This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa File: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (raw, json) Hash identifier: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY= Subject key identifier: 4E:97:A8:5E:F5:40:13:D8:AF:47:FC:EC:0E:B5:A9:BE:8B:C1:D0:F8 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019B7AC7ABC30A4986AF6FA7A320B7B2EDD0 Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa Signing time: Thu 01 Jan 2026 18:17:44 +0000 ROA not before: Thu 01 Jan 2026 18:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47823 IP address blocks: 185.94.196.0/22 maxlen: 24 193.219.101.0/24 maxlen: 24 193.219.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:ab:c3:0a:49:86:af:6f:a7:a3:20:b7:b2:ed:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Jan 1 18:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e97a85ef54013d8af47fcec0eb5a9be8bc1d0f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ac:69:01:07:e4:e7:ac:21:40:17:c6:66:82: 33:5b:1d:33:d8:39:ed:a5:ef:fc:b1:24:63:52:cb: a0:b7:3c:01:86:bd:c9:cd:53:a6:4e:5e:13:14:cd: 33:dd:34:b1:4c:c5:6d:e3:0e:db:09:fa:14:68:89: 59:dd:ce:3d:fa:35:7b:de:fd:60:c3:6a:d5:ef:20: ca:64:a7:ed:1b:0d:16:af:25:1a:fd:a9:1c:dc:51: b4:17:ef:ee:1e:34:2d:f5:19:fb:60:94:80:c9:d0: 72:29:12:df:fd:08:31:2e:2b:e2:ca:37:b7:f5:5a: 7e:3d:a9:d7:56:6b:35:de:9f:ce:95:1d:b4:6e:b6: 4a:55:0e:fa:8b:3e:38:fb:aa:61:2a:64:16:a3:cc: 0c:33:92:f3:76:2d:c0:35:b0:67:f0:8f:0d:82:24: 53:27:65:69:3d:ca:76:40:d9:cf:62:f6:5b:1d:1f: c9:66:a3:c7:f6:83:56:f0:83:79:6f:db:5c:8a:18: 2d:00:ce:0f:28:94:f6:37:0c:50:90:ab:6e:d3:b7: 46:ce:e5:4a:9b:95:3e:37:50:48:57:72:1d:2c:20: 49:c4:c0:ad:62:a1:6a:e1:41:f0:34:24:55:0c:a7: 47:ca:28:a3:3f:54:16:32:69:42:76:e7:d5:e3:f2: 5d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:97:A8:5E:F5:40:13:D8:AF:47:FC:EC:0E:B5:A9:BE:8B:C1:D0:F8 X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.94.196.0/22 193.219.101.0/24 193.219.121.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:13:cc:0f:da:d3:6b:6b:35:f9:43:e6:95:d0:59:4a:61:a0: 3f:93:e7:8c:8e:ad:02:df:40:59:a7:d0:22:1e:95:a3:96:92: 0c:81:b3:d2:d0:b3:6a:ef:d8:28:47:06:6f:04:99:7f:7c:f5: c7:bb:31:3d:2c:34:f1:88:57:5e:9e:4a:6b:ca:2f:e9:06:83: 0b:c2:1a:ec:fe:e4:0d:60:03:f3:2c:14:73:cc:a1:40:7c:bb: 67:10:d9:1e:1b:40:6b:f3:39:48:85:9f:99:4a:da:19:49:d5: 64:41:44:f7:85:10:29:74:05:6b:94:c8:d4:5b:c6:f5:87:b0: 7c:8e:c9:37:83:7b:fc:c4:20:42:54:a8:15:5c:4e:35:8b:d2: 06:d4:89:c9:29:85:a1:6d:5d:ad:a9:bf:7c:b8:2f:50:0c:cf: c7:55:54:6a:11:f8:e0:ff:cf:a4:45:4e:ae:91:6a:10:f0:44: ca:9c:6a:40:56:46:04:b5:5c:d5:37:0d:bc:3c:43:12:af:30: e5:68:fc:f9:17:a5:e8:a2:70:61:30:f4:4b:df:02:a5:92:41: 93:71:94:2b:6c:ce:d7:51:d6:29:45:37:41:dc:ce:b1:dc:eb: db:04:9e:16:81:45:f6:e0:8a:a3:00:8b:c2:7f:e6:ae:4e:2b: 70:a8:03:b0 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6x6vDCkmGr2+noyC3su3QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwMTAxMTgxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTk3YTg1ZWY1NDAxM2Q4YWY0N2ZjZWMwZWI1YTliZThiYzFkMGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKxpAQfk56whQBfGZoIzWx0z2Dnt pe/8sSRjUsugtzwBhr3JzVOmTl4TFM0z3TSxTMVt4w7bCfoUaIlZ3c49+jV73v1g w2rV7yDKZKftGw0WryUa/akc3FG0F+/uHjQt9Rn7YJSAydByKRLf/QgxLiviyje3 9Vp+PanXVms13p/OlR20brZKVQ76iz44+6phKmQWo8wMM5Lzdi3ANbBn8I8NgiRT J2VpPcp2QNnPYvZbHR/JZqPH9oNW8IN5b9tcihgtAM4PKJT2NwxQkKtu07dGzuVK m5U+N1BIV3IdLCBJxMCtYqFq4UHwNCRVDKdHyiijP1QWMmlCdufV4/JdeQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFE6XqF71QBPYr0f87A61qb6LwdD4MB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvVHBlb1h2VkFFOWl2Ul96c0RyV3B2b3ZCMFBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCuV7EAwQA wdtlAwQAwdt5MA0GCSqGSIb3DQEBCwUAA4IBAQBaE8wP2tNrazX5Q+aV0FlKYaA/ k+eMjq0C30BZp9AiHpWjlpIMgbPS0LNq79goRwZvBJl/fPXHuzE9LDTxiFdenkpr yi/pBoMLwhrs/uQNYAPzLBRzzKFAfLtnENkeG0Br8zlIhZ+ZStoZSdVkQUT3hRAp dAVrlMjUW8b1h7B8jsk3g3v8xCBCVKgVXE41i9IG1InJKYWhbV2tqb98uC9QDM/H VVRqEfjg/8+kRU6ukWoQ8ETKnGpAVkYEtVzVNw28PEMSrzDlaPz5F6XoonBhMPRL 3wKlkkGTcZQrbM7XUdYpRTdB3M6x3OvbBJ4WgUX24IqjAIvCf+auTitwqAOw -----END CERTIFICATE-----Generated at Tue Jan 6 20:33:26 2026 by rpki-client