This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/tEQzzjzxDWnZm97c2xMyrDBRX24.roa File: tEQzzjzxDWnZm97c2xMyrDBRX24.roa (raw, json) Hash identifier: YzNbXYzP6rHGfPynbcrXqGm/iYsZbTYRTjiAt0uaqX8= Subject key identifier: B4:44:33:CE:3C:F1:0D:69:D9:9B:DE:DC:DB:13:32:AC:30:51:5F:6E Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA7618B9AABF98A5449D6394386B748 Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/tEQzzjzxDWnZm97c2xMyrDBRX24.roa Signing time: Fri 02 Jan 2026 12:20:57 +0000 ROA not before: Fri 02 Jan 2026 12:20:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21378 IP address blocks: 80.246.64.0/19 maxlen: 19 80.246.64.0/21 maxlen: 21 84.42.0.0/19 maxlen: 19 84.42.0.0/21 maxlen: 21 84.42.8.0/21 maxlen: 21 84.42.16.0/21 maxlen: 21 84.42.24.0/21 maxlen: 21 2a02:2708::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:61:8b:9a:ab:f9:8a:54:49:d6:39:43:86:b7:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:20:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b44433ce3cf10d69d99bdedcdb1332ac30515f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7d:ba:c7:e9:eb:bc:53:6d:fe:49:82:a2:53: 75:1d:f9:54:29:fd:8d:e3:36:e1:e4:38:65:ea:a3: 1f:7d:39:a0:06:fb:f9:7d:76:ae:e8:49:97:7a:0b: 90:be:83:3e:25:cd:68:51:b5:1c:b4:b5:4d:d4:79: 89:19:27:08:3c:28:05:28:f6:8e:f8:5e:03:cc:9a: e0:c2:92:f4:bf:01:dc:4a:02:ce:bf:fd:b8:b6:03: 1f:55:40:83:64:1c:c0:7d:50:84:48:67:53:02:e6: 6e:76:e1:2d:09:e8:ab:99:13:84:11:5b:fe:33:40: b4:a6:3c:0b:a9:9a:57:84:7f:fb:f1:65:b1:b2:02: d9:41:01:9f:22:4c:dc:d1:20:f1:d4:42:5d:a4:74: 99:19:e8:36:e5:b5:d8:b8:27:65:e3:0c:d5:c0:62: 33:d4:bd:0f:14:c9:b3:10:76:5b:51:ff:14:7b:7b: 8a:75:f9:e1:9c:90:ab:ab:bc:dd:3f:45:08:2f:bb: 6a:bf:5d:1c:b5:1e:fa:03:b1:6d:7e:ba:d9:4a:a4: ca:7e:c0:cd:e1:49:69:bf:52:55:da:76:a6:6a:0c: 76:e1:b5:ba:ef:d7:63:0d:9a:0b:11:8c:b8:f0:36: 18:b4:27:da:00:53:06:30:0e:60:37:d3:22:d9:38: d8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:44:33:CE:3C:F1:0D:69:D9:9B:DE:DC:DB:13:32:AC:30:51:5F:6E X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/tEQzzjzxDWnZm97c2xMyrDBRX24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.246.64.0/19 84.42.0.0/19 IPv6: 2a02:2708::/32 Signature Algorithm: sha256WithRSAEncryption 69:9d:c0:12:65:19:1f:c7:5a:77:88:0f:07:71:c3:e6:27:43: 95:fb:df:dc:93:b2:7a:89:91:ac:e4:5f:b5:2a:7e:81:19:61: e7:b4:03:aa:bf:9b:82:9a:f8:8c:3b:f4:8f:04:61:20:e7:51: c5:77:4e:33:f6:2c:fa:b5:da:f5:32:09:8b:fe:1f:aa:69:15: 0b:9c:ca:2b:39:63:b9:62:b2:1f:ac:f9:09:60:3a:aa:e1:2b: cf:86:36:49:7d:49:d0:ef:68:25:b3:96:95:ed:03:65:0a:57: 8d:a2:31:d5:21:a0:de:d8:54:96:e0:32:f0:18:f0:d6:e7:3f: e1:83:bb:3d:18:35:ee:11:42:af:bd:93:4a:2d:25:f4:7b:5a: d6:ae:2a:9a:23:39:8b:0a:99:a4:46:ec:e4:fd:c6:65:8d:5c: 34:ad:a4:24:4d:c5:1f:a4:15:10:5b:68:75:aa:ad:6c:2a:be: 5f:a4:00:75:5a:2f:46:d0:64:0e:96:2b:7c:53:2e:54:d3:30: aa:0a:32:8d:81:4b:b4:92:e8:84:fc:20:a1:8a:d7:29:b2:9f: 15:f1:58:1d:c2:bd:5e:d6:75:59:8b:55:fe:84:bd:d7:19:56: 26:f8:2a:ec:75:7e:0b:2e:0b:e6:42:3c:ae:54:1c:7a:fd:cb: 70:f5:c1:e7 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt+p2GLmqv5ilRJ1jlDhrdIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMDU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDQ0MzNjZTNjZjEwZDY5ZDk5YmRlZGNkYjEzMzJhYzMwNTE1ZjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwn26x+nrvFNt/kmColN1HflUKf2N 4zbh5Dhl6qMffTmgBvv5fXau6EmXeguQvoM+Jc1oUbUctLVN1HmJGScIPCgFKPaO +F4DzJrgwpL0vwHcSgLOv/24tgMfVUCDZBzAfVCESGdTAuZuduEtCeirmROEEVv+ M0C0pjwLqZpXhH/78WWxsgLZQQGfIkzc0SDx1EJdpHSZGeg25bXYuCdl4wzVwGIz 1L0PFMmzEHZbUf8Ue3uKdfnhnJCrq7zdP0UIL7tqv10ctR76A7FtfrrZSqTKfsDN 4Ulpv1JV2namagx24bW679djDZoLEYy48DYYtCfaAFMGMA5gN9Mi2TjYnwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFLREM8488Q1p2Zve3NsTMqwwUV9uMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvdEVRenpqenhEV25abTk3YzJ4TXlyREJSWDI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFUPZAAwQF VCoAMA0EAgACMAcDBQAqAicIMA0GCSqGSIb3DQEBCwUAA4IBAQBpncASZRkfx1p3 iA8HccPmJ0OV+9/ck7J6iZGs5F+1Kn6BGWHntAOqv5uCmviMO/SPBGEg51HFd04z 9iz6tdr1MgmL/h+qaRULnMorOWO5YrIfrPkJYDqq4SvPhjZJfUnQ72gls5aV7QNl CleNojHVIaDe2FSW4DLwGPDW5z/hg7s9GDXuEUKvvZNKLSX0e1rWriqaIzmLCpmk Ruzk/cZljVw0raQkTcUfpBUQW2h1qq1sKr5fpAB1Wi9G0GQOlit8Uy5U0zCqCjKN gUu0kuiE/CChitcpsp8V8Vgdwr1e1nVZi1X+hL3XGVYm+CrsdX4LLgvmQjyuVBx6 /ctw9cHn -----END CERTIFICATE-----Generated at Mon Jan 26 10:14:13 2026 by rpki-client