This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/T3CKp-T8-05dSPhptIfDdJr4NUc.roa File: T3CKp-T8-05dSPhptIfDdJr4NUc.roa (raw, json) Hash identifier: UZu3gFZJZB37xGdAM4v9jg5Nhm3ASOdF6iSWCqmBPVQ= Subject key identifier: 4F:70:8A:A7:E4:FC:FB:4E:5D:48:F8:69:B4:87:C3:74:9A:F8:35:47 Certificate issuer: /CN=ef49cac151db158ed6a856335855557f4e75f725 Certificate serial: 019B7DCA1CEE690E42EFF7EBF7FC0BFB91A2 Authority key identifier: EF:49:CA:C1:51:DB:15:8E:D6:A8:56:33:58:55:55:7F:4E:75:F7:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/T3CKp-T8-05dSPhptIfDdJr4NUc.roa Signing time: Fri 02 Jan 2026 08:19:16 +0000 ROA not before: Fri 02 Jan 2026 08:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47958 IP address blocks: 91.208.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.crl rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:1c:ee:69:0e:42:ef:f7:eb:f7:fc:0b:fb:91:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef49cac151db158ed6a856335855557f4e75f725 Validity Not Before: Jan 2 08:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f708aa7e4fcfb4e5d48f869b487c3749af83547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:fa:83:6f:cc:49:de:26:e5:fb:88:42:6c:f6: 87:c0:33:33:9e:df:e2:e9:ea:0d:de:ce:56:c3:98: 6c:0c:03:f2:e4:a2:c3:93:bd:c2:b6:eb:6d:ec:e3: 1f:f0:51:ba:1a:e3:35:68:2f:6e:50:d4:b3:aa:44: 35:56:c8:1d:1b:b0:f4:02:7c:76:4a:df:2d:33:2d: 1b:04:58:d6:d8:82:b4:2b:be:f5:7f:e9:75:75:37: 0e:e3:c0:7a:c9:50:6e:46:d2:9c:d9:78:42:72:ab: 25:30:12:6a:d5:b4:1a:dc:2b:01:27:d9:ee:9e:f4: 71:a8:20:8c:53:65:08:22:2e:a1:e6:f0:88:ae:ea: a4:3e:5d:cc:a4:d0:05:15:8e:67:32:ea:ca:7c:a4: 62:7e:7e:9d:ab:52:6a:71:f5:5c:52:8a:40:21:a2: 14:96:09:e1:44:57:5f:4e:c5:90:0d:bb:ca:b5:47: 93:54:05:66:0e:81:ee:05:74:ad:32:6d:8e:f3:8b: d7:5a:d0:35:c8:2a:cb:c9:d5:8a:8d:fb:c1:4a:23: e4:08:23:6e:18:85:9d:54:74:18:a7:97:89:75:22: f4:41:03:86:0d:46:de:88:49:e4:93:75:12:3b:eb: fd:1f:49:38:f3:cd:3d:ff:17:31:61:f7:4d:c0:40: 18:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:70:8A:A7:E4:FC:FB:4E:5D:48:F8:69:B4:87:C3:74:9A:F8:35:47 X509v3 Authority Key Identifier: keyid:EF:49:CA:C1:51:DB:15:8E:D6:A8:56:33:58:55:55:7F:4E:75:F7:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/T3CKp-T8-05dSPhptIfDdJr4NUc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.215.0/24 Signature Algorithm: sha256WithRSAEncryption 25:e1:dd:df:d7:e8:0e:23:92:f0:f3:59:0a:79:1f:17:67:2c: 