This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/a_TmfilrYC51DeIxeNR5yHPtWGU.roa File: a_TmfilrYC51DeIxeNR5yHPtWGU.roa (raw, json) Hash identifier: ZQzv7Or17DHg9eERXQ2FmWcdzWM7p9WXVxNwimnWX+Y= Subject key identifier: 6B:F4:E6:7E:29:6B:60:2E:75:0D:E2:31:78:D4:79:C8:73:ED:58:65 Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019B7DCB75A3C1801F723F464CF0E54CAC8F Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/a_TmfilrYC51DeIxeNR5yHPtWGU.roa Signing time: Fri 02 Jan 2026 08:20:44 +0000 ROA not before: Fri 02 Jan 2026 08:20:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196695 IP address blocks: 77.83.150.0/24 maxlen: 24 193.187.104.0/24 maxlen: 24 217.28.132.0/24 maxlen: 24 217.28.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:75:a3:c1:80:1f:72:3f:46:4c:f0:e5:4c:ac:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 2 08:20:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6bf4e67e296b602e750de23178d479c873ed5865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9c:e6:e2:8c:5e:cc:19:7e:24:4d:d6:c5:e5: 34:63:25:14:36:9b:43:1f:5c:97:ea:4d:f1:ee:0c: d7:46:0e:14:4f:81:44:e2:16:12:45:e3:d2:d4:5d: 08:18:5d:82:dd:33:56:a6:4a:49:e8:9d:c3:39:15: 9c:cb:d2:55:d8:38:94:02:9a:8d:d4:81:1a:b8:95: 34:c4:c4:de:1a:5d:2f:95:55:55:92:be:4e:3e:6f: 74:cb:93:93:5f:e8:3a:be:4a:f3:2c:72:b0:cf:10: dc:6e:4a:4f:73:e8:23:c4:5a:16:1f:b0:fa:5c:3c: 1d:22:96:5a:11:a5:95:d0:e8:49:bd:05:67:2a:3d: 08:45:20:af:d7:be:35:7f:2e:f8:f1:b9:9c:5a:b0: 8a:d5:81:89:d1:61:6c:c6:93:91:9f:d6:75:a0:86: 9e:da:e2:34:94:34:59:a8:46:a3:99:94:26:b1:a0: 8f:b7:36:92:f6:50:8d:24:c7:df:08:81:2f:3c:22: 48:97:26:62:43:36:e4:64:54:64:68:db:50:55:7f: 56:41:55:a2:ae:0d:a8:85:a2:a7:31:2f:c0:e4:72: 61:23:c2:79:7b:1c:1c:d2:85:d7:c3:5a:94:a2:15: 7a:c8:5a:91:51:79:e8:d0:7a:fc:d9:c8:f5:70:93: 80:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:F4:E6:7E:29:6B:60:2E:75:0D:E2:31:78:D4:79:C8:73:ED:58:65 X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/a_TmfilrYC51DeIxeNR5yHPtWGU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.83.150.0/24 193.187.104.0/24 217.28.132.0/24 217.28.141.0/24 Signature Algorithm: sha256WithRSAEncryption 53:f1:ac:62:3d:a5:70:de:2e:64:cf:37:ee:c4:16:a5:88:e7: 10:44:f1:ce:e4:8c:8c:d0:20:dc:47:5b:10:38:ec:57:3e:c0: e1:31:ca:92:dd:44:d9:94:1f:d6:94:36:10:fd:70:36:49:c3: d2:60:5a:4c:d5:36:8f:22:2d:e9:2f:ce:76:38:01:99:de:52: 96:58:c6:b8:28:78:c0:b9:b1:33:06:95:a9:11:bc:0c:23:2c: 68:e4:b4:60:4a:19:89:db:5a:cd:e3:7c:58:10:ac:22:3a:4a: 48:f5:92:e8:e0:c8:fa:b7:63:50:3b:52:5c:4e:ad:29:ca:54: c8:70:61:55:24:19:d3:c9:be:f1:d8:b9:ef:b5:d8:78:11:27: 36:48:ff:ac:27:a7:b7:f9:a7:4e:79:b3:a9:4c:e9:84:14:97: c1:66:d4:fc:e9:be:ab:0e:ae:84:7c:08:e4:0b:9d:5a:8d:95: f7:09:ec:95:27:29:1c:a7:4d:73:25:a3:a8:2c:e4:e2:c8:95: ba:ae:f2:64:fb:f2:3f:fb:b3:3b:5e:8a:0a:ed:4a:db:ff:c9: 15:8e:0a:6d:60:80:87:dc:cf:f5:7c:de:a6:ce:89:00:e0:04: 8b:fe:06:00:2c:0e:ac:1b:f7:ad:b1:87:0c:2b:d3:99:2a:5a: b7:b1:b1:6a -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt9y3WjwYAfcj9GTPDlTKyPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTAyMDgyMDQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YmY0ZTY3ZTI5NmI2MDJlNzUwZGUyMzE3OGQ0NzljODczZWQ1ODY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5zm4oxezBl+JE3WxeU0YyUUNptD H1yX6k3x7gzXRg4UT4FE4hYSRePS1F0IGF2C3TNWpkpJ6J3DORWcy9JV2DiUApqN 1IEauJU0xMTeGl0vlVVVkr5OPm90y5OTX+g6vkrzLHKwzxDcbkpPc+gjxFoWH7D6 XDwdIpZaEaWV0OhJvQVnKj0IRSCv1741fy748bmcWrCK1YGJ0WFsxpORn9Z1oIae 2uI0lDRZqEajmZQmsaCPtzaS9lCNJMffCIEvPCJIlyZiQzbkZFRkaNtQVX9WQVWi rg2ohaKnMS/A5HJhI8J5exwc0oXXw1qUohV6yFqRUXno0Hr82cj1cJOApQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFGv05n4pa2AudQ3iMXjUechz7VhlMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvYV9UbWZpbHJZQzUxRGVJeGVOUjV5SFB0V0dVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQATVOWAwQA wbtoAwQA2RyEAwQA2RyNMA0GCSqGSIb3DQEBCwUAA4IBAQBT8axiPaVw3i5kzzfu xBaliOcQRPHO5IyM0CDcR1sQOOxXPsDhMcqS3UTZlB/WlDYQ/XA2ScPSYFpM1TaP Ii3pL852OAGZ3lKWWMa4KHjAubEzBpWpEbwMIyxo5LRgShmJ21rN43xYEKwiOkpI 9ZLo4Mj6t2NQO1JcTq0pylTIcGFVJBnTyb7x2Lnvtdh4ESc2SP+sJ6e3+adOebOp TOmEFJfBZtT86b6rDq6EfAjkC51ajZX3CeyVJykcp01zJaOoLOTiyJW6rvJk+/I/ +7M7XooK7Urb/8kVjgptYICH3M/1fN6mzokA4ASL/gYALA6sG/etsYcMK9OZKlq3 sbFq -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:56 2026 by rpki-client