This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/tK8WjQ4n34dyyA9SA0SO8OffSPU.roa File: tK8WjQ4n34dyyA9SA0SO8OffSPU.roa (raw, json) Hash identifier: 2hCfrLQ414DwG7kb2DlXXLyBTUkVShg+2EO39ARNMhU= Subject key identifier: B4:AF:16:8D:0E:27:DF:87:72:C8:0F:52:03:44:8E:F0:E7:DF:48:F5 Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c Certificate serial: 019B7B365811BE1D97C2870FDA515BC4E04E Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/tK8WjQ4n34dyyA9SA0SO8OffSPU.roa Signing time: Thu 01 Jan 2026 20:18:37 +0000 ROA not before: Thu 01 Jan 2026 20:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25198 IP address blocks: 144.56.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:58:11:be:1d:97:c2:87:0f:da:51:5b:c4:e0:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16055801b775e774306321455fd463fbd9273c4c Validity Not Before: Jan 1 20:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4af168d0e27df8772c80f5203448ef0e7df48f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8d:d0:93:09:4a:a2:61:c0:f2:47:fe:db:f3: 72:33:2d:f3:92:18:3a:86:97:0d:87:0d:e5:a5:e7: f7:21:c5:6c:fc:fa:ca:4c:2f:b7:61:d5:f5:dc:42: 92:8d:0e:72:50:a5:a4:7e:ec:b1:53:f1:89:ca:77: 79:b8:7a:97:d6:81:e9:d6:18:35:18:63:76:cd:56: 81:02:2f:94:d4:e0:51:87:cb:bd:f0:61:e4:5e:af: 63:bb:83:86:fa:67:83:a2:8f:b7:27:c8:4a:ba:e7: 36:61:59:50:11:5b:ef:fc:99:09:75:4e:73:d0:9e: 87:81:0f:6a:c4:b6:7c:2a:7f:1c:18:82:1d:be:eb: 05:f3:76:97:4e:23:ec:ba:b3:d7:43:9a:d5:88:50: 9a:ee:e6:1a:90:7c:87:60:e2:4d:15:b5:9f:8b:6a: a0:6e:18:28:65:15:d1:5a:f4:eb:3c:6c:0c:59:bf: 61:f6:c8:56:f7:b6:37:77:02:8a:c7:bc:11:76:82: 78:6f:bc:87:0a:4e:65:be:8f:e1:0a:b5:85:a8:44: ca:df:27:c1:e3:0f:06:17:7b:c5:40:ff:d2:9b:5d: 7f:4d:cb:e3:9c:27:37:93:88:20:48:3c:2e:9e:62: 84:65:b5:34:90:26:bb:de:bb:35:49:02:e4:b6:7b: cf:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:AF:16:8D:0E:27:DF:87:72:C8:0F:52:03:44:8E:F0:E7:DF:48:F5 X509v3 Authority Key Identifier: keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/tK8WjQ4n34dyyA9SA0SO8OffSPU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.56.37.0/24 Signature Algorithm: sha256WithRSAEncryption 56:c3:ee:80:27:7e:c9:1b:cb:65:00:85:c2:8f:a9:ed:12:84: 3d:12:11:4f:b7:a8:63:77:9e:49:41:5c:78:1e:d5:ac:8a:29: 86:f1:0d:01:d1:47:8a:a1:bd:c9:ff:f6:7b:b5:b8:0c:7e:5f: 89:7c:fd:b6:b2:32:d4:c0:75:89:4e:db:12:38:6a:09:73:62: a5:79:84:f0:7f:30:51:1b:3c:d2:01:9a:b2:60:4e:30:ae:f5: 1d:7e:68:59:4c:2f:cf:84:15:12:5b:39:60:7d:c6:d0:7e:5d: 2a:44:96:5f:5b:f2:cd:3d:01:7c:a5:38:10:b2:91:19:51:4d: b0:2c:00:a1:98:51:c2:f9:eb:95:f4:73:91:fb:ba:1f:e1:8c: af:2a:08:ed:60:4c:f7:d9:5e:f3:20:2f:8a:1c:42:4e:aa:3f: c1:14:31:c7:74:a8:fc:b4:c3:28:be:32:7b:75:e6:cb:5b:20: 79:2c:e4:29:a5:b1:35:12:a9:33:c2:13:f7:0c:1e:37:d0:b0: 8e:13:b7:be:90:18:7a:96:27:8e:39:4b:36:6f:51:51:e3:b7: f0:08:6c:ca:13:64:74:ba:7b:f6:6a:30:3f:ad:ff:2e:27:62: 66:20:e6:a7:51:be:b5:01:e9:17:60:95:ee:45:27:69:12:67: c7:3a:4c:02 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NlgRvh2XwocP2lFbxOBOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MDU1ODAxYjc3NWU3NzQzMDYzMjE0NTVmZDQ2M2ZiZDky NzNjNGMwHhcNMjYwMTAxMjAxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGFmMTY4ZDBlMjdkZjg3NzJjODBmNTIwMzQ0OGVmMGU3ZGY0OGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApI3QkwlKomHA8kf+2/NyMy3zkhg6 hpcNhw3lpef3IcVs/PrKTC+3YdX13EKSjQ5yUKWkfuyxU/GJynd5uHqX1oHp1hg1 GGN2zVaBAi+U1OBRh8u98GHkXq9ju4OG+meDoo+3J8hKuuc2YVlQEVvv/JkJdU5z 0J6HgQ9qxLZ8Kn8cGIIdvusF83aXTiPsurPXQ5rViFCa7uYakHyHYOJNFbWfi2qg bhgoZRXRWvTrPGwMWb9h9shW97Y3dwKKx7wRdoJ4b7yHCk5lvo/hCrWFqETK3yfB 4w8GF3vFQP/Sm11/TcvjnCc3k4ggSDwunmKEZbU0kCa73rs1SQLktnvPwQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLSvFo0OJ9+HcsgPUgNEjvDn30j1MB8GA1UdIwQY MBaAFBYFWAG3ded0MGMhRV/UY/vZJzxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgt MTM1NzE3ZWYzODhhLzEvdEs4V2pRNG4zNGR5eUE5U0EwU084T2ZmU1BVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgtMTM1NzE3ZWYzODhh LzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkDglMA0G CSqGSIb3DQEBCwUAA4IBAQBWw+6AJ37JG8tlAIXCj6ntEoQ9EhFPt6hjd55JQVx4 HtWsiimG8Q0B0UeKob3J//Z7tbgMfl+JfP22sjLUwHWJTtsSOGoJc2KleYTwfzBR GzzSAZqyYE4wrvUdfmhZTC/PhBUSWzlgfcbQfl0qRJZfW/LNPQF8pTgQspEZUU2w LAChmFHC+euV9HOR+7of4YyvKgjtYEz32V7zIC+KHEJOqj/BFDHHdKj8tMMovjJ7 debLWyB5LOQppbE1EqkzwhP3DB430LCOE7e+kBh6lieOOUs2b1FR47fwCGzKE2R0 unv2ajA/rf8uJ2JmIOanUb61AekXYJXuRSdpEmfHOkwC -----END CERTIFICATE-----Generated at Mon Jan 19 16:54:21 2026 by rpki-client