This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/T402uwWdle2-wACzD9ONw9UX7Q0.roa File: T402uwWdle2-wACzD9ONw9UX7Q0.roa (raw, json) Hash identifier: qH2p5m4fwAtgkEGn5eHmdKfPUlYPjTmqTH+gzJaccXQ= Subject key identifier: 4F:8D:36:BB:05:9D:95:ED:BE:C0:00:B3:0F:D3:8D:C3:D5:17:ED:0D Certificate issuer: /CN=ef94bccbd4c2e0ff8f7aab045e14a311f3b2f9fe Certificate serial: 019B7EA564382D095B35CBCD8F2012D74FDC Authority key identifier: EF:94:BC:CB:D4:C2:E0:FF:8F:7A:AB:04:5E:14:A3:11:F3:B2:F9:FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/T402uwWdle2-wACzD9ONw9UX7Q0.roa Signing time: Fri 02 Jan 2026 12:18:46 +0000 ROA not before: Fri 02 Jan 2026 12:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8220 IP address blocks: 192.231.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.crl rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:64:38:2d:09:5b:35:cb:cd:8f:20:12:d7:4f:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef94bccbd4c2e0ff8f7aab045e14a311f3b2f9fe Validity Not Before: Jan 2 12:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f8d36bb059d95edbec000b30fd38dc3d517ed0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:69:16:6d:07:1d:36:ca:fe:b5:8a:11:9e:4e: a9:90:49:37:89:09:70:9f:5d:1d:93:12:ef:6f:0b: 97:0f:1b:73:0a:8b:24:da:3e:45:cc:d5:ec:bc:1e: 65:e5:f5:c3:3f:a7:09:7b:ed:ac:dc:70:e2:ba:6b: bb:66:7e:0f:24:99:c7:af:4c:ff:e4:e3:40:72:f0: c3:63:d4:73:dc:99:79:93:ee:3a:87:b0:dc:43:d0: 07:f6:fd:06:cd:d0:eb:36:6a:b7:ef:c6:0b:e1:43: 3e:36:44:4d:63:91:46:4b:bf:c6:d4:ed:ab:d5:66: dc:86:81:40:7f:ef:b8:8e:28:40:c9:23:8f:44:6d: 42:d0:2e:8d:fb:5b:e6:e1:5c:d1:f5:75:d1:24:aa: 4d:08:7a:85:c5:c1:5e:6e:81:dc:e8:4d:80:5f:6a: af:ae:de:53:2f:bb:5c:cf:fe:c6:25:ce:37:9c:5d: 12:a7:d0:b5:06:52:2a:ca:7c:97:94:b1:87:b8:e1: a2:ed:55:9d:2f:96:b0:c8:e4:14:6a:d4:e7:a3:ae: 02:80:27:56:36:f4:a5:9b:61:db:ea:21:70:db:f6: 5d:85:c5:88:69:6b:e0:33:b4:41:7f:97:f2:4c:04: 1a:8d:54:4e:a8:4d:1f:17:8d:4b:3a:8a:14:ca:55: 27:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:8D:36:BB:05:9D:95:ED:BE:C0:00:B3:0F:D3:8D:C3:D5:17:ED:0D X509v3 Authority Key Identifier: keyid:EF:94:BC:CB:D4:C2:E0:FF:8F:7A:AB:04:5E:14:A3:11:F3:B2:F9:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/T402uwWdle2-wACzD9ONw9UX7Q0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.231.17.