This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/td4dGRbuQXuKOfRIriO4IH6YFGY.roa File: td4dGRbuQXuKOfRIriO4IH6YFGY.roa (raw, json) Hash identifier: h708rv3/l6vNPHP6e/EPvLnr8GERga9y5D+OKNGmAAY= Subject key identifier: B5:DE:1D:19:16:EE:41:7B:8A:39:F4:48:AE:23:B8:20:7E:98:14:66 Certificate issuer: /CN=12731f6d7e3e20ad9bf31b8acd606f0893b9fe04 Certificate serial: 019B7F1551E34A842DEFA16E100D6D878DAD Authority key identifier: 12:73:1F:6D:7E:3E:20:AD:9B:F3:1B:8A:CD:60:6F:08:93:B9:FE:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/td4dGRbuQXuKOfRIriO4IH6YFGY.roa Signing time: Fri 02 Jan 2026 14:21:02 +0000 ROA not before: Fri 02 Jan 2026 14:21:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8820 IP address blocks: 92.119.104.0/22 maxlen: 24 2a09:b0c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:51:e3:4a:84:2d:ef:a1:6e:10:0d:6d:87:8d:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12731f6d7e3e20ad9bf31b8acd606f0893b9fe04 Validity Not Before: Jan 2 14:21:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5de1d1916ee417b8a39f448ae23b8207e981466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b9:04:77:44:71:dd:93:be:b6:88:5f:33:36: 4d:7c:5b:4b:f3:ff:9b:9a:61:d7:43:d3:65:a5:28: be:9b:18:80:e4:8d:0f:22:6f:07:95:54:ff:ae:28: fe:0d:01:48:a7:29:42:ed:e1:92:94:fa:cb:9d:e4: fd:f5:c3:c5:17:22:87:b4:65:f2:66:63:af:c1:76: b3:8a:40:10:49:1d:e8:b4:b1:32:0c:b9:5f:26:26: 36:0c:8e:4f:ad:c4:7e:25:83:43:1f:c0:3d:62:e1: 0b:96:a3:12:0c:0e:d4:b7:36:5f:a5:dd:1e:c7:e8: 67:77:92:58:c5:7e:36:7a:f4:04:a3:73:5d:c8:0f: b3:85:ef:0f:4a:87:eb:60:0b:01:45:b8:ec:1f:6b: 39:b9:8a:7c:47:28:a7:7f:0b:fb:d4:78:c1:a2:ae: cd:03:b6:2d:44:17:e0:0f:30:e2:99:56:e0:52:4b: b1:54:60:f8:77:b8:3e:f6:45:68:10:60:04:e4:2c: d1:97:77:e9:69:a7:8c:a6:ad:30:16:d7:8c:e6:31: c1:cc:b8:a2:54:83:b3:c9:dc:97:40:6c:2e:26:9f: ae:b2:f3:5b:9b:4f:57:4f:c0:72:26:92:16:e8:76: 5a:a9:17:f2:33:5d:58:45:ac:38:9c:7a:92:2a:f7: 28:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:DE:1D:19:16:EE:41:7B:8A:39:F4:48:AE:23:B8:20:7E:98:14:66 X509v3 Authority Key Identifier: keyid:12:73:1F:6D:7E:3E:20:AD:9B:F3:1B:8A:CD:60:6F:08:93:B9:FE:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/td4dGRbuQXuKOfRIriO4IH6YFGY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.119.104.0/22 IPv6: 2a09:b0c0::/32 Signature Algorithm: sha256WithRSAEncryption 0e:07:09:93:15:8c:0d:18:5e:d2:d1:88:ab:e9:fa:fc:0a:5a: 65:d7:d4:6f:09:41:a1:38:d6:6c:35:a0:36:27:03:fa:a1:db: 