This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/tFVRD_-pjyGAXBK1B4RnTlbS06Y.roa File: tFVRD_-pjyGAXBK1B4RnTlbS06Y.roa (raw, json) Hash identifier: rxdXUltbYBZphQ4R9SWeek1/7cVm9u/f4Eo1gHxec1o= Subject key identifier: B4:55:51:0F:FF:A9:8F:21:80:5C:12:B5:07:84:67:4E:56:D2:D3:A6 Certificate issuer: /CN=f62e0e55e5c5a30ec04bd6dc46d154b3e4b7b5f5 Certificate serial: 019B7AC8D136024761C222500BEFE7403A0B Authority key identifier: F6:2E:0E:55:E5:C5:A3:0E:C0:4B:D6:DC:46:D1:54:B3:E4:B7:B5:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i4OVeXFow7AS9bcRtFUs-S3tfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/tFVRD_-pjyGAXBK1B4RnTlbS06Y.roa Signing time: Thu 01 Jan 2026 18:18:59 +0000 ROA not before: Thu 01 Jan 2026 18:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201218 IP address blocks: 78.24.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.mft rsync://rpki.ripe.net/repository/DEFAULT/9i4OVeXFow7AS9bcRtFUs-S3tfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:d1:36:02:47:61:c2:22:50:0b:ef:e7:40:3a:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f62e0e55e5c5a30ec04bd6dc46d154b3e4b7b5f5 Validity Not Before: Jan 1 18:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b455510fffa98f21805c12b50784674e56d2d3a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8f:3a:12:f1:4a:c9:f8:7e:50:1b:bc:01:c0: 9e:cc:ab:7c:ec:59:1f:3d:26:3f:54:ed:16:c1:1e: b3:dd:ba:6b:22:2d:88:43:fb:05:96:89:35:9d:03: 47:5c:c2:f5:39:86:ce:cc:62:3f:f9:05:82:05:f6: a3:47:fa:d2:f6:ff:39:17:38:a8:0b:92:e2:8f:e4: 3f:ed:50:b0:72:ab:34:b6:e7:f1:bc:b9:f5:9a:8d: 98:70:5a:2d:bc:9a:2b:b0:d4:1d:95:60:17:53:fe: fb:a8:66:38:e3:3b:1f:c6:a7:eb:01:db:77:3a:0a: 5c:5e:00:b0:a4:be:8f:01:6b:13:ab:80:04:3e:9d: 9d:97:a1:3a:de:2a:af:fd:f6:25:45:7d:89:c8:89: 44:ad:ea:75:43:af:3e:77:54:c8:d6:11:31:34:19: 50:00:34:22:c0:14:ee:c7:d3:51:90:ec:12:42:6a: 1f:3f:e3:89:c2:c9:88:c2:5c:b7:43:4d:da:76:01: 89:f6:c7:03:14:59:9a:0e:87:1d:44:48:58:6b:b9: eb:09:b6:ec:78:33:83:25:f4:cf:64:3a:db:1a:6a: 49:b4:c7:a1:11:b6:63:82:52:66:be:ee:8f:5e:03: b9:40:96:2c:5c:e6:ef:03:fe:72:16:80:33:91:d8: 05:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:55:51:0F:FF:A9:8F:21:80:5C:12:B5:07:84:67:4E:56:D2:D3:A6 X509v3 Authority Key Identifier: keyid:F6:2E:0E:55:E5:C5:A3:0E:C0:4B:D6:DC:46:D1:54:B3:E4:B7:B5:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i4OVeXFow7AS9bcRtFUs-S3tfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/tFVRD_-pjyGAXBK1B4RnTlbS06Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.24.203.