This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/64yTSgcbmjpKAYlvmgIcfumrEFE.roa File: 64yTSgcbmjpKAYlvmgIcfumrEFE.roa (raw, json) Hash identifier: 55p0izKTNl/c/EZ7S9t+Y7oaqYI6l5T9RwPtRmB8IuY= Subject key identifier: EB:8C:93:4A:07:1B:9A:3A:4A:01:89:6F:9A:02:1C:7E:E9:AB:10:51 Certificate issuer: /CN=4f3573cd7d561cd37e0f331f6ca38de9202042b2 Certificate serial: 019B76EB794C132518AFC5D6F7EFEDE6FCE4 Authority key identifier: 4F:35:73:CD:7D:56:1C:D3:7E:0F:33:1F:6C:A3:8D:E9:20:20:42:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/64yTSgcbmjpKAYlvmgIcfumrEFE.roa Signing time: Thu 01 Jan 2026 00:18:21 +0000 ROA not before: Thu 01 Jan 2026 00:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2860 IP address blocks: 195.246.238.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:79:4c:13:25:18:af:c5:d6:f7:ef:ed:e6:fc:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f3573cd7d561cd37e0f331f6ca38de9202042b2 Validity Not Before: Jan 1 00:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb8c934a071b9a3a4a01896f9a021c7ee9ab1051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d9:23:75:54:fb:05:44:0a:6a:9d:eb:d2:7b: 87:e4:9d:ea:28:67:47:d9:24:46:2c:40:17:85:be: 51:3d:cf:c3:bf:d4:9b:e5:49:99:0b:ad:91:26:c8: 58:4c:88:66:6a:b0:65:bf:e7:f4:24:44:25:26:be: 2c:18:4e:9e:28:1f:b2:f3:4e:7e:95:34:63:10:49: ca:7a:b5:33:3f:b2:5a:74:ef:bc:2b:84:e5:f6:ca: 7d:ef:10:9e:51:01:56:40:e1:43:51:a6:e1:9a:ed: 57:d4:81:c7:ce:bb:80:4d:f5:cb:5f:35:e7:93:06: b5:a4:ba:88:a2:8d:b5:3e:3c:76:14:2c:ca:62:42: 0a:5d:8a:2b:b0:05:20:a6:a9:26:24:91:94:30:81: 8d:8a:e0:fe:b4:26:de:17:a9:7a:ab:00:bc:63:a1: 80:de:66:0e:f0:8e:b1:5b:ce:44:c9:fd:00:b0:79: 7f:fb:fd:05:08:84:b3:d1:2f:d1:8c:27:a2:0d:e9: ec:d0:9b:d6:37:b5:e4:c5:8d:14:2e:0e:7b:e6:63: 06:de:d7:28:8c:52:79:f8:aa:bc:3f:98:26:42:15: 0e:85:79:12:2c:30:c3:87:cc:38:9e:ec:17:b5:1b: 40:b3:0c:9a:01:08:b1:1c:92:54:3d:56:4c:56:b1: fb:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:8C:93:4A:07:1B:9A:3A:4A:01:89:6F:9A:02:1C:7E:E9:AB:10:51 X509v3 Authority Key Identifier: keyid:4F:35:73:CD:7D:56:1C:D3:7E:0F:33:1F:6C:A3:8D:E9:20:20:42:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/64yTSgcbmjpKAYlvmgIcfumrEFE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.246.238.0/23 Signature Algorithm: sha256WithRSAEncryption 40:e2:41:fa:f3:1d:6c:ce:8a:f4:ec:db:dc:6a:f0:eb:64:ca: 59:72:62:db:b4:6d:1f:77:e3:68:d0:40:58:3a:31:68:70:8e: