This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/t-_MzdSyzfn3dt4ieMfm3gQyOb8.roa File: t-_MzdSyzfn3dt4ieMfm3gQyOb8.roa (raw, json) Hash identifier: hc8v6I3bcH7DbpxSPGSHrr3KaGypH/0OP4q4IQAtF2g= Subject key identifier: B7:EF:CC:CD:D4:B2:CD:F9:F7:76:DE:22:78:C7:E6:DE:04:32:39:BF Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Certificate serial: 019B78A22BE8829815B6CE5256121F2D0FB2 Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/t-_MzdSyzfn3dt4ieMfm3gQyOb8.roa Signing time: Thu 01 Jan 2026 08:17:32 +0000 ROA not before: Thu 01 Jan 2026 08:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13335 IP address blocks: 5.10.214.0/24 maxlen: 24 5.10.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 02:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:2b:e8:82:98:15:b6:ce:52:56:12:1f:2d:0f:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Validity Not Before: Jan 1 08:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7efcccdd4b2cdf9f776de2278c7e6de043239bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0f:70:4c:aa:7a:81:f4:2e:32:11:a6:29:75: d3:72:ea:b2:00:a4:28:16:e1:09:ca:19:2d:4e:bf: 24:71:78:11:81:32:c4:d7:11:d0:af:0b:89:f2:3b: c4:1c:da:1e:d2:ee:12:39:3f:6f:a7:e6:f4:9c:02: 36:4f:ee:b5:fe:08:fd:65:8c:9d:ad:0d:a8:aa:28: c6:4c:05:ed:fd:90:6b:87:80:09:88:12:c6:4d:8d: 13:64:2b:8b:98:a2:9a:44:02:aa:3b:6b:b1:2f:31: 16:47:d2:2a:1d:26:f5:c3:16:67:de:82:d8:a6:7d: f4:05:6c:97:3b:44:66:d5:08:08:35:f3:97:c1:46: 32:04:04:7a:b0:84:07:fe:75:11:b2:51:87:64:a1: f4:25:9a:3b:74:5e:58:7f:5d:6c:10:78:79:e7:ff: 89:7b:10:65:4d:7c:ca:67:24:7a:b7:c1:96:bc:0d: 82:1b:11:e0:13:77:4f:4a:b3:5b:04:11:45:17:ad: de:d9:e3:9a:09:d6:93:ad:75:28:31:49:2e:5b:16: b3:05:61:6b:57:24:fc:c4:99:e7:21:b8:84:9f:c4: b7:10:67:4f:bc:6d:64:d8:bb:c3:96:7c:7c:d4:92: fc:a6:cf:7e:39:ee:fa:37:62:8a:ff:b6:9e:93:18: 91:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:EF:CC:CD:D4:B2:CD:F9:F7:76:DE:22:78:C7:E6:DE:04:32:39:BF X509v3 Authority Key Identifier: keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/t-_MzdSyzfn3dt4ieMfm3gQyOb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.10.214.0/23 Signature Algorithm: sha256WithRSAEncryption 94:24:1f:c8:0d:3d:b4:bd:79:34:35:ac:ae:c8:1f:2f:d3:53: a9:3f:40:c2:cd:f4:1d:0e:4e:91:ab:6c:6f:3f:9b:86:e3:01: 39:52:99:c7:15:70:f8:4e:cf:4d:67:e7:52:85:01:33:31:a6: 70:94:38:9d:ec:a9:59:7c:c1:aa:4d:e9:c3:e6:af:8f:70:94: 1f:57:2f:28:55:e9:93:d6:1f:6f:8f:49:05:ce:b4:e8:0e:1c: ca:a7:42:0a:39:bc:47:e0:58:a7:73:aa:f4:38:f4:f2:1c:f2: 6d:62:fa:b0:10:6a:36:8a:8a:26:23:ba:52:5d:31:cf:17:ab: 16:9b:9f:2e:9a:42:23:4a:bc:de:29:a1:38:c7:cd:a8:a2:9a: f5:f9:ec:82:e1:f9:31:be:93:30:6f:4a:01:2a:57:78:f6:81: 9b:5d:0e:42:18:0f:1b:45:95:77:bf:13:16:63:fe:9c:7d:3c: bd:a9:e2:8c:3a:ad:6e:a8:b4:5f:96:c1:bd:8e:4d:80:dc:1f: a5:42:4d:99:c2:7f:d5:fe:49:a9:50:07:96:81:d9:5c:14:84: 1f:d6:33:fc:df:7a:f5:ee:fa:96:90:6c:5d:2a:63:a9:65:33: 69:c9:0b:bd:fb:bd:a4:21:17:31:38:71:4a:64:3e:60:33:37: 2c:7a:81:9b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oivogpgVts5SVhIfLQ+yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2VmOWJlZmQxYTdlMjRjMGNjOTcyOTk4N2ZjMDY1ZDZi NzEzMmYwHhcNMjYwMTAxMDgxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2VmY2NjZGQ0YjJjZGY5Zjc3NmRlMjI3OGM3ZTZkZTA0MzIzOWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0A9wTKp6gfQuMhGmKXXTcuqyAKQo FuEJyhktTr8kcXgRgTLE1xHQrwuJ8jvEHNoe0u4SOT9vp+b0nAI2T+61/gj9ZYyd rQ2oqijGTAXt/ZBrh4AJiBLGTY0TZCuLmKKaRAKqO2uxLzEWR9IqHSb1wxZn3oLY pn30BWyXO0Rm1QgINfOXwUYyBAR6sIQH/nURslGHZKH0JZo7dF5Yf11sEHh55/+J exBlTXzKZyR6t8GWvA2CGxHgE3dPSrNbBBFFF63e2eOaCdaTrXUoMUkuWxazBWFr VyT8xJnnIbiEn8S3EGdPvG1k2LvDlnx81JL8ps9+Oe76N2KK/7aekxiRdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLfvzM3Uss3593beInjH5t4EMjm/MB8GA1UdIwQY MBaAFCl++b79Gn4kwMyXKZh/wGXWtxMvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWIt ZGVlNzY4NjAwMTNkLzEvdC1fTXpkU3l6Zm4zZHQ0aWVNZm0zZ1F5T2I4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWItZGVlNzY4NjAwMTNk LzEvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBQrWMA0G CSqGSIb3DQEBCwUAA4IBAQCUJB/IDT20vXk0NayuyB8v01OpP0DCzfQdDk6Rq2xv P5uG4wE5UpnHFXD4Ts9NZ+dShQEzMaZwlDid7KlZfMGqTenD5q+PcJQfVy8oVemT 1h9vj0kFzrToDhzKp0IKObxH4Finc6r0OPTyHPJtYvqwEGo2ioomI7pSXTHPF6sW m58umkIjSrzeKaE4x82oopr1+eyC4fkxvpMwb0oBKld49oGbXQ5CGA8bRZV3vxMW Y/6cfTy9qeKMOq1uqLRflsG9jk2A3B+lQk2Zwn/V/kmpUAeWgdlcFIQf1jP833r1 7vqWkGxdKmOpZTNpyQu9+72kIRcxOHFKZD5gMzcseoGb -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:27 2026 by rpki-client