This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/T1FU-Jm7JYwNg0xKGTuY0V2-l_E.roa File: T1FU-Jm7JYwNg0xKGTuY0V2-l_E.roa (raw, json) Hash identifier: tW7AZ4KcZnYxw5pkQ3CADxYnfRfcY/hq4VXmAk2/rRU= Subject key identifier: 4F:51:54:F8:99:BB:25:8C:0D:83:4C:4A:19:3B:98:D1:5D:BE:97:F1 Certificate issuer: /CN=5dd69d9f749630f0256cf0ceab58836b491a58f6 Certificate serial: 019B7DCAAA1CBBC8E6189B00DCD6F0DB352E Authority key identifier: 5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/T1FU-Jm7JYwNg0xKGTuY0V2-l_E.roa Signing time: Fri 02 Jan 2026 08:19:52 +0000 ROA not before: Fri 02 Jan 2026 08:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209242 IP address blocks: 147.78.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:aa:1c:bb:c8:e6:18:9b:00:dc:d6:f0:db:35:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd69d9f749630f0256cf0ceab58836b491a58f6 Validity Not Before: Jan 2 08:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f5154f899bb258c0d834c4a193b98d15dbe97f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0e:6e:0e:32:45:d0:c5:10:52:aa:58:e2:e3: fb:1c:59:0f:2a:47:cb:e9:62:b3:ec:2b:07:3c:d0: 70:9e:b2:df:4f:71:0c:ac:a0:3c:95:0c:d5:e9:b5: bb:31:9c:da:6e:6e:f2:31:07:34:7a:47:21:8d:33: 7f:db:1d:30:6e:6a:0c:d0:e5:c6:1e:12:f0:f9:a6: 86:89:cd:77:f9:6a:81:dd:38:19:3a:06:cb:2f:df: 9d:ac:74:7b:1d:6d:97:c3:3d:cc:ba:87:8c:43:3e: 1b:9a:c9:9b:c1:65:7c:26:24:a6:dc:13:a6:00:0c: fe:fa:f6:97:be:92:bf:9f:14:47:06:df:1c:b0:00: 07:d6:40:c2:f5:b8:ef:19:27:77:ae:f1:c5:29:47: df:82:87:b0:a7:30:30:e0:fc:bd:c0:8a:0c:4f:49: 06:90:85:8d:81:94:f3:10:2d:eb:95:b3:57:d8:15: 50:18:c4:4e:8f:fa:ed:6d:39:0a:aa:d3:1d:9a:11: 6e:9b:1c:71:5e:b1:09:1b:1f:0b:1b:de:81:97:86: 64:59:5b:c3:e7:cd:4b:b6:1a:82:51:89:29:06:51: b2:16:43:6c:b7:0e:81:95:4e:e0:8f:81:a8:da:08: f2:10:0e:57:00:9f:c4:55:10:f3:d3:e0:7b:29:52: ee:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:51:54:F8:99:BB:25:8C:0D:83:4C:4A:19:3B:98:D1:5D:BE:97:F1 X509v3 Authority Key Identifier: keyid:5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/T1FU-Jm7JYwNg0xKGTuY0V2-l_E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.78.140.0/24 Signature Algorithm: sha256WithRSAEncryption a9:f6:a9:1c:2a:1b:e5:6b:df:6e:5d