This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/T0aHsGGmn41WObWp0hdVliZ14-U.roa File: T0aHsGGmn41WObWp0hdVliZ14-U.roa (raw, json) Hash identifier: Gf+S5d8Ft2GtIs0CvyHUXjNQ/e8ZLOumNWc87eL8OVc= Subject key identifier: 4F:46:87:B0:61:A6:9F:8D:56:39:B5:A9:D2:17:55:96:26:75:E3:E5 Certificate issuer: /CN=c2746ccb7e73a9cc30ef04edd7cf16cc1d946894 Certificate serial: 019B7DCA80EF01679CE6B7D0D548465EF96F Authority key identifier: C2:74:6C:CB:7E:73:A9:CC:30:EF:04:ED:D7:CF:16:CC:1D:94:68:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/T0aHsGGmn41WObWp0hdVliZ14-U.roa Signing time: Fri 02 Jan 2026 08:19:41 +0000 ROA not before: Fri 02 Jan 2026 08:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209828 IP address blocks: 178.255.218.0/24 maxlen: 24 185.203.67.0/24 maxlen: 24 185.204.187.0/24 maxlen: 24 193.163.88.0/24 maxlen: 24 194.69.162.0/24 maxlen: 24 2a0c:ae80::/29 maxlen: 29 2a10:7cc0::/29 maxlen: 29 2a11:940::/29 maxlen: 29 2a11:1ec0::/29 maxlen: 29 2a12:e440::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:80:ef:01:67:9c:e6:b7:d0:d5:48:46:5e:f9:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2746ccb7e73a9cc30ef04edd7cf16cc1d946894 Validity Not Before: Jan 2 08:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f4687b061a69f8d5639b5a9d21755962675e3e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e9:7f:71:2f:ab:b5:bb:84:10:4d:59:98:91: b0:d2:d0:92:2c:ec:05:e5:44:d7:45:3d:ec:20:4f: a7:f1:10:c9:49:5c:ed:f0:27:28:dd:9c:30:e5:5a: d9:77:0e:94:01:96:b3:20:47:3f:33:15:44:be:32: c0:87:76:f7:a9:fd:c7:66:c0:00:c1:07:26:b0:c2: a1:99:1c:c7:f4:5e:ec:0e:52:50:0b:05:69:67:dd: 2d:82:77:c1:e0:87:80:d4:74:bb:96:0c:c7:59:51: 34:3c:cc:d5:80:ce:c9:16:55:e7:89:f0:c0:56:46: 35:5f:2e:1d:9b:65:f3:68:1f:d6:26:63:ec:45:ee: b5:5b:90:5b:c4:a2:25:dc:f3:03:fc:42:db:64:6f: 91:3d:31:72:94:38:5b:aa:95:40:f5:59:80:18:f9: 4d:fc:07:a8:3d:51:ed:b1:23:90:3c:e3:84:b1:3d: ef:a0:88:27:ac:16:ff:35:83:f9:32:64:43:02:6a: 53:b0:9e:64:74:2a:50:14:1c:bb:46:a7:c0:75:83: 98:74:7e:36:cd:74:11:3d:28:ae:60:34:c2:63:d8: e1:c5:42:df:9d:54:95:e6:81:58:63:68:d8:55:38: e3:7f:d0:03:66:0a:e6:84:44:a5:12:6a:1c:73:4c: c4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:46:87:B0:61:A6:9F:8D:56:39:B5:A9:D2:17:55:96:26:75:E3:E5 X509v3 Authority Key Identifier: keyid:C2:74:6C:CB:7E:73:A9:CC:30:EF:04:ED:D7:CF:16:CC:1D:94:68:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/T0aHsGGmn41WObWp0hdVliZ14-U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.255.218.0/24 185.203.67.0/24 185.204.187.0/24 193.163.88.0/24 194.69.162.0/24 IPv6: 2a0c:ae80::/29 2a10:7cc0::/29 2a11:940::/29 2a11:1ec0::/29 2a12:e440::/29 Signature