This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/7a80aa-000a-4714-a2fa-fb307badec4d/1/Tsd8HU5MYi729ftZEbzYJ5q8DFk.roa File: Tsd8HU5MYi729ftZEbzYJ5q8DFk.roa (raw, json) Hash identifier: Z2yRa6Vn6jZpC2JEgmfhyvHiigb6Voy/StTbiLK6M9k= Subject key identifier: 4E:C7:7C:1D:4E:4C:62:2E:F6:F5:FB:59:11:BC:D8:27:9A:BC:0C:59 Certificate issuer: /CN=c4a31628565820b3a5a3e1cfc87773e283fb95c1 Certificate serial: 019B79114C3FCFD06E3B4F7AB37861E3D0B7 Authority key identifier: C4:A3:16:28:56:58:20:B3:A5:A3:E1:CF:C8:77:73:E2:83:FB:95:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKMWKFZYILOlo-HPyHdz4oP7lcE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/7a80aa-000a-4714-a2fa-fb307badec4d/1/Tsd8HU5MYi729ftZEbzYJ5q8DFk.roa Signing time: Thu 01 Jan 2026 10:18:55 +0000 ROA not before: Thu 01 Jan 2026 10:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41599 IP address blocks: 195.3.252.0/22 maxlen: 24 2001:67c:380::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/7a80aa-000a-4714-a2fa-fb307badec4d/1/xKMWKFZYILOlo-HPyHdz4oP7lcE.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/7a80aa-000a-4714-a2fa-fb307badec4d/1/xKMWKFZYILOlo-HPyHdz4oP7lcE.mft rsync://rpki.ripe.net/repository/DEFAULT/xKMWKFZYILOlo-HPyHdz4oP7lcE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:4c:3f:cf:d0:6e:3b:4f:7a:b3:78:61:e3:d0:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4a31628565820b3a5a3e1cfc87773e283fb95c1 Validity Not Before: Jan 1 10:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ec77c1d4e4c622ef6f5fb5911bcd8279abc0c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:db:5c:1a:c5:be:8c:67:96:5e:26:7a:74:f3: d1:fd:78:7f:c8:23:3e:9b:46:db:57:42:b2:d2:a3: 19:cd:d5:54:40:39:c0:b3:ba:d0:54:3c:fc:cf:f5: 7f:97:89:77:f4:44:01:3f:56:5f:cc:f9:85:49:c1: 6e:18:f4:ad:a4:21:74:8d:d4:2b:0e:e6:41:29:8e: 03:ff:34:3a:1d:81:de:96:4a:e1:c6:93:09:fc:41: b2:ad:5d:80:1c:14:c8:f5:c0:4a:88:0d:55:ba:3a: b6:7f:1e:4b:c0:16:ae:37:9e:80:b9:89:5b:5b:79: 26:c8:16:94:a5:ff:10:3b:b6:52:43:fc:6e:84:d0: 17:96:2f:99:26:12:fa:40:28:5c:76:4d:e1:99:18: 97:1a:7b:d7:4e:e1:5b:ab:23:17:b8:cb:32:d5:e4: 06:50:7e:29:09:a3:a6:b0:73:07:49:b4:af:f5:bc: 07:f2:f4:56:5d:70:ef:0b:f7:59:56:42:33:3c:75: 0e:eb:4f:42:bd:10:cc:c5:01:b2:69:d7:14:9a:af: f1:b9:db:79:11:2f:1c:b1:00:a8:0f:97:05:72:a6: 9c:56:b7:37:f0:72:f5:a0:73:71:99:ce:87:ad:1a: 75:a7:af:4a:de:e8:52:90:f5:8c:04:ac:2c:13:95: 04:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:C7:7C:1D:4E:4C:62:2E:F6:F5:FB:59:11:BC:D8:27:9A:BC:0C:59 X509v3 Authority Key Identifier: keyid:C4:A3:16:28:56:58:20:B3:A5:A3:E1:CF:C8:77:73:E2:83:FB:95:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKMWKFZYILOlo-HPyHdz4oP7lcE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7a80aa-000a-4714-a2fa-fb307badec4d/1/Tsd8HU5MYi729ftZEbzYJ5q8DFk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7a80aa-000a-4714-a2fa-fb307badec4d/1/xKMWKFZYILOlo-HPyHdz4oP7lcE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.3.252.0/22 