This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/To9dQnlzmHPfK3x9W-AWj_UHSq8.roa File: To9dQnlzmHPfK3x9W-AWj_UHSq8.roa (raw, json) Hash identifier: YpG1hJSyXQP2wME1UG5h51OZevZLv14I2jAEQWeHX/Q= Subject key identifier: 4E:8F:5D:42:79:73:98:73:DF:2B:7C:7D:5B:E0:16:8F:F5:07:4A:AF Certificate issuer: /CN=030581eaa969036c33f92ebc4844dc22c55e7513 Certificate serial: 019B7D5C7B40BEFB2B89C6BEAA14939AD07B Authority key identifier: 03:05:81:EA:A9:69:03:6C:33:F9:2E:BC:48:44:DC:22:C5:5E:75:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwWB6qlpA2wz-S68SETcIsVedRM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/To9dQnlzmHPfK3x9W-AWj_UHSq8.roa Signing time: Fri 02 Jan 2026 06:19:31 +0000 ROA not before: Fri 02 Jan 2026 06:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57873 IP address blocks: 37.143.64.0/21 maxlen: 21 185.14.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.crl rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.mft rsync://rpki.ripe.net/repository/DEFAULT/AwWB6qlpA2wz-S68SETcIsVedRM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:7b:40:be:fb:2b:89:c6:be:aa:14:93:9a:d0:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=030581eaa969036c33f92ebc4844dc22c55e7513 Validity Not Before: Jan 2 06:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e8f5d4279739873df2b7c7d5be0168ff5074aaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b3:65:e3:93:ec:71:46:83:8e:4c:61:77:69: fd:79:5b:2f:61:0a:fd:54:ca:c7:66:a9:9c:65:0f: b9:dd:5b:8c:49:94:55:d4:b8:0d:81:2a:fe:3f:05: b9:ca:07:78:f0:e1:2d:29:ad:3d:bf:90:35:92:ee: c7:36:13:10:dd:a2:bf:6c:ac:35:8a:92:86:d8:55: a6:6f:52:a8:4d:68:10:9f:76:0d:a9:9f:a0:1d:6d: 0a:6f:26:20:78:ec:fe:83:0b:f9:08:01:5a:a6:58: 2f:41:d7:d3:a1:3c:7b:85:dc:37:1a:44:76:0b:69: 86:b9:8f:77:76:0d:e9:02:7f:6c:9b:83:16:77:76: 29:33:36:cf:54:04:a5:bf:60:29:bc:a4:b2:57:b6: 66:fc:b8:24:9b:40:7f:58:d9:18:d2:3e:16:df:c1: 95:39:5c:ee:bf:c5:e4:75:10:86:62:c6:7e:c4:60: 47:c6:83:79:6e:86:d6:40:c2:18:7a:7b:a4:fe:ab: 2b:ef:d7:49:40:a4:6c:b7:80:a6:0a:bf:cb:b5:d8: f1:63:06:e1:81:f0:8f:d3:88:1d:ab:c0:05:2d:b2: b6:ee:09:73:49:9a:99:fb:18:03:3e:8b:f0:d9:fe: fc:c2:31:5f:a6:67:85:63:40:9f:62:90:4d:6f:b3: 4c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:8F:5D:42:79:73:98:73:DF:2B:7C:7D:5B:E0:16:8F:F5:07:4A:AF X509v3 Authority Key Identifier: keyid:03:05:81:EA:A9:69:03:6C:33:F9:2E:BC:48:44:DC:22:C5:5E:75:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwWB6qlpA2wz-S68SETcIsVedRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/To9dQnlzmHPfK3x9W-AWj_UHSq8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.143.64.0/21 