This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/RTjcSnIpKYlMG4GHHnh8_88bV38.roa File: RTjcSnIpKYlMG4GHHnh8_88bV38.roa (raw, json) Hash identifier: QzcYYpfucwDSMLZSxjGgroTDTDuI7r/9VYRR/xtXMi0= Subject key identifier: 45:38:DC:4A:72:29:29:89:4C:1B:81:87:1E:78:7C:FF:CF:1B:57:7F Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA763992C9E6ACE95C433483DA92FC7 Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/RTjcSnIpKYlMG4GHHnh8_88bV38.roa Signing time: Fri 02 Jan 2026 12:20:57 +0000 ROA not before: Fri 02 Jan 2026 12:20:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24762 IP address blocks: 87.117.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:63:99:2c:9e:6a:ce:95:c4:33:48:3d:a9:2f:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:20:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4538dc4a722929894c1b81871e787cffcf1b577f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:44:26:41:5c:a2:90:30:43:be:e4:60:c6:06: df:95:05:96:d6:4a:da:99:5d:71:db:37:80:17:c4: c8:68:31:49:d2:6e:80:57:bc:ed:ba:b6:8c:4b:72: cb:b8:47:4a:77:05:e8:b5:dc:1e:5f:9e:30:84:4a: 93:49:1e:31:d5:38:a9:27:c5:56:e1:3f:65:76:97: 90:f1:18:f5:6a:7c:f3:a4:42:3b:79:ee:98:71:33: 2e:93:a1:b9:f7:9d:7b:3c:83:f2:82:71:a5:16:d5: a2:f7:6e:31:67:0c:5e:08:74:23:76:11:d9:b3:74: 5d:64:c8:c5:61:27:2e:b2:5b:e2:8b:d3:8b:1b:a5: 4e:67:b7:d0:80:fc:ab:d3:a9:8a:5d:e3:43:c0:53: 15:37:b7:82:de:d3:07:74:7b:12:97:8f:dc:f2:35: 97:33:32:09:3c:95:d7:c1:f2:70:74:de:9a:b6:94: be:62:49:94:bd:76:00:00:9d:7c:ec:64:be:c8:ac: 72:13:0b:1e:85:9a:4e:df:ca:35:1f:f1:cc:63:e7: c6:05:54:96:81:5a:f2:7a:84:72:f7:8f:ac:e5:61: eb:c6:07:8c:c6:fe:85:b5:8a:64:d7:40:ea:d0:98: c9:fe:19:3d:59:bc:5a:8c:ea:af:d2:c2:e0:fb:b7: 2a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:38:DC:4A:72:29:29:89:4C:1B:81:87:1E:78:7C:FF:CF:1B:57:7F X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/RTjcSnIpKYlMG4GHHnh8_88bV38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.117.132.0/24 Signature Algorithm: sha256WithRSAEncryption 90:5a:70:f9:f2:cf:d4:4b:4b:d3:b8:e1:05:9f:56:5b:05:28: e3:ee:cd:65:9f:b6:d5:00:9a:69:03:27:a6:12:d5:2d:c0:e3: eb:0e:1d:bd:89:52:2e:39:a2:1b:04:bd:59:44:91:22:be:76: 97:b7:10:0e:da:98:0c:06:fd:5e:52:9b:e9:8d:72:ff:c5:ef: 0a:25:1f:2c:fb:1e:53:c3:bd:50:5f:d5:3e:4d:a8:95:cc:2b: e3:5b:4b:89:6a:f2:60:81:9f:49:08:18:4b:f1:68:ee:b9:62: 46:e5:42:aa:69:1d:07:7e:13:a5:6d:c8:5e:d4:dc:50:e6:8f: de:3c:7b:48:88:5d:22:a5:7d:f2:3a:fd:4b:70:a9:6e:b3:1b: 21:8d:84:cb:45:ea:5e:19:85:04:fe:ea:87:29:d3:3e:82:b9: ca:38:a0:c8:4e:cf:e3:da:1c:67:b4:6c:ac:9f:a6:79:70:61: cc:e4:49:ec:78:2d:69:0d:b2:7e:ad:57:78:ad:af:f8:ca:01: f4:b5:4f:88:28:48:7c:6b:23:52:53:87:88:0d:56:72:f2:e3: 00:a7:11:59:ee:b1:51:4a:19:41:f7:58:2b:53:27:b5:8f:ff: 10:58:00:06:2f:3a:7e:04:65:40:ee:63:3b:b9:87:e5:6f:83: 0b:20:ec:30 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p2OZLJ5qzpXEM0g9qS/HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMDU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTM4ZGM0YTcyMjkyOTg5NGMxYjgxODcxZTc4N2NmZmNmMWI1NzdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kQmQVyikDBDvuRgxgbflQWW1kra mV1x2zeAF8TIaDFJ0m6AV7zturaMS3LLuEdKdwXotdweX54whEqTSR4x1TipJ8VW 4T9ldpeQ8Rj1anzzpEI7ee6YcTMuk6G59517PIPygnGlFtWi924xZwxeCHQjdhHZ s3RdZMjFYScuslvii9OLG6VOZ7fQgPyr06mKXeNDwFMVN7eC3tMHdHsSl4/c8jWX MzIJPJXXwfJwdN6atpS+YkmUvXYAAJ187GS+yKxyEwsehZpO38o1H/HMY+fGBVSW gVryeoRy94+s5WHrxgeMxv6FtYpk10Dq0JjJ/hk9WbxajOqv0sLg+7cqpQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEU43EpyKSmJTBuBhx54fP/PG1d/MB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvUlRqY1NuSXBLWWxNRzRHSEhuaDhfODhiVjM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV3WEMA0G CSqGSIb3DQEBCwUAA4IBAQCQWnD58s/US0vTuOEFn1ZbBSjj7s1ln7bVAJppAyem EtUtwOPrDh29iVIuOaIbBL1ZRJEivnaXtxAO2pgMBv1eUpvpjXL/xe8KJR8s+x5T w71QX9U+TaiVzCvjW0uJavJggZ9JCBhL8WjuuWJG5UKqaR0HfhOlbche1NxQ5o/e PHtIiF0ipX3yOv1LcKlusxshjYTLRepeGYUE/uqHKdM+grnKOKDITs/j2hxntGys n6Z5cGHM5EnseC1pDbJ+rVd4ra/4ygH0tU+IKEh8ayNSU4eIDVZy8uMApxFZ7rFR ShlB91grUye1j/8QWAAGLzp+BGVA7mM7uYflb4MLIOww -----END CERTIFICATE-----Generated at Mon Jan 26 10:14:14 2026 by rpki-client