This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/tMuTjVPYB4qy8Lzty-HvMfNIyHg.roa File: tMuTjVPYB4qy8Lzty-HvMfNIyHg.roa (raw, json) Hash identifier: 2UYLL/RMvv9f6KttdupVfDP+HWvUuHhv7cOVMA+gdLU= Subject key identifier: B4:CB:93:8D:53:D8:07:8A:B2:F0:BC:ED:CB:E1:EF:31:F3:48:C8:78 Certificate issuer: /CN=3deb104463e920b45542b6af1a27d5950e86e9a0 Certificate serial: 019B7F1537DA4F42DDA39F36A1A062FF26E2 Authority key identifier: 3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/tMuTjVPYB4qy8Lzty-HvMfNIyHg.roa Signing time: Fri 02 Jan 2026 14:20:55 +0000 ROA not before: Fri 02 Jan 2026 14:20:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43925 IP address blocks: 37.34.96.0/19 maxlen: 24 37.34.96.0/22 maxlen: 24 37.34.100.0/22 maxlen: 24 37.34.105.0/24 maxlen: 24 37.34.106.0/24 maxlen: 24 37.34.107.0/24 maxlen: 24 37.34.108.0/22 maxlen: 24 37.34.112.0/20 maxlen: 24 37.34.120.0/21 maxlen: 24 79.170.224.0/21 maxlen: 24 89.45.0.0/22 maxlen: 22 89.45.0.0/23 maxlen: 23 89.45.0.0/24 maxlen: 24 89.45.2.0/23 maxlen: 23 93.113.112.0/21 maxlen: 22 93.113.115.0/24 maxlen: 24 94.139.128.0/19 maxlen: 32 178.76.76.0/22 maxlen: 22 178.76.80.0/20 maxlen: 22 178.76.96.0/19 maxlen: 21 178.76.96.0/22 maxlen: 22 178.76.100.0/22 maxlen: 22 185.32.0.0/22 maxlen: 22 185.32.0.0/23 maxlen: 23 185.32.2.0/23 maxlen: 23 2a00:f900::/32 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.crl rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:37:da:4f:42:dd:a3:9f:36:a1:a0:62:ff:26:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3deb104463e920b45542b6af1a27d5950e86e9a0 Validity Not Before: Jan 2 14:20:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4cb938d53d8078ab2f0bcedcbe1ef31f348c878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:12:bd:09:ee:ee:d0:25:a2:23:2b:9d:94:61: 6c:57:3a:df:f0:db:21:bf:d6:86:a4:82:fa:56:23: 7e:8c:14:3a:f4:0f:30:42:0a:9d:73:df:a9:24:8d: 44:9e:85:35:e4:cb:cb:99:52:6c:fb:71:73:04:e2: 26:85:5e:ee:1f:f0:b9:ae:2a:fc:7f:0a:41:e5:c7: 3f:39:88:f7:b8:97:93:df:fb:99:23:ac:34:78:75: b0:d8:4a:12:d7:84:78:d7:59:4d:35:88:7f:70:fc: 7c:78:63:76:46:11:24:ee:80:ca:4a:68:e4:54:86: 7e:44:b9:10:a8:da:c6:98:24:43:82:0b:0f:22:73: 78:46:71:c1:66:c7:1f:ce:df:52:69:d3:05:14:22: 31:8e:8d:3a:db:68:e3:9d:ab:f8:63:71:8a:96:e2: 53:48:c4:b6:ea:24:d4:ac:f3:e7:3d:16:81:fc:b0: 97:67:bd:6e:fe:b9:e1:84:5b:a3:ba:14:49:11:0e: a9:d6:bc:26:c1:6a:2f:7a:81:5d:26:4f:16:b7:b7: 2f:de:35:c7:99:c5:92:9e:0f:5c:3b:0f:f7:22:f2: 0e:ed:7b:27:bd:b0:90:9b:8c:46:c5:2d:ce:9e:e5: 16:b4:15:19:e9:28:f9:3b:fd:b7:3c:db:84:ab:d8: 40:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:CB:93:8D:53:D8:07:8A:B2:F0:BC:ED:CB:E1:EF:31:F3:48:C8:78 X509v3 Authority Key Identifier: keyid:3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/tMuTjVPYB4qy8Lzty-HvMfNIyHg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.34.96.0/19 