This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/T0yo1RTWcLkKjj9BCwI7fzMhqKs.roa File: T0yo1RTWcLkKjj9BCwI7fzMhqKs.roa (raw, json) Hash identifier: q8a/g/tCJJ065beXU3o3AgznSWXuuLeSniWGL98Zjek= Subject key identifier: 4F:4C:A8:D5:14:D6:70:B9:0A:8E:3F:41:0B:02:3B:7F:33:21:A8:AB Certificate issuer: /CN=beef138c62b8174c6a808306eda57e92805de985 Certificate serial: 019B7EA724DBC74664C46C836902FF9FA657 Authority key identifier: BE:EF:13:8C:62:B8:17:4C:6A:80:83:06:ED:A5:7E:92:80:5D:E9:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/T0yo1RTWcLkKjj9BCwI7fzMhqKs.roa Signing time: Fri 02 Jan 2026 12:20:41 +0000 ROA not before: Fri 02 Jan 2026 12:20:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 185.157.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:24:db:c7:46:64:c4:6c:83:69:02:ff:9f:a6:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=beef138c62b8174c6a808306eda57e92805de985 Validity Not Before: Jan 2 12:20:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f4ca8d514d670b90a8e3f410b023b7f3321a8ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d6:e3:4c:2d:b6:90:be:8a:4a:67:98:6c:5a: ef:f3:37:01:6c:b4:a3:0f:6a:1b:80:51:27:60:66: 67:fe:d6:bc:94:15:9a:eb:bf:41:c3:1e:a0:e5:20: 50:2c:9d:62:58:48:16:6b:db:1b:ba:de:01:32:88: 1a:30:01:3a:f2:14:d1:52:34:6b:7f:9e:36:22:8c: 80:61:6c:38:2f:36:15:a0:87:72:64:e4:22:4d:c0: 67:42:27:17:98:5f:1a:ad:bb:38:17:e1:67:34:76: 0d:09:39:ba:52:bd:8d:7f:3b:e2:be:3e:66:78:27: 8d:0e:f1:e3:d3:46:fd:bd:d0:9f:b0:75:72:ef:16: db:2d:57:18:5b:af:92:9d:96:6f:f3:57:25:d9:42: 23:9c:e7:10:bb:01:07:d8:3a:59:04:da:79:41:36: 9c:ad:fa:b1:80:74:89:2b:3e:2e:d5:21:9a:b3:5e: de:2f:01:3d:a8:f5:a3:09:59:3b:c0:ac:28:d2:fc: 49:66:2b:44:48:c1:0a:ed:f0:f0:0c:03:26:4d:e5: f6:69:29:b3:49:84:03:d6:f1:f4:56:0c:28:94:a5: 06:0f:09:7e:95:a0:00:1b:e9:12:95:dc:30:bc:55: d7:86:80:47:8b:da:a7:9a:0e:45:d7:38:80:71:3c: f4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:4C:A8:D5:14:D6:70:B9:0A:8E:3F:41:0B:02:3B:7F:33:21:A8:AB X509v3 Authority Key Identifier: keyid:BE:EF:13:8C:62:B8:17:4C:6A:80:83:06:ED:A5:7E:92:80:5D:E9:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/T0yo1RTWcLkKjj9BCwI7fzMhqKs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.157.16.0/22 Signature Algorithm: sha256WithRSAEncryption 1f:96:20:69:30:e4:18:5e:26:ad:e7:8d:29:08:c7:95:88:b6: e4:55:d1:3e:93:2d:85:19:c9:a0:02:7d:65:ed:7b:be:68:58: 