This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/tMPx4qHFiHCxoCIqdROP7EUPECw.roa File: tMPx4qHFiHCxoCIqdROP7EUPECw.roa (raw, json) Hash identifier: BdbWjNGqlEpH1mI3wXTAVi6/ZUmTO4flVFWkLlYWylk= Subject key identifier: B4:C3:F1:E2:A1:C5:88:70:B1:A0:22:2A:75:13:8F:EC:45:0F:10:2C Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D242C6C0E63BE0168FEEF562A3696 Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/tMPx4qHFiHCxoCIqdROP7EUPECw.roa Signing time: Fri 02 Jan 2026 06:20:14 +0000 ROA not before: Fri 02 Jan 2026 06:20:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1299 IP address blocks: 84.245.48.0/21 maxlen: 21 84.245.56.0/24 maxlen: 24 84.245.58.0/23 maxlen: 23 84.245.60.0/22 maxlen: 22 89.31.219.0/24 maxlen: 24 185.228.227.0/24 maxlen: 24 185.244.221.0/24 maxlen: 24 185.244.222.0/23 maxlen: 23 193.84.135.0/24 maxlen: 24 217.74.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:24:2c:6c:0e:63:be:01:68:fe:ef:56:2a:36:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4c3f1e2a1c58870b1a0222a75138fec450f102c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:68:6d:c4:b2:b1:4f:f9:bb:51:0e:50:9c:30: 75:5b:2e:a2:1f:93:26:e3:38:ac:ff:d6:ec:3c:b4: 72:11:17:6c:32:d1:cb:c4:3f:2b:11:af:40:f5:b9: 5c:22:b8:a2:38:92:ca:a3:73:f0:93:a5:33:2b:5b: ee:ae:b7:24:23:30:2f:80:47:60:ca:d3:af:9a:da: d4:2a:85:09:2e:c6:44:d4:1f:db:d0:4b:61:04:c4: 58:5f:06:8d:08:7b:37:87:92:28:18:9b:16:25:e4: 74:16:01:da:c5:01:02:60:0f:fa:80:a7:bc:56:2a: 96:a0:17:ec:2b:70:4f:bd:50:a6:c5:1c:27:22:f0: 45:3c:17:fc:f8:8e:ef:0b:2c:c4:55:92:c2:23:29: 36:36:23:8c:8a:b6:58:bf:81:61:92:63:14:8f:b4: 40:29:52:89:fc:43:ea:ff:fe:01:8f:b0:29:07:25: 55:c9:02:a8:1e:6a:94:f7:ed:d2:61:30:ff:c3:17: 7b:a1:d4:c8:99:52:cd:99:87:2c:7b:9a:60:57:86: c6:2d:41:20:55:b9:40:3d:33:a1:32:25:00:8d:c1: a6:18:7f:48:a9:26:06:a8:ad:9d:bc:e5:18:16:9c: b3:8e:e0:1a:07:2b:ad:e8:e5:ba:48:9f:af:c1:2e: 96:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C3:F1:E2:A1:C5:88:70:B1:A0:22:2A:75:13:8F:EC:45:0F:10:2C X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/tMPx4qHFiHCxoCIqdROP7EUPECw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.245.48.0-84.245.56.255 84.245.58.0-84.245.63.255 89.31.219.0/24 185.228.227.0/24 185.244.221.0-185.244.223.255 193.84.135.0/24 217.74.19.0/24 Signature Algorithm: sha256WithRSAEncryption 97:60:7a:70:13:99:af:59:77:88:21:16:d4:91:19:48:47:fc: d2:53:27:f4:1e:e2:3b:54:1b:93:a9:01:49:1c:57:3e:18:90: a2:52:d4:ec:fa:ff:91:09:e6:c8:ed:53:c0:3c:0d:64:e2:c4: 8b:7e:ac:01:1d:d1:f3:a5:0e:74:27:dc:5b:0d:c7:05:d1:14: e9:8f:9c:6d:95:b6:b8:44:c3:6a:89:db:5e:a5:f8:16:a0:2c: 17:d6:73:ce:d6:83:1b:8a:63:28:87:2a:f1:4f:8d:92:12:bc: 1f:06:3a:01:82:91:c9:fb:4a:0e:1e:40:c8:01:55:9c:eb:00: 06:fd:07:fb:3d:f3:9f:3a:55:70:eb:29:bf:f5:25:9a:04:44: 8a:31:f1:a6:95:ca:b3:f4:a7:af:f7:19:7d:bf:5f:a6:e3:9d: bd:4a:90:d4:f6:c9:78:18:35:09:83:02:a6:5e:fa:8b:8a:95: dd:14:14:86:1f:18:15:11:d8:f4:35:10:16:a4:3b:e7:4d:ef: b0:0d:77:a4:df:48:08:2b:b1:85:b8:11:c3:33:8c:a3:05:b8: 20:bc:27:4b:53:c4:26:f1:73:a8:39:3f:e5:d5:18:77:22:04: a1:a3:44:40:7b:39:3c:18:34:59:ce:bb:dd:d1:8b:84:81:06: 51:dd:1c:9e -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZt9XSQsbA5jvgFo/u9WKjaWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGMzZjFlMmExYzU4ODcwYjFhMDIyMmE3NTEzOGZlYzQ1MGYxMDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGhtxLKxT/m7UQ5QnDB1Wy6iH5Mm 4zis/9bsPLRyERdsMtHLxD8rEa9A9blcIriiOJLKo3Pwk6UzK1vurrckIzAvgEdg ytOvmtrUKoUJLsZE1B/b0EthBMRYXwaNCHs3h5IoGJsWJeR0FgHaxQECYA/6gKe8 ViqWoBfsK3BPvVCmxRwnIvBFPBf8+I7vCyzEVZLCIyk2NiOMirZYv4FhkmMUj7RA KVKJ/EPq//4Bj7ApByVVyQKoHmqU9+3SYTD/wxd7odTImVLNmYcse5pgV4bGLUEg VblAPTOhMiUAjcGmGH9IqSYGqK2dvOUYFpyzjuAaByut6OW6SJ+vwS6WIwIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFLTD8eKhxYhwsaAiKnUTj+xFDxAsMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvdE1QeDRxSEZpSEN4b0NJcWRST1A3RVVQRUN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCMAwDBARU9TAD BABU9TgwDAMEAVT1OgMEBlT1AAMEAFkf2wMEALnk4zAMAwQAufTdAwQFufTAAwQA wVSHAwQA2UoTMA0GCSqGSIb3DQEBCwUAA4IBAQCXYHpwE5mvWXeIIRbUkRlIR/zS Uyf0HuI7VBuTqQFJHFc+GJCiUtTs+v+RCebI7VPAPA1k4sSLfqwBHdHzpQ50J9xb DccF0RTpj5xtlba4RMNqidtepfgWoCwX1nPO1oMbimMohyrxT42SErwfBjoBgpHJ +0oOHkDIAVWc6wAG/Qf7PfOfOlVw6ym/9SWaBESKMfGmlcqz9Kev9xl9v1+m4529 SpDU9sl4GDUJgwKmXvqLipXdFBSGHxgVEdj0NRAWpDvnTe+wDXek30gIK7GFuBHD M4yjBbggvCdLU8Qm8XOoOT/l1Rh3IgSho0RAezk8GDRZzrvd0YuEgQZR3Rye -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:41 2026 by rpki-client