79.170.224.0/21 89.45.0.0/22 93.113.112.0/21 94.139.128.0/19 178.76.76.0-178.76.127.255 185.32.0.0/22 IPv6: 2a00:f900::/32 Signature Algorithm: sha256WithRSAEncryption 85:72:b7:eb:90:13:28:6a:68:c6:a4:cc:f8:be:0f:36:18:7c: c2:e6:d1:fa:6a:98:26:3d:17:47:cd:64:1a:1d:1c:7d:5a:d7: 18:59:3d:38:c6:07:38:8d:c4:94:11:80:71:88:da:cd:c8:f6: e4:9f:61:89:2a:0b:01:ab:27:9f:9d:ac:a1:c2:46:ce:da:04: 53:4f:85:20:77:6a:e8:d7:2c:07:91:c7:0c:d1:a9:e2:d9:bd: c5:b6:2a:7f:da:c0:36:a9:88:5f:7e:64:bf:01:5c:1e:79:14: a7:ff:db:a3:76:65:5a:c2:a2:78:f8:f6:35:a9:6f:ab:43:18: fc:72:1f:0f:50:5b:94:1f:b6:0a:19:41:c1:7b:e5:14:3c:76: 84:53:1f:bb:28:79:82:9f:ca:ba:e4:dc:20:38:fd:7b:2d:64: 09:d8:7d:df:1b:a4:dd:9b:bd:dd:73:32:d1:47:34:c9:7e:03: 46:64:8b:fc:91:2f:4a:aa:6f:d5:3a:16:fc:2b:53:ed:3f:8d: e1:22:1e:a4:c5:fe:20:0f:93:94:ed:1c:c2:55:55:1f:c1:f0: 1c:49:a5:ee:c9:06:f5:07:06:d2:18:1a:19:f8:b4:96:24:81: 3c:ae:32:4d:40:82:7a:d3:d4:ae:04:0f:81:f6:4f:84:92:3e: 6f:40:55:de -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgISAZt/FTfaT0Ldo582oaBi/ybiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkZWIxMDQ0NjNlOTIwYjQ1NTQyYjZhZjFhMjdkNTk1MGU4 NmU5YTAwHhcNMjYwMTAyMTQyMDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGNiOTM4ZDUzZDgwNzhhYjJmMGJjZWRjYmUxZWYzMWYzNDhjODc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxK9Ce7u0CWiIyudlGFsVzrf8Nsh v9aGpIL6ViN+jBQ69A8wQgqdc9+pJI1EnoU15MvLmVJs+3FzBOImhV7uH/C5rir8 fwpB5cc/OYj3uJeT3/uZI6w0eHWw2EoS14R411lNNYh/cPx8eGN2RhEk7oDKSmjk VIZ+RLkQqNrGmCRDggsPInN4RnHBZscfzt9SadMFFCIxjo0622jjnav4Y3GKluJT SMS26iTUrPPnPRaB/LCXZ71u/rnhhFujuhRJEQ6p1rwmwWoveoFdJk8Wt7cv3jXH mcWSng9cOw/3IvIO7XsnvbCQm4xGxS3OnuUWtBUZ6Sj5O/23PNuEq9hA5QIDAQAB o4ICRDCCAkAwHQYDVR0OBBYEFLTLk41T2AeKsvC87cvh7zHzSMh4MB8GA1UdIwQY MBaAFD3rEERj6SC0VUK2rxon1ZUOhumgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGVzUVJHUHBJTFJWUXJhdkdpZlZsUTZHNmFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9jNjg2YjMtZTdhOS00ZjljLTg0MmMt MTE5ZDhiZjcxN2JiLzEvdE11VGpWUFlCNHF5OEx6dHktSHZNZk5JeUhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9jNjg2YjMtZTdhOS00ZjljLTg0MmMtMTE5ZDhiZjcxN2Ji LzEvUGVzUVJHUHBJTFJWUXJhdkdpZlZsUTZHNmFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFoGCCsGAQUFBwEHAQH/BEswSTA4BAIAATAyAwQFJSJgAwQD T6rgAwQCWS0AAwQDXXFwAwQFXouAMAwDBAKyTEwDBAeyTAADBAK5IAAwDQQCAAIw BwMFACoA+QAwDQYJKoZIhvcNAQELBQADggEBAIVyt+uQEyhqaMakzPi+DzYYfMLm 0fpqmCY9F0fNZBodHH1a1xhZPTjGBziNxJQRgHGI2s3I9uSfYYkqCwGrJ5+drKHC Rs7aBFNPhSB3aujXLAeRxwzRqeLZvcW2Kn/awDapiF9+ZL8BXB55FKf/26N2ZVrC onj49jWpb6tDGPxyHw9QW5QftgoZQcF75RQ8doRTH7soeYKfyrrk3CA4/XstZAnY fd8bpN2bvd1zMtFHNMl+A0Zki/yRL0qqb9U6FvwrU+0/jeEiHqTF/iAPk5TtHMJV VR/B8BxJpe7JBvUHBtIYGhn4tJYkgTyuMk1AgnrT1K4ED4H2T4SSPm9AVd4= -----END CERTIFICATE-----Generated at Mon Jan 26 00:13:51 2026 by rpki-client