This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/TDb_WNaFjO0RYfDvEP-r8qDMjQk.roa File: TDb_WNaFjO0RYfDvEP-r8qDMjQk.roa (raw, json) Hash identifier: DnKOgJiTKnDgnIT3ku3+vZFVsiiqADxGcMM9uvWXlRs= Subject key identifier: 4C:36:FF:58:D6:85:8C:ED:11:61:F0:EF:10:FF:AB:F2:A0:CC:8D:09 Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B797DE4A7ED50D3FEFF4494C65E77D93F Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/TDb_WNaFjO0RYfDvEP-r8qDMjQk.roa Signing time: Thu 01 Jan 2026 12:17:32 +0000 ROA not before: Thu 01 Jan 2026 12:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 91.208.61.0/24 maxlen: 24 206.245.156.0/24 maxlen: 24 212.192.16.0/23 maxlen: 23 212.192.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:e4:a7:ed:50:d3:fe:ff:44:94:c6:5e:77:d9:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Jan 1 12:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c36ff58d6858ced1161f0ef10ffabf2a0cc8d09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6a:78:b0:4b:0a:fb:d4:25:b0:a2:34:53:bd: 15:4a:0a:d9:58:89:3a:75:0b:d5:d4:fc:35:9f:a3: d5:48:43:4f:45:c3:86:68:b4:5c:81:4a:bb:30:c1: 4f:02:66:bc:da:30:ed:06:a9:de:7e:44:37:4b:9f: 09:6d:31:6b:bb:85:a1:d2:e4:ba:0e:6f:45:10:13: 61:6e:41:71:31:e6:3a:18:a9:68:de:a0:62:07:9e: b7:a1:b6:89:49:e5:f4:b5:01:27:bc:15:57:15:84: 4f:ce:50:5e:0a:c4:9d:52:b1:6d:37:91:14:88:5e: d9:5f:d7:72:84:40:41:db:e5:32:c2:be:60:e5:46: a1:20:7f:35:d0:f6:f0:d9:a9:95:22:8c:fc:a5:37: 18:5a:c9:26:14:b9:06:e6:87:59:b6:4a:de:52:cc: 76:ef:13:2d:7d:1a:dd:6a:bd:16:35:4d:25:d8:33: 0e:b2:a9:45:9a:b4:bf:6f:4f:f2:1d:35:d4:69:56: 2f:0a:90:71:c2:77:f7:bf:17:29:81:2e:4c:8d:61: 5f:35:5f:41:d3:b3:2c:b8:2b:60:35:44:dc:dc:a8: 05:54:4a:88:bf:cb:e6:64:e7:6c:af:01:4e:d2:3d: c4:f3:3e:ba:20:fb:c7:1e:22:6f:bb:99:23:f9:c9: c8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:36:FF:58:D6:85:8C:ED:11:61:F0:EF:10:FF:AB:F2:A0:CC:8D:09 X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/TDb_WNaFjO0RYfDvEP-r8qDMjQk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.61.0/24 206.245.156.0/24 212.192.16.0/22 Signature Algorithm: sha256WithRSAEncryption 84:09:36:67:bf:4e:5e:3e:9a:f6:77:d8:6b:49:9e:6d:3c:14: cb:fa:64:2d:c7:e4:76:0c:e3:51:55:55:f0:93:6e:0d:fb:fb: c8:bc:2d:c7:7e:5d:06:e8:1c:54:63:47:fa:04:e7:e7:c3:4f: 51:fe:dc:97:30:b1:0f:27:0b:e9:ef:2b:5c:ff:05:28:57:cd: 12:b9:f7:11:c1:0d:bf:4f:d6:d1:01:08:6c:87:07:58:e9:f8: 7d:ce:2c:98:b2:07:1a:0e:b7:88:71:3e:48:0d:85:f8:bd:7b: cc:dd:ff:01:b0:f0:b1:62:6f:35:6d:29:d1:91:f8:b5:02:a6: cf:a6:ca:ba:a2:40:e4:1e:2f:12:21:90:81:97:29:b0:13:91: bf:6f:0d:42:ed:b5:5b:61:da:48:c5:72:d8:db:0d:01:95:47: 1d:83:6f:3f:9c:22:f8:81:12:fc:00:ea:27:c6:f5:46:c8:c2: 65:43:03:5f:23:8b:62:fc:47:af:9d:48:cd:c3:83:0b:43:b8: 15:a6:6c:9d:79:79:de:a2:7e:c8:68:09:56:30:59:bf:2f:df: f3:aa:4d:5c:ff:fd:2a:fc:d8:a1:3b:65:62:44:c9:4d:29:4c: 5b:91:96:9d:bd:47:14:31:e7:e0:ea:f2:25:fb:6d:de:d4:61: 15:b7:1c:b2 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5feSn7VDT/v9ElMZed9k/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjYwMTAxMTIxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzM2ZmY1OGQ2ODU4Y2VkMTE2MWYwZWYxMGZmYWJmMmEwY2M4ZDA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2p4sEsK+9QlsKI0U70VSgrZWIk6 dQvV1Pw1n6PVSENPRcOGaLRcgUq7MMFPAma82jDtBqnefkQ3S58JbTFru4Wh0uS6 Dm9FEBNhbkFxMeY6GKlo3qBiB563obaJSeX0tQEnvBVXFYRPzlBeCsSdUrFtN5EU iF7ZX9dyhEBB2+Uywr5g5UahIH810Pbw2amVIoz8pTcYWskmFLkG5odZtkreUsx2 7xMtfRrdar0WNU0l2DMOsqlFmrS/b0/yHTXUaVYvCpBxwnf3vxcpgS5MjWFfNV9B 07MsuCtgNUTc3KgFVEqIv8vmZOdsrwFO0j3E8z66IPvHHiJvu5kj+cnIRQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEw2/1jWhYztEWHw7xD/q/KgzI0JMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvVERiX1dOYUZqTzBSWWZEdkVQLXI4cURNalFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW9A9AwQA zvWcAwQC1MAQMA0GCSqGSIb3DQEBCwUAA4IBAQCECTZnv05ePpr2d9hrSZ5tPBTL +mQtx+R2DONRVVXwk24N+/vIvC3Hfl0G6BxUY0f6BOfnw09R/tyXMLEPJwvp7ytc /wUoV80SufcRwQ2/T9bRAQhshwdY6fh9ziyYsgcaDreIcT5IDYX4vXvM3f8BsPCx Ym81bSnRkfi1AqbPpsq6okDkHi8SIZCBlymwE5G/bw1C7bVbYdpIxXLY2w0BlUcd g28/nCL4gRL8AOonxvVGyMJlQwNfI4ti/EevnUjNw4MLQ7gVpmydeXneon7IaAlW MFm/L9/zqk1c//0q/NihO2ViRMlNKUxbkZadvUcUMefg6vIl+23e1GEVtxyy -----END CERTIFICATE-----Generated at Mon Jan 19 14:40:13 2026 by rpki-client