This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/TFyydJckZZxmvJ2kyZiqerxMndc.roa File: TFyydJckZZxmvJ2kyZiqerxMndc.roa (raw, json) Hash identifier: 1M8O0DEiBMTzRovUAkdLb42byd8jCd0k32zelG/wKMY= Subject key identifier: 4C:5C:B2:74:97:24:65:9C:66:BC:9D:A4:C9:98:AA:7A:BC:4C:9D:D7 Certificate issuer: /CN=3979b435a3cfefe7c33a84b22f6033009a5225c7 Certificate serial: 019B7AC835C3B087D7E2A46E3C43C10EFEC9 Authority key identifier: 39:79:B4:35:A3:CF:EF:E7:C3:3A:84:B2:2F:60:33:00:9A:52:25:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXm0NaPP7-fDOoSyL2AzAJpSJcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/TFyydJckZZxmvJ2kyZiqerxMndc.roa Signing time: Thu 01 Jan 2026 18:18:19 +0000 ROA not before: Thu 01 Jan 2026 18:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15576 IP address blocks: 195.189.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft rsync://rpki.ripe.net/repository/DEFAULT/OXm0NaPP7-fDOoSyL2AzAJpSJcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:35:c3:b0:87:d7:e2:a4:6e:3c:43:c1:0e:fe:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3979b435a3cfefe7c33a84b22f6033009a5225c7 Validity Not Before: Jan 1 18:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c5cb2749724659c66bc9da4c998aa7abc4c9dd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:51:b8:ac:d7:87:08:79:ad:a1:e8:07:79:b4: 2a:93:2f:73:eb:3b:37:96:c8:97:5e:a3:44:43:e2: ee:91:1f:6d:cb:26:bc:72:11:2d:20:d4:70:4b:a0: 4a:8e:f6:f1:b4:1c:83:5c:04:ba:a2:5a:07:87:8d: b7:c2:9c:f4:e3:fd:9e:82:0d:42:cc:65:d6:86:4f: 14:57:0a:bb:a1:9f:8e:7d:47:c7:d7:23:3a:68:10: 02:ef:fb:77:c7:c2:9e:80:00:0f:0d:3c:14:d6:99: f0:a0:8a:b8:fe:bf:28:1c:e1:2b:01:2e:b3:5b:84: 99:80:98:f6:8a:be:f0:1f:b3:cb:5e:84:bd:10:21: b6:1c:af:cd:61:a6:e4:db:d6:48:b6:49:53:51:2b: ac:b0:93:4b:7f:94:b9:ed:1f:f9:7b:d8:24:14:04: dc:3b:05:11:f4:09:23:b7:0e:0f:08:89:41:f1:bd: 29:a1:dd:1d:94:5f:6d:89:68:8d:2e:1d:c6:2c:d1: 36:98:77:ca:7f:1e:06:15:de:09:bf:80:25:3e:3f: 08:d0:c8:68:5e:e3:52:33:e6:23:eb:29:78:fc:41: 8c:79:22:81:dd:ae:41:0c:49:94:c3:fb:e8:74:e5: 3a:ff:bd:8e:f3:88:78:ca:6c:a1:98:cc:c5:a5:42: 2e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:5C:B2:74:97:24:65:9C:66:BC:9D:A4:C9:98:AA:7A:BC:4C:9D:D7 X509v3 Authority Key Identifier: keyid:39:79:B4:35:A3:CF:EF:E7:C3:3A:84:B2:2F:60:33:00:9A:52:25:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXm0NaPP7-fDOoSyL2AzAJpSJcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/TFyydJckZZxmvJ2kyZiqerxMndc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.189.252.0/23 