This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/TRDH9puYUuenoy9kGJQ5jCPwl5Q.roa File: TRDH9puYUuenoy9kGJQ5jCPwl5Q.roa (raw, json) Hash identifier: dIeu5rBdrp7jx4/zdtqc04Dh0zBTc340eTbk3W/vtes= Subject key identifier: 4D:10:C7:F6:9B:98:52:E7:A7:A3:2F:64:18:94:39:8C:23:F0:97:94 Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B79104F5768FF24A93D954F4B0B2DAEDD Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/TRDH9puYUuenoy9kGJQ5jCPwl5Q.roa Signing time: Thu 01 Jan 2026 10:17:50 +0000 ROA not before: Thu 01 Jan 2026 10:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44547 IP address blocks: 31.210.42.0/24 maxlen: 24 31.210.55.0/24 maxlen: 24 78.135.82.0/24 maxlen: 24 78.135.83.0/24 maxlen: 24 78.135.111.0/24 maxlen: 24 188.132.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:4f:57:68:ff:24:a9:3d:95:4f:4b:0b:2d:ae:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d10c7f69b9852e7a7a32f641894398c23f09794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:76:1a:1a:8b:26:97:76:19:5c:a2:06:62:6d: 30:ee:04:3b:bf:92:75:69:6b:d0:c6:f6:2f:11:48: b1:db:10:cf:ee:e5:b2:e6:4a:c4:55:e9:b9:bb:4d: 7e:2a:7a:b3:ba:08:9e:fb:f4:1c:13:e4:89:63:1b: b8:46:14:a7:c7:68:af:85:b5:c7:85:ad:56:65:5f: 2b:a4:fb:57:58:70:9e:49:ae:d5:84:48:d1:39:1d: f8:72:87:f0:26:4f:c9:8f:3d:f5:c4:1e:dc:ad:2f: 7f:75:d6:1c:d6:ec:eb:0d:4d:26:ea:41:15:7b:48: b7:2f:0a:ad:6e:c5:fd:2f:aa:35:3c:df:9e:bb:bd: 0f:18:56:aa:ba:ea:cb:59:a3:52:a5:3d:3d:16:6c: bc:43:12:26:37:b9:ce:28:d7:a6:31:84:3f:97:eb: b1:ec:1e:d6:ad:65:37:3e:0d:8e:63:e0:54:b5:47: 1c:8e:96:2c:4b:22:80:e8:66:07:54:76:be:ff:24: 83:2b:95:52:34:c9:71:9a:10:7d:09:5c:26:98:c4: 51:91:9a:36:b4:63:12:74:71:85:e1:48:a7:4b:67: 43:37:df:fd:3e:d7:0f:46:d0:1b:14:5c:b6:14:b8: 05:16:74:2d:4c:c4:52:9d:af:2a:80:95:0c:35:be: 11:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:10:C7:F6:9B:98:52:E7:A7:A3:2F:64:18:94:39:8C:23:F0:97:94 X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/TRDH9puYUuenoy9kGJQ5jCPwl5Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.210.42.0/24 31.210.55.0/24 78.135.82.0/23 78.135.111.0/24 188.132.168.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:e2:d9:43:a7:0a:93:60:2c:d4:42:5a:86:27:2f:3a:a8:5e: 4d:e4:d3:65:f1:ba:0d:8d:33:a0:ee:c2:bb:d9:1b:bc:4c:a0: 64:99:92:46:0c:da:58:2b:3b:db:e6:5e:30:cc:9d:4b:f6:aa: e6:5a:ac:2d:da:19:fe:36:87:19:c0:de:de:9f:91:4b:e1:93: a3:92:d0:b3:f7:b8:8e:25:4a:1b:d2:49:d6:d9:df:0a:87:ff: 2c:b7:1f:6e:75:ac:38:54:39:d7:43:ae:35:a2:17:2d:1c:98: 67:36:f4:41:e7:9d:12:bc:db:7d:ae:be:80:d4:12:26:a9:8a: 50:1d:e3:35:1a:cc:ab:6c:bd:db:0a:b0:a5:c3:bd:c2:23:92: a4:70:c8:3b:83:c4:cd:10:8c:5b:4f:fe:9c:5c:55:8d:83:f2: 39:f5:54:fc:a3:b0:ee:45:a4:fa:7c:53:7a:db:09:9e:6c:7f: f5:26:1f:de:e0:78:8f:30:64:ee:46:fb:19:45:32:92:c4:80: 5f:92:ce:b2:e2:d9:8d:3e:68:65:64:f8:1d:69:77:7c:8d:28: a1:94:c7:62:5e:33:d5:bd:95:ea:b7:48:d8:4a:5a:65:8b:a0: bb:90:c5:d4:94:59:41:c6:41:8c:c0:42:90:54:77:ba:90:a7: cf:4d:44:48 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt5EE9XaP8kqT2VT0sLLa7dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDEwYzdmNjliOTg1MmU3YTdhMzJmNjQxODk0Mzk4YzIzZjA5Nzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HYaGosml3YZXKIGYm0w7gQ7v5J1 aWvQxvYvEUix2xDP7uWy5krEVem5u01+Knqzugie+/QcE+SJYxu4RhSnx2ivhbXH ha1WZV8rpPtXWHCeSa7VhEjROR34cofwJk/Jjz31xB7crS9/ddYc1uzrDU0m6kEV e0i3LwqtbsX9L6o1PN+eu70PGFaquurLWaNSpT09Fmy8QxImN7nOKNemMYQ/l+ux 7B7WrWU3Pg2OY+BUtUccjpYsSyKA6GYHVHa+/ySDK5VSNMlxmhB9CVwmmMRRkZo2 tGMSdHGF4UinS2dDN9/9PtcPRtAbFFy2FLgFFnQtTMRSna8qgJUMNb4RlQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFE0Qx/abmFLnp6MvZBiUOYwj8JeUMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvVFJESDlwdVlVdWVub3k5a0dKUTVqQ1B3bDVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAH9IqAwQA H9I3AwQBTodSAwQATodvAwQAvISoMA0GCSqGSIb3DQEBCwUAA4IBAQAO4tlDpwqT YCzUQlqGJy86qF5N5NNl8boNjTOg7sK72Ru8TKBkmZJGDNpYKzvb5l4wzJ1L9qrm Wqwt2hn+NocZwN7en5FL4ZOjktCz97iOJUob0knW2d8Kh/8stx9udaw4VDnXQ641 ohctHJhnNvRB550SvNt9rr6A1BImqYpQHeM1GsyrbL3bCrClw73CI5KkcMg7g8TN EIxbT/6cXFWNg/I59VT8o7DuRaT6fFN62wmebH/1Jh/e4HiPMGTuRvsZRTKSxIBf ks6y4tmNPmhlZPgdaXd8jSihlMdiXjPVvZXqt0jYSlpli6C7kMXUlFlBxkGMwEKQ VHe6kKfPTURI -----END CERTIFICATE-----Generated at Tue Jan 20 01:21:57 2026 by rpki-client