This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/tCb5DC6zfb4vzHPOix2UvW9ndS4.roa File: tCb5DC6zfb4vzHPOix2UvW9ndS4.roa (raw, json) Hash identifier: ntxgYvCvFvJADG1N43LItMS9Zjg6jG20YT8FEIvxIu8= Subject key identifier: B4:26:F9:0C:2E:B3:7D:BE:2F:CC:73:CE:8B:1D:94:BD:6F:67:75:2E Certificate issuer: /CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8 Certificate serial: 019B77C67C2FE5E1889682AD4F82B5423BC2 Authority key identifier: 4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/tCb5DC6zfb4vzHPOix2UvW9ndS4.roa Signing time: Thu 01 Jan 2026 04:17:35 +0000 ROA not before: Thu 01 Jan 2026 04:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 185.117.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 10:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:7c:2f:e5:e1:88:96:82:ad:4f:82:b5:42:3b:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8 Validity Not Before: Jan 1 04:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b426f90c2eb37dbe2fcc73ce8b1d94bd6f67752e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:01:de:ba:94:1a:60:dc:f1:f3:ce:44:43:cd: f0:a9:8c:9b:87:ab:86:af:75:75:72:a2:4c:1e:10: 6d:a7:75:2e:ff:37:ac:84:8c:b5:4f:5c:fc:ce:5c: 1e:0f:a1:21:30:65:e1:3a:ae:d3:82:04:4d:71:72: 74:f2:14:b4:81:c1:e1:05:18:99:d9:0a:1f:9b:49: 63:22:80:aa:96:aa:35:18:9b:d2:d8:8e:46:af:58: 7f:cb:35:1a:2e:3b:8c:f9:ca:6b:cb:14:2b:cc:95: f5:d0:f0:c7:71:dd:11:90:bd:dd:93:9e:8a:ad:5c: d5:f3:4b:26:da:d7:83:e2:58:14:50:dd:c9:b5:96: 5b:77:0c:e8:63:4c:7e:dc:f4:28:2b:b3:71:ad:db: 8c:41:2b:00:20:38:d7:80:a8:0c:b4:31:9b:a7:80: d4:29:6a:43:1f:fe:a5:14:e0:61:98:ff:ca:cd:52: c6:1e:c5:2e:fe:d4:aa:0f:09:3c:27:bc:ec:99:b8: 4c:dd:48:ef:1b:c0:c7:2f:7f:02:38:8c:e8:df:1b: ad:9a:60:80:4e:27:07:d6:80:33:a8:11:4a:3b:50: 98:e3:91:09:02:a2:34:6b:70:76:ac:e6:6f:86:35: 5a:ec:b1:8f:4d:cb:f6:c7:bd:5b:33:58:70:46:b4: b7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:26:F9:0C:2E:B3:7D:BE:2F:CC:73:CE:8B:1D:94:BD:6F:67:75:2E X509v3 Authority Key Identifier: keyid:4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/tCb5DC6zfb4vzHPOix2UvW9ndS4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.117.230.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:6c:3b:f4:e9:fa:cb:c9:63:ce:8c:f7:07:9c:c1:4a:06:bb: 2b:2c:82:32:c4:36:6c:78:6f:d7:c3:48:69:06:09:f3:ad:93: 04:0f:fb:a5:00:30:2e:f9:98:76:3b:78:32:af:21:ef:34:30: 0e:b5:b1:7c:01:83:f0:f6:26:31:0a:e8:bd:1c:06:f5:d6:4e: af:1d:b3:7b:47:1f:40:b9:67:42:4b:83:18:2c:cd:69:f1:87: fb:78:53:89:84:1e:b1:bb:c8:aa:ff:b9:93:f7:cd:18:5c:42: 3a:f9:7c:60:81:da:12:9b:d0:81:02:24:d8:57:ba:4d:1b:a0: 2e:19:41:b2:e0:c3:cf:5f:6e:08:22:47:99:f8:04:79:24:9e: 16:3f:74:39:6a:3b:d5:e2:ee:40:87:eb:31:94:44:86:00:3f: 2f:23:22:6f:bb:4a:28:d7:d1:c7:e0:f5:7f:05:00:59:15:24: 07:4f:3c:8f:6e:86:9d:80:7d:c9:52:a9:83:b9:a6:cb:4a:0d: 08:60:97:1e:07:84:91:c4:fe:7c:cb:0f:53:b5:24:0a:93:0d: b9:c1:12:08:b1:80:26:1b:ae:cb:b9:f5:4e:bc:f8:85:e5:88: b9:e0:b6:73:2a:f3:92:35:7d:1a:49:10:9f:0a:39:6e:a5:9e: ac:ca:77:39 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xnwv5eGIloKtT4K1QjvCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkYzM5MWRjNjE1ZmQ0YTNhZDEwYzBmMmFiOGIwYTUwNmQw MzllZDgwHhcNMjYwMTAxMDQxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDI2ZjkwYzJlYjM3ZGJlMmZjYzczY2U4YjFkOTRiZDZmNjc3NTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQHeupQaYNzx885EQ83wqYybh6uG r3V1cqJMHhBtp3Uu/zeshIy1T1z8zlweD6EhMGXhOq7TggRNcXJ08hS0gcHhBRiZ 2Qofm0ljIoCqlqo1GJvS2I5Gr1h/yzUaLjuM+cpryxQrzJX10PDHcd0RkL3dk56K rVzV80sm2teD4lgUUN3JtZZbdwzoY0x+3PQoK7NxrduMQSsAIDjXgKgMtDGbp4DU KWpDH/6lFOBhmP/KzVLGHsUu/tSqDwk8J7zsmbhM3UjvG8DHL38COIzo3xutmmCA TicH1oAzqBFKO1CY45EJAqI0a3B2rOZvhjVa7LGPTcv2x71bM1hwRrS35QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLQm+Qwus32+L8xzzosdlL1vZ3UuMB8GA1UdIwQY MBaAFE3DkdxhX9SjrRDA8quLClBtA57YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGNPUjNHRmYxS090RU1EeXE0c0tVRzBEbnRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9kNjZhNTgtZmRmNS00OTFlLWI1MTEt ZmQyOTE1ZDRjZDVhLzEvdENiNURDNnpmYjR2ekhQT2l4MlV2VzluZFM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9kNjZhNTgtZmRmNS00OTFlLWI1MTEtZmQyOTE1ZDRjZDVh LzEvVGNPUjNHRmYxS090RU1EeXE0c0tVRzBEbnRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXXmMA0G CSqGSIb3DQEBCwUAA4IBAQBfbDv06frLyWPOjPcHnMFKBrsrLIIyxDZseG/Xw0hp BgnzrZMED/ulADAu+Zh2O3gyryHvNDAOtbF8AYPw9iYxCui9HAb11k6vHbN7Rx9A uWdCS4MYLM1p8Yf7eFOJhB6xu8iq/7mT980YXEI6+XxggdoSm9CBAiTYV7pNG6Au GUGy4MPPX24IIkeZ+AR5JJ4WP3Q5ajvV4u5Ah+sxlESGAD8vIyJvu0oo19HH4PV/ BQBZFSQHTzyPboadgH3JUqmDuabLSg0IYJceB4SRxP58yw9TtSQKkw25wRIIsYAm G67LufVOvPiF5Yi54LZzKvOSNX0aSRCfCjlupZ6sync5 -----END CERTIFICATE-----Generated at Sun Jan 18 16:38:00 2026 by rpki-client