This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1c444d-058d-475c-abff-5cdfa117aec6/1/TWjQ2gsQUU9MXDJP00l8lOI_i8I.roa File: TWjQ2gsQUU9MXDJP00l8lOI_i8I.roa (raw, json) Hash identifier: PtqnNrTefbS8Cw3BlkL6LKO9S8DUkKbOBZ0zbUviWfs= Subject key identifier: 4D:68:D0:DA:0B:10:51:4F:4C:5C:32:4F:D3:49:7C:94:E2:3F:8B:C2 Certificate issuer: /CN=dd53f63f13a0c952a079f4578a10edbf6e3aa58b Certificate serial: 019B79100723CE4992EF08D21239D5D912C4 Authority key identifier: DD:53:F6:3F:13:A0:C9:52:A0:79:F4:57:8A:10:ED:BF:6E:3A:A5:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VP2PxOgyVKgefRXihDtv246pYs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1c444d-058d-475c-abff-5cdfa117aec6/1/TWjQ2gsQUU9MXDJP00l8lOI_i8I.roa Signing time: Thu 01 Jan 2026 10:17:32 +0000 ROA not before: Thu 01 Jan 2026 10:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6720 IP address blocks: 141.203.0.0/16 maxlen: 16 217.149.224.0/20 maxlen: 20 2a00:1ba0:2::/48 maxlen: 48 2a00:1ba0:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/1c444d-058d-475c-abff-5cdfa117aec6/1/3VP2PxOgyVKgefRXihDtv246pYs.crl rsync://rpki.ripe.net/repository/DEFAULT/33/1c444d-058d-475c-abff-5cdfa117aec6/1/3VP2PxOgyVKgefRXihDtv246pYs.mft rsync://rpki.ripe.net/repository/DEFAULT/3VP2PxOgyVKgefRXihDtv246pYs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:07:23:ce:49:92:ef:08:d2:12:39:d5:d9:12:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd53f63f13a0c952a079f4578a10edbf6e3aa58b Validity Not Before: Jan 1 10:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d68d0da0b10514f4c5c324fd3497c94e23f8bc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d5:3d:80:9c:17:3a:6e:79:36:05:18:01:56: 2d:ef:8f:94:d0:38:17:e0:98:9f:b6:e5:70:62:19: 17:21:58:0d:88:b7:73:7e:69:c2:a3:d9:1a:78:aa: db:15:12:bc:1a:03:bf:4c:36:9d:ec:e0:c1:0b:27: 21:f2:85:63:0e:e7:d7:6f:b8:19:59:f5:d6:a0:21: f2:fa:c9:c4:52:fa:11:a1:21:63:85:d7:3a:00:5c: 60:51:93:08:ef:5d:69:ac:5e:c7:f1:b9:89:da:dd: 61:38:fc:2e:a5:47:52:41:26:99:5f:d3:f3:b9:ef: 64:a9:95:f1:bb:13:62:7c:5d:36:cb:aa:15:47:ba: 54:e2:e8:bc:9b:e3:2f:08:f5:b3:34:55:04:f6:d9: c5:5c:81:28:ae:81:31:c0:55:4e:23:2a:b7:40:e3: 3b:b9:6a:34:77:a5:11:f1:05:6a:8e:50:d3:07:e4: 7c:2b:c5:43:b2:9e:5b:15:aa:98:08:13:97:db:c3: df:f9:01:ac:ab:66:b5:0f:30:e2:ab:0e:04:8c:a0: 1d:ec:8b:35:46:98:82:16:90:d6:2e:e4:12:c6:ef: af:68:8f:cd:2b:17:5e:48:80:e4:0c:35:04:ae:08: b6:ac:34:47:c2:1d:3f:68:4f:1e:c6:77:88:95:07: 71:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:68:D0:DA:0B:10:51:4F:4C:5C:32:4F:D3:49:7C:94:E2:3F:8B:C2 X509v3 Authority Key Identifier: keyid:DD:53:F6:3F:13:A0:C9:52:A0:79:F4:57:8A:10:ED:BF:6E:3A:A5:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VP2PxOgyVKgefRXihDtv246pYs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1c444d-058d-475c-abff-5cdfa117aec6/1/TWjQ2gsQUU9MXDJP00l8lOI_i8I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1c444d-058d-475c-abff-5cdfa117aec6/1/3VP2PxOgyVKgefRXihDtv246pYs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.203.0.0/16 