This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/T65RDGY7jOSroAgPwqBJYPhLD_4.roa File: T65RDGY7jOSroAgPwqBJYPhLD_4.roa (raw, json) Hash identifier: /88fIxUYsWhK6bpbqKiBO/jzJhKYSoaaRWLN0hL9Kf0= Subject key identifier: 4F:AE:51:0C:66:3B:8C:E4:AB:A0:08:0F:C2:A0:49:60:F8:4B:0F:FE Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528 Certificate serial: 019B783440E6B7F5758A1EB82834B9EFF383 Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/T65RDGY7jOSroAgPwqBJYPhLD_4.roa Signing time: Thu 01 Jan 2026 06:17:29 +0000 ROA not before: Thu 01 Jan 2026 06:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42354 IP address blocks: 94.16.23.0/24 maxlen: 24 94.16.27.0/24 maxlen: 32 144.208.213.140/32 maxlen: 32 144.208.213.143/32 maxlen: 32 185.228.148.84/32 maxlen: 32 185.228.148.184/29 maxlen: 32 185.228.149.112/28 maxlen: 32 185.228.150.176/29 maxlen: 32 2a00:11c0:e:ffff:1::6/128 maxlen: 128 2a00:11c0:e:ffff:1::7/128 maxlen: 128 2a00:11c0:3d::/48 maxlen: 48 2a00:11c0:4b::/48 maxlen: 48 2a00:11c0:62::/48 maxlen: 128 2a00:11c0:82:359:217:146:20:72/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.mft rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:40:e6:b7:f5:75:8a:1e:b8:28:34:b9:ef:f3:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528 Validity Not Before: Jan 1 06:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4fae510c663b8ce4aba0080fc2a04960f84b0ffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:42:ed:04:4a:bf:66:c2:89:74:80:e0:bb:3b: 6a:1d:38:1c:5c:32:f0:f3:72:bd:67:3c:f4:54:36: be:df:f2:83:9f:d2:66:d3:47:d1:58:90:5b:f5:e1: 44:21:46:ad:d6:a1:48:55:40:32:51:69:5e:15:cb: bf:3f:b0:0a:ce:9f:46:98:ca:f4:78:b6:92:f9:82: af:02:59:fb:63:3d:39:1d:2c:46:93:9c:39:0d:03: 44:00:cf:ad:34:07:f9:0f:c8:cf:f3:9d:bc:f2:db: 93:19:86:68:6a:6e:a9:cc:ee:6f:0b:c1:b2:12:89: c1:55:47:fe:ca:3b:e0:10:d5:47:cd:5c:6c:0a:94: 5e:7d:0a:6d:3b:7a:93:9b:08:9f:e8:6c:c4:1b:af: 17:ea:26:53:73:16:23:07:54:21:bb:b3:90:78:8c: a7:e4:aa:70:a4:71:91:fa:13:0a:0f:62:49:bc:72: 31:18:86:ed:5f:6f:86:a5:55:b3:9e:70:57:14:cf: ab:e1:43:a8:47:14:05:f5:1c:58:9a:43:7f:bf:c0: d8:95:86:c0:9a:52:ff:bf:db:11:03:8c:15:09:8e: 38:9b:07:59:e1:4d:65:7d:e6:22:70:3a:27:d9:3b: 81:7d:16:de:f8:89:5c:1a:31:e4:a9:d3:7f:3b:cc: ba:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:AE:51:0C:66:3B:8C:E4:AB:A0:08:0F:C2:A0:49:60:F8:4B:0F:FE X509v3 Authority Key Identifier: keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/T65RDGY7jOSroAgPwqBJYPhLD_4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.16.23.0/24 94.16.27.0/24 144.208.213.140/32 144.208.213.143/32 185.228.148.84/32 185.228.148.184/29 185.228.149.112/28 185.228.150.176/29 IPv6: 2a00:11c0:e:ffff:1:0:0:6/127 2a00:11c0:3d::/48 2a00:11c0:4b::/48 2a00:11c0:62::/48 