Signature Algorithm: sha256WithRSAEncryption 47:f5:e6:b8:78:9b:0f:18:37:b9:ce:31:57:3d:c9:66:ca:e3: a6:f1:01:08:0e:4e:b2:00:68:29:ca:80:ab:bf:2d:f3:49:46: e2:3f:3a:41:00:0d:f1:b7:29:29:06:40:87:4f:1c:7a:43:9d: 38:e6:0a:14:3d:eb:0a:62:c0:17:4c:ee:c6:10:91:4a:96:55: 4a:26:26:14:af:8a:74:c0:e7:45:2a:4b:4b:49:01:ce:e2:49: 40:e4:ec:b2:22:69:4d:b7:84:d1:8c:5a:b6:a7:88:86:54:a0: 59:08:21:d1:3b:fd:d7:a8:ab:28:be:fe:22:21:dc:87:28:a9: fa:1e:68:ed:9e:c5:8a:85:fe:c6:32:66:12:dc:9b:96:ae:6e: 5e:98:83:0b:c4:bd:ee:f3:64:53:26:76:88:fb:89:27:85:45: dd:81:93:df:40:80:46:98:be:8d:18:53:3f:1a:f9:92:79:b9: aa:e5:fc:41:e1:6f:a9:0b:46:40:4d:aa:a2:91:1e:e1:71:6a: 14:eb:da:6b:ba:fb:6b:a4:f9:08:be:89:33:f8:e1:0d:76:f0: 4e:fe:2d:6a:dc:c8:72:cb:dc:ba:1d:4a:85:5e:7d:ed:17:57: e5:15:c6:74:cd:cf:a7:08:35:f4:cc:98:37:35:fc:e6:78:e4: 09:b5:c4:cb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yDXDsIfX4qRuPEPBDv7JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5NzliNDM1YTNjZmVmZTdjMzNhODRiMjJmNjAzMzAwOWE1 MjI1YzcwHhcNMjYwMTAxMTgxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzVjYjI3NDk3MjQ2NTljNjZiYzlkYTRjOTk4YWE3YWJjNGM5ZGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21G4rNeHCHmtoegHebQqky9z6zs3 lsiXXqNEQ+LukR9tyya8chEtINRwS6BKjvbxtByDXAS6oloHh423wpz04/2egg1C zGXWhk8UVwq7oZ+OfUfH1yM6aBAC7/t3x8KegAAPDTwU1pnwoIq4/r8oHOErAS6z W4SZgJj2ir7wH7PLXoS9ECG2HK/NYabk29ZItklTUSussJNLf5S57R/5e9gkFATc OwUR9Akjtw4PCIlB8b0pod0dlF9tiWiNLh3GLNE2mHfKfx4GFd4Jv4AlPj8I0Mho XuNSM+Yj6yl4/EGMeSKB3a5BDEmUw/vodOU6/72O84h4ymyhmMzFpUIuZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFExcsnSXJGWcZrydpMmYqnq8TJ3XMB8GA1UdIwQY MBaAFDl5tDWjz+/nwzqEsi9gMwCaUiXHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1htME5hUFA3LWZET29TeUwyQXpBSnBTSmNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83M2E3MWUtNDQ2ZC00MWZmLWFhYmYt ZDViYzIzOWY2YTk4LzEvVEZ5eWRKY2taWnhtdkoya3laaXFlcnhNbmRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83M2E3MWUtNDQ2ZC00MWZmLWFhYmYtZDViYzIzOWY2YTk4 LzEvT1htME5hUFA3LWZET29TeUwyQXpBSnBTSmNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw738MA0G CSqGSIb3DQEBCwUAA4IBAQBH9ea4eJsPGDe5zjFXPclmyuOm8QEIDk6yAGgpyoCr vy3zSUbiPzpBAA3xtykpBkCHTxx6Q5045goUPesKYsAXTO7GEJFKllVKJiYUr4p0 wOdFKktLSQHO4klA5OyyImlNt4TRjFq2p4iGVKBZCCHRO/3XqKsovv4iIdyHKKn6 HmjtnsWKhf7GMmYS3JuWrm5emIMLxL3u82RTJnaI+4knhUXdgZPfQIBGmL6NGFM/ GvmSebmq5fxB4W+pC0ZATaqikR7hcWoU69pruvtrpPkIvokz+OENdvBO/i1q3Mhy y9y6HUqFXn3tF1flFcZ0zc+nCDX0zJg3NfzmeOQJtcTL -----END CERTIFICATE-----Generated at Mon Jan 26 19:20:04 2026 by rpki-client