This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/tMXoSf6LxNsmC5J7cfYSPA1o4zk.roa File: tMXoSf6LxNsmC5J7cfYSPA1o4zk.roa (raw, json) Hash identifier: ii0NII0l7BWUxbk8ADw7qVCQlZxcV1MHQBpo6rjIuak= Subject key identifier: B4:C5:E8:49:FE:8B:C4:DB:26:0B:92:7B:71:F6:12:3C:0D:68:E3:39 Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B797DE38FFD675576F58EC8A643848C1B Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/tMXoSf6LxNsmC5J7cfYSPA1o4zk.roa Signing time: Thu 01 Jan 2026 12:17:31 +0000 ROA not before: Thu 01 Jan 2026 12:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13347 IP address blocks: 89.125.40.0/21 maxlen: 21 167.17.32.0/21 maxlen: 21 167.17.41.0/24 maxlen: 24 167.17.42.0/23 maxlen: 23 167.17.44.0/23 maxlen: 23 167.17.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:e3:8f:fd:67:55:76:f5:8e:c8:a6:43:84:8c:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Jan 1 12:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4c5e849fe8bc4db260b927b71f6123c0d68e339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:23:a9:7a:40:8a:bc:d8:f7:0e:67:6f:c6:65: 94:40:56:5e:9c:b2:e4:5b:66:cc:73:fa:f5:fc:08: fd:e2:9f:c1:62:b0:67:d1:f0:ab:9f:b6:34:1a:8f: 78:3d:5b:67:65:8f:c8:99:73:dc:e0:47:89:4a:ee: db:0e:74:f8:2f:1c:ca:dc:f4:3c:b1:5a:3b:c6:0a: c8:30:09:f3:00:13:75:ff:96:19:c7:c0:6c:87:a5: 68:cd:5a:7b:8b:7a:44:bf:27:2e:41:03:4f:41:e4: a7:f4:ac:35:30:e8:d5:6b:23:dd:d2:c7:3a:c9:2a: 33:15:b7:b7:86:f5:47:ea:b5:4d:4d:c8:56:71:e1: 4a:68:4e:35:1f:dd:f5:db:d9:60:da:5d:bf:bd:a1: 16:84:65:66:c9:2b:7b:64:d9:d8:b0:80:21:49:b5: d2:b2:75:03:e9:79:ca:e2:98:36:69:ab:bd:50:25: 31:ed:94:62:f8:49:6f:0b:f7:fd:8e:ef:5f:b3:93: 1e:a7:1b:00:cc:fe:d5:f2:37:b0:74:13:04:34:75: b2:9b:64:30:c5:01:a5:ea:de:52:57:32:bb:41:25: 48:15:e5:74:e5:b0:16:43:3a:98:19:29:a8:b7:eb: 56:46:44:47:0d:0d:0b:73:56:f1:93:65:9e:28:33: b4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C5:E8:49:FE:8B:C4:DB:26:0B:92:7B:71:F6:12:3C:0D:68:E3:39 X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/tMXoSf6LxNsmC5J7cfYSPA1o4zk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.125.40.0/21 167.17.32.0/21 167.17.41.0-167.17.46.255 Signature Algorithm: sha256WithRSAEncryption 08:05:61:71:1d:6d:1f:c5:82:88:c2:2b:c9:81:01:20:de:c4: 7b:b9:5a:35:69:9b:9d:96:e4:c9:75:99:92:84:c5:32:ea:da: e9:1f:e6:33:2b:c3:38:75:bb:21:38:f2:8d:b6:09:b8:ed:d3: c3:41:a7:07:b9:54:5c:72:b0:85:2e:25:bc:4d:a2:b0:4d:b5: 5f:35:76:38:27:29:8a:5c:84:96:50:bf:25:9d:50:2b:83:9e: c1:87:b3:65:60:b2:a8:0a:bd:dd:4b:37:f9:24:21:54:4b:a8: 66:f8:3d:ec:fe:2b:1f:6d:0e:d2:a6:41:f7:cf:cd:d0:de:1f: db:3e:f1:58:54:67:57:46:2c:52:65:bf:f9:8f:ee:c5:17:a1: 0f:97:23:5d:02:d8:98:cf:d1:38:d5:48:a2:dd:dc:ec:ad:31: d2:80:ae:fd:79:23:92:e5:ee:80:16:94:03:69:23:c4:b4:e2: 4d:63:b0:bb:ee:ca:4b:73:7b:66:44:99:06:42:e7:1c:a8:c7: 6b:c4:78:70:65:24:e9:f7:25:22:6f:e0:d2:29:1d:85:d1:6a: e1:ed:43:1d:cd:f6:ba:da:93:10:2e:20:1e:3a:5d:38:e9:0d: 1c:22:fb:cb:70:5f:68:92:24:e9:c6:89:18:b0:be:84:c6:ea: e6:54:2c:34 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt5feOP/WdVdvWOyKZDhIwbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjYwMTAxMTIxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGM1ZTg0OWZlOGJjNGRiMjYwYjkyN2I3MWY2MTIzYzBkNjhlMzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiOpekCKvNj3DmdvxmWUQFZenLLk W2bMc/r1/Aj94p/BYrBn0fCrn7Y0Go94PVtnZY/ImXPc4EeJSu7bDnT4LxzK3PQ8 sVo7xgrIMAnzABN1/5YZx8Bsh6VozVp7i3pEvycuQQNPQeSn9Kw1MOjVayPd0sc6 ySozFbe3hvVH6rVNTchWceFKaE41H93129lg2l2/vaEWhGVmySt7ZNnYsIAhSbXS snUD6XnK4pg2aau9UCUx7ZRi+ElvC/f9ju9fs5MepxsAzP7V8jewdBMENHWym2Qw xQGl6t5SVzK7QSVIFeV05bAWQzqYGSmot+tWRkRHDQ0Lc1bxk2WeKDO0bwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFLTF6En+i8TbJguSe3H2EjwNaOM5MB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvdE1Yb1NmNkx4TnNtQzVKN2NmWVNQQTFvNHprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQDWX0oAwQD pxEgMAwDBACnESkDBACnES4wDQYJKoZIhvcNAQELBQADggEBAAgFYXEdbR/FgojC K8mBASDexHu5WjVpm52W5Ml1mZKExTLq2ukf5jMrwzh1uyE48o22Cbjt08NBpwe5 VFxysIUuJbxNorBNtV81djgnKYpchJZQvyWdUCuDnsGHs2VgsqgKvd1LN/kkIVRL qGb4Pez+Kx9tDtKmQffPzdDeH9s+8VhUZ1dGLFJlv/mP7sUXoQ+XI10C2JjP0TjV SKLd3OytMdKArv15I5Ll7oAWlANpI8S04k1jsLvuyktze2ZEmQZC5xyox2vEeHBl JOn3JSJv4NIpHYXRauHtQx3N9rrakxAuIB46XTjpDRwi+8twX2iSJOnGiRiwvoTG 6uZULDQ= -----END CERTIFICATE-----Generated at Mon Jan 19 14:38:37 2026 by rpki-client