This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/TOdssmECwVP8bGD2vmk5VV7S5q8.roa File: TOdssmECwVP8bGD2vmk5VV7S5q8.roa (raw, json) Hash identifier: i0+RAc65INiM3wP9huvJS9AUFFUa8IJxYIWJTeUW7tI= Subject key identifier: 4C:E7:6C:B2:61:02:C1:53:FC:6C:60:F6:BE:69:39:55:5E:D2:E6:AF Certificate issuer: /CN=f374f734c3695e67906a7032eb2e59fb3eb41b22 Certificate serial: 019B78A341CC5712AE12B4FFE85DB090407F Authority key identifier: F3:74:F7:34:C3:69:5E:67:90:6A:70:32:EB:2E:59:FB:3E:B4:1B:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/TOdssmECwVP8bGD2vmk5VV7S5q8.roa Signing time: Thu 01 Jan 2026 08:18:43 +0000 ROA not before: Thu 01 Jan 2026 08:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56638 IP address blocks: 192.162.216.0/24 maxlen: 24 192.162.217.0/24 maxlen: 24 192.162.218.0/24 maxlen: 24 192.162.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.crl rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:41:cc:57:12:ae:12:b4:ff:e8:5d:b0:90:40:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f374f734c3695e67906a7032eb2e59fb3eb41b22 Validity Not Before: Jan 1 08:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ce76cb26102c153fc6c60f6be6939555ed2e6af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2b:ed:91:68:eb:d7:f8:f9:71:6f:8f:e9:88: eb:75:01:73:72:e2:1a:83:b0:3d:a4:77:e4:6b:10: eb:8e:a5:b3:14:20:0c:87:cf:46:98:4f:4c:c2:01: e7:3a:48:93:f9:94:37:69:71:0d:c7:16:2a:68:d3: 56:45:1f:27:7f:6f:bc:a6:f8:50:35:86:74:79:2d: 0e:83:c0:92:2d:81:d9:13:83:8c:d6:15:c5:3e:dd: b3:dd:c8:18:04:42:0e:c6:40:92:16:59:af:75:af: 3f:08:80:89:21:dc:e8:1d:78:f9:cb:59:52:c4:cd: ad:3f:30:db:4a:78:8d:9b:e0:cd:1f:89:8b:43:d3: 3e:d7:13:95:1b:b5:89:e9:ab:03:a0:65:3e:0b:1b: 2a:2a:d2:b2:66:64:58:43:be:1f:87:b4:4f:bf:78: a2:fd:20:7d:fb:63:9d:cd:28:ed:ed:53:02:e9:d7: 1e:bb:ec:f2:73:4f:dc:89:32:be:f6:d5:97:27:b9: 37:de:73:1f:5c:12:9f:7b:9c:b3:a4:92:aa:8f:aa: cf:8d:73:31:62:be:03:dc:a7:aa:72:63:ba:0b:cb: f3:4c:2a:32:d3:8d:e4:0f:86:63:db:15:92:79:00: 20:88:32:ab:cb:8f:b3:e2:3c:a1:ee:16:07:ce:2a: c7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:E7:6C:B2:61:02:C1:53:FC:6C:60:F6:BE:69:39:55:5E:D2:E6:AF X509v3 Authority Key Identifier: keyid:F3:74:F7:34:C3:69:5E:67:90:6A:70:32:EB:2E:59:FB:3E:B4:1B:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/TOdssmECwVP8bGD2vmk5VV7S5q8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.162.216.0/22 Signature Algorithm: sha256WithRSAEncryption 