217.149.224.0/20 IPv6: 2a00:1ba0:2::/47 Signature Algorithm: sha256WithRSAEncryption 7b:83:44:ba:86:98:7b:ad:92:05:5f:b4:e6:75:99:fe:88:7a: 35:a6:4d:09:6c:85:c9:06:b0:b1:0b:f8:a1:1e:86:f1:39:77: 86:23:92:24:4d:e6:7a:c4:4f:b3:cc:9c:b9:b0:cc:33:c5:7d: 1c:57:11:e9:d9:4b:02:ae:76:9c:bc:38:2d:ca:83:d0:9f:2a: 9a:39:4a:8e:70:6b:0c:35:07:b6:98:51:e8:02:0c:80:fd:ab: 61:07:ad:cb:4a:69:b1:48:17:48:ef:5f:9f:a4:6d:5a:91:4b: 27:8a:ef:b2:62:13:6d:15:9b:c6:ca:e9:37:76:be:8f:ed:c2: ea:ac:12:9b:d3:b8:03:fd:ad:b3:a5:b5:21:ed:d8:d7:c7:28: ea:fc:07:96:4b:78:9b:3b:c0:09:df:4a:d1:f6:54:0b:23:84: ab:ff:03:75:f5:4d:73:ce:7f:a2:ba:c2:47:92:08:3a:ef:7c: 98:51:3a:40:65:07:68:3c:b6:76:6c:b8:95:01:92:9a:df:97: 49:73:3e:f6:31:f5:c2:dc:c4:43:6f:2f:e7:f9:16:60:9b:71: da:17:78:a5:41:d8:3a:8c:67:e4:85:cc:2d:cd:cb:6e:05:ee: 62:05:db:57:bc:9f:33:91:97:2e:83:30:0c:3f:7e:ef:2d:79: 8d:1b:90:de -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt5EAcjzkmS7wjSEjnV2RLEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNTNmNjNmMTNhMGM5NTJhMDc5ZjQ1NzhhMTBlZGJmNmUz YWE1OGIwHhcNMjYwMTAxMTAxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDY4ZDBkYTBiMTA1MTRmNGM1YzMyNGZkMzQ5N2M5NGUyM2Y4YmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotU9gJwXOm55NgUYAVYt74+U0DgX 4JiftuVwYhkXIVgNiLdzfmnCo9kaeKrbFRK8GgO/TDad7ODBCych8oVjDufXb7gZ WfXWoCHy+snEUvoRoSFjhdc6AFxgUZMI711prF7H8bmJ2t1hOPwupUdSQSaZX9Pz ue9kqZXxuxNifF02y6oVR7pU4ui8m+MvCPWzNFUE9tnFXIEoroExwFVOIyq3QOM7 uWo0d6UR8QVqjlDTB+R8K8VDsp5bFaqYCBOX28Pf+QGsq2a1DzDiqw4EjKAd7Is1 RpiCFpDWLuQSxu+vaI/NKxdeSIDkDDUErgi2rDRHwh0/aE8exneIlQdxmQIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFE1o0NoLEFFPTFwyT9NJfJTiP4vCMB8GA1UdIwQY MBaAFN1T9j8ToMlSoHn0V4oQ7b9uOqWLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1ZQMlB4T2d5VktnZWZSWGloRHR2MjQ2cFlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xYzQ0NGQtMDU4ZC00NzVjLWFiZmYt NWNkZmExMTdhZWM2LzEvVFdqUTJnc1FVVTlNWERKUDAwbDhsT0lfaThJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8xYzQ0NGQtMDU4ZC00NzVjLWFiZmYtNWNkZmExMTdhZWM2 LzEvM1ZQMlB4T2d5VktnZWZSWGloRHR2MjQ2cFlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDARBAIAATALAwMAjcsDBATZ leAwDwQCAAIwCQMHASoAG6AAAjANBgkqhkiG9w0BAQsFAAOCAQEAe4NEuoaYe62S BV+05nWZ/oh6NaZNCWyFyQawsQv4oR6G8Tl3hiOSJE3mesRPs8ycubDMM8V9HFcR 6dlLAq52nLw4LcqD0J8qmjlKjnBrDDUHtphR6AIMgP2rYQety0ppsUgXSO9fn6Rt WpFLJ4rvsmITbRWbxsrpN3a+j+3C6qwSm9O4A/2ts6W1Ie3Y18co6vwHlkt4mzvA Cd9K0fZUCyOEq/8DdfVNc85/orrCR5IIOu98mFE6QGUHaDy2dmy4lQGSmt+XSXM+ 9jH1wtzEQ28v5/kWYJtx2hd4pUHYOoxn5IXMLc3LbgXuYgXbV7yfM5GXLoMwDD9+ 7y15jRuQ3g== -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:33 2026 by rpki-client