This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/T0TpEfENHz0bxlptxB0nFINW90A.roa File: T0TpEfENHz0bxlptxB0nFINW90A.roa (raw, json) Hash identifier: TVxTNouu1BfDbucKooEPdLrXN8aLRFVGM4/IuDaxZE0= Subject key identifier: 4F:44:E9:11:F1:0D:1F:3D:1B:C6:5A:6D:C4:1D:27:14:83:56:F7:40 Certificate issuer: /CN=c98b825f36e9cc330315c940de800cbabce3397b Certificate serial: 019B79109060CF2E0C54405BB9549DD88CD2 Authority key identifier: C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/T0TpEfENHz0bxlptxB0nFINW90A.roa Signing time: Thu 01 Jan 2026 10:18:07 +0000 ROA not before: Thu 01 Jan 2026 10:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15404 IP address blocks: 194.11.129.0/24 maxlen: 24 194.11.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 07:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:90:60:cf:2e:0c:54:40:5b:b9:54:9d:d8:8c:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c98b825f36e9cc330315c940de800cbabce3397b Validity Not Before: Jan 1 10:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f44e911f10d1f3d1bc65a6dc41d27148356f740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9a:16:2a:32:65:43:f2:ec:45:3f:d0:b8:a7: 60:0d:4a:67:bb:9b:b1:03:47:7b:f3:95:e1:5d:17: 2e:47:69:a8:1e:66:92:eb:4a:6c:51:fa:73:17:12: 56:c9:38:47:df:58:67:ed:29:96:59:2b:1c:36:38: 50:af:f3:95:20:c1:1b:69:5c:b6:bb:24:89:fb:bc: 55:a6:7a:5e:1c:43:7d:83:4e:2c:c9:a7:58:ce:bd: 10:56:9e:61:57:6b:50:3c:ff:1b:87:ce:31:13:fd: 50:8c:12:88:20:6d:71:07:08:b3:ae:5b:4f:53:c3: 9a:6f:63:d5:3d:94:d3:23:b0:65:7e:83:e4:7e:7c: 1b:ed:4a:a0:1c:f6:94:ca:c3:e0:62:76:81:1d:6d: 07:17:93:7e:72:b3:c1:a7:59:a4:ec:d3:d0:cf:c7: 9d:aa:2d:03:26:5e:10:4d:91:52:dd:75:ea:0e:f3: a2:60:6a:1e:71:e6:c5:d1:97:93:68:14:4b:66:16: 48:c6:67:9b:ec:74:7d:41:16:66:75:42:6d:c6:b6: 07:78:bb:f8:20:a0:28:b0:d3:8b:69:7e:6e:58:ea: c8:63:5d:e8:a2:7a:0d:e6:fb:24:6c:c3:46:44:4a: 00:8f:58:18:3d:fa:df:2c:79:65:20:e7:87:90:bf: 23:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:44:E9:11:F1:0D:1F:3D:1B:C6:5A:6D:C4:1D:27:14:83:56:F7:40 X509v3 Authority Key Identifier: keyid:C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/T0TpEfENHz0bxlptxB0nFINW90A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.11.129.0-194.11.130.255 Signature Algorithm: sha256WithRSAEncryption 84:4b:fd:94:f2:24:ae:55:92:bc:ba:74:57:e7:88:c1:a9:d0: 91:50:ef:27:0e:96:9e:63:8a:9e:93:de:9c:3c:9c:b5:9b:92: 