This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/T__G1Ca-eMsMLPhR2fqq6jZzabE.roa File: T__G1Ca-eMsMLPhR2fqq6jZzabE.roa (raw, json) Hash identifier: /YNdonFxgiuSJ7bSBLLw5KHpjMZ1mWh/QAHnXBlZOVY= Subject key identifier: 4F:FF:C6:D4:26:BE:78:CB:0C:2C:F8:51:D9:FA:AA:EA:36:73:69:B1 Certificate issuer: /CN=6b7d01dde3c2ab7fa7b588ecad4d1cd31397bd84 Certificate serial: 019B7BA4C90A20F51F5AD9A4AE8912631C4E Authority key identifier: 6B:7D:01:DD:E3:C2:AB:7F:A7:B5:88:EC:AD:4D:1C:D3:13:97:BD:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a30B3ePCq3-ntYjsrU0c0xOXvYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/T__G1Ca-eMsMLPhR2fqq6jZzabE.roa Signing time: Thu 01 Jan 2026 22:19:15 +0000 ROA not before: Thu 01 Jan 2026 22:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202050 IP address blocks: 193.108.215.0/24 maxlen: 24 193.108.219.0/24 maxlen: 24 193.109.92.0/24 maxlen: 24 193.109.94.0/24 maxlen: 24 2a0f:f840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/a30B3ePCq3-ntYjsrU0c0xOXvYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:c9:0a:20:f5:1f:5a:d9:a4:ae:89:12:63:1c:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b7d01dde3c2ab7fa7b588ecad4d1cd31397bd84 Validity Not Before: Jan 1 22:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4fffc6d426be78cb0c2cf851d9faaaea367369b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d6:a4:bd:58:02:03:f2:16:7a:bc:89:5d:7c: 4e:07:74:e1:1c:2e:9c:f9:a0:d6:d8:94:87:93:ca: 97:1f:fa:a1:74:e4:fe:5c:d1:35:ba:44:87:9c:90: f8:82:da:f2:10:49:d1:7d:81:10:da:6a:89:13:b0: ed:bb:03:11:7d:33:7c:f5:4e:57:1f:42:e6:71:b1: ab:71:9d:77:0f:1c:d4:df:3c:82:1b:a7:55:e7:fe: a1:d5:09:d0:f2:cd:ce:b5:c4:84:79:f2:75:d7:b5: 54:70:e5:69:23:8c:8c:8d:2f:b2:9f:7b:55:b4:67: 2c:20:47:fa:96:57:b0:ec:10:01:4e:34:59:04:fe: 40:80:b9:9d:1a:09:89:50:ff:35:17:18:be:3d:5a: a7:ab:32:85:40:71:77:fa:20:02:7d:e6:47:7a:cf: 71:b5:37:73:d0:c9:14:49:73:ef:30:67:25:3b:13: 8d:34:ca:5e:fd:4b:65:a2:59:b6:15:d8:13:f4:8e: a4:ee:fb:72:62:e1:d7:01:b1:02:2d:b1:d6:35:1b: c7:e0:46:99:f0:83:52:60:8b:f6:2c:cc:a2:f0:f8: 91:f0:71:d6:17:a3:ae:92:bf:91:bc:de:d7:a7:2c: 25:5c:11:14:f1:ed:bf:39:05:83:5a:fc:be:0e:1a: 45:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:FF:C6:D4:26:BE:78:CB:0C:2C:F8:51:D9:FA:AA:EA:36:73:69:B1 X509v3 Authority Key Identifier: keyid:6B:7D:01:DD:E3:C2:AB:7F:A7:B5:88:EC:AD:4D:1C:D3:13:97:BD:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a30B3ePCq3-ntYjsrU0c0xOXvYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/T__G1Ca-eMsMLPhR2fqq6jZzabE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.108.215.0/24 193.108.219.0/24 193.109.92.0/24 