This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/tPzvJ8fhXyxuStH7y_RiWlVyHhs.roa File: tPzvJ8fhXyxuStH7y_RiWlVyHhs.roa (raw, json) Hash identifier: TJabNOMfT1VmMNuU7X4vXm/HGDPktwOUxF0xJ5kPJG0= Subject key identifier: B4:FC:EF:27:C7:E1:5F:2C:6E:4A:D1:FB:CB:F4:62:5A:55:72:1E:1B Certificate issuer: /CN=09fbb3ed2f029c4bacc6ea2c4c7f4c1cd6e80e79 Certificate serial: 019B7F835C1AB0A4F2F6A193EF50861D7922 Authority key identifier: 09:FB:B3:ED:2F:02:9C:4B:AC:C6:EA:2C:4C:7F:4C:1C:D6:E8:0E:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cfuz7S8CnEusxuosTH9MHNboDnk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/tPzvJ8fhXyxuStH7y_RiWlVyHhs.roa Signing time: Fri 02 Jan 2026 16:21:13 +0000 ROA not before: Fri 02 Jan 2026 16:21:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212062 IP address blocks: 195.244.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.mft rsync://rpki.ripe.net/repository/DEFAULT/Cfuz7S8CnEusxuosTH9MHNboDnk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:5c:1a:b0:a4:f2:f6:a1:93:ef:50:86:1d:79:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09fbb3ed2f029c4bacc6ea2c4c7f4c1cd6e80e79 Validity Not Before: Jan 2 16:21:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4fcef27c7e15f2c6e4ad1fbcbf4625a55721e1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:65:a5:23:c0:58:67:b9:f1:1e:cd:83:76:a8: 7e:2a:54:73:a1:d3:06:89:30:ad:a5:36:3e:f6:a0: 58:f3:99:88:af:e4:ab:b5:0e:75:d1:fe:7f:80:1e: 42:6f:f4:54:54:16:b5:4b:90:a2:e9:52:e9:49:a9: a2:7c:d0:f2:3e:2e:68:06:af:52:91:75:45:3e:b7: e2:76:30:ab:f0:b0:62:a6:9f:22:e4:37:62:0a:5b: eb:d0:2e:c4:ea:97:1e:fa:12:dd:ce:f5:6e:07:3f: c2:1e:e6:e0:78:a1:3c:87:c7:90:43:a7:63:f8:cf: 74:5c:af:2b:fc:c5:84:fa:30:44:3f:df:02:3c:92: 0b:36:76:7f:0a:c9:84:50:eb:fd:ce:0f:19:28:37: bf:ea:21:09:45:d2:45:1d:75:dd:8e:8b:5b:0e:9f: 20:f5:11:a5:8f:41:b2:50:a1:7b:c6:a7:be:6d:1f: 43:e5:68:75:96:7e:fb:c8:9d:18:1b:47:68:e2:d1: ce:d2:39:7b:67:5a:21:65:eb:c1:98:0b:c6:47:52: 3c:fb:5f:32:39:9f:f4:de:3e:9b:55:d5:8c:62:e0: c6:f3:6f:81:04:f8:f7:b5:91:b0:f8:ce:89:01:88: 09:03:7f:55:f9:b4:25:1e:4d:5f:df:61:66:e4:0a: 58:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:FC:EF:27:C7:E1:5F:2C:6E:4A:D1:FB:CB:F4:62:5A:55:72:1E:1B X509v3 Authority Key Identifier: keyid:09:FB:B3:ED:2F:02:9C:4B:AC:C6:EA:2C:4C:7F:4C:1C:D6:E8:0E:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cfuz7S8CnEusxuosTH9MHNboDnk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/tPzvJ8fhXyxuStH7y_RiWlVyHhs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.244.13.0/24 