Algorithm: sha256WithRSAEncryption 09:b7:d0:54:f0:70:d6:12:f7:09:fc:99:b0:27:bb:af:7c:da: 1b:3c:2e:00:e8:5b:ed:a9:f0:5f:cc:9b:b1:fe:b9:66:2f:22: 3d:41:25:2a:aa:2a:cd:46:e8:bd:25:79:68:b2:c2:a0:51:4b: b9:28:4e:a4:6c:41:63:f9:fd:d4:cf:41:c9:04:e3:d0:bf:c0: c1:d6:0c:27:f8:76:47:a1:81:ca:cf:28:ac:ed:d7:39:6d:2d: 30:65:3f:19:1c:1b:9f:19:8e:09:7d:98:8e:a0:54:81:91:17: 00:01:1e:ad:8e:b3:44:94:ee:96:dc:54:d3:f2:ff:e1:49:a9: 07:2a:7e:7e:53:f3:1b:c6:62:14:30:dc:10:de:af:77:98:81: 0d:a0:78:a3:d0:4a:48:f5:f4:e5:07:f8:b7:b0:7f:b0:3e:63: b6:31:55:8e:ef:be:94:e2:3f:86:8d:3d:65:23:53:0d:8c:44: 83:ea:c3:25:b9:27:bf:3b:57:37:1f:36:97:fa:ee:b9:4d:88: 88:f7:cb:01:8d:fa:75:48:0d:10:d0:8e:46:63:b1:b8:67:4e: 81:0e:6a:92:3d:d3:a8:33:23:a3:4b:04:6c:4c:08:eb:5c:78: 8e:61:36:45:a1:c9:c7:3c:c1:e2:cb:3e:f1:9f:7d:d1:e6:54: 31:81:e8:dc -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgISAZt9yoDvAWec5rfQ1UhGXvlvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyNzQ2Y2NiN2U3M2E5Y2MzMGVmMDRlZGQ3Y2YxNmNjMWQ5 NDY4OTQwHhcNMjYwMTAyMDgxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjQ2ODdiMDYxYTY5ZjhkNTYzOWI1YTlkMjE3NTU5NjI2NzVlM2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+l/cS+rtbuEEE1ZmJGw0tCSLOwF 5UTXRT3sIE+n8RDJSVzt8Cco3Zww5VrZdw6UAZazIEc/MxVEvjLAh3b3qf3HZsAA wQcmsMKhmRzH9F7sDlJQCwVpZ90tgnfB4IeA1HS7lgzHWVE0PMzVgM7JFlXnifDA VkY1Xy4dm2XzaB/WJmPsRe61W5BbxKIl3PMD/ELbZG+RPTFylDhbqpVA9VmAGPlN /AeoPVHtsSOQPOOEsT3voIgnrBb/NYP5MmRDAmpTsJ5kdCpQFBy7RqfAdYOYdH42 zXQRPSiuYDTCY9jhxULfnVSV5oFYY2jYVTjjf9ADZgrmhESlEmocc0zESwIDAQAB o4ICTDCCAkgwHQYDVR0OBBYEFE9Gh7Bhpp+NVjm1qdIXVZYmdePlMB8GA1UdIwQY MBaAFMJ0bMt+c6nMMO8E7dfPFswdlGiUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd25Sc3kzNXpxY3d3N3dUdDE4OFd6QjJVYUpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS81OTcwM2YtZjAwMy00ODQ1LTk4M2Et OTNlOTE4ZDEwZWM1LzEvVDBhSHNHR21uNDFXT2JXcDBoZFZsaVoxNC1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS81OTcwM2YtZjAwMy00ODQ1LTk4M2EtOTNlOTE4ZDEwZWM1 LzEvd25Sc3kzNXpxY3d3N3dUdDE4OFd6QjJVYUpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGIGCCsGAQUFBwEHAQH/BFMwUTAkBAIAATAeAwQAsv/aAwQA uctDAwQAucy7AwQAwaNYAwQAwkWiMCkEAgACMCMDBQMqDK6AAwUDKhB8wAMFAyoR CUADBQMqER7AAwUDKhLkQDANBgkqhkiG9w0BAQsFAAOCAQEACbfQVPBw1hL3CfyZ sCe7r3zaGzwuAOhb7anwX8ybsf65Zi8iPUElKqoqzUbovSV5aLLCoFFLuShOpGxB Y/n91M9ByQTj0L/AwdYMJ/h2R6GBys8orO3XOW0tMGU/GRwbnxmOCX2YjqBUgZEX AAEerY6zRJTultxU0/L/4UmpByp+flPzG8ZiFDDcEN6vd5iBDaB4o9BKSPX05Qf4 t7B/sD5jtjFVju++lOI/ho09ZSNTDYxEg+rDJbknvztXNx82l/ruuU2IiPfLAY36 dUgNENCORmOxuGdOgQ5qkj3TqDMjo0sEbEwI61x4jmE2RaHJxzzB4ss+8Z990eZU MYHo3A== -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:03 2026 by rpki-client