This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Tff4waD5cTkgZ3nsp2G3GL3zm44.roa File: Tff4waD5cTkgZ3nsp2G3GL3zm44.roa (raw, json) Hash identifier: 1LoowQSJN74KT5oz2NIJKCbMuOZ8ZwAJ1OqDwKR7TK0= Subject key identifier: 4D:F7:F8:C1:A0:F9:71:39:20:67:79:EC:A7:61:B7:18:BD:F3:9B:8E Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A2F48D485FBF470742A4B221F923A7 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Tff4waD5cTkgZ3nsp2G3GL3zm44.roa Signing time: Thu 01 Jan 2026 08:18:23 +0000 ROA not before: Thu 01 Jan 2026 08:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39238 IP address blocks: 194.113.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:f4:8d:48:5f:bf:47:07:42:a4:b2:21:f9:23:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4df7f8c1a0f97139206779eca761b718bdf39b8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e1:a2:2b:9a:72:78:1d:9f:78:bb:5a:57:7e: 84:44:fe:fe:e8:4f:8e:a2:0d:e0:ba:1e:f0:96:7a: 25:00:28:39:a9:c5:c5:99:60:27:b3:ac:ee:b5:31: 90:57:42:96:50:27:f0:fd:42:d2:81:f6:bf:c8:79: 27:2a:1e:d8:98:ee:fd:97:31:2b:9d:6b:c6:43:12: d2:0a:62:10:51:cb:e0:67:c0:86:56:ed:74:ea:d1: 01:d7:3b:90:4f:8d:99:03:aa:ae:23:ad:ba:89:09: 23:a5:fe:09:13:6c:94:d7:e2:b2:17:92:b2:e2:8c: 34:de:ce:2f:5e:f8:15:a9:2c:3c:d6:11:ee:31:32: 5d:48:d8:18:1c:57:98:60:d3:f9:6f:a3:ac:7a:f4: 01:40:a0:68:8e:88:5a:b8:eb:e5:2e:f9:46:1f:5f: cd:55:68:17:75:9d:98:a5:65:0e:77:c2:ec:52:8e: a8:af:63:83:67:91:35:b2:13:b2:f2:da:1d:e5:47: b6:a7:de:5e:e4:7f:93:9b:37:d8:61:30:97:96:65: 29:b6:48:5b:c4:44:c2:2c:b1:40:a7:ce:1e:d5:ff: 80:e0:87:f6:f5:86:9b:83:fd:2a:b1:53:30:a4:02: 94:46:ce:e3:83:ab:e3:8d:f5:af:0c:a9:71:b9:13: 14:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F7:F8:C1:A0:F9:71:39:20:67:79:EC:A7:61:B7:18:BD:F3:9B:8E X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Tff4waD5cTkgZ3nsp2G3GL3zm44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.113.36.0/24 Signature Algorithm: sha256WithRSAEncryption 50:b1:1b:10:15:ee:4e:ee:51:f0:5a:f9:46:6f:f8:18:94:05: 55:b5:93:7b:30:c3:0d:71:4b:23:11:22:9d:62:85:e2:0c:41: c6:77:38:eb:99:98:74:7f:db:50:f5:94:5a:34:a2:ca:c4:df: 70:e1:df:c3:8d:7c:c7:98:52:ad:c9:ac:d4:f6:d5:0b:45:7a: ea:46:52:4d:23:63:84:5b:07:83:41:74:ae:54:a4:08:a6:b9: 1c:b2:f1:91:85:64:33:c9:6a:d5:f7:b8:bf:53:57:6a:02:30: 70:64:9f:b9:9d:82:29:ec:15:79:0a:f3:99:34:31:8d:67:d0: 53:9d:73:1f:3e:56:7a:4f:19:00:8d:ce:df:52:1a:21:98:ad: 21:c2:05:93:b6:bb:1a:4b:7e:95:03:2b:d2:95:f5:64:9e:6a: 44:c1:60:17:1d:28:9b:ae:c2:81:0b:db:d5:98:fe:a5:d4:2b: 3f:55:29:54:72:eb:84:41:cb:12:7a:b8:34:c7:b5:f9:3c:d8: 7a:23:3a:ec:7a:5e:b3:3d:f2:de:97:c4:47:ae:59:83:8c:ac: 2a:30:e0:88:a7:61:d0:a4:6f:a0:52:27:8c:19:a2:c8:d4:c2: 24:33:9f:43:4e:cc:68:74:92:56:90:80:4d:a8:e5:62:70:ff: 53:41:76:6c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ovSNSF+/RwdCpLIh+SOnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZGY3ZjhjMWEwZjk3MTM5MjA2Nzc5ZWNhNzYxYjcxOGJkZjM5YjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+GiK5pyeB2feLtaV36ERP7+6E+O og3guh7wlnolACg5qcXFmWAns6zutTGQV0KWUCfw/ULSgfa/yHknKh7YmO79lzEr nWvGQxLSCmIQUcvgZ8CGVu106tEB1zuQT42ZA6quI626iQkjpf4JE2yU1+KyF5Ky 4ow03s4vXvgVqSw81hHuMTJdSNgYHFeYYNP5b6OsevQBQKBojohauOvlLvlGH1/N VWgXdZ2YpWUOd8LsUo6or2ODZ5E1shOy8tod5Ue2p95e5H+TmzfYYTCXlmUptkhb xETCLLFAp84e1f+A4If29Yabg/0qsVMwpAKURs7jg6vjjfWvDKlxuRMUswIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE33+MGg+XE5IGd57Kdhtxi985uOMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvVGZmNHdhRDVjVGtnWjNuc3AyRzNHTDN6bTQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwnEkMA0G CSqGSIb3DQEBCwUAA4IBAQBQsRsQFe5O7lHwWvlGb/gYlAVVtZN7MMMNcUsjESKd YoXiDEHGdzjrmZh0f9tQ9ZRaNKLKxN9w4d/DjXzHmFKtyazU9tULRXrqRlJNI2OE WweDQXSuVKQIprkcsvGRhWQzyWrV97i/U1dqAjBwZJ+5nYIp7BV5CvOZNDGNZ9BT nXMfPlZ6TxkAjc7fUhohmK0hwgWTtrsaS36VAyvSlfVknmpEwWAXHSibrsKBC9vV mP6l1Cs/VSlUcuuEQcsSerg0x7X5PNh6Izrsel6zPfLel8RHrlmDjKwqMOCIp2HQ pG+gUieMGaLI1MIkM59DTsxodJJWkIBNqOVicP9TQXZs -----END CERTIFICATE-----Generated at Fri Jan 2 12:05:21 2026 by rpki-client