This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/TsVI4tMI03KjRL0-OvhUF0QBTV4.roa File: TsVI4tMI03KjRL0-OvhUF0QBTV4.roa (raw, json) Hash identifier: AWhqc+I1T2OpKj+s6Ggzb8DgqzD48fRZxhculljb8lU= Subject key identifier: 4E:C5:48:E2:D3:08:D3:72:A3:44:BD:3E:3A:F8:54:17:44:01:4D:5E Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019B4A4193405EF5DE036FA168C54B6FAEDF Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/TsVI4tMI03KjRL0-OvhUF0QBTV4.roa Signing time: Tue 23 Dec 2025 08:09:30 +0000 ROA not before: Tue 23 Dec 2025 08:09:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 401322 IP address blocks: 109.121.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:41:93:40:5e:f5:de:03:6f:a1:68:c5:4b:6f:ae:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Dec 23 08:09:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4ec548e2d308d372a344bd3e3af8541744014d5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ce:d6:e9:30:a0:39:e4:bd:87:e1:79:35:64: c7:95:65:62:03:81:cd:b9:5b:22:41:af:d3:bd:fc: 2b:6a:43:ed:09:64:06:41:e9:66:b5:78:c4:3d:16: 17:dc:71:e0:b8:d7:d0:d0:ce:76:71:4d:64:18:e1: 88:77:42:89:3e:1a:a8:cd:04:f8:dd:75:e0:dd:d1: 5c:f3:6f:ea:82:8c:ac:88:a3:a3:0d:99:b4:96:aa: 07:bb:ab:91:32:19:3d:8a:b6:a1:3a:87:93:c4:d6: ae:0d:cf:26:b6:d2:c5:5a:45:f3:98:e1:68:ec:e4: 47:23:de:9c:9a:09:6f:78:83:a5:53:6a:4f:ea:01: d5:9e:13:36:23:3f:10:1b:c6:a9:8e:ad:23:7e:03: 2c:04:bc:5e:86:a2:03:53:15:94:48:c1:db:9c:35: 78:1d:78:c7:e6:74:46:25:7f:2a:72:05:f8:57:d6: 0b:40:4a:b1:ab:70:cc:fb:bf:99:8d:25:d1:69:76: 00:10:03:f1:a9:40:de:06:f4:56:67:33:8b:37:1f: 84:60:34:31:57:fe:2d:1c:38:1e:4f:c6:2e:09:9a: d1:8b:5b:38:d5:70:cb:aa:80:75:d8:bc:40:29:39: 29:9b:be:3e:5e:55:5a:8d:5a:16:01:a6:f6:c3:a3: 44:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:C5:48:E2:D3:08:D3:72:A3:44:BD:3E:3A:F8:54:17:44:01:4D:5E X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/TsVI4tMI03KjRL0-OvhUF0QBTV4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.121.39.0/24 Signature Algorithm: sha256WithRSAEncryption 22:e5:46:a8:fa:96:20:5f:21:fb:1e:93:26:a6:09:f3:e4:87: fb:fc:85:85:c8:5a:94:0b:74:de:d4:75:bc:71:4f:06:a2:bf: af:36:c5:31:cb:1a:90:93:d2:d3:bd:0f:f4:db:2b:90:eb:9e: 44:32:3f:bf:a7:05:85:99:0b:fe:aa:97:bb:32:2f:58:da:01: 5f:be:b2:13:f5:07:b7:79:52:c5:36:4d:63:d4:7b:cb:bf:f1: 77:90:a8:5d:98:67:c7:1e:31:be:4c:fb:b7:af:a9:3a:b9:3b: c7:1a:7a:f7:fe:a1:c2:59:2a:e8:92:a4:e1:4e:52:e3:32:17: c9:5e:5e:c8:34:e4:7d:89:aa:58:b1:87:67:52:39:29:99:29: 77:c7:8b:53:9a:d7:d9:1a:82:6b:45:81:c8:46:86:12:c0:24: eb:e2:f3:64:bd:3c:b7:f0:00:bb:9c:49:23:27:57:22:1d:4b: 4e:15:bc:74:dd:60:30:f8:ae:91:b0:06:eb:37:ff:27:a8:32: 73:3b:de:18:6a:89:33:e9:d6:e8:96:15:39:3b:65:b1:e0:8a: bd:be:b0:fe:35:7b:f6:bf:8e:49:a8:1c:9d:3d:8e:6a:e6:64: 9d:dc:88:3b:95:f9:4c:37:f5:13:41:f8:70:7f:85:4b:c5:32: 82:e7:a3:45 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZtKQZNAXvXeA2+haMVLb67fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjUxMjIzMDgwOTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZWM1NDhlMmQzMDhkMzcyYTM0NGJkM2UzYWY4NTQxNzQ0MDE0ZDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAps7W6TCgOeS9h+F5NWTHlWViA4HN uVsiQa/TvfwrakPtCWQGQelmtXjEPRYX3HHguNfQ0M52cU1kGOGId0KJPhqozQT4 3XXg3dFc82/qgoysiKOjDZm0lqoHu6uRMhk9irahOoeTxNauDc8mttLFWkXzmOFo 7ORHI96cmglveIOlU2pP6gHVnhM2Iz8QG8apjq0jfgMsBLxehqIDUxWUSMHbnDV4 HXjH5nRGJX8qcgX4V9YLQEqxq3DM+7+ZjSXRaXYAEAPxqUDeBvRWZzOLNx+EYDQx V/4tHDgeT8YuCZrRi1s41XDLqoB12LxAKTkpm74+XlVajVoWAab2w6NE+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE7FSOLTCNNyo0S9Pjr4VBdEAU1eMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvVHNWSTR0TUkwM0tqUkwwLU92aFVGMFFCVFY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXknMA0G CSqGSIb3DQEBCwUAA4IBAQAi5Uao+pYgXyH7HpMmpgnz5If7/IWFyFqUC3Te1HW8 cU8Gor+vNsUxyxqQk9LTvQ/02yuQ655EMj+/pwWFmQv+qpe7Mi9Y2gFfvrIT9Qe3 eVLFNk1j1HvLv/F3kKhdmGfHHjG+TPu3r6k6uTvHGnr3/qHCWSrokqThTlLjMhfJ Xl7INOR9iapYsYdnUjkpmSl3x4tTmtfZGoJrRYHIRoYSwCTr4vNkvTy38AC7nEkj J1ciHUtOFbx03WAw+K6RsAbrN/8nqDJzO94Yaokz6dbolhU5O2Wx4Iq9vrD+NXv2 v45JqBydPY5q5mSd3Ig7lflMN/UTQfhwf4VLxTKC56NF -----END CERTIFICATE-----Generated at Wed Dec 31 07:55:52 2025 by rpki-client