E9ekDfp62SJZKEOxN319260PNgcFY79dnn96LETxZoxyfvk0aAz9qv2Dcr63FUj CsCoK03Rwd4qFPgXmk/AiQnS6dKQVkEOqEqvx1nfKvBZy2iJBPJ+r22xSr6S2RnU NqZyqJHZ3ebYNB9qqWmdVstEUhysFdVnHgn0UivW161/ -----END CERTIFICATE-----Generated at Thu Jan 29 14:47:09 2026 by rpki-client