81:56:4f:91:13:25:c2:42:1e:51:eb:8c:eb:14:07:2c:0f:54: 9b:a1:3a:a6:34:9b:06:32:17:b3:4f:76:2c:9b:4e:19:93:24: 39:02:83:fd:27:c2:ab:fc:86:75:de:32:b0:f2:ab:1e:01:1d: 43:e2:58:19:e6:c8:be:7e:fa:8f:ec:ec:f6:73:0d:40:e3:1e: 0d:29:b6:48:53:29:ef:4c:59:fa:48:13:d1:7d:cd:f0:81:8b: 90:f5:39:86:aa:86:9b:0d:e2:38:f2:2b:4d:f4:e4:24:9f:e8: 4c:2b:37:1e:db:7a:f5:3d:a0:1f:bb:ee:09:c6:61:75:4a:44: c3:a2:25:77:01:5c:5d:21:2f:1a:06:18:1a:cc:14:a8:d1:fd: 36:cf:4a:dc:ba:34:cd:ef:ee:8d:ca:c1:f2:0b:ff:f2:cb:1c: 96:88:0f:55:d5:8f:c9:99:17:69:4c:67:11:44:99:aa:05:91: e2:a7:05:63:44:79:50:a3:8a:03:54:89:a9:2e:4c:c2:08:96: ea:5c:73:92:d1:06:25:ea:1d:72:60:cb:2e:c9:b0:d1:e7:ef: 1f:26:13:09 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pyTbx0ZkxGyDaQL/n6ZXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlZWYxMzhjNjJiODE3NGM2YTgwODMwNmVkYTU3ZTkyODA1 ZGU5ODUwHhcNMjYwMTAyMTIyMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjRjYThkNTE0ZDY3MGI5MGE4ZTNmNDEwYjAyM2I3ZjMzMjFhOGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltbjTC22kL6KSmeYbFrv8zcBbLSj D2obgFEnYGZn/ta8lBWa679Bwx6g5SBQLJ1iWEgWa9sbut4BMogaMAE68hTRUjRr f542IoyAYWw4LzYVoIdyZOQiTcBnQicXmF8arbs4F+FnNHYNCTm6Ur2Nfzvivj5m eCeNDvHj00b9vdCfsHVy7xbbLVcYW6+SnZZv81cl2UIjnOcQuwEH2DpZBNp5QTac rfqxgHSJKz4u1SGas17eLwE9qPWjCVk7wKwo0vxJZitESMEK7fDwDAMmTeX2aSmz SYQD1vH0VgwolKUGDwl+laAAG+kSldwwvFXXhoBHi9qnmg5F1ziAcTz0oQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE9MqNUU1nC5Co4/QQsCO38zIairMB8GA1UdIwQY MBaAFL7vE4xiuBdMaoCDBu2lfpKAXemFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnU4VGpHSzRGMHhxZ0lNRzdhVi1rb0JkNllVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9mNGU0ZjEtYjdmZi00NzgxLWI5NzYt NTcyNzAwODJmZTBiLzEvVDB5bzFSVFdjTGtLamo5QkN3STdmek1ocUtzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9mNGU0ZjEtYjdmZi00NzgxLWI5NzYtNTcyNzAwODJmZTBi LzEvdnU4VGpHSzRGMHhxZ0lNRzdhVi1rb0JkNllVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZ0QMA0G CSqGSIb3DQEBCwUAA4IBAQAfliBpMOQYXiat540pCMeViLbkVdE+ky2FGcmgAn1l 7Xu+aFiBVk+REyXCQh5R64zrFAcsD1SboTqmNJsGMhezT3Ysm04ZkyQ5AoP9J8Kr /IZ13jKw8qseAR1D4lgZ5si+fvqP7Oz2cw1A4x4NKbZIUynvTFn6SBPRfc3wgYuQ 9TmGqoabDeI48itN9OQkn+hMKzce23r1PaAfu+4JxmF1SkTDoiV3AVxdIS8aBhga zBSo0f02z0rcujTN7+6NysHyC//yyxyWiA9V1Y/JmRdpTGcRRJmqBZHipwVjRHlQ o4oDVImpLkzCCJbqXHOS0QYl6h1yYMsuybDR5+8fJhMJ -----END CERTIFICATE-----Generated at Sun Jan 18 16:37:44 2026 by rpki-client