Signature Algorithm: sha256WithRSAEncryption 10:27:47:7a:ff:06:68:2d:3d:de:68:a0:be:26:ac:2d:79:9e: de:ab:14:64:0b:86:eb:7b:d9:1e:40:aa:c3:0a:2b:5c:57:46: 33:04:84:24:ad:c6:97:ea:33:3e:c3:99:0e:05:13:07:48:89: f9:76:0d:bc:44:8a:93:be:f0:90:26:86:57:93:ca:54:fc:81: ed:88:15:a5:d5:dd:d1:94:51:ed:bf:df:80:68:79:f1:78:c5: 38:0c:ba:ac:36:80:e4:22:b4:15:2b:ad:d1:3d:8a:68:c9:fb: a4:8c:77:54:a6:da:e3:09:ee:94:0e:00:0d:b6:79:6e:6c:24: fb:15:0d:fb:22:ea:c4:93:7f:f6:f8:fe:25:ca:7a:08:f3:04: 19:49:e8:32:7b:22:a4:2b:4d:2f:d5:de:7d:1b:c7:b9:81:c8: 59:5b:cb:bd:de:ab:a1:25:f5:8f:19:61:c2:95:8d:a3:bc:25: 25:05:da:b1:0e:cf:51:e6:9c:19:5a:23:56:73:bb:4c:cc:15: 57:5d:b4:52:f7:ac:12:98:6f:05:ea:fa:ec:0b:67:c2:ba:4f: b2:c3:a3:b2:14:6e:9a:1b:fa:65:d2:37:14:6a:64:a9:6e:b3: ba:c0:98:81:24:c3:1f:55:0e:93:3f:0f:d8:e1:c5:9d:39:fc: 8a:c3:7b:4a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g1wasKTy9qGT71CGHXkiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZmJiM2VkMmYwMjljNGJhY2M2ZWEyYzRjN2Y0YzFjZDZl ODBlNzkwHhcNMjYwMTAyMTYyMTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGZjZWYyN2M3ZTE1ZjJjNmU0YWQxZmJjYmY0NjI1YTU1NzIxZTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2WlI8BYZ7nxHs2Ddqh+KlRzodMG iTCtpTY+9qBY85mIr+SrtQ510f5/gB5Cb/RUVBa1S5Ci6VLpSamifNDyPi5oBq9S kXVFPrfidjCr8LBipp8i5DdiClvr0C7E6pce+hLdzvVuBz/CHubgeKE8h8eQQ6dj +M90XK8r/MWE+jBEP98CPJILNnZ/CsmEUOv9zg8ZKDe/6iEJRdJFHXXdjotbDp8g 9RGlj0GyUKF7xqe+bR9D5Wh1ln77yJ0YG0do4tHO0jl7Z1ohZevBmAvGR1I8+18y OZ/03j6bVdWMYuDG82+BBPj3tZGw+M6JAYgJA39V+bQlHk1f32Fm5ApYCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLT87yfH4V8sbkrR+8v0YlpVch4bMB8GA1UdIwQY MBaAFAn7s+0vApxLrMbqLEx/TBzW6A55MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2Z1ejdTOENuRXVzeHVvc1RIOU1ITmJvRG5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85ZDViY2YtMmRiOS00YWZhLWIwMDAt ODIyOTUzZjhjZjc3LzEvdFB6dko4ZmhYeXh1U3RIN3lfUmlXbFZ5SGhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS85ZDViY2YtMmRiOS00YWZhLWIwMDAtODIyOTUzZjhjZjc3 LzEvQ2Z1ejdTOENuRXVzeHVvc1RIOU1ITmJvRG5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw/QNMA0G CSqGSIb3DQEBCwUAA4IBAQAQJ0d6/wZoLT3eaKC+JqwteZ7eqxRkC4bre9keQKrD CitcV0YzBIQkrcaX6jM+w5kOBRMHSIn5dg28RIqTvvCQJoZXk8pU/IHtiBWl1d3R lFHtv9+AaHnxeMU4DLqsNoDkIrQVK63RPYpoyfukjHdUptrjCe6UDgANtnlubCT7 FQ37IurEk3/2+P4lynoI8wQZSegyeyKkK00v1d59G8e5gchZW8u93quhJfWPGWHC lY2jvCUlBdqxDs9R5pwZWiNWc7tMzBVXXbRS96wSmG8F6vrsC2fCuk+yw6OyFG6a G/pl0jcUamSpbrO6wJiBJMMfVQ6TPw/Y4cWdOfyKw3tK -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:11 2026 by rpki-client