This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/TDB2NuoesJ2j1UK8n6XCzhvgVLs.roa File: TDB2NuoesJ2j1UK8n6XCzhvgVLs.roa (raw, json) Hash identifier: Tz7HKWihPDBeeFZg87eoWu4lLSgNkhKKMvbI52Nh4Ro= Subject key identifier: 4C:30:76:36:EA:1E:B0:9D:A3:D5:42:BC:9F:A5:C2:CE:1B:E0:54:BB Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec Certificate serial: 019B797EC2A0F3836C5834EFBE293AFDBE53 Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/TDB2NuoesJ2j1UK8n6XCzhvgVLs.roa Signing time: Thu 01 Jan 2026 12:18:28 +0000 ROA not before: Thu 01 Jan 2026 12:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51581 IP address blocks: 78.83.208.0/24 maxlen: 24 212.36.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c2:a0:f3:83:6c:58:34:ef:be:29:3a:fd:be:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec Validity Not Before: Jan 1 12:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c307636ea1eb09da3d542bc9fa5c2ce1be054bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0a:df:6e:13:b1:f7:81:f1:b5:2e:4f:14:5d: 36:c5:05:ac:65:fc:2b:bf:93:dd:d1:b0:e4:6c:fa: 3c:27:ce:4b:b3:4d:c7:bb:58:77:38:ab:0e:c3:40: fd:f6:a8:b2:aa:44:7f:19:f3:3c:81:aa:af:23:40: b0:31:39:c6:9d:89:f1:b9:5e:88:62:e1:3b:f5:8c: 60:e9:ac:dd:0f:b6:2a:a5:2f:6f:8e:38:ef:a7:e3: a7:10:a2:b7:d9:38:39:9f:a9:f6:84:75:f1:53:df: ec:e8:65:1b:88:48:9b:f1:99:ef:84:77:8d:dc:d9: 09:66:31:3c:52:72:85:05:de:ca:2c:88:bd:79:71: fe:57:bd:96:23:16:8e:90:84:87:e7:07:c0:f8:b4: a9:39:66:39:f9:c1:ce:71:5f:7a:a4:d6:54:35:b6: e8:bb:99:3b:0c:26:5f:c9:50:57:34:7c:3b:7e:53: 77:24:86:72:02:e8:a6:0c:a1:f5:d9:81:8b:5c:42: 5c:03:cb:89:f8:a1:0a:1a:79:3b:47:18:67:23:89: 27:51:5a:d7:c6:15:42:c3:30:83:39:93:22:fd:bc: 87:c4:30:93:6c:8a:38:dc:4f:f6:ce:d2:cb:5e:e0: 4e:3e:4c:3e:9c:91:ed:c7:ec:1b:12:79:2f:ca:5a: 3b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:30:76:36:EA:1E:B0:9D:A3:D5:42:BC:9F:A5:C2:CE:1B:E0:54:BB X509v3 Authority Key Identifier: keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/TDB2NuoesJ2j1UK8n6XCzhvgVLs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.83.208.0/24 212.36.13.0/24 Signature Algorithm: sha256WithRSAEncryption 38:41:64:c6:3c:20:4f:9a:7d:fb:26:ae:aa:dd:57:59:3b:bf: 39:1f:cd:80:cf:62:7e:64:b2:9f:35:bc:2e:54:8c:fe:fa:f8: 3a:f6:fe:c8:a7:59:d5:d9:54:cd:aa:f6:4a:ef:03:d1:02:40: 77:3e:8f:54:cf:d4:9b:e6:ba:aa:13:62:da:49:90:be:82:24: 57:20:c8:de:61:8a:3f:ba:2f:ef:e0:96:2e:26:d3:97:2e:8d: d6:70:4c:8d:14:8c:06:0c:c9:31:59:0d:05:3c:31:9b:99:ed: 6e:16:ad:f4:44:c3:6e:cf:e9:3d:82:f2:d4:3a:89:d3:46:2f: 00:fd:5f:fd:0b:96:35:4b:f9:58:91:b7:95:73:57:23:31:0a: 12:6c:22:80:9d:b6:02:fe:bf:9a:8d:ef:5d:c7:2e:51:fb:c9: ad:c6:9f:6e:f7:2e:75:85:e9:c6:f2:27:9c:1e:2a:76:96:d7: 4b:72:93:55:b9:b1:dd:73:aa:f7:12:67:a7:d4:48:12:37:a3: a2:c3:f5:29:d4:d7:17:1e:ad:1b:71:0c:3b:2c:35:5c:2a:20: a6:45:07:d8:f4:be:1d:44:37:08:f0:52:a9:08:ca:88:ca:c8: d1:ee:2e:bd:57:46:f7:f4:2c:d4:df:ab:f7:d0:9d:ff:41:43: 94:8c:d9:f7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fsKg84NsWDTvvik6/b5TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj ZDgyZWMwHhcNMjYwMTAxMTIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzMwNzYzNmVhMWViMDlkYTNkNTQyYmM5ZmE1YzJjZTFiZTA1NGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswrfbhOx94HxtS5PFF02xQWsZfwr v5Pd0bDkbPo8J85Ls03Hu1h3OKsOw0D99qiyqkR/GfM8gaqvI0CwMTnGnYnxuV6I YuE79Yxg6azdD7YqpS9vjjjvp+OnEKK32Tg5n6n2hHXxU9/s6GUbiEib8ZnvhHeN 3NkJZjE8UnKFBd7KLIi9eXH+V72WIxaOkISH5wfA+LSpOWY5+cHOcV96pNZUNbbo u5k7DCZfyVBXNHw7flN3JIZyAuimDKH12YGLXEJcA8uJ+KEKGnk7RxhnI4knUVrX xhVCwzCDOZMi/byHxDCTbIo43E/2ztLLXuBOPkw+nJHtx+wbEnkvylo7ZQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEwwdjbqHrCdo9VCvJ+lws4b4FS7MB8GA1UdIwQY MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt N2ZiYmFlNmY5NDM3LzEvVERCMk51b2VzSjJqMVVLOG42WEN6aHZnVkxzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3 LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATlPQAwQA 1CQNMA0GCSqGSIb3DQEBCwUAA4IBAQA4QWTGPCBPmn37Jq6q3VdZO785H82Az2J+ ZLKfNbwuVIz++vg69v7Ip1nV2VTNqvZK7wPRAkB3Po9Uz9Sb5rqqE2LaSZC+giRX IMjeYYo/ui/v4JYuJtOXLo3WcEyNFIwGDMkxWQ0FPDGbme1uFq30RMNuz+k9gvLU OonTRi8A/V/9C5Y1S/lYkbeVc1cjMQoSbCKAnbYC/r+aje9dxy5R+8mtxp9u9y51 henG8iecHip2ltdLcpNVubHdc6r3Emen1EgSN6Oiw/Up1NcXHq0bcQw7LDVcKiCm RQfY9L4dRDcI8FKpCMqIysjR7i69V0b39CzU36v30J3/QUOUjNn3 -----END CERTIFICATE-----Generated at Mon Jan 26 17:25:21 2026 by rpki-client