This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/T4MHAA0kaBLSaNbR8DoNuRmsGR8.roa File: T4MHAA0kaBLSaNbR8DoNuRmsGR8.roa (raw, json) Hash identifier: VtgvY+pr4Qh9U0W3p9dUNdOupQfVK9H5yjxhbie2llY= Subject key identifier: 4F:83:07:00:0D:24:68:12:D2:68:D6:D1:F0:3A:0D:B9:19:AC:19:1F Certificate issuer: /CN=6359a649b036103e80a3ce8f3d1b0138a60581d7 Certificate serial: 019B7B3682907FE92D54AC35E2B63E91B96C Authority key identifier: 63:59:A6:49:B0:36:10:3E:80:A3:CE:8F:3D:1B:01:38:A6:05:81:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/T4MHAA0kaBLSaNbR8DoNuRmsGR8.roa Signing time: Thu 01 Jan 2026 20:18:48 +0000 ROA not before: Thu 01 Jan 2026 20:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205359 IP address blocks: 85.193.76.0/24 maxlen: 24 194.31.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.crl rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft rsync://rpki.ripe.net/repository/DEFAULT/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:82:90:7f:e9:2d:54:ac:35:e2:b6:3e:91:b9:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6359a649b036103e80a3ce8f3d1b0138a60581d7 Validity Not Before: Jan 1 20:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f8307000d246812d268d6d1f03a0db919ac191f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3a:8d:46:8b:c2:c2:fd:83:9c:5b:42:82:d1: 41:b9:71:f7:2c:13:65:78:36:40:e4:32:2d:0b:ce: e7:6d:bf:9a:10:95:5c:5b:33:c3:30:20:fd:95:1a: cd:5c:8d:a4:ea:48:93:2c:79:15:ac:e2:54:38:ec: ee:49:6a:9f:44:5a:fd:0d:d6:66:59:61:18:4a:2c: ba:fa:05:23:73:b3:ec:0c:f4:da:25:14:30:43:6c: 29:f2:c7:ef:e6:88:ab:eb:d6:8d:e2:4f:52:59:c5: 9f:d2:89:c1:56:aa:35:6a:4d:45:cd:65:b0:dc:e9: d4:29:bb:dd:5e:3f:f2:01:7d:c4:25:8a:41:69:47: 81:0d:fd:55:b2:f1:6e:a5:ec:ed:d2:f5:7f:73:de: ed:9c:dc:1b:6e:17:7e:70:62:d6:e1:99:f3:56:f4: 64:19:dc:bc:a5:1b:31:fa:75:3d:a6:9f:95:39:0f: 1f:a7:98:20:37:a2:7d:9d:9c:58:43:10:42:1e:99: a4:d3:17:8c:6e:18:ac:56:49:78:25:05:5e:a4:6c: c2:ad:a9:6e:b3:a7:05:26:e1:d7:48:44:87:22:82: 28:37:d4:14:08:5d:7e:86:c7:ad:10:6c:2b:40:ec: 67:34:c8:42:91:a7:c4:99:ca:3e:2c:0a:a7:bc:c8: c0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:83:07:00:0D:24:68:12:D2:68:D6:D1:F0:3A:0D:B9:19:AC:19:1F X509v3 Authority Key Identifier: keyid:63:59:A6:49:B0:36:10:3E:80:A3:CE:8F:3D:1B:01:38:A6:05:81:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/T4MHAA0kaBLSaNbR8DoNuRmsGR8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.193.76.0/24 194.31.99.0/24 Signature Algorithm: sha256WithRSAEncryption 