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:f0:8f:a8:c4:8c:8d:54:3d:26:98:2f:29:79:9a:df:81:ba: 93:93:d1:d1:6d:dc:e9:bd:9a:b3:e0:e9:b7:56:cd:21:57:30: a6:a5:cd:e6:ff:a2:e9:d9:02:88:d8:68:f6:be:b9:5e:8c:6f: f1:d3:45:87:8f:14:d0:c9:4c:b4:ea:8c:17:d0:b0:7a:59:72: e0:d4:89:37:4d:bb:53:67:00:8d:e2:c1:f1:40:3e:94:17:b6: b5:85:df:c1:da:65:24:24:3b:8d:f4:97:0a:f7:a9:77:fd:20: 68:39:db:00:ab:dd:a7:a3:21:77:23:0c:e8:b0:9b:2e:41:99: 51:51:ba:80:10:f2:4b:6a:5a:ce:bd:80:90:e1:9d:22:13:a8: 12:0d:b5:c2:65:c1:b2:4c:bf:39:ec:a0:51:fe:d8:b7:33:f5: b4:1a:56:1c:a0:73:8c:c5:c4:bf:a9:4e:a6:7d:64:6f:75:63: d8:ee:82:e0:85:1f:23:c2:ce:9b:b1:91:bd:c9:ea:24:42:2c: 15:c8:42:56:c9:e0:f9:d4:e4:9e:69:3b:0a:10:bb:28:65:54: 8c:1a:45:c8:96:a3:28:04:52:cf:66:a7:fc:a8:65:30:f4:f5: 99:8e:3f:10:b8:30:36:bb:7d:91:2f:24:39:6f:19:5b:9f:26: 1b:12:e7:86 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pWQ4LQlbNcvNjyAS10/cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmOTRiY2NiZDRjMmUwZmY4ZjdhYWIwNDVlMTRhMzExZjNi MmY5ZmUwHhcNMjYwMTAyMTIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjhkMzZiYjA1OWQ5NWVkYmVjMDAwYjMwZmQzOGRjM2Q1MTdlZDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmkWbQcdNsr+tYoRnk6pkEk3iQlw n10dkxLvbwuXDxtzCosk2j5FzNXsvB5l5fXDP6cJe+2s3HDiumu7Zn4PJJnHr0z/ 5ONAcvDDY9Rz3Jl5k+46h7DcQ9AH9v0GzdDrNmq378YL4UM+NkRNY5FGS7/G1O2r 1WbchoFAf++4jihAySOPRG1C0C6N+1vm4VzR9XXRJKpNCHqFxcFeboHc6E2AX2qv rt5TL7tcz/7GJc43nF0Sp9C1BlIqynyXlLGHuOGi7VWdL5awyOQUatTno64CgCdW NvSlm2Hb6iFw2/ZdhcWIaWvgM7RBf5fyTAQajVROqE0fF41LOooUylUn6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE+NNrsFnZXtvsAAsw/TjcPVF+0NMB8GA1UdIwQY MBaAFO+UvMvUwuD/j3qrBF4UoxHzsvn+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzVTOHk5VEM0UC1QZXFzRVhoU2pFZk95LWY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iZWMyNTMtOWMyOS00NzhjLTk3MTEt Y2I2M2Q2ZmJiZmM3LzEvVDQwMnV3V2RsZTItd0FDekQ5T053OVVYN1EwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9iZWMyNTMtOWMyOS00NzhjLTk3MTEtY2I2M2Q2ZmJiZmM3 LzEvNzVTOHk5VEM0UC1QZXFzRVhoU2pFZk95LWY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOcRMA0G CSqGSIb3DQEBCwUAA4IBAQAL8I+oxIyNVD0mmC8peZrfgbqTk9HRbdzpvZqz4Om3 Vs0hVzCmpc3m/6Lp2QKI2Gj2vrlejG/x00WHjxTQyUy06owX0LB6WXLg1Ik3TbtT ZwCN4sHxQD6UF7a1hd/B2mUkJDuN9JcK96l3/SBoOdsAq92noyF3IwzosJsuQZlR UbqAEPJLalrOvYCQ4Z0iE6gSDbXCZcGyTL857KBR/ti3M/W0GlYcoHOMxcS/qU6m fWRvdWPY7oLghR8jws6bsZG9yeokQiwVyEJWyeD51OSeaTsKELsoZVSMGkXIlqMo BFLPZqf8qGUw9PWZjj8QuDA2u32RLyQ5bxlbnyYbEueG -----END CERTIFICATE-----Generated at Wed Jan 21 12:19:01 2026 by rpki-client