IPv6: 2001:67c:380::/48 Signature Algorithm: sha256WithRSAEncryption 68:25:5d:5c:48:98:6f:47:47:5c:80:91:15:47:de:2d:85:d7: 95:31:1d:be:42:14:8f:04:8e:ca:2d:ca:0f:da:81:dd:ac:75: f1:6f:43:f5:43:ed:46:63:17:b1:57:cd:f5:e0:21:a1:a9:29: 5d:81:83:47:12:f0:06:a8:83:01:f1:46:97:3b:2f:61:dc:2e: 59:89:df:57:ac:71:10:76:71:4d:ae:bc:c8:03:83:91:1c:2c: d5:9a:0e:f9:be:65:54:0a:df:a6:c8:66:74:17:87:98:52:6f: 6d:5a:ed:9c:ab:d6:0a:12:aa:34:53:29:ba:21:a3:80:f7:27: 91:da:c1:dd:97:14:26:4b:45:69:eb:21:92:16:d9:90:5a:89: 75:6b:4c:65:d3:70:02:6f:8f:d5:37:b7:f7:2a:7f:be:86:58: d4:e8:cd:46:e1:8d:4c:78:ee:c7:43:b9:17:73:7c:77:3f:3b: f7:ac:a9:76:77:94:c5:25:c3:8d:5e:30:7f:4e:ce:2d:c9:95: 77:70:03:4f:4f:85:ac:17:a4:c5:30:de:0c:e3:e0:cf:f4:34: 15:13:c6:95:9b:e9:10:d8:fc:f9:f6:cb:1b:db:e1:30:4c:9f: 4c:d5:63:95:84:82:ea:57:a1:58:a7:be:40:e7:8a:a7:69:b8: 4a:88:cd:e2 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5EUw/z9BuO096s3hh49C3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0YTMxNjI4NTY1ODIwYjNhNWEzZTFjZmM4Nzc3M2UyODNm Yjk1YzEwHhcNMjYwMTAxMTAxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZWM3N2MxZDRlNGM2MjJlZjZmNWZiNTkxMWJjZDgyNzlhYmMwYzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NtcGsW+jGeWXiZ6dPPR/Xh/yCM+ m0bbV0Ky0qMZzdVUQDnAs7rQVDz8z/V/l4l39EQBP1ZfzPmFScFuGPStpCF0jdQr DuZBKY4D/zQ6HYHelkrhxpMJ/EGyrV2AHBTI9cBKiA1Vujq2fx5LwBauN56AuYlb W3kmyBaUpf8QO7ZSQ/xuhNAXli+ZJhL6QChcdk3hmRiXGnvXTuFbqyMXuMsy1eQG UH4pCaOmsHMHSbSv9bwH8vRWXXDvC/dZVkIzPHUO609CvRDMxQGyadcUmq/xudt5 ES8csQCoD5cFcqacVrc38HL1oHNxmc6HrRp1p69K3uhSkPWMBKwsE5UEzQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFE7HfB1OTGIu9vX7WRG82CeavAxZMB8GA1UdIwQY MBaAFMSjFihWWCCzpaPhz8h3c+KD+5XBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEtNV0tGWllJTE9sby1IUHlIZHo0b1A3bGNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi83YTgwYWEtMDAwYS00NzE0LWEyZmEt ZmIzMDdiYWRlYzRkLzEvVHNkOEhVNU1ZaTcyOWZ0WkViellKNXE4REZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi83YTgwYWEtMDAwYS00NzE0LWEyZmEtZmIzMDdiYWRlYzRk LzEveEtNV0tGWllJTE9sby1IUHlIZHo0b1A3bGNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCwwP8MA8E AgACMAkDBwAgAQZ8A4AwDQYJKoZIhvcNAQELBQADggEBAGglXVxImG9HR1yAkRVH 3i2F15UxHb5CFI8Ejsotyg/agd2sdfFvQ/VD7UZjF7FXzfXgIaGpKV2Bg0cS8Aao gwHxRpc7L2HcLlmJ31escRB2cU2uvMgDg5EcLNWaDvm+ZVQK36bIZnQXh5hSb21a 7Zyr1goSqjRTKboho4D3J5Hawd2XFCZLRWnrIZIW2ZBaiXVrTGXTcAJvj9U3t/cq f76GWNTozUbhjUx47sdDuRdzfHc/O/esqXZ3lMUlw41eMH9Ozi3JlXdwA09PhawX pMUw3gzj4M/0NBUTxpWb6RDY/Pn2yxvb4TBMn0zVY5WEgupXoVinvkDniqdpuEqI zeI= -----END CERTIFICATE-----Generated at Tue Feb 10 06:06:56 2026 by rpki-client