This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/TabmAQYgMmmodb_L4MPRHb2wySA.roa File: TabmAQYgMmmodb_L4MPRHb2wySA.roa (raw, json) Hash identifier: S4ShPpoxGhYlwAoc9OcOQJuw73N42S0FCiSJEbpor4s= Subject key identifier: 4D:A6:E6:01:06:20:32:69:A8:75:BF:CB:E0:C3:D1:1D:BD:B0:C9:20 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019BB206E3767F3E0029DB082FFD673E5439 Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/TabmAQYgMmmodb_L4MPRHb2wySA.roa Signing time: Mon 12 Jan 2026 11:45:54 +0000 ROA not before: Mon 12 Jan 2026 11:45:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25198 IP address blocks: 109.121.42.0/24 maxlen: 24 109.121.45.0/24 maxlen: 24 212.69.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b2:06:e3:76:7f:3e:00:29:db:08:2f:fd:67:3e:54:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Jan 12 11:45:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4da6e60106203269a875bfcbe0c3d11dbdb0c920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0e:94:98:74:ae:63:c9:a1:d2:bd:80:51:69: 1a:47:83:fa:c7:9f:91:25:43:12:bb:a5:57:c0:ff: fe:84:e9:04:ee:a8:74:0a:a7:ce:4b:0a:90:0a:44: 12:16:e3:4d:33:c6:31:55:4f:fc:35:4b:b1:b0:d7: b9:5a:8c:75:77:d0:88:2c:9b:e9:1f:8b:a6:64:cb: 21:5c:03:c7:5a:7d:51:01:f5:ce:00:b4:3c:ad:3b: 6b:fd:52:f1:a6:70:28:c3:a7:65:17:72:52:b4:d4: 4a:28:f7:74:88:f0:de:64:a7:54:f3:42:89:0d:62: 7d:bc:f0:fa:93:2f:1a:5d:1c:cc:e7:04:2b:ca:84: 81:dc:9c:c8:20:2b:25:ee:ec:e8:2d:f8:cc:64:b1: 91:7f:28:a8:e7:fe:67:12:1c:57:16:20:93:55:5a: 21:ab:1d:99:2e:55:12:27:2d:f5:41:d6:e8:3f:98: 9c:38:5f:e0:0f:f5:ec:fc:da:bb:cf:00:f3:bf:b9: 92:6e:4f:65:58:a3:fa:8d:fc:cd:37:33:58:45:8f: 75:16:c1:6f:c3:8a:f8:d9:3e:41:77:78:62:ce:ab: a2:84:a0:5b:e2:6b:b6:c4:ac:9b:e8:91:88:2e:95: e4:11:6c:df:5a:2f:b4:5b:85:3f:f0:98:1c:23:e8: ab:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A6:E6:01:06:20:32:69:A8:75:BF:CB:E0:C3:D1:1D:BD:B0:C9:20 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/TabmAQYgMmmodb_L4MPRHb2wySA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.121.42.0/24 109.121.45.0/24 212.69.8.0/24 Signature Algorithm: sha256WithRSAEncryption 33:d6:c0:87:d1:52:35:61:3d:e0:71:c9:c9:eb:9a:c2:5d:8b: 40:db:b2:7c:d1:c5:26:53:22:d1:02:97:c8:22:e9:49:65:fb: 16:16:e5:44:a6:94:c6:ea:ac:ac:2c:6b:37:5e:67:96:c4:50: fb:fb:40:dc:e9:65:d6:91:05:47:01:69:a9:ee:9b:43:67:b6: 50:5d:69:a1:c6:6c:d3:ed:82:73:4a:d1:98:ce:76:22:16:a8: b8:87:f8:8e:1e:e0:36:e8:80:e6:9a:a8:da:9a:7e:db:46:21: 39:51:cd:39:5f:a8:9d:02:7d:2a:b7:95:29:0d:9a:38:82:b7: ea:8f:8f:67:a0:9d:e3:db:0e:83:37:4f:f4:f8:f6:3e:6d:3e: c7:72:f6:f6:2d:3c:7a:b7:3b:2e:f9:7c:68:0d:85:de:ea:9f: 68:64:24:0e:a8:c9:b7:c3:bb:13:f5:66:43:0c:b4:11:a9:6e: 56:82:d4:d1:72:9a:83:28:1a:48:ad:ef:fb:f6:23:c6:53:20: 04:1c:2e:48:04:d2:03:eb:dc:c8:31:23:20:ed:5a:e8:24:d5: 4c:c1:fd:8c:50:2c:33:54:f4:d8:8a:14:8d:b9:21:54:c8:0d: 8e:be:2b:b8:63:ed:82:dc:72:ec:40:ec:85:3c:ff:ca:dc:73: 5c:b3:9a:70 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZuyBuN2fz4AKdsIL/1nPlQ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjYwMTEyMTE0NTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZGE2ZTYwMTA2MjAzMjY5YTg3NWJmY2JlMGMzZDExZGJkYjBjOTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvw6UmHSuY8mh0r2AUWkaR4P6x5+R JUMSu6VXwP/+hOkE7qh0CqfOSwqQCkQSFuNNM8YxVU/8NUuxsNe5Wox1d9CILJvp H4umZMshXAPHWn1RAfXOALQ8rTtr/VLxpnAow6dlF3JStNRKKPd0iPDeZKdU80KJ DWJ9vPD6ky8aXRzM5wQryoSB3JzIICsl7uzoLfjMZLGRfyio5/5nEhxXFiCTVVoh qx2ZLlUSJy31QdboP5icOF/gD/Xs/Nq7zwDzv7mSbk9lWKP6jfzNNzNYRY91FsFv w4r42T5Bd3hizquihKBb4mu2xKyb6JGILpXkEWzfWi+0W4U/8JgcI+irowIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFE2m5gEGIDJpqHW/y+DD0R29sMkgMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvVGFibUFRWWdNbW1vZGJfTDRNUFJIYjJ3eVNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAbXkqAwQA bXktAwQA1EUIMA0GCSqGSIb3DQEBCwUAA4IBAQAz1sCH0VI1YT3gccnJ65rCXYtA 27J80cUmUyLRApfIIulJZfsWFuVEppTG6qysLGs3XmeWxFD7+0Dc6WXWkQVHAWmp 7ptDZ7ZQXWmhxmzT7YJzStGYznYiFqi4h/iOHuA26IDmmqjamn7bRiE5Uc05X6id An0qt5UpDZo4grfqj49noJ3j2w6DN0/0+PY+bT7Hcvb2LTx6tzsu+XxoDYXe6p9o ZCQOqMm3w7sT9WZDDLQRqW5WgtTRcpqDKBpIre/79iPGUyAEHC5IBNID69zIMSMg 7VroJNVMwf2MUCwzVPTYihSNuSFUyA2Oviu4Y+2C3HLsQOyFPP/K3HNcs5pw -----END CERTIFICATE-----Generated at Mon Jan 19 13:52:56 2026 by rpki-client