7b:fc:ca:17:c3:b7:93:b7:f3:5d:1a:12:a4:e5:c3:eb:52:ca: 03:ee:5f:a3:3c:fc:dd:21:d3:e4:a3:d2:01:6e:f0:2b:99:1a: a5:e3:2a:a3:58:a7:70:7a:a0:40:7c:89:b7:a2:b5:97:e3:6a: 52:00:df:ce:bd:bf:93:e6:bf:67:a7:df:6f:e6:43:37:da:56: f7:9a:74:48:1b:e8:18:09:4f:73:f1:16:62:b0:6e:22:05:93: fd:b3:49:01:b0:49:ef:81:a6:d4:65:60:a2:db:fd:7e:b1:4d: 51:c7:31:8c:65:f2:0f:bd:bf:18:54:2e:8a:68:75:21:c7:65: 7f:1b:83:cc:60:a5:56:b1:9f:66:9a:32:76:96:60:35:a1:8e: 69:15:ee:33:8f:b9:15:6b:8c:f8:f7:94:dd:52:19:d4:0a:91: 44:01:de:6d:cb:21:67:c2:e7:87:0b:f9:6b:d3:fd:ed:82:d9: a8:64:ed:85:9e:ab:fa:a7:2f:ce:a0:96:90:ca:e4:d0:a5:bc: fa:36:87:49:3b:1a:8a:64:a9:44:79:bf:dc:f4:57:a3:44:b6: fb:a1:26:8e:0c:da:53:73:eb:26:2a:fe:67:e8:65:47:78:47: 0d:9a:5b:19 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yhzuaQ5C7/fr9/wL+5GiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNDljYWMxNTFkYjE1OGVkNmE4NTYzMzU4NTU1NTdmNGU3 NWY3MjUwHhcNMjYwMTAyMDgxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjcwOGFhN2U0ZmNmYjRlNWQ0OGY4NjliNDg3YzM3NDlhZjgzNTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7fqDb8xJ3ibl+4hCbPaHwDMznt/i 6eoN3s5Ww5hsDAPy5KLDk73Ctutt7OMf8FG6GuM1aC9uUNSzqkQ1VsgdG7D0Anx2 St8tMy0bBFjW2IK0K771f+l1dTcO48B6yVBuRtKc2XhCcqslMBJq1bQa3CsBJ9nu nvRxqCCMU2UIIi6h5vCIruqkPl3MpNAFFY5nMurKfKRifn6dq1JqcfVcUopAIaIU lgnhRFdfTsWQDbvKtUeTVAVmDoHuBXStMm2O84vXWtA1yCrLydWKjfvBSiPkCCNu GIWdVHQYp5eJdSL0QQOGDUbeiEnkk3USO+v9H0k48809/xcxYfdNwEAYdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE9wiqfk/PtOXUj4abSHw3Sa+DVHMB8GA1UdIwQY MBaAFO9JysFR2xWO1qhWM1hVVX9OdfclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzBuS3dWSGJGWTdXcUZZeldGVlZmMDUxOXlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80ZDRlNGMtZDZhOS00MjJkLWJhY2It ZDhhN2EyY2M4NzNiLzEvVDNDS3AtVDgtMDVkU1BocHRJZkRkSnI0TlVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC80ZDRlNGMtZDZhOS00MjJkLWJhY2ItZDhhN2EyY2M4NzNi LzEvNzBuS3dWSGJGWTdXcUZZeldGVlZmMDUxOXlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9DXMA0G CSqGSIb3DQEBCwUAA4IBAQAl4d3f1+gOI5Lw81kKeR8XZyx7/MoXw7eTt/NdGhKk 5cPrUsoD7l+jPPzdIdPko9IBbvArmRql4yqjWKdweqBAfIm3orWX42pSAN/Ovb+T 5r9np99v5kM32lb3mnRIG+gYCU9z8RZisG4iBZP9s0kBsEnvgabUZWCi2/1+sU1R xzGMZfIPvb8YVC6KaHUhx2V/G4PMYKVWsZ9mmjJ2lmA1oY5pFe4zj7kVa4z495Td UhnUCpFEAd5tyyFnwueHC/lr0/3tgtmoZO2Fnqv6py/OoJaQyuTQpbz6NodJOxqK ZKlEeb/c9FejRLb7oSaODNpTc+smKv5n6GVHeEcNmlsZ -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:39 2026 by rpki-client