193.109.94.0/24 IPv6: 2a0f:f840::/48 Signature Algorithm: sha256WithRSAEncryption 11:f9:d5:ce:5f:a2:c1:a7:60:cf:22:9e:df:92:81:36:58:61: fc:d8:68:f3:54:c9:d3:57:4b:9c:f6:f2:96:f1:35:b8:0a:0a: 9c:60:68:cd:90:5b:91:59:ac:ce:2f:fe:c4:5b:a7:29:0b:80: 63:2d:5a:63:e6:0e:3a:2f:88:10:e4:51:36:fc:2b:aa:77:1d: 36:99:a3:74:6e:bb:8c:b7:0b:c2:9c:91:46:88:df:e8:aa:36: 50:fb:06:0b:cd:9a:88:95:6d:1e:b3:f9:a4:bc:7c:45:0f:15: 33:bd:be:46:65:7e:bb:12:da:61:41:be:89:6e:89:96:be:b5: 6c:fb:08:4e:a0:08:b1:4d:d3:fb:5c:e6:fa:96:a9:4a:ae:63: 75:a9:a1:f4:91:f0:11:b8:9b:3c:cb:34:e0:da:c4:b3:11:93: 9a:5b:50:23:4e:27:3b:28:42:70:67:8f:88:55:4f:60:8e:c9: fd:7c:3e:fa:72:be:d6:87:c1:11:f6:2d:d0:7f:6d:d1:cf:7f: 29:d0:73:90:24:cf:ae:b4:1a:ee:30:ff:1b:dd:9c:60:37:0f: 36:c8:1e:55:b8:41:6f:12:be:db:b3:1f:92:a9:79:85:87:c8: d2:8d:12:e0:c2:dc:fb:88:61:c1:93:f4:24:b4:65:ce:77:f3: 41:89:22:57 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt7pMkKIPUfWtmkrokSYxxOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiN2QwMWRkZTNjMmFiN2ZhN2I1ODhlY2FkNGQxY2QzMTM5 N2JkODQwHhcNMjYwMTAxMjIxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZmZmYzZkNDI2YmU3OGNiMGMyY2Y4NTFkOWZhYWFlYTM2NzM2OWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNakvVgCA/IWeryJXXxOB3ThHC6c +aDW2JSHk8qXH/qhdOT+XNE1ukSHnJD4gtryEEnRfYEQ2mqJE7DtuwMRfTN89U5X H0LmcbGrcZ13DxzU3zyCG6dV5/6h1QnQ8s3OtcSEefJ117VUcOVpI4yMjS+yn3tV tGcsIEf6llew7BABTjRZBP5AgLmdGgmJUP81Fxi+PVqnqzKFQHF3+iACfeZHes9x tTdz0MkUSXPvMGclOxONNMpe/Utlolm2FdgT9I6k7vtyYuHXAbECLbHWNRvH4EaZ 8INSYIv2LMyi8PiR8HHWF6Oukr+RvN7XpywlXBEU8e2/OQWDWvy+DhpFKwIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFE//xtQmvnjLDCz4Udn6quo2c2mxMB8GA1UdIwQY MBaAFGt9Ad3jwqt/p7WI7K1NHNMTl72EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTMwQjNlUENxMy1udFlqc3JVMGMweE9YdllRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8yMGYyM2QtMWZjOS00NzFhLTgyYmQt ZmU4YWY5YTZlZmQyLzEvVF9fRzFDYS1lTXNNTFBoUjJmcXE2alp6YWJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8yMGYyM2QtMWZjOS00NzFhLTgyYmQtZmU4YWY5YTZlZmQy LzEvYTMwQjNlUENxMy1udFlqc3JVMGMweE9YdllRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQAwWzXAwQA wWzbAwQAwW1cAwQAwW1eMA8EAgACMAkDBwAqD/hAAAAwDQYJKoZIhvcNAQELBQAD ggEBABH51c5fosGnYM8int+SgTZYYfzYaPNUydNXS5z28pbxNbgKCpxgaM2QW5FZ rM4v/sRbpykLgGMtWmPmDjoviBDkUTb8K6p3HTaZo3Ruu4y3C8KckUaI3+iqNlD7 BgvNmoiVbR6z+aS8fEUPFTO9vkZlfrsS2mFBvoluiZa+tWz7CE6gCLFN0/tc5vqW qUquY3WpofSR8BG4mzzLNODaxLMRk5pbUCNOJzsoQnBnj4hVT2COyf18PvpyvtaH wRH2LdB/bdHPfynQc5Akz660Gu4w/xvdnGA3DzbIHlW4QW8SvtuzH5KpeYWHyNKN EuDC3PuIYcGT9CS0Zc5380GJIlc= -----END CERTIFICATE-----Generated at Mon Jan 26 23:22:56 2026 by rpki-client