This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/pT94ZozgB36Z8Nd7YwJ50QqiAQ4.roa File: pT94ZozgB36Z8Nd7YwJ50QqiAQ4.roa (raw, json) Hash identifier: eXcrtWjygpBdXMUN9xIvTsAQlNypAwQ7ygeMGTqRkU8= Subject key identifier: A5:3F:78:66:8C:E0:07:7E:99:F0:D7:7B:63:02:79:D1:0A:A2:01:0E Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B797DE475173311BE4683BBEEF4EAE022 Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/pT94ZozgB36Z8Nd7YwJ50QqiAQ4.roa Signing time: Thu 01 Jan 2026 12:17:32 +0000 ROA not before: Thu 01 Jan 2026 12:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 85.204.22.0/24 maxlen: 24 92.114.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:e4:75:17:33:11:be:46:83:bb:ee:f4:ea:e0:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Jan 1 12:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a53f78668ce0077e99f0d77b630279d10aa2010e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:33:de:c3:d0:b4:ef:e5:c0:89:eb:78:fd:7a: 2f:7b:56:a9:e5:0b:f4:86:db:2d:28:62:ba:6e:b7: 18:3b:2b:ff:95:9c:cc:c6:7c:c1:ab:76:87:f0:67: cc:12:33:fe:d5:57:c2:ec:fa:6e:9e:a3:a4:12:ff: 9f:bc:d8:65:0a:1d:ed:cd:8d:4f:02:05:d2:80:eb: 32:a6:8b:6d:3e:6e:47:0a:f4:28:85:61:3a:52:e7: a8:a5:ce:31:7a:14:06:42:6f:00:73:07:50:4e:ed: 30:70:7c:66:70:0a:cb:53:f5:df:9f:06:20:17:ea: 56:1c:6d:e0:fe:b5:99:9d:ab:e7:0a:08:1f:a6:40: cd:78:c8:c9:67:fe:f7:a2:3a:f9:23:97:c6:b6:4b: 87:af:94:88:b2:9e:88:de:84:91:f9:62:0b:b5:ab: 93:d4:bf:28:fd:82:2f:8c:c9:9d:d4:83:3b:f2:46: 3d:17:f4:a6:2e:2a:e2:bf:44:8d:3d:69:b0:8c:db: 8d:ca:c9:18:d0:af:33:2b:f2:41:cd:e3:cf:96:5c: 57:3b:3f:55:c7:af:a1:ae:56:05:42:47:64:10:80: a8:ce:c1:c5:dd:e5:3d:47:e3:ee:7f:0b:f6:b9:ef: 37:ec:45:73:20:3c:f5:6d:21:38:b7:a2:76:95:c2: d6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:3F:78:66:8C:E0:07:7E:99:F0:D7:7B:63:02:79:D1:0A:A2:01:0E X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/pT94ZozgB36Z8Nd7YwJ50QqiAQ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.204.22.0/24 92.114.32.0/24 Signature Algorithm: sha256WithRSAEncryption 22:a9:74:a9:16:ca:37:10:b6:1b:ec:d8:a6:88:38:d2:66:51: 49:b2:d3:86:76:d1:5b:f3:8c:46:a0:c4:5f:33:bb:28:af:9b: 2f:00:18:8b:35:79:b0:d9:0b:20:bc:f3:67:5d:bd:57:62:73: 9f:d4:73:c9:ae:d8:15:71:8e:8b:d6:86:70:bf:62:d8:74:65: 20:95:d2:06:15:34:22:2a:3e:11:b0:7d:b7:32:e8:4c:e4:66: 72:26:3d:ce:17:b2:1f:96:94:55:4e:26:55:59:40:b2:20:32: d4:fc:7e:66:4e:ba:ff:eb:90:29:fd:07:08:f8:9f:94:7e:a9: 62:5c:dc:92:43:a7:46:d6:ba:5c:5c:84:c3:21:ae:6d:43:18: 45:56:97:31:6b:d0:5b:a8:9e:7f:b0:6e:33:65:d2:c5:11:51: 02:f4:71:d8:f5:8e:38:a1:77:14:4e:60:12:be:90:d5:30:41: 36:10:43:20:1f:7b:f2:e7:3e:54:e7:60:a6:b9:3d:a5:cd:62: 0b:e1:c5:65:7b:eb:51:c4:9e:75:20:dd:d5:fc:12:9b:d7:3c: 9b:9e:53:fb:5a:7f:ae:0a:9c:58:74:01:f7:5d:9e:bc:71:df: 69:4d:6d:11:15:86:91:cc:0b:46:33:28:a0:9e:27:10:9b:b2: 33:bf:c2:4a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5feR1FzMRvkaDu+706uAiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjYwMTAxMTIxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTNmNzg2NjhjZTAwNzdlOTlmMGQ3N2I2MzAyNzlkMTBhYTIwMTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTPew9C07+XAiet4/Xove1ap5Qv0 htstKGK6brcYOyv/lZzMxnzBq3aH8GfMEjP+1VfC7PpunqOkEv+fvNhlCh3tzY1P AgXSgOsypottPm5HCvQohWE6Uueopc4xehQGQm8AcwdQTu0wcHxmcArLU/XfnwYg F+pWHG3g/rWZnavnCggfpkDNeMjJZ/73ojr5I5fGtkuHr5SIsp6I3oSR+WILtauT 1L8o/YIvjMmd1IM78kY9F/SmLiriv0SNPWmwjNuNyskY0K8zK/JBzePPllxXOz9V x6+hrlYFQkdkEICozsHF3eU9R+Pufwv2ue837EVzIDz1bSE4t6J2lcLW5QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKU/eGaM4Ad+mfDXe2MCedEKogEOMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvcFQ5NFpvemdCMzZaOE5kN1l3SjUwUXFpQVE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVcwWAwQA XHIgMA0GCSqGSIb3DQEBCwUAA4IBAQAiqXSpFso3ELYb7NimiDjSZlFJstOGdtFb 84xGoMRfM7sor5svABiLNXmw2QsgvPNnXb1XYnOf1HPJrtgVcY6L1oZwv2LYdGUg ldIGFTQiKj4RsH23MuhM5GZyJj3OF7IflpRVTiZVWUCyIDLU/H5mTrr/65Ap/QcI +J+UfqliXNySQ6dG1rpcXITDIa5tQxhFVpcxa9BbqJ5/sG4zZdLFEVEC9HHY9Y44 oXcUTmASvpDVMEE2EEMgH3vy5z5U52CmuT2lzWIL4cVle+tRxJ51IN3V/BKb1zyb nlP7Wn+uCpxYdAH3XZ68cd9pTW0RFYaRzAtGMyignicQm7Izv8JK -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:23 2026 by rpki-client