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:80:2c:2e:fb:bc:f4:39:04:b2:c6:c0:6f:d7:2d:3f:a4:ab: c0:0e:69:6b:90:8f:9f:67:1a:14:24:c9:72:e0:d1:a5:ad:8d: e1:ea:1a:4a:a4:19:0c:c6:96:59:0a:22:75:a2:b0:44:06:7e: a3:46:52:9e:c1:10:f9:ff:5a:b3:1f:8b:1d:e4:78:f3:d4:7f: 55:31:a4:af:3d:30:12:57:8c:93:2f:ca:c6:2f:0a:49:69:f3: 29:ed:71:d0:a5:1a:2a:a4:4f:94:cf:ec:55:64:d2:91:b9:0d: dc:5a:22:78:5f:66:ac:13:69:c5:a9:ab:1b:75:32:53:28:f9: 54:26:9c:21:d0:05:cd:c0:59:ad:4f:c0:2f:2b:ed:22:46:ce: a0:8e:66:22:da:91:37:33:fa:3e:a2:31:48:5e:ed:6b:58:07: 9b:a3:68:dc:e8:d7:a9:e6:5e:3f:24:74:96:52:c9:c8:70:00: 8d:72:61:fa:5d:2d:53:89:33:0d:93:52:d7:73:ab:02:70:af: 76:74:37:ec:da:bb:14:17:e3:9d:c8:82:c4:4b:a1:aa:53:95: 19:72:d8:b5:60:e1:2c:ab:bb:b2:06:78:f3:45:7f:8c:b2:d6: 21:7b:48:75:dc:7a:df:f1:04:5c:8f:2c:02:50:90:b3:cc:60: ae:81:5d:70 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yNE2AkdhwiJQC+/nQDoLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2MmUwZTU1ZTVjNWEzMGVjMDRiZDZkYzQ2ZDE1NGIzZTRi N2I1ZjUwHhcNMjYwMTAxMTgxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDU1NTEwZmZmYTk4ZjIxODA1YzEyYjUwNzg0Njc0ZTU2ZDJkM2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyI86EvFKyfh+UBu8AcCezKt87Fkf PSY/VO0WwR6z3bprIi2IQ/sFlok1nQNHXML1OYbOzGI/+QWCBfajR/rS9v85Fzio C5Lij+Q/7VCwcqs0tufxvLn1mo2YcFotvJorsNQdlWAXU/77qGY44zsfxqfrAdt3 OgpcXgCwpL6PAWsTq4AEPp2dl6E63iqv/fYlRX2JyIlErep1Q68+d1TI1hExNBlQ ADQiwBTux9NRkOwSQmofP+OJwsmIwly3Q03adgGJ9scDFFmaDocdREhYa7nrCbbs eDODJfTPZDrbGmpJtMehEbZjglJmvu6PXgO5QJYsXObvA/5yFoAzkdgF3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLRVUQ//qY8hgFwStQeEZ05W0tOmMB8GA1UdIwQY MBaAFPYuDlXlxaMOwEvW3EbRVLPkt7X1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWk0T1ZlWEZvdzdBUzliY1J0RlVzLVMzdGZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mOTk3YzgtZGY3MC00ZDdmLWI4NmQt MTkyY2IzNjk0MjNmLzEvdEZWUkRfLXBqeUdBWEJLMUI0Um5UbGJTMDZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9mOTk3YzgtZGY3MC00ZDdmLWI4NmQtMTkyY2IzNjk0MjNm LzEvOWk0T1ZlWEZvdzdBUzliY1J0RlVzLVMzdGZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAThjLMA0G CSqGSIb3DQEBCwUAA4IBAQANgCwu+7z0OQSyxsBv1y0/pKvADmlrkI+fZxoUJMly 4NGlrY3h6hpKpBkMxpZZCiJ1orBEBn6jRlKewRD5/1qzH4sd5Hjz1H9VMaSvPTAS V4yTL8rGLwpJafMp7XHQpRoqpE+Uz+xVZNKRuQ3cWiJ4X2asE2nFqasbdTJTKPlU Jpwh0AXNwFmtT8AvK+0iRs6gjmYi2pE3M/o+ojFIXu1rWAebo2jc6Nep5l4/JHSW UsnIcACNcmH6XS1TiTMNk1LXc6sCcK92dDfs2rsUF+OdyILES6GqU5UZcti1YOEs q7uyBnjzRX+MstYhe0h13Hrf8QRcjywCUJCzzGCugV1w -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:13 2026 by rpki-client