2a00:11c0:82:359:217:146:20:72/128 Signature Algorithm: sha256WithRSAEncryption 67:2c:31:b2:26:e2:c6:8f:23:a6:01:2e:fc:c8:27:38:3e:5e: b3:8a:b3:40:26:90:a0:3f:22:2e:d7:1e:06:7e:c9:9b:25:18: 2e:ac:fe:3a:64:23:00:3e:29:cd:ae:80:f7:91:c8:ec:95:ec: c8:c2:5a:26:8b:6d:64:f8:6f:7c:58:54:0f:5d:64:b6:5c:85: 39:3d:11:16:f5:d9:61:84:f0:08:ba:c4:06:b9:44:f3:58:61: 18:42:d9:eb:77:21:82:9f:07:99:e0:7a:09:14:6b:ea:29:7c: db:ca:20:5d:60:3d:20:60:92:e6:d5:08:a6:4e:af:fb:a1:48: 2b:a4:af:8a:69:70:2c:15:fd:0f:07:68:c7:25:77:56:ca:fe: 28:45:5b:1b:7f:43:c0:b9:40:10:82:5b:ae:67:fc:3c:34:5e: cc:8b:e7:5c:5d:58:b0:09:38:3a:85:90:dd:80:53:56:ab:94: 03:ee:ca:06:7e:18:83:c6:6c:ff:62:65:8e:e5:34:f0:47:3d: ea:dc:fb:8e:60:2a:d4:ac:6a:dc:c5:70:1f:7a:02:fc:60:d6: 34:af:a3:45:c6:9a:31:07:56:a5:7c:b4:3d:ca:53:ee:81:58: 32:b9:66:3e:35:14:82:a1:78:bf:a5:cd:9a:a3:59:a3:2c:73: f3:73:80:21 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgISAZt4NEDmt/V1ih64KDS57/ODMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MzlhZmViYWNlODk5YThlZTBiYjRmOGJiNDQ3NWZlMjQ3 YTE1MjgwHhcNMjYwMTAxMDYxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZmFlNTEwYzY2M2I4Y2U0YWJhMDA4MGZjMmEwNDk2MGY4NGIwZmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0LtBEq/ZsKJdIDguztqHTgcXDLw 83K9Zzz0VDa+3/KDn9Jm00fRWJBb9eFEIUat1qFIVUAyUWleFcu/P7AKzp9GmMr0 eLaS+YKvAln7Yz05HSxGk5w5DQNEAM+tNAf5D8jP85288tuTGYZoam6pzO5vC8Gy EonBVUf+yjvgENVHzVxsCpRefQptO3qTmwif6GzEG68X6iZTcxYjB1Qhu7OQeIyn 5KpwpHGR+hMKD2JJvHIxGIbtX2+GpVWznnBXFM+r4UOoRxQF9RxYmkN/v8DYlYbA mlL/v9sRA4wVCY44mwdZ4U1lfeYicDon2TuBfRbe+IlcGjHkqdN/O8y6gwIDAQAB o4IChTCCAoEwHQYDVR0OBBYEFE+uUQxmO4zkq6AID8KgSWD4Sw/+MB8GA1UdIwQY MBaAFKU5r+us6Jmo7gu0+LtEdf4kehUoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFRtdjY2em9tYWp1QzdUNHUwUjFfaVI2RlNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85OGM0ZWUtMmY1OS00NWE3LWFkYjYt NzQxMzk1OTEzMTJlLzEvVDY1UkRHWTdqT1Nyb0FnUHdxQkpZUGhMRF80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS85OGM0ZWUtMmY1OS00NWE3LWFkYjYtNzQxMzk1OTEzMTJl LzEvcFRtdjY2em9tYWp1QzdUNHUwUjFfaVI2RlNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGaBggrBgEFBQcBBwEB/wSBijCBhzA8BAIAATA2AwQAXhAX AwQAXhAbAwUAkNDVjAMFAJDQ1Y8DBQC55JRUAwUDueSUuAMFBLnklXADBQO55Jaw MEcEAgACMEEDEQEqABHAAA7//wABAAAAAAAGAwcAKgARwAA9AwcAKgARwABLAwcA KgARwABiAxEAKgARwACCA1kCFwFGACAAcjANBgkqhkiG9w0BAQsFAAOCAQEAZywx sibixo8jpgEu/MgnOD5es4qzQCaQoD8iLtceBn7JmyUYLqz+OmQjAD4pza6A95HI 7JXsyMJaJottZPhvfFhUD11ktlyFOT0RFvXZYYTwCLrEBrlE81hhGELZ63chgp8H meB6CRRr6il828ogXWA9IGCS5tUIpk6v+6FIK6SvimlwLBX9DwdoxyV3Vsr+KEVb G39DwLlAEIJbrmf8PDRezIvnXF1YsAk4OoWQ3YBTVquUA+7KBn4Yg8Zs/2JljuU0 8Ec96tz7jmAq1Kxq3MVwH3oC/GDWNK+jRcaaMQdWpXy0PcpT7oFYMrlmPjUUgqF4 v6XNmqNZoyxz83OAIQ== -----END CERTIFICATE-----Generated at Mon Jan 26 11:04:16 2026 by rpki-client