This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/T3vBUADVziYVCPfMjFB5sh1dYd0.roa File: T3vBUADVziYVCPfMjFB5sh1dYd0.roa (raw, json) Hash identifier: K9dDJUVzUK8TiZfC61uyK9tw2jY/KL9Z0G2brWNRTIY= Subject key identifier: 4F:7B:C1:50:00:D5:CE:26:15:08:F7:CC:8C:50:79:B2:1D:5D:61:DD Certificate issuer: /CN=98a533308740bbbd217bf69dce90b3f541208457 Certificate serial: 019B77C6EC5D49EED7C8EEAD12B449506DDF Authority key identifier: 98:A5:33:30:87:40:BB:BD:21:7B:F6:9D:CE:90:B3:F5:41:20:84:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/T3vBUADVziYVCPfMjFB5sh1dYd0.roa Signing time: Thu 01 Jan 2026 04:18:03 +0000 ROA not before: Thu 01 Jan 2026 04:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51557 IP address blocks: 93.89.224.0/20 maxlen: 20 185.33.232.0/22 maxlen: 22 185.111.232.0/23 maxlen: 23 185.111.234.0/24 maxlen: 24 185.111.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.crl rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ec:5d:49:ee:d7:c8:ee:ad:12:b4:49:50:6d:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98a533308740bbbd217bf69dce90b3f541208457 Validity Not Before: Jan 1 04:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f7bc15000d5ce261508f7cc8c5079b21d5d61dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e9:76:23:38:73:fe:d1:99:b7:08:9b:a6:29: 56:18:c8:ec:db:50:1f:62:ee:75:64:66:75:a4:2e: bb:5b:6e:2a:1e:33:7f:b5:29:af:00:81:2c:fd:36: e0:3e:37:c2:6f:cf:02:c4:87:2c:71:32:9e:fb:07: 2e:51:09:a2:e7:a6:23:ec:35:dc:65:c1:31:ec:ee: 92:c5:0b:51:fa:22:c8:3a:b3:44:c9:82:e8:31:d9: b2:71:8a:0c:a6:6f:aa:cd:27:24:03:f6:47:fd:00: 8a:c8:bb:36:26:c5:87:db:e5:e8:54:0a:99:0a:e8: 42:45:db:b4:9e:ef:50:cb:5b:09:3a:08:f6:8a:3d: cb:df:9e:a6:b5:59:12:e9:47:24:c5:a3:fc:73:ad: 9f:3b:a7:eb:a0:a9:64:e9:05:0c:a2:bb:06:bf:54: 2e:d0:da:af:db:4b:67:89:04:97:ec:ed:b6:62:d5: ef:e9:5d:5d:d8:a8:44:0a:35:8b:01:aa:a7:d1:e3: f7:02:50:18:c8:ec:ae:d7:a8:0d:bc:c1:53:14:7d: 34:aa:8b:a1:d5:23:94:8a:ec:a0:97:8d:98:33:ee: 8d:7b:43:b6:aa:ec:b8:a1:c7:8e:19:34:b0:48:b4: a1:b7:67:a9:c1:9e:bc:ce:b7:20:23:ae:0e:c8:18: 80:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:7B:C1:50:00:D5:CE:26:15:08:F7:CC:8C:50:79:B2:1D:5D:61:DD X509v3 Authority Key Identifier: keyid:98:A5:33:30:87:40:BB:BD:21:7B:F6:9D:CE:90:B3:F5:41:20:84:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/T3vBUADVziYVCPfMjFB5sh1dYd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.89.224.0/20 185.33.232.0/22 185.111.232.0/22 Signature Algorithm: sha256WithRSAEncryption 