This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/t_IFzY8Fmcbu_ECs1VYwATKRDVM.roa File: t_IFzY8Fmcbu_ECs1VYwATKRDVM.roa (raw, json) Hash identifier: zPmzKv9Sv3CWVQ7tS1fG8zEgGyRJzdU51E/8+5c5c+Q= Subject key identifier: B7:F2:05:CD:8F:05:99:C6:EE:FC:40:AC:D5:56:30:01:32:91:0D:53 Certificate issuer: /CN=7a938a935f8baf9cd933906416590d782e7287c7 Certificate serial: 019B7BA35E3295C5BCF8F340EC6230CA45D4 Authority key identifier: 7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/t_IFzY8Fmcbu_ECs1VYwATKRDVM.roa Signing time: Thu 01 Jan 2026 22:17:42 +0000 ROA not before: Thu 01 Jan 2026 22:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 145.243.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:5e:32:95:c5:bc:f8:f3:40:ec:62:30:ca:45:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a938a935f8baf9cd933906416590d782e7287c7 Validity Not Before: Jan 1 22:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7f205cd8f0599c6eefc40acd556300132910d53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e2:be:db:82:9e:0d:50:78:d7:ef:6a:83:85: d6:6e:f2:75:a4:d7:70:6b:33:73:91:83:d0:78:7b: 82:f1:73:50:54:77:ab:ac:c3:4d:32:86:74:51:b1: 4c:6e:43:43:b6:bd:2e:2e:99:9a:33:c3:40:b0:18: 9d:9e:61:b5:5b:39:89:04:39:71:95:b7:98:2b:d3: 05:8f:28:37:ca:5d:31:c3:b1:38:e5:d0:86:e8:a8: cb:4b:55:a3:b1:28:3e:52:d9:04:ba:a5:92:9a:d3: 6f:45:a2:c9:34:46:dd:7b:2e:cc:53:c5:c1:b5:74: 83:81:2c:0d:88:e1:9b:d1:04:0f:de:56:83:92:98: 74:5d:5c:37:87:08:52:c9:8b:52:91:48:6f:a5:b1: 06:47:40:56:29:e2:a6:6a:5e:5c:25:70:a2:1f:e6: d3:f9:d9:2a:2f:6b:ed:23:43:06:be:97:db:2a:95: 80:ce:d6:e2:62:06:9f:a1:d7:0f:53:2a:0e:7b:db: 6f:76:aa:21:d5:b2:01:6d:2c:37:ba:62:5c:47:1c: f3:48:e1:59:d3:1a:33:2e:ba:65:1b:25:f0:75:14: ca:99:39:c9:82:4e:de:f6:53:eb:83:96:ee:7a:70: 55:89:3c:b2:1e:c9:99:e7:fb:cf:84:a2:eb:f3:a3: 18:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:F2:05:CD:8F:05:99:C6:EE:FC:40:AC:D5:56:30:01:32:91:0D:53 X509v3 Authority Key Identifier: keyid:7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/t_IFzY8Fmcbu_ECs1VYwATKRDVM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.243.216.0/24 Signature Algorithm: sha256WithRSAEncryption 07:db:8d:a7:e9:9d:7a:2c:37:39:77:be:e5:0c:46:b9:9a:73: c4:ff:2c:a5:4d:ac:67:10:fb:ea:58:9e:ba:a6:3c:e1:df:6e: 53:d4:70:a1:06:ba:4b:a7:21:69:67:43:f5:62:e1:f5:68:85: 59:37:9d:ce:d8:fa:a6:6a:4f:a6:ea:48:3f:da:9f:13:db:88: 10:99:dd:2e:4e:a9:f0:35:1e:e5:f8:27:9a:08:67:b0:79:be: b6:a5:b0:60:49:9b:f0:95:65:4e:5a:1e:fd:ec:07:43:ab:ff: 0c:61:53:63:f8:e7:9b:4d:48:ef:84:32:05:16:04:3d:fc:f9: ff:31:30:f7:7e:e6:3c:e5:28:28:92:ba:56:71:55:3a:ea:e3: b5:46:e5:a4:b7:92:eb:a7:db:14:1b:c3:d9:84:17:fe:24:20: b6:8b:77:97:d2:0e:d4:04:be:a9:f8:81:39:8c:96:25:48:04: 57:25:72:ae:2e:da:d3:bd:33:dd:5e:5e:15:0b:24:04:42:a0: e5:2a:1a:2a:9c:7b:71:17:8c:ca:c0:06:d6:46:79:5c:83:36: d8:a5:72:2c:59:5b:8f:e7:f7:51:fa:56:85:33:72:77:83:bd: f5:fc:ed:4f:34:84:18:0a:ef:e4:58:be:e1:40:ba:5f:5a:40: e0:4b:15:29 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o14ylcW8+PNA7GIwykXUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhOTM4YTkzNWY4YmFmOWNkOTMzOTA2NDE2NTkwZDc4MmU3 Mjg3YzcwHhcNMjYwMTAxMjIxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2YyMDVjZDhmMDU5OWM2ZWVmYzQwYWNkNTU2MzAwMTMyOTEwZDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eK+24KeDVB41+9qg4XWbvJ1pNdw azNzkYPQeHuC8XNQVHerrMNNMoZ0UbFMbkNDtr0uLpmaM8NAsBidnmG1WzmJBDlx lbeYK9MFjyg3yl0xw7E45dCG6KjLS1WjsSg+UtkEuqWSmtNvRaLJNEbdey7MU8XB tXSDgSwNiOGb0QQP3laDkph0XVw3hwhSyYtSkUhvpbEGR0BWKeKmal5cJXCiH+bT +dkqL2vtI0MGvpfbKpWAztbiYgafodcPUyoOe9tvdqoh1bIBbSw3umJcRxzzSOFZ 0xozLrplGyXwdRTKmTnJgk7e9lPrg5buenBViTyyHsmZ5/vPhKLr86MY/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLfyBc2PBZnG7vxArNVWMAEykQ1TMB8GA1UdIwQY MBaAFHqTipNfi6+c2TOQZBZZDXgucofHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXBPS2sxLUxyNXpaTTVCa0Zsa05lQzV5aDhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9mZjBiZmMtMjZmZS00NDEyLWEyMzIt MzE5OTlmM2FkZDM2LzEvdF9JRnpZOEZtY2J1X0VDczFWWXdBVEtSRFZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9mZjBiZmMtMjZmZS00NDEyLWEyMzItMzE5OTlmM2FkZDM2 LzEvZXBPS2sxLUxyNXpaTTVCa0Zsa05lQzV5aDhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkfPYMA0G CSqGSIb3DQEBCwUAA4IBAQAH242n6Z16LDc5d77lDEa5mnPE/yylTaxnEPvqWJ66 pjzh325T1HChBrpLpyFpZ0P1YuH1aIVZN53O2Pqmak+m6kg/2p8T24gQmd0uTqnw NR7l+CeaCGeweb62pbBgSZvwlWVOWh797AdDq/8MYVNj+OebTUjvhDIFFgQ9/Pn/ MTD3fuY85SgokrpWcVU66uO1RuWkt5Lrp9sUG8PZhBf+JCC2i3eX0g7UBL6p+IE5 jJYlSARXJXKuLtrTvTPdXl4VCyQEQqDlKhoqnHtxF4zKwAbWRnlcgzbYpXIsWVuP 5/dR+laFM3J3g731/O1PNIQYCu/kWL7hQLpfWkDgSxUp -----END CERTIFICATE-----Generated at Fri Jan 2 11:04:03 2026 by rpki-client