32:2c:36:b7:55:18:fc:72:51:b6:46:e9:63:3c:0d:75:76:24: 10:7b:9f:67:7c:c8:32:fc:4c:a2:4e:e2:9c:e6:42:4a:4f:0d: ac:8c:2e:10:32:51:19:9a:6d:98:2c:e9:4e:9b:7b:aa:db:18: e6:bc:3a:3f:df:8d:b2:b8:f9:5f:17:55:38:9a:5d:97:c6:76: fe:af:4b:47:91:0d:d8:28:a4:4e:22:7c:b5:d4:17:32:f9:65: b4:20:f9:fa:28:9c:ff:6f:f8:c8:0e:46:09:92:0b:00:be:02: 9f:e0:18:13:42:2c:70:fc:29:98:ff:5d:8c:43:97:0e:cd:08: 56:d6:12:2d:b2:53:3c:c2:49:2a:2c:60:07:25:96:7a:93:f3: 86:1a:2c:e8:52:dc:28:87:15:8f:a2:c1:18:70:db:a5:65:10: ad:03:78:ae:b8:e4:93:5b:61:12:5d:18:a8:53:e0:79:32:52: 49:90:52:56:76:63:75:68:c9:a0:50:16:fa:b2:d5:17:13:1a: fd:08:53:71:a9:e2:e5:b2:9e:a3:5d:ed:70:40:f0:52:98:45: 38:24:f5:7e:ce:1f:42:34:5a:b1:cd:cc:34:56:4e:d9:6e:93: 66:cd:64:17:90:87:c3:4c:d4:dc:52:ab:47:6f:71:64:fb:0b: 59:c1:f1:3c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o0HMVxKuErT/6F2wkEB/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzNzRmNzM0YzM2OTVlNjc5MDZhNzAzMmViMmU1OWZiM2Vi NDFiMjIwHhcNMjYwMTAxMDgxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Y2U3NmNiMjYxMDJjMTUzZmM2YzYwZjZiZTY5Mzk1NTVlZDJlNmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSvtkWjr1/j5cW+P6YjrdQFzcuIa g7A9pHfkaxDrjqWzFCAMh89GmE9MwgHnOkiT+ZQ3aXENxxYqaNNWRR8nf2+8pvhQ NYZ0eS0Og8CSLYHZE4OM1hXFPt2z3cgYBEIOxkCSFlmvda8/CICJIdzoHXj5y1lS xM2tPzDbSniNm+DNH4mLQ9M+1xOVG7WJ6asDoGU+CxsqKtKyZmRYQ74fh7RPv3ii /SB9+2OdzSjt7VMC6dceu+zyc0/ciTK+9tWXJ7k33nMfXBKfe5yzpJKqj6rPjXMx Yr4D3KeqcmO6C8vzTCoy043kD4Zj2xWSeQAgiDKry4+z4jyh7hYHzirHeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEznbLJhAsFT/Gxg9r5pOVVe0uavMB8GA1UdIwQY MBaAFPN09zTDaV5nkGpwMusuWfs+tBsiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODNUM05NTnBYbWVRYW5BeTZ5NVotejYwR3lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mNzQ5MTQtZGRhOC00ZDQ1LTk5OTIt NGJlZjgzMjhhYWFiLzEvVE9kc3NtRUN3VlA4YkdEMnZtazVWVjdTNXE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9mNzQ5MTQtZGRhOC00ZDQ1LTk5OTItNGJlZjgzMjhhYWFi LzEvODNUM05NTnBYbWVRYW5BeTZ5NVotejYwR3lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwKLYMA0G CSqGSIb3DQEBCwUAA4IBAQAyLDa3VRj8clG2RuljPA11diQQe59nfMgy/EyiTuKc 5kJKTw2sjC4QMlEZmm2YLOlOm3uq2xjmvDo/342yuPlfF1U4ml2Xxnb+r0tHkQ3Y KKROIny11Bcy+WW0IPn6KJz/b/jIDkYJkgsAvgKf4BgTQixw/CmY/12MQ5cOzQhW 1hItslM8wkkqLGAHJZZ6k/OGGizoUtwohxWPosEYcNulZRCtA3iuuOSTW2ESXRio U+B5MlJJkFJWdmN1aMmgUBb6stUXExr9CFNxqeLlsp6jXe1wQPBSmEU4JPV+zh9C NFqxzcw0Vk7ZbpNmzWQXkIfDTNTcUqtHb3Fk+wtZwfE8 -----END CERTIFICATE-----Generated at Sat Jan 10 22:06:57 2026 by rpki-client