e7:f9:d2:91:d8:ec:b3:42:d7:cd:22:01:bf:52:dc:03:0c:7e: 75:0e:66:78:40:d7:99:00:0d:0e:b8:0a:ea:2b:a6:0b:bf:5e: ae:4d:88:6b:f2:14:3f:a7:c5:45:44:7b:8a:13:0e:71:79:45: 5e:ce:1a:46:69:42:f2:7a:b5:c4:b8:82:72:ad:20:39:8d:85: 57:b6:96:82:fd:0f:17:b7:09:ea:35:3a:69:98:cc:5d:5c:06: e1:66:86:38:4b:b2:5a:6e:cf:fe:6f:df:95:68:0b:57:14:0f: c2:cd:9f:25:e1:97:9a:f6:5e:c6:e1:e6:31:dc:96:c0:9c:2c: 12:2b:9a:96:05:d3:7c:69:45:1e:50:23:50:4b:03:a5:5f:c9: 71:90:6c:13:dc:bf:bf:eb:25:1c:8d:bd:e1:99:ee:5b:4f:c0: 96:da:14:74:dc:a0:9d:08:be:cf:6b:84:d1:9c:45:97:f8:30: 9c:ab:ae:17:28:fe:5c:c1:5b:7c:a0:68:ba:aa:93:2e:b7:24: 0d:f2:9a:68:35:aa:e0:5a:ce:2b:bb:38:54:72:62:16:d6:03: ff:db:53:55 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt263lMEyUYr8XW9+/t5vzkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMzU3M2NkN2Q1NjFjZDM3ZTBmMzMxZjZjYTM4ZGU5MjAy MDQyYjIwHhcNMjYwMTAxMDAxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjhjOTM0YTA3MWI5YTNhNGEwMTg5NmY5YTAyMWM3ZWU5YWIxMDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NkjdVT7BUQKap3r0nuH5J3qKGdH 2SRGLEAXhb5RPc/Dv9Sb5UmZC62RJshYTIhmarBlv+f0JEQlJr4sGE6eKB+y805+ lTRjEEnKerUzP7JadO+8K4Tl9sp97xCeUQFWQOFDUabhmu1X1IHHzruATfXLXzXn kwa1pLqIoo21Pjx2FCzKYkIKXYorsAUgpqkmJJGUMIGNiuD+tCbeF6l6qwC8Y6GA 3mYO8I6xW85Eyf0AsHl/+/0FCISz0S/RjCeiDens0JvWN7XkxY0ULg575mMG3tco jFJ5+Kq8P5gmQhUOhXkSLDDDh8w4nuwXtRtAswyaAQixHJJUPVZMVrH7yQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOuMk0oHG5o6SgGJb5oCHH7pqxBRMB8GA1UdIwQY MBaAFE81c819VhzTfg8zH2yjjekgIEKyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHpWenpYMVdITk4tRHpNZmJLT042U0FnUXJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9jY2YzYTUtMDMwZC00YjU0LTgwNzkt OGE1ZjE2OWE1YWU3LzEvNjR5VFNnY2JtanBLQVlsdm1nSWNmdW1yRUZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9jY2YzYTUtMDMwZC00YjU0LTgwNzktOGE1ZjE2OWE1YWU3 LzEvVHpWenpYMVdITk4tRHpNZmJLT042U0FnUXJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw/buMA0G CSqGSIb3DQEBCwUAA4IBAQBA4kH68x1szor07NvcavDrZMpZcmLbtG0fd+No0EBY OjFocI7n+dKR2OyzQtfNIgG/UtwDDH51DmZ4QNeZAA0OuArqK6YLv16uTYhr8hQ/ p8VFRHuKEw5xeUVezhpGaULyerXEuIJyrSA5jYVXtpaC/Q8XtwnqNTppmMxdXAbh ZoY4S7Jabs/+b9+VaAtXFA/CzZ8l4Zea9l7G4eYx3JbAnCwSK5qWBdN8aUUeUCNQ SwOlX8lxkGwT3L+/6yUcjb3hme5bT8CW2hR03KCdCL7Pa4TRnEWX+DCcq64XKP5c wVt8oGi6qpMutyQN8ppoNargWs4ruzhUcmIW1gP/21NV -----END CERTIFICATE-----Generated at Wed Jan 21 14:31:02 2026 by rpki-client