This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/TfDEDSgAF-UuRojXKYwf49xN9QY.roa File: TfDEDSgAF-UuRojXKYwf49xN9QY.roa (raw, json) Hash identifier: l+8RUoTM1uw0SrqFD9LLiUFpKCi1Zds5YbMXCL51Vlw= Subject key identifier: 4D:F0:C4:0D:28:00:17:E5:2E:46:88:D7:29:8C:1F:E3:DC:4D:F5:06 Certificate issuer: /CN=f8f19e224c73f83c4fdd196d06608aeb3a881804 Certificate serial: 019B77C72791D4BEED9CB7224BB762675F6D Authority key identifier: F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/TfDEDSgAF-UuRojXKYwf49xN9QY.roa Signing time: Thu 01 Jan 2026 04:18:19 +0000 ROA not before: Thu 01 Jan 2026 04:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203890 IP address blocks: 195.150.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:27:91:d4:be:ed:9c:b7:22:4b:b7:62:67:5f:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8f19e224c73f83c4fdd196d06608aeb3a881804 Validity Not Before: Jan 1 04:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4df0c40d280017e52e4688d7298c1fe3dc4df506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:8b:09:f1:5e:87:5e:47:23:97:cc:fd:5f:5a: 40:c1:28:e6:dc:ba:f9:03:b0:5e:04:71:08:4a:74: 83:dd:11:ee:72:6f:ad:ea:8e:7f:bc:6f:61:f8:74: 8d:c9:a3:9a:e5:50:f9:cf:68:71:d0:b8:a5:e1:7d: e5:8b:6b:c1:72:bf:9d:34:db:85:6c:e7:b2:d8:f5: 9f:8c:d7:07:a5:76:12:e3:68:ab:4c:e4:09:dc:11: 73:a2:b3:06:d0:87:c9:7e:56:67:24:d5:07:47:05: dd:98:ff:75:02:77:57:a1:65:0f:2b:bf:ea:0e:48: 8d:67:63:e7:4a:6f:6a:0c:3a:59:38:c2:6a:3d:b0: 1c:74:c8:61:10:4f:ef:e8:ad:65:20:14:85:5c:9c: 5b:42:a4:87:26:4a:f0:76:e8:de:2e:ec:56:e1:da: 74:d7:e7:2d:33:62:c2:9d:bb:b5:3a:1f:4e:a4:b8: 40:ce:63:49:a1:2a:2d:86:3c:de:09:c7:3b:18:df: 45:28:48:f7:bb:2e:73:17:2c:28:9e:8a:c0:d1:3d: 73:62:ef:a2:2b:99:73:b7:45:bd:a5:be:91:0a:71: 81:4e:c1:7f:ac:6d:a8:8a:89:9a:9f:97:66:17:8c: eb:55:4b:bb:7b:6f:3f:7c:64:1d:eb:17:ab:7f:6e: 0d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F0:C4:0D:28:00:17:E5:2E:46:88:D7:29:8C:1F:E3:DC:4D:F5:06 X509v3 Authority Key Identifier: keyid:F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/TfDEDSgAF-UuRojXKYwf49xN9QY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.150.192.0/22 Signature Algorithm: sha256WithRSAEncryption 0d:b5:7c:e7:7a:91:6c:ca:82:d9:ca:40:f7:32:08:8d:ae:31: 1b:13:69:e2:eb:01:eb:b2:41:83:96:3f:94:78:c8:b7:ec:69: da:dd:2f:ac:bb:ff:74:c1:66:e2:08:d3:36:c8:0d:df:df:ae: 