This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/H0_tdkKEacX9j05MAuHjg1X_GdU.roa File: H0_tdkKEacX9j05MAuHjg1X_GdU.roa (raw, json) Hash identifier: GrwuCH0IrGis605J8771VVZjmYmR8FPfoN+fuAd3/q8= Subject key identifier: 1F:4F:ED:76:42:84:69:C5:FD:8F:4E:4C:02:E1:E3:83:55:FF:19:D5 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C13068207DCF258F592FD9AF6466F38 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/H0_tdkKEacX9j05MAuHjg1X_GdU.roa Signing time: Fri 02 Jan 2026 00:19:40 +0000 ROA not before: Fri 02 Jan 2026 00:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214762 IP address blocks: 89.144.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 05:06:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:06:82:07:dc:f2:58:f5:92:fd:9a:f6:46:6f:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f4fed76428469c5fd8f4e4c02e1e38355ff19d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:56:57:5d:59:54:28:8a:6e:d5:69:31:7c:23: f5:64:dd:8f:1f:3e:87:0a:fe:77:db:f5:53:61:17: 40:db:65:ac:76:37:e7:bf:40:09:bf:1f:ea:52:f2: d1:f2:cd:98:20:19:7c:cb:75:88:06:53:c5:9a:c7: 07:c1:fc:ed:24:25:98:ce:40:91:18:4b:8c:2e:d1: e3:55:19:bb:c0:ec:5e:46:5d:26:22:81:d7:04:bf: 2e:42:ab:be:5e:35:17:20:9d:a8:99:67:70:d2:bb: d6:80:78:dc:8b:bc:dd:b6:c1:b4:8a:e2:57:2c:57: da:00:11:a2:8e:47:9e:2e:df:37:de:1e:4f:c9:e7: f2:c5:29:49:08:a5:9e:7a:17:c4:9e:ec:f1:de:1f: 41:40:9f:86:ed:37:76:81:70:84:65:36:48:a3:34: d7:22:04:e9:7e:99:eb:0c:fa:12:34:df:b6:d3:7f: a6:cd:59:57:9f:5c:85:12:fe:68:0f:da:ee:a4:72: b4:82:09:5e:99:27:96:55:7f:dd:71:54:68:a9:c1: a4:74:69:ec:7a:7b:a6:cd:d7:39:2f:32:3f:d5:a7: e8:2d:e8:49:34:d6:0a:55:c2:41:9f:ef:fe:24:80: 69:e7:79:97:d8:18:ff:93:fd:a0:d5:58:4e:03:37: 3f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:4F:ED:76:42:84:69:C5:FD:8F:4E:4C:02:E1:E3:83:55:FF:19:D5 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/H0_tdkKEacX9j05MAuHjg1X_GdU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.144.32.0/24 Signature Algorithm: sha256WithRSAEncryption 84:cf:26:c9:14:18:c7:1d:bb:e2:f0:af:e1:d7:58:0c:6f:45: e7:90:d5:ec:73:93:d9:fb:e1:63:19:87:11:bb:d7:c2:89:03: 7d:f6:99:40:c5:25:88:03:ff:b0:15:c2:3d:9b:eb:2d:e1:dc: 67:28:5b:c6:5e:3e:cd:b2:2c:02:7c:df:55:57:48:59:5f:e8: dd:ca:37:bd:32:7e:59:07:58:4b:bf:f6:d8:36:34:95:63:1a: ea:88:09:5f:7c:47:3c:99:4e:5b:18:c4:5e:e6:7a:58:7c:bd: 5a:46:07:fd:db:56:15:17:2a:d7:9d:f9:18:39:6d:a8:00:b1: c4:09:a9:b2:f9:51:2a:ac:a8:8a:52:ca:85:9f:38:19:30:e3: 4e:6f:d8:a6:36:da:da:f9:2b:50:ab:c9:ae:7c:54:e0:79:8f: 78:6b:2a:bf:37:e5:c9:c7:17:6c:0b:59:38:7e:b1:6e:ad:e0: 65:8d:89:47:ae:ea:30:ec:5f:da:32:f9:23:93:e3:ff:57:1e: 96:39:63:82:d6:89:a9:f2:22:a9:2a:bd:a3:fe:ba:52:1c:6a: 0e:e6:e0:34:1e:62:1f:84:b4:77:7e:3f:3b:04:6c:7f:08:c2: 3a:00:f9:bb:17:31:41:be:8a:9f:96:73:72:3d:b0:af:ce:00: 70:c1:6e:42 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EwaCB9zyWPWS/Zr2Rm84MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjRmZWQ3NjQyODQ2OWM1ZmQ4ZjRlNGMwMmUxZTM4MzU1ZmYxOWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1ZXXVlUKIpu1WkxfCP1ZN2PHz6H Cv532/VTYRdA22Wsdjfnv0AJvx/qUvLR8s2YIBl8y3WIBlPFmscHwfztJCWYzkCR GEuMLtHjVRm7wOxeRl0mIoHXBL8uQqu+XjUXIJ2omWdw0rvWgHjci7zdtsG0iuJX LFfaABGijkeeLt833h5PyefyxSlJCKWeehfEnuzx3h9BQJ+G7Td2gXCEZTZIozTX IgTpfpnrDPoSNN+203+mzVlXn1yFEv5oD9rupHK0gglemSeWVX/dcVRoqcGkdGns enumzdc5LzI/1afoLehJNNYKVcJBn+/+JIBp53mX2Bj/k/2g1VhOAzc/AQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB9P7XZChGnF/Y9OTALh44NV/xnVMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvSDBfdGRrS0VhY1g5ajA1TUF1SGpnMVhfR2RVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWZAgMA0G CSqGSIb3DQEBCwUAA4IBAQCEzybJFBjHHbvi8K/h11gMb0XnkNXsc5PZ++FjGYcR u9fCiQN99plAxSWIA/+wFcI9m+st4dxnKFvGXj7NsiwCfN9VV0hZX+jdyje9Mn5Z B1hLv/bYNjSVYxrqiAlffEc8mU5bGMRe5npYfL1aRgf921YVFyrXnfkYOW2oALHE Camy+VEqrKiKUsqFnzgZMONOb9imNtra+StQq8mufFTgeY94ayq/N+XJxxdsC1k4 frFureBljYlHruow7F/aMvkjk+P/Vx6WOWOC1omp8iKpKr2j/rpSHGoO5uA0HmIf hLR3fj87BGx/CMI6APm7FzFBvoqflnNyPbCvzgBwwW5C -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:04 2026 by rpki-client