13:8e:5c:23:7a:36:61:6c:40:34:26:4a:0b:79:55:f6:2e:22: 80:94:fc:b2:bc:2e:63:2d:f1:8f:b3:a2:1d:8f:81:0a:7f:59: d1:ae:6e:fa:87:8c:79:35:71:e4:ea:b3:7f:db:a4:62:f1:60: ae:11:62:64:61:a6:dd:e6:46:ef:55:48:ed:c8:1c:f1:48:6a: 8c:88:41:48:3b:cf:62:5d:2b:dd:cd:34:bc:9a:63:e5:c4:e1: 3c:f5:54:ec:1a:70:6b:d7:33:69:02:f9:21:0a:9c:fb:6d:8d: 46:a8:44:ad:4f:f7:38:31:a4:66:ee:b0:18:dd:f8:53:83:70: b9:e2:49:95:1a:c9:bb:99:aa:61:b1:58:55:3b:28:8a:df:38: 10:5d:29:c1:3a:a4:44:09:2e:d5:a3:4c:bf:c1:1d:79:be:8a: e2:fa:0a:65:9f:9e:19:0f:4a:24:03:1a:64:32:5a:01:d3:f7: c8:6f:e5:d6:b4:a6:f9:44:f6:1c:30:0b:56:2e:bd:5e:55:b0: 82:b4:a3:50:a2:c0:63:7b:71:59:4a:c3:3e:31:57:db:36:4c: cd:50:aa:79 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/FVHjSoQt76FuEA1th42tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNzMxZjZkN2UzZTIwYWQ5YmYzMWI4YWNkNjA2ZjA4OTNi OWZlMDQwHhcNMjYwMTAyMTQyMTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNWRlMWQxOTE2ZWU0MTdiOGEzOWY0NDhhZTIzYjgyMDdlOTgxNDY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7kEd0Rx3ZO+tohfMzZNfFtL8/+b mmHXQ9NlpSi+mxiA5I0PIm8HlVT/rij+DQFIpylC7eGSlPrLneT99cPFFyKHtGXy ZmOvwXazikAQSR3otLEyDLlfJiY2DI5PrcR+JYNDH8A9YuELlqMSDA7UtzZfpd0e x+hnd5JYxX42evQEo3NdyA+zhe8PSofrYAsBRbjsH2s5uYp8Ryinfwv71HjBoq7N A7YtRBfgDzDimVbgUkuxVGD4d7g+9kVoEGAE5CzRl3fpaaeMpq0wFteM5jHBzLii VIOzydyXQGwuJp+usvNbm09XT8ByJpIW6HZaqRfyM11YRaw4nHqSKvcoUwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLXeHRkW7kF7ijn0SK4juCB+mBRmMB8GA1UdIwQY MBaAFBJzH21+PiCtm/Mbis1gbwiTuf4EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW5NZmJYNC1JSzJiOHh1S3pXQnZDSk81X2dRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC85MzY0YmYtMDFhYi00NDdiLWFiMWEt MWQ3NzJlMmU2NDM4LzEvdGQ0ZEdSYnVRWHVLT2ZSSXJpTzRJSDZZRkdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC85MzY0YmYtMDFhYi00NDdiLWFiMWEtMWQ3NzJlMmU2NDM4 LzEvRW5NZmJYNC1JSzJiOHh1S3pXQnZDSk81X2dRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCXHdoMA0E AgACMAcDBQAqCbDAMA0GCSqGSIb3DQEBCwUAA4IBAQAOBwmTFYwNGF7S0Yir6fr8 Clpl19RvCUGhONZsNaA2JwP6odsTjlwjejZhbEA0JkoLeVX2LiKAlPyyvC5jLfGP s6Idj4EKf1nRrm76h4x5NXHk6rN/26Ri8WCuEWJkYabd5kbvVUjtyBzxSGqMiEFI O89iXSvdzTS8mmPlxOE89VTsGnBr1zNpAvkhCpz7bY1GqEStT/c4MaRm7rAY3fhT g3C54kmVGsm7maphsVhVOyiK3zgQXSnBOqRECS7Vo0y/wR15vori+gpln54ZD0ok AxpkMloB0/fIb+XWtKb5RPYcMAtWLr1eVbCCtKNQosBje3FZSsM+MVfbNkzNUKp5 -----END CERTIFICATE-----Generated at Wed Jan 21 04:22:03 2026 by rpki-client