34:b5:cb:7d:74:6a:a0:35:cc:cf:d6:9b:36:fc:b7:e5:15:58: ea:af:f7:a2:57:bb:ed:6d:66:84:c3:c1:a4:55:93:06:70:4f: a9:76:f0:6e:f7:5b:e0:ee:ad:15:0e:47:e0:ab:67:d7:ef:ea: 80:e6:49:e4:8f:84:c3:8b:61:2b:56:16:27:12:59:99:e8:b3: 24:19:e7:58:d8:4b:aa:e8:f2:e8:69:e1:c5:18:56:32:46:ee: 43:f9:3c:0d:25:9f:a8:05:1d:39:bc:35:13:f9:b0:9f:06:8a: da:c4:3a:95:fe:19:8d:e2:0d:4f:9a:20:a6:ba:37:25:84:8a: 0d:ca:72:3f:2f:9e:e6:b1:b3:29:11:2c:e0:56:29:e2:86:2f: 8c:83:d4:e5:93:53:46:fc:a9:59:aa:02:7a:88:7f:12:e6:61: da:41:b3:50:09:e7:d6:98:f1:92:cd:c3:78:d8:63:55:50:3c: 68:a4:61:9d:a3:93:90:48:18:62:0b:66:49:1d:2e:7f:6b:3b: a1:3d:e9:93:62:90:61:e0:78:21:5f:37:5b:7e:a8:b1:3a:a8: 1f:cd:ef:7d:ed:65:ff:9a:26:53:87:a7:ca:e9:e0:76:d0:3d: af:38:20:c4:4a:09:56:8e:a6:fe:d7:f1:27:d8:f9:65:ac:85: c7:49:66:d9 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NoKQf+ktVKw14rY+kblsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNTlhNjQ5YjAzNjEwM2U4MGEzY2U4ZjNkMWIwMTM4YTYw NTgxZDcwHhcNMjYwMTAxMjAxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjgzMDcwMDBkMjQ2ODEyZDI2OGQ2ZDFmMDNhMGRiOTE5YWMxOTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDqNRovCwv2DnFtCgtFBuXH3LBNl eDZA5DItC87nbb+aEJVcWzPDMCD9lRrNXI2k6kiTLHkVrOJUOOzuSWqfRFr9DdZm WWEYSiy6+gUjc7PsDPTaJRQwQ2wp8sfv5oir69aN4k9SWcWf0onBVqo1ak1FzWWw 3OnUKbvdXj/yAX3EJYpBaUeBDf1VsvFupezt0vV/c97tnNwbbhd+cGLW4ZnzVvRk Gdy8pRsx+nU9pp+VOQ8fp5ggN6J9nZxYQxBCHpmk0xeMbhisVkl4JQVepGzCralu s6cFJuHXSESHIoIoN9QUCF1+hsetEGwrQOxnNMhCkafEmco+LAqnvMjAlQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFE+DBwANJGgS0mjW0fA6DbkZrBkfMB8GA1UdIwQY MBaAFGNZpkmwNhA+gKPOjz0bATimBYHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTFtbVNiQTJFRDZBbzg2UFBSc0JPS1lGZ2RjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi80NTc0YmMtMjk2ZC00YTU4LWFlZjct ZDJiYmQ5NDljNDUyLzEvVDRNSEFBMGthQkxTYU5iUjhEb051Um1zR1I4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi80NTc0YmMtMjk2ZC00YTU4LWFlZjctZDJiYmQ5NDljNDUy LzEvWTFtbVNiQTJFRDZBbzg2UFBSc0JPS1lGZ2RjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVcFMAwQA wh9jMA0GCSqGSIb3DQEBCwUAA4IBAQA0tct9dGqgNczP1ps2/LflFVjqr/eiV7vt bWaEw8GkVZMGcE+pdvBu91vg7q0VDkfgq2fX7+qA5knkj4TDi2ErVhYnElmZ6LMk GedY2Euq6PLoaeHFGFYyRu5D+TwNJZ+oBR05vDUT+bCfBoraxDqV/hmN4g1PmiCm ujclhIoNynI/L57msbMpESzgVinihi+Mg9Tlk1NG/KlZqgJ6iH8S5mHaQbNQCefW mPGSzcN42GNVUDxopGGdo5OQSBhiC2ZJHS5/azuhPemTYpBh4HghXzdbfqixOqgf ze997WX/miZTh6fK6eB20D2vOCDESglWjqb+1/En2PllrIXHSWbZ -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:23 2026 by rpki-client