This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/tz7F4eng4GbKZrftZOga_11upMA.roa File: tz7F4eng4GbKZrftZOga_11upMA.roa (raw, json) Hash identifier: pkYGrfaCo0zVxHfUdGVs2eZr/bDW6rBfCQtsQyDfE4g= Subject key identifier: B7:3E:C5:E1:E9:E0:E0:66:CA:66:B7:ED:64:E8:1A:FF:5D:6E:A4:C0 Certificate issuer: /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Certificate serial: 019B79ECB3D2FD1511B6D7115EF8AB59A076 Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/tz7F4eng4GbKZrftZOga_11upMA.roa Signing time: Thu 01 Jan 2026 14:18:34 +0000 ROA not before: Thu 01 Jan 2026 14:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28084 IP address blocks: 84.54.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:b3:d2:fd:15:11:b6:d7:11:5e:f8:ab:59:a0:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Validity Not Before: Jan 1 14:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b73ec5e1e9e0e066ca66b7ed64e81aff5d6ea4c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:58:30:76:89:aa:87:cf:97:4b:91:3e:94:5d: ec:35:b4:a5:0d:bd:6a:5f:ee:64:df:6f:16:7d:81: 48:ba:a2:00:d0:7f:42:d5:a2:e8:39:39:97:11:03: d3:c5:e8:03:f5:13:c2:f0:0a:d0:e1:18:d4:04:54: 9a:bc:4c:bd:a6:83:92:3e:69:6f:82:d2:49:42:c2: 96:75:8b:a4:ae:b7:fe:98:d8:97:a1:08:e5:8c:a6: 2e:18:e2:f9:25:08:a2:18:b1:09:1c:d5:89:65:4e: ad:30:7b:88:94:d8:44:fb:d9:41:67:14:97:47:46: bb:9d:61:0c:86:56:0c:dc:b4:67:e0:6c:fc:ac:cb: 47:9f:a4:aa:55:33:c6:0b:c4:79:86:d7:41:b0:a9: 70:ef:fc:97:72:16:cf:47:77:82:16:f0:07:ee:04: f8:d9:95:30:5b:32:32:20:0a:70:4d:c1:12:be:e6: 92:e3:06:d5:6b:14:ed:e5:8e:3d:4f:27:f1:e8:16: f0:d0:6a:64:51:fa:9b:5c:cb:22:1f:e6:9c:27:41: 17:7d:8a:7a:63:58:95:3f:58:40:b7:c5:f8:8d:00: 21:5c:64:9c:e0:e0:93:1e:b7:28:bf:4a:e1:2d:dc: fa:da:15:00:31:fe:62:29:ce:36:92:b3:79:24:b1: a0:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:3E:C5:E1:E9:E0:E0:66:CA:66:B7:ED:64:E8:1A:FF:5D:6E:A4:C0 X509v3 Authority Key Identifier: keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/tz7F4eng4GbKZrftZOga_11upMA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.54.155.0/24 Signature Algorithm: sha256WithRSAEncryption 32:e2:e3:2c:76:ba:1b:c8:56:e4:55:5d:45:8a:7d:17:77:4e: b7:c5:95:68:ed:1d:63:91:e7:d5:3b:97:cd:a3:e5:8b:bf:82: 05:e9:84:5d:c7:62:a9:a9:b3:8e:c1:05:12:b5:b0:5c:f2:6a: 7b:5e:97:21:32:0d:57:1b:75:af:67:99:cc:2a:b8:4c:d1:c2: 97:3b:77:5a:0e:5a:72:89:29:ec:dc:c0:16:a9:2c:fe:19:cc: 2a:3c:5d:0c:75:33:87:c6:29:ff:6c:2a:2b:4f:05:10:4e:a5: b3:81:81:70:ca:fd:fb:00:8e:84:2f:3b:b4:ad:37:fd:f0:37: 19:d1:ad:97:0d:c2:b5:21:33:84:9d:fd:f4:5c:e2:b0:cc:5d: b8:83:6e:df:2a:84:b0:46:63:ea:22:dd:0f:65:c7:4d:37:77: 58:41:9f:5f:de:8f:c4:53:0f:2d:7b:ee:66:d5:98:b3:52:bc: 08:bf:53:64:0a:32:89:c9:98:91:1d:b8:11:b4:3c:39:03:64: 9a:cb:be:35:ec:fd:da:4c:30:55:26:fa:6a:da:97:d8:97:ef: 92:38:ee:cb:c9:b1:b3:a5:5b:5f:60:80:7b:74:4b:2e:1f:46: 56:ac:77:b9:cc:07:15:5a:1b:4b:2e:f9:b2:31:16:86:be:b5: 1e:88:37:3c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57LPS/RURttcRXvirWaB2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkODhlNGY3YTMwMjQxMmMzMTZhM2JiNTk5Y2RkMjA0MmI1 ZmY0ODUwHhcNMjYwMTAxMTQxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzNlYzVlMWU5ZTBlMDY2Y2E2NmI3ZWQ2NGU4MWFmZjVkNmVhNGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVgwdomqh8+XS5E+lF3sNbSlDb1q X+5k328WfYFIuqIA0H9C1aLoOTmXEQPTxegD9RPC8ArQ4RjUBFSavEy9poOSPmlv gtJJQsKWdYukrrf+mNiXoQjljKYuGOL5JQiiGLEJHNWJZU6tMHuIlNhE+9lBZxSX R0a7nWEMhlYM3LRn4Gz8rMtHn6SqVTPGC8R5htdBsKlw7/yXchbPR3eCFvAH7gT4 2ZUwWzIyIApwTcESvuaS4wbVaxTt5Y49Tyfx6Bbw0GpkUfqbXMsiH+acJ0EXfYp6 Y1iVP1hAt8X4jQAhXGSc4OCTHrcov0rhLdz62hUAMf5iKc42krN5JLGgQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLc+xeHp4OBmyma37WToGv9dbqTAMB8GA1UdIwQY MBaAFF2I5PejAkEsMWo7tZnN0gQrX/SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGIt NTdlMWQ1YjcyYjJkLzEvdHo3RjRlbmc0R2JLWnJmdFpPZ2FfMTF1cE1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGItNTdlMWQ1YjcyYjJk LzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVDabMA0G CSqGSIb3DQEBCwUAA4IBAQAy4uMsdrobyFbkVV1Fin0Xd063xZVo7R1jkefVO5fN o+WLv4IF6YRdx2KpqbOOwQUStbBc8mp7XpchMg1XG3WvZ5nMKrhM0cKXO3daDlpy iSns3MAWqSz+GcwqPF0MdTOHxin/bCorTwUQTqWzgYFwyv37AI6ELzu0rTf98DcZ 0a2XDcK1ITOEnf30XOKwzF24g27fKoSwRmPqIt0PZcdNN3dYQZ9f3o/EUw8te+5m 1ZizUrwIv1NkCjKJyZiRHbgRtDw5A2Say7417P3aTDBVJvpq2pfYl++SOO7LybGz pVtfYIB7dEsuH0ZWrHe5zAcVWhtLLvmyMRaGvrUeiDc8 -----END CERTIFICATE-----Generated at Mon Jan 26 10:23:18 2026 by rpki-client