185.14.216.0/22 Signature Algorithm: sha256WithRSAEncryption 4c:ff:3e:c6:36:e9:c2:79:82:6c:fb:d2:5f:7f:09:bc:54:c1: 09:76:50:16:75:2d:78:fd:de:76:57:68:82:9f:a0:eb:59:fa: e7:59:f1:d9:56:9f:59:c5:e0:f6:2b:5c:2e:60:5f:01:77:57: ae:3f:68:cc:90:2d:48:ba:81:3b:ff:00:7b:a4:3d:ab:1e:ce: 91:0a:38:6f:0d:4e:21:bd:9c:fa:e4:ab:46:81:9b:fb:40:51: 5f:a1:df:c7:6e:a9:88:d4:eb:ab:9a:e5:c4:d8:46:0c:ad:3f: 57:ed:e4:e6:3d:1b:d0:09:c2:35:06:9d:f4:68:e5:9a:9f:b2: e3:94:5b:d1:9d:4f:4e:a4:74:c3:b8:fa:86:aa:d4:c1:25:c0: 09:44:38:4f:ed:56:1a:29:64:45:7f:2e:c1:10:f1:a7:d2:c8: 74:57:30:de:8a:16:01:0f:93:68:1a:30:f2:0c:a0:65:cf:83: b1:37:93:36:7e:c7:86:5a:f6:9f:fd:48:c3:de:fa:6a:2b:0d: 50:e0:f4:51:a2:ba:ac:86:87:01:56:cb:c4:8c:f2:1b:fc:d7: 1e:af:f9:a7:fe:cb:f7:e9:d5:e4:ba:75:b5:fe:d9:c9:bd:a5: 07:89:91:91:1c:78:14:9a:80:d8:43:31:5b:1e:99:32:35:f6: 41:1c:0f:21 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XHtAvvsrica+qhSTmtB7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzMDU4MWVhYTk2OTAzNmMzM2Y5MmViYzQ4NDRkYzIyYzU1 ZTc1MTMwHhcNMjYwMTAyMDYxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZThmNWQ0Mjc5NzM5ODczZGYyYjdjN2Q1YmUwMTY4ZmY1MDc0YWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbNl45PscUaDjkxhd2n9eVsvYQr9 VMrHZqmcZQ+53VuMSZRV1LgNgSr+PwW5ygd48OEtKa09v5A1ku7HNhMQ3aK/bKw1 ipKG2FWmb1KoTWgQn3YNqZ+gHW0KbyYgeOz+gwv5CAFaplgvQdfToTx7hdw3GkR2 C2mGuY93dg3pAn9sm4MWd3YpMzbPVASlv2ApvKSyV7Zm/Lgkm0B/WNkY0j4W38GV OVzuv8XkdRCGYsZ+xGBHxoN5bobWQMIYenuk/qsr79dJQKRst4CmCr/LtdjxYwbh gfCP04gdq8AFLbK27glzSZqZ+xgDPovw2f78wjFfpmeFY0CfYpBNb7NM1QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFE6PXUJ5c5hz3yt8fVvgFo/1B0qvMB8GA1UdIwQY MBaAFAMFgeqpaQNsM/kuvEhE3CLFXnUTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXdXQjZxbHBBMnd6LVM2OFNFVGNJc1ZlZFJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yZjU1OGItNGE2Yi00ODI3LThmMDEt ZDg0YjJiMWU5MTMzLzEvVG85ZFFubHptSFBmSzN4OVctQVdqX1VIU3E4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8yZjU1OGItNGE2Yi00ODI3LThmMDEtZDg0YjJiMWU5MTMz LzEvQXdXQjZxbHBBMnd6LVM2OFNFVGNJc1ZlZFJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDJY9AAwQC uQ7YMA0GCSqGSIb3DQEBCwUAA4IBAQBM/z7GNunCeYJs+9Jffwm8VMEJdlAWdS14 /d52V2iCn6DrWfrnWfHZVp9ZxeD2K1wuYF8Bd1euP2jMkC1IuoE7/wB7pD2rHs6R CjhvDU4hvZz65KtGgZv7QFFfod/HbqmI1OurmuXE2EYMrT9X7eTmPRvQCcI1Bp30 aOWan7LjlFvRnU9OpHTDuPqGqtTBJcAJRDhP7VYaKWRFfy7BEPGn0sh0VzDeihYB D5NoGjDyDKBlz4OxN5M2fseGWvaf/UjD3vpqKw1Q4PRRorqshocBVsvEjPIb/Nce r/mn/sv36dXkunW1/tnJvaUHiZGRHHgUmoDYQzFbHpkyNfZBHA8h -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:45 2026 by rpki-client