This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/tHRvty-RlUw0Falh2OpgwqWerCo.roa File: tHRvty-RlUw0Falh2OpgwqWerCo.roa (raw, json) Hash identifier: 30HyZEY0OdrKQq3zOLaCSH/elkuCREvNILd0PXgRBSs= Subject key identifier: B4:74:6F:B7:2F:91:95:4C:34:15:A9:61:D8:EA:60:C2:A5:9E:AC:2A Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Certificate serial: 019B7AC8E4F078744F4F6F09EDCBA612BF88 Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/tHRvty-RlUw0Falh2OpgwqWerCo.roa Signing time: Thu 01 Jan 2026 18:19:04 +0000 ROA not before: Thu 01 Jan 2026 18:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43698 IP address blocks: 78.159.0.0/19 maxlen: 19 82.151.0.0/19 maxlen: 19 95.168.0.0/19 maxlen: 19 2a00:8d80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:e4:f0:78:74:4f:4f:6f:09:ed:cb:a6:12:bf:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Validity Not Before: Jan 1 18:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4746fb72f91954c3415a961d8ea60c2a59eac2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:15:fd:cc:a7:07:68:0a:e2:cd:3d:e0:76:12: b6:0a:3f:a4:80:cc:dc:ed:15:4d:a4:7f:cb:79:4b: c7:4b:da:6c:54:21:e8:36:c3:d1:1b:cf:a5:b7:f0: b3:f1:32:26:50:dd:38:c9:fb:9b:40:8d:1c:43:a4: 7e:19:80:07:5c:c0:f1:01:c1:b8:a2:95:b0:bd:3f: ec:87:83:c9:cb:b0:72:4d:71:fe:42:43:4f:79:71: 25:78:15:9e:96:8c:59:c4:3d:15:82:fe:7e:00:68: a3:c5:23:2e:e6:7a:e9:af:ea:ac:33:c9:d4:07:81: 2f:88:e6:83:01:ee:db:46:8c:7b:12:2c:41:72:8c: 2e:22:68:9e:2e:46:d2:25:5e:60:5f:67:88:61:3e: 64:80:bc:ad:53:cd:b1:d0:cb:f5:c5:1c:3e:20:9b: ee:e2:10:a3:e7:7b:4a:7f:f3:7c:02:8f:2d:47:7d: a7:aa:6a:f4:0e:59:56:95:b5:4c:11:c1:2a:71:31: b1:b2:51:9d:84:12:7e:1a:78:20:de:66:c5:2d:a8: dd:f1:e2:92:f2:73:e9:33:01:4b:9a:7c:38:1c:79: aa:5d:2e:3b:f7:20:7f:49:78:53:37:45:d5:40:43: 49:1b:03:48:d5:52:7a:54:4f:1f:0b:57:55:62:f6: e7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:74:6F:B7:2F:91:95:4C:34:15:A9:61:D8:EA:60:C2:A5:9E:AC:2A X509v3 Authority Key Identifier: keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/tHRvty-RlUw0Falh2OpgwqWerCo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.159.0.0/19 82.151.0.0/19 95.168.0.0/19 IPv6: 2a00:8d80::/32 Signature Algorithm: sha256WithRSAEncryption 4c:31:e3:e0:ff:54:5b:55:41:5f:c3:7e:99:1f:9c:ee:81:ac: 08:86:0e:94:71:a9:d4:d1:3e:7d:08:c8:ad:2f:5a:c7:ab:68: 0a:f4:77:22:13:ac:c4:b5:f4:2d:ae:e8:76:c3:75:9a:e2:3a: 34:82:fe:01:bb:7c:e7:b3:82:4a:69:a3:85:b0:23:9f:94:c5: 1f:8e:6f:11:5d:af:ca:fd:ab:c1:9a:30:b9:ad:9a:49:16:59: 03:e2:83:21:88:f0:d7:5d:20:c9:d9:72:ce:8b:a0:96:94:f6: 53:c3:7d:ef:1f:e0:ba:a3:a5:30:8e:a3:0d:df:48:06:36:46: 99:90:be:4f:56:6e:51:a9:bc:1b:60:6d:72:37:d1:89:a9:a0: 17:4c:5d:c2:11:64:9b:68:65:42:e9:96:e3:cb:d5:7f:46:bf: 7e:7c:5a:07:bc:a6:98:82:00:da:a0:01:8d:92:88:19:35:6c: 83:50:06:44:58:0c:f9:46:69:22:8b:8a:57:12:e9:c0:66:9d: 0c:8a:3b:f4:a9:81:ab:98:61:71:85:94:a3:3c:37:f4:f2:a0: d5:44:56:a1:4a:1b:0a:63:ec:22:9b:74:ed:71:b8:fb:ae:4a: e2:dc:3e:de:54:86:3e:c9:33:3d:41:fc:11:77:bf:50:b4:a7: b4:a3:0b:0e -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt6yOTweHRPT28J7cumEr+IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZWY1ZmJiZmNhN2E5M2NmZWU5NjVlZWI2YmRlZTZmYjQz YzQwM2UwHhcNMjYwMTAxMTgxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDc0NmZiNzJmOTE5NTRjMzQxNWE5NjFkOGVhNjBjMmE1OWVhYzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxX9zKcHaArizT3gdhK2Cj+kgMzc 7RVNpH/LeUvHS9psVCHoNsPRG8+lt/Cz8TImUN04yfubQI0cQ6R+GYAHXMDxAcG4 opWwvT/sh4PJy7ByTXH+QkNPeXEleBWeloxZxD0Vgv5+AGijxSMu5nrpr+qsM8nU B4EviOaDAe7bRox7EixBcowuImieLkbSJV5gX2eIYT5kgLytU82x0Mv1xRw+IJvu 4hCj53tKf/N8Ao8tR32nqmr0DllWlbVMEcEqcTGxslGdhBJ+Gngg3mbFLajd8eKS 8nPpMwFLmnw4HHmqXS479yB/SXhTN0XVQENJGwNI1VJ6VE8fC1dVYvbneQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFLR0b7cvkZVMNBWpYdjqYMKlnqwqMB8GA1UdIwQY MBaAFKDvX7v8p6k8/ull7ra97m+0PEA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt MDI5MmIwMjAxNTBhLzEvdEhSdnR5LVJsVXcwRmFsaDJPcGd3cVdlckNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh LzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQFTp8AAwQF UpcAAwQFX6gAMA0EAgACMAcDBQAqAI2AMA0GCSqGSIb3DQEBCwUAA4IBAQBMMePg /1RbVUFfw36ZH5zugawIhg6UcanU0T59CMitL1rHq2gK9HciE6zEtfQtruh2w3Wa 4jo0gv4Bu3zns4JKaaOFsCOflMUfjm8RXa/K/avBmjC5rZpJFlkD4oMhiPDXXSDJ 2XLOi6CWlPZTw33vH+C6o6UwjqMN30gGNkaZkL5PVm5RqbwbYG1yN9GJqaAXTF3C EWSbaGVC6Zbjy9V/Rr9+fFoHvKaYggDaoAGNkogZNWyDUAZEWAz5Rmkii4pXEunA Zp0Mijv0qYGrmGFxhZSjPDf08qDVRFahShsKY+wim3Ttcbj7rkri3D7eVIY+yTM9 QfwRd79QtKe0owsO -----END CERTIFICATE-----Generated at Mon Jan 26 20:58:14 2026 by rpki-client