32:10:b1:52:38:e1:e4:f3:4c:de:9c:3d:52:e2:3f:a0:e3:ec: 7e:b1:c7:c6:65:6b:51:41:39:fd:a5:fc:be:20:4d:98:b7:35: 29:86:b4:a1:d6:b6:64:b1:1d:ad:a7:9f:79:3e:ec:9d:2d:1a: 38:ce:5b:25:ca:1b:cc:60:1d:c0:47:1f:12:6d:4d:e3:85:2a: d4:0c:3e:f8:ec:9e:4e:92:7d:58:9e:8d:29:5a:90:14:39:95: 61:87:3f:60:90:e2:26:fb:77:c4:fb:92:fa:0f:3f:d9:3f:c5: a2:33:da:b8:80:e8:6b:07:fd:46:00:9c:c0:3a:0d:c7:5a:64: 0e:44:77:16:2f:c1:64:3e:49:7f:72:a1:2b:91:06:51:a1:fb: 68:7f:65:54:c1:aa:94:86:88:6c:b5:af:88:32:59:2e:9e:21: ad:73:03:e7:5a:54:ea:2f:d3:eb:1b:cb:e2:10:bf:22:16:c1: cb:d7:92:ef:32:e2:32:49:c3:c6:9c:fa:28:31:93:3b:dc:de: a6:87:23:1f:ee:22:8b:ba:0b:8d:e0:bf:66:b1:69:2e:75:25: 7e:20:40:b0 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt5EJBgzy4MVEBbuVSd2IzSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5OGI4MjVmMzZlOWNjMzMwMzE1Yzk0MGRlODAwY2JhYmNl MzM5N2IwHhcNMjYwMTAxMTAxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjQ0ZTkxMWYxMGQxZjNkMWJjNjVhNmRjNDFkMjcxNDgzNTZmNzQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05oWKjJlQ/LsRT/QuKdgDUpnu5ux A0d785XhXRcuR2moHmaS60psUfpzFxJWyThH31hn7SmWWSscNjhQr/OVIMEbaVy2 uySJ+7xVpnpeHEN9g04syadYzr0QVp5hV2tQPP8bh84xE/1QjBKIIG1xBwizrltP U8Oab2PVPZTTI7BlfoPkfnwb7UqgHPaUysPgYnaBHW0HF5N+crPBp1mk7NPQz8ed qi0DJl4QTZFS3XXqDvOiYGoecebF0ZeTaBRLZhZIxmeb7HR9QRZmdUJtxrYHeLv4 IKAosNOLaX5uWOrIY13oonoN5vskbMNGREoAj1gYPfrfLHllIOeHkL8jJQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFE9E6RHxDR89G8ZabcQdJxSDVvdAMB8GA1UdIwQY MBaAFMmLgl826cwzAxXJQN6ADLq84zl7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVl1Q1h6YnB6RE1ERmNsQTNvQU11cnpqT1hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9lYTM2MTQtZjA5MC00YTJiLTkzNTUt Yjg5YTUxMWMzYmJkLzEvVDBUcEVmRU5IejBieGxwdHhCMG5GSU5XOTBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9lYTM2MTQtZjA5MC00YTJiLTkzNTUtYjg5YTUxMWMzYmJk LzEveVl1Q1h6YnB6RE1ERmNsQTNvQU11cnpqT1hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADCC4ED BADCC4IwDQYJKoZIhvcNAQELBQADggEBAIRL/ZTyJK5Vkry6dFfniMGp0JFQ7ycO lp5jip6T3pw8nLWbkjIQsVI44eTzTN6cPVLiP6Dj7H6xx8Zla1FBOf2l/L4gTZi3 NSmGtKHWtmSxHa2nn3k+7J0tGjjOWyXKG8xgHcBHHxJtTeOFKtQMPvjsnk6SfVie jSlakBQ5lWGHP2CQ4ib7d8T7kvoPP9k/xaIz2riA6GsH/UYAnMA6DcdaZA5EdxYv wWQ+SX9yoSuRBlGh+2h/ZVTBqpSGiGy1r4gyWS6eIa1zA+daVOov0+sby+IQvyIW wcvXku8y4jJJw8ac+igxkzvc3qaHIx/uIou6C43gv2axaS51JX4gQLA= -----END CERTIFICATE-----Generated at Wed Jan 21 13:16:54 2026 by rpki-client