49:3f:b3:d1:1a:3f:ce:a0:ed:5b:05:3e:f2:7f:56:d6:c1:5e: b5:f3:79:27:e3:eb:9e:88:77:57:bc:90:42:73:d6:49:e4:fd: 56:ef:4f:e0:4c:e2:fc:26:32:db:48:45:3e:6d:2f:84:20:a7: 26:33:7a:1a:da:3c:56:c4:c8:42:b1:6b:3b:7b:d4:3a:60:27: d0:89:03:aa:05:50:9c:9f:32:85:c1:7c:07:8f:ad:45:32:e0: 6e:68:43:7b:c6:86:3c:92:55:7e:50:02:29:ec:f0:4c:4a:be: d5:d6:0d:a5:54:e0:e9:04:cd:ed:03:b5:66:8c:ad:52:56:90: c3:65:d3:65:b1:df:4f:e5:dd:8e:7d:73:e3:79:5a:1b:ff:1c: cf:2e:ba:96:76:34:ae:c4:fd:b9:ba:2a:65:12:88:fe:83:f0: d6:29:96:fc:ff:20:c8:91:4d:1b:7b:c2:2e:81:9f:c2:07:1b: 25:5d:27:ab:ad:2b:dc:59:75:be:8d:59:38:1d:35:11:fa:48: d3:d6:9f:14:88:78:05:a6:33:37:65:43:ac:85:56:c7:e0:64: 79:15:50:67:be:d6:b8:99:f0:36:e3:dd:bd:46:fe:80:1e:2d: 40:3e:19:1a:81:e1:89:5f:46:18:b1:10:d5:fa:ad:94:02:a9: fd:57:95:6b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3xuxdSe7XyO6tErRJUG3fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4YTUzMzMwODc0MGJiYmQyMTdiZjY5ZGNlOTBiM2Y1NDEy MDg0NTcwHhcNMjYwMTAxMDQxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjdiYzE1MDAwZDVjZTI2MTUwOGY3Y2M4YzUwNzliMjFkNWQ2MWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+l2Izhz/tGZtwibpilWGMjs21Af Yu51ZGZ1pC67W24qHjN/tSmvAIEs/TbgPjfCb88CxIcscTKe+wcuUQmi56Yj7DXc ZcEx7O6SxQtR+iLIOrNEyYLoMdmycYoMpm+qzSckA/ZH/QCKyLs2JsWH2+XoVAqZ CuhCRdu0nu9Qy1sJOgj2ij3L356mtVkS6UckxaP8c62fO6froKlk6QUMorsGv1Qu 0Nqv20tniQSX7O22YtXv6V1d2KhECjWLAaqn0eP3AlAYyOyu16gNvMFTFH00qouh 1SOUiuygl42YM+6Ne0O2quy4oceOGTSwSLSht2epwZ68zrcgI64OyBiAgQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFE97wVAA1c4mFQj3zIxQebIdXWHdMB8GA1UdIwQY MBaAFJilMzCHQLu9IXv2nc6Qs/VBIIRXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUtVek1JZEF1NzBoZV9hZHpwQ3o5VUVnaEZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi82YTUzOTQtMGIwNS00NTM4LWIwY2Qt OWY2ODkwZjkyZTYwLzEvVDN2QlVBRFZ6aVlWQ1BmTWpGQjVzaDFkWWQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi82YTUzOTQtMGIwNS00NTM4LWIwY2QtOWY2ODkwZjkyZTYw LzEvbUtVek1JZEF1NzBoZV9hZHpwQ3o5VUVnaEZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEXVngAwQC uSHoAwQCuW/oMA0GCSqGSIb3DQEBCwUAA4IBAQBJP7PRGj/OoO1bBT7yf1bWwV61 83kn4+ueiHdXvJBCc9ZJ5P1W70/gTOL8JjLbSEU+bS+EIKcmM3oa2jxWxMhCsWs7 e9Q6YCfQiQOqBVCcnzKFwXwHj61FMuBuaEN7xoY8klV+UAIp7PBMSr7V1g2lVODp BM3tA7VmjK1SVpDDZdNlsd9P5d2OfXPjeVob/xzPLrqWdjSuxP25uiplEoj+g/DW KZb8/yDIkU0be8IugZ/CBxslXSerrSvcWXW+jVk4HTUR+kjT1p8UiHgFpjM3ZUOs hVbH4GR5FVBnvta4mfA24929Rv6AHi1APhkageGJX0YYsRDV+q2UAqn9V5Vr -----END CERTIFICATE-----Generated at Mon Jan 26 11:39:47 2026 by rpki-client