8b:86:ed:cb:a9:70:22:68:bf:97:57:4c:fc:68:97:cf:73:69: 46:1c:65:2b:22:b5:c9:39:ee:74:3b:bb:ac:cc:e9:55:5d:86: 83:56:27:d1:94:42:79:0b:27:87:39:f9:7b:9d:79:30:2b:11: a0:d1:79:3b:fc:f4:ba:92:b8:70:a1:76:e8:b2:72:3a:ac:f6: e9:e8:d6:ae:1a:9f:12:ad:83:7b:7c:e1:b6:96:39:69:03:98: cb:d7:72:89:df:c9:d6:91:24:42:1c:b6:b8:72:5e:0a:cf:f9: 2f:a0:69:31:dd:9d:6d:e6:3d:cb:2a:6c:9a:a2:07:e3:d1:58: 84:80:5f:0f:09:b6:e2:4e:d3:86:52:4e:ef:9f:67:ab:1c:ff: ee:4a:a6:7f:39:4a:7a:f0:cc:23:e8:e7:25:ce:58:f5:e3:45: 72:87:ed:96:13:dd:9c:11:72:73:bc:52:ab:d1:fd:ea:7b:92: f0:d8:d0:f3:0b:ee:ca:2b:6f:a2:32:9a:22:86:4c:fa:3c:4b: fb:37:df:39 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3xyeR1L7tnLciS7diZ19tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZjE5ZTIyNGM3M2Y4M2M0ZmRkMTk2ZDA2NjA4YWViM2E4 ODE4MDQwHhcNMjYwMTAxMDQxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZGYwYzQwZDI4MDAxN2U1MmU0Njg4ZDcyOThjMWZlM2RjNGRmNTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA74sJ8V6HXkcjl8z9X1pAwSjm3Lr5 A7BeBHEISnSD3RHucm+t6o5/vG9h+HSNyaOa5VD5z2hx0Lil4X3li2vBcr+dNNuF bOey2PWfjNcHpXYS42irTOQJ3BFzorMG0IfJflZnJNUHRwXdmP91AndXoWUPK7/q DkiNZ2PnSm9qDDpZOMJqPbAcdMhhEE/v6K1lIBSFXJxbQqSHJkrwdujeLuxW4dp0 1+ctM2LCnbu1Oh9OpLhAzmNJoSothjzeCcc7GN9FKEj3uy5zFywonorA0T1zYu+i K5lzt0W9pb6RCnGBTsF/rG2oioman5dmF4zrVUu7e28/fGQd6xerf24NTwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFE3wxA0oABflLkaI1ymMH+PcTfUGMB8GA1UdIwQY MBaAFPjxniJMc/g8T90ZbQZgius6iBgEMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1QR2VJa3h6LUR4UDNSbHRCbUNLNnpxSUdBUS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcvZjQwNDg2LTJjZDktNDc1Yi1iYmUx LTE2Y2Q4ZjRmYjRiOS8xL1RmREVEU2dBRi1VdVJvalhLWXdmNDl4TjlRWS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzcvZjQwNDg2LTJjZDktNDc1Yi1iYmUxLTE2Y2Q4ZjRmYjRi OS8xLzEtUEdlSWt4ei1EeFAzUmx0Qm1DSzZ6cUlHQVEuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALDlsAw DQYJKoZIhvcNAQELBQADggEBAA21fOd6kWzKgtnKQPcyCI2uMRsTaeLrAeuyQYOW P5R4yLfsadrdL6y7/3TBZuII0zbIDd/frouG7cupcCJov5dXTPxol89zaUYcZSsi tck57nQ7u6zM6VVdhoNWJ9GUQnkLJ4c5+XudeTArEaDReTv89LqSuHChduiycjqs 9uno1q4anxKtg3t84baWOWkDmMvXconfydaRJEIctrhyXgrP+S+gaTHdnW3mPcsq bJqiB+PRWISAXw8JtuJO04ZSTu+fZ6sc/+5Kpn85SnrwzCPo5yXOWPXjRXKH7ZYT 3ZwRcnO8UqvR/ep7kvDY0PML7sorb6IymiKGTPo8S/s33zk= -----END CERTIFICATE-----Generated at Mon Jan 26 18:53:46 2026 by rpki-client