This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/tKfj59q_uSVeOVXFF8rwGwcX1DE.roa File: tKfj59q_uSVeOVXFF8rwGwcX1DE.roa (raw, json) Hash identifier: M8dRarfAWOblSl0tPp78zm1/aNBzJLXYpivkbEtUqgs= Subject key identifier: B4:A7:E3:E7:DA:BF:B9:25:5E:39:55:C5:17:CA:F0:1B:07:17:D4:31 Certificate issuer: /CN=f4b207ef8024244bbb4a0106af19270150c9f624 Certificate serial: 019B7EA724E44BCD917D72AAA771002C65B4 Authority key identifier: F4:B2:07:EF:80:24:24:4B:BB:4A:01:06:AF:19:27:01:50:C9:F6:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/tKfj59q_uSVeOVXFF8rwGwcX1DE.roa Signing time: Fri 02 Jan 2026 12:20:41 +0000 ROA not before: Fri 02 Jan 2026 12:20:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215488 IP address blocks: 77.95.175.0/24 maxlen: 24 188.214.224.0/24 maxlen: 24 2a14:4c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:24:e4:4b:cd:91:7d:72:aa:a7:71:00:2c:65:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4b207ef8024244bbb4a0106af19270150c9f624 Validity Not Before: Jan 2 12:20:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4a7e3e7dabfb9255e3955c517caf01b0717d431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a4:3b:f3:59:07:66:80:a5:8f:57:eb:51:4a: 22:d3:31:c7:a7:b2:42:dc:4e:4b:d4:da:50:4b:a2: f0:8d:f7:4f:b4:a9:5e:1a:a3:96:f6:18:87:94:7f: f3:1a:eb:25:3c:f3:69:de:e2:ea:e9:cd:9b:73:8c: a3:f5:da:cb:eb:9a:9b:fb:10:b5:6c:ed:69:a2:4a: 98:c3:1e:55:f3:cb:35:3f:02:e8:cc:a0:e0:4f:60: e7:5a:c7:53:05:67:39:42:5c:31:86:82:5a:87:29: 04:ff:37:46:3e:0f:6b:0a:e1:aa:bd:c9:08:84:e3: 10:c9:1c:f4:fd:05:5c:29:80:35:1e:d7:7d:82:81: e4:fd:9c:88:92:7d:83:fd:8a:22:33:50:8e:28:0f: e0:d3:e5:91:f3:ee:13:a6:5b:8a:70:86:50:04:0e: 83:46:cc:14:93:76:c6:70:1a:bb:10:f2:d9:32:21: c3:4b:7f:3f:8b:1a:40:72:a3:10:cd:aa:6d:46:63: 30:f6:ac:59:33:9e:6a:7c:4d:7f:9c:6f:cf:f6:ba: 25:b3:7e:9d:d5:95:5a:dd:dc:a5:76:6d:6a:99:01: fc:65:ed:2b:51:8d:f7:f9:99:f0:57:34:98:36:11: 6b:06:65:af:4f:02:f1:c3:b9:2a:c6:13:06:d9:d1: 68:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:A7:E3:E7:DA:BF:B9:25:5E:39:55:C5:17:CA:F0:1B:07:17:D4:31 X509v3 Authority Key Identifier: keyid:F4:B2:07:EF:80:24:24:4B:BB:4A:01:06:AF:19:27:01:50:C9:F6:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/tKfj59q_uSVeOVXFF8rwGwcX1DE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.95.175.0/24 188.214.224.0/24 IPv6: 2a14:4c0::/32 Signature Algorithm: sha256WithRSAEncryption 16:d6:a0:00:d1:7b:0e:97:da:b7:97:dc:a9:72:5f:3c:40:a0: 