This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/TPzWmofAeUtXG7NsFxiYenVIwg0.roa File: TPzWmofAeUtXG7NsFxiYenVIwg0.roa (raw, json) Hash identifier: V2jff1Qdfu1g54NVPWyEV+mS2nCm2A54pYBmILbMYao= Subject key identifier: 4C:FC:D6:9A:87:C0:79:4B:57:1B:B3:6C:17:18:98:7A:75:48:C2:0D Certificate issuer: /CN=55d5dc9e220112a27c152bc32389038974ae4572 Certificate serial: 019B7A5A877D76B93FABB8A44A348250B069 Authority key identifier: 55:D5:DC:9E:22:01:12:A2:7C:15:2B:C3:23:89:03:89:74:AE:45:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VdXcniIBEqJ8FSvDI4kDiXSuRXI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/TPzWmofAeUtXG7NsFxiYenVIwg0.roa Signing time: Thu 01 Jan 2026 16:18:31 +0000 ROA not before: Thu 01 Jan 2026 16:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25091 IP address blocks: 94.100.138.0/23 maxlen: 23 2a01:6780:12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft rsync://rpki.ripe.net/repository/DEFAULT/VdXcniIBEqJ8FSvDI4kDiXSuRXI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 13:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:87:7d:76:b9:3f:ab:b8:a4:4a:34:82:50:b0:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55d5dc9e220112a27c152bc32389038974ae4572 Validity Not Before: Jan 1 16:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4cfcd69a87c0794b571bb36c1718987a7548c20d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:dc:6b:b8:45:80:42:82:83:99:58:44:28:77: 75:3c:28:ad:fb:f4:5e:33:9e:d1:c0:9a:d6:fe:ed: 18:e3:50:3c:d8:61:ed:94:45:7a:71:a4:a3:da:16: 06:76:c5:c5:a7:71:5d:72:24:c1:d0:a9:d0:af:78: e8:33:72:1d:68:e5:c3:4f:03:35:ac:d5:58:35:5a: 8e:b5:bd:e5:08:89:8d:06:3c:61:58:bb:3c:04:ba: 00:9d:e5:86:1d:dc:9b:a6:29:84:08:a1:45:0a:b1: 26:7e:e7:7f:63:6b:d5:d6:68:13:10:9e:4f:b8:f9: 28:f4:11:61:f2:e8:55:c4:06:a0:79:a0:ac:6f:ba: 13:2b:49:d9:1c:c0:8c:4f:bc:21:ff:5e:58:1c:51: 21:d6:5f:2d:ef:1e:32:8d:9e:9d:1a:cd:5c:e1:51: fd:6b:a0:e6:f3:71:d5:00:69:81:78:96:45:0e:e2: 72:36:fa:0e:ca:1d:90:2d:8c:5f:07:a2:01:1e:88: 99:84:46:7d:41:08:b6:76:41:44:0c:b5:a9:20:7f: 6c:60:30:11:ee:7a:61:c4:f2:5b:2b:24:23:f8:df: df:38:8f:bf:f9:66:c8:ef:8f:67:f3:a6:c3:2f:5d: 56:a2:d7:64:2d:2d:1c:00:bc:7e:ef:7b:2b:25:33: ee:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:FC:D6:9A:87:C0:79:4B:57:1B:B3:6C:17:18:98:7A:75:48:C2:0D X509v3 Authority Key Identifier: keyid:55:D5:DC:9E:22:01:12:A2:7C:15:2B:C3:23:89:03:89:74:AE:45:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdXcniIBEqJ8FSvDI4kDiXSuRXI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/TPzWmofAeUtXG7NsFxiYenVIwg0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.100.138.0/23 IPv6: 2a01:6780:12::/48 Signature Algorithm: sha256WithRSAEncryption 9d:b0:78:4a:9e:78:eb:2d:7f:39:ee:b2:0f:bc:d9:ae:89:2e: 5d:5f:37:1b:38:95:06:d1:97:6e:2a:84:ce:20:e5:5a:2d:4f: 2a:ab:6e:fe:13:b8:b8:96:23:e8:09:c8:22:a2:2a:96:b7:b9: 15:d5:9b:72:48:01:78:4c:67:56:1b:07:06:15:b1:4e:41:4f: 20:68:3f:4d:e9:b5:97:eb:85:54:d9:d5:f2:aa:74:1d:e5:41: 97:11:34:44:9b:8a:95:07:4f:37:c5:0d:40:5f:da:cd:d1:49: dd:31:05:5e:2d:44:4e:b2:91:ab:1f:da:40:e5:41:7a:51:29: 72:b1:26:1a:c3:f0:16:ca:42:53:77:52:16:70:cf:05:a9:7c: 56:77:cb:23:e9:88:37:a3:35:56:95:21:49:2f:cf:71:a7:f0: 19:2f:c6:46:fb:d4:39:32:0f:03:34:38:e6:d0:f0:05:dd:16: 72:c2:96:35:61:22:87:e9:6b:62:e6:8b:58:c9:63:21:0e:36: 7c:a0:33:9e:b2:7c:cc:d8:79:96:06:31:b5:e0:0e:3e:58:72: c1:2c:db:b6:f3:f7:3e:43:cb:5a:f3:eb:d9:d7:f5:5e:36:23: 94:5d:c2:0b:7a:bf:4e:84:83:53:2b:b7:10:a9:67:cc:b5:77: f2:ec:23:48 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6Wod9drk/q7ikSjSCULBpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1ZDVkYzllMjIwMTEyYTI3YzE1MmJjMzIzODkwMzg5NzRh ZTQ1NzIwHhcNMjYwMTAxMTYxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Y2ZjZDY5YTg3YzA3OTRiNTcxYmIzNmMxNzE4OTg3YTc1NDhjMjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNxruEWAQoKDmVhEKHd1PCit+/Re M57RwJrW/u0Y41A82GHtlEV6caSj2hYGdsXFp3FdciTB0KnQr3joM3IdaOXDTwM1 rNVYNVqOtb3lCImNBjxhWLs8BLoAneWGHdybpimECKFFCrEmfud/Y2vV1mgTEJ5P uPko9BFh8uhVxAageaCsb7oTK0nZHMCMT7wh/15YHFEh1l8t7x4yjZ6dGs1c4VH9 a6Dm83HVAGmBeJZFDuJyNvoOyh2QLYxfB6IBHoiZhEZ9QQi2dkFEDLWpIH9sYDAR 7nphxPJbKyQj+N/fOI+/+WbI749n86bDL11WotdkLS0cALx+73srJTPu8wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFEz81pqHwHlLVxuzbBcYmHp1SMINMB8GA1UdIwQY MBaAFFXV3J4iARKifBUrwyOJA4l0rkVyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmRYY25pSUJFcUo4RlN2REk0a0RpWFN1UlhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9kOGVkNDEtNzFmNi00YmI3LWEzZWUt YTBiYjE0MGE1OTZlLzEvVFB6V21vZkFlVXRYRzdOc0Z4aVllblZJd2cwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9kOGVkNDEtNzFmNi00YmI3LWEzZWUtYTBiYjE0MGE1OTZl LzEvVmRYY25pSUJFcUo4RlN2REk0a0RpWFN1UlhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBXmSKMA8E AgACMAkDBwAqAWeAABIwDQYJKoZIhvcNAQELBQADggEBAJ2weEqeeOstfznusg+8 2a6JLl1fNxs4lQbRl24qhM4g5VotTyqrbv4TuLiWI+gJyCKiKpa3uRXVm3JIAXhM Z1YbBwYVsU5BTyBoP03ptZfrhVTZ1fKqdB3lQZcRNESbipUHTzfFDUBf2s3RSd0x BV4tRE6ykasf2kDlQXpRKXKxJhrD8BbKQlN3UhZwzwWpfFZ3yyPpiDejNVaVIUkv z3Gn8Bkvxkb71DkyDwM0OObQ8AXdFnLCljVhIofpa2Lmi1jJYyEONnygM56yfMzY eZYGMbXgDj5YcsEs27bz9z5Dy1rz69nX9V42I5Rdwgt6v06Eg1MrtxCpZ8y1d/Ls I0g= -----END CERTIFICATE-----Generated at Sun Jan 18 20:54:03 2026 by rpki-client