23:9e:2f:ec:e4:02:61:f8:53:45:70:31:81:7e:da:4c:3e:28: ee:a7:69:ba:31:b0:4b:cf:e9:0c:bf:81:20:20:9b:e6:08:28: 11:62:2b:d9:02:17:5c:3b:c1:78:62:86:19:b9:53:5f:e0:95: 6d:2c:7d:a6:45:aa:7a:ab:64:6c:e1:5c:7d:c7:03:ea:89:d4: ee:14:73:f1:1e:14:d2:81:e5:c5:6b:e6:b1:d6:8c:c9:d2:20: ec:8a:55:67:c8:68:d2:1b:43:f3:96:cb:95:eb:cb:d6:e9:e5: b2:0c:26:44:80:7d:67:8f:98:b6:5b:00:37:e1:fd:c8:98:6f: d8:11:31:bb:d7:02:0c:a3:51:b0:e2:d3:4d:1b:bc:30:25:53: 63:37:22:a3:b8:c9:bb:fe:49:04:57:dd:66:96:05:88:0c:58: 61:56:4b:c8:66:22:36:5e:b3:86:c8:b4:04:df:18:c0:0c:70: 5b:9f:df:72:b0:05:0b:c4:d2:8e:13:94:ba:57:e0:ad:fd:aa: a3:c9:3e:9b:3b:6b:94:b5:4d:52:b5:6b:9b:ec:57:27:97:51: b5:d2:89:53:08:24:b0:6c:6e:3a:a0:ec:0f:4e:fb:8d:02:27: 69:6c:3b:b3 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt+pyTkS82RfXKqp3EALGW0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0YjIwN2VmODAyNDI0NGJiYjRhMDEwNmFmMTkyNzAxNTBj OWY2MjQwHhcNMjYwMTAyMTIyMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGE3ZTNlN2RhYmZiOTI1NWUzOTU1YzUxN2NhZjAxYjA3MTdkNDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqQ781kHZoClj1frUUoi0zHHp7JC 3E5L1NpQS6LwjfdPtKleGqOW9hiHlH/zGuslPPNp3uLq6c2bc4yj9drL65qb+xC1 bO1pokqYwx5V88s1PwLozKDgT2DnWsdTBWc5QlwxhoJahykE/zdGPg9rCuGqvckI hOMQyRz0/QVcKYA1Htd9goHk/ZyIkn2D/YoiM1COKA/g0+WR8+4TpluKcIZQBA6D RswUk3bGcBq7EPLZMiHDS38/ixpAcqMQzaptRmMw9qxZM55qfE1/nG/P9rols36d 1ZVa3dyldm1qmQH8Ze0rUY33+ZnwVzSYNhFrBmWvTwLxw7kqxhMG2dFotQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFLSn4+fav7klXjlVxRfK8BsHF9QxMB8GA1UdIwQY MBaAFPSyB++AJCRLu0oBBq8ZJwFQyfYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUxJSDc0QWtKRXU3U2dFR3J4a25BVkRKOWlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS84YmYyNTYtZDk2Zi00NTAwLWIxM2Mt MzVlMDY5MzQ4ZWIzLzEvdEtmajU5cV91U1ZlT1ZYRkY4cndHd2NYMURFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS84YmYyNTYtZDk2Zi00NTAwLWIxM2MtMzVlMDY5MzQ4ZWIz LzEvOUxJSDc0QWtKRXU3U2dFR3J4a25BVkRKOWlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQATV+vAwQA vNbgMA0EAgACMAcDBQAqFATAMA0GCSqGSIb3DQEBCwUAA4IBAQAW1qAA0XsOl9q3 l9ypcl88QKAjni/s5AJh+FNFcDGBftpMPijup2m6MbBLz+kMv4EgIJvmCCgRYivZ AhdcO8F4YoYZuVNf4JVtLH2mRap6q2Rs4Vx9xwPqidTuFHPxHhTSgeXFa+ax1ozJ 0iDsilVnyGjSG0PzlsuV68vW6eWyDCZEgH1nj5i2WwA34f3ImG/YETG71wIMo1Gw 4tNNG7wwJVNjNyKjuMm7/kkEV91mlgWIDFhhVkvIZiI2XrOGyLQE3xjADHBbn99y sAULxNKOE5S6V+Ct/aqjyT6bO2uUtU1StWub7Fcnl1G10olTCCSwbG46oOwPTvuN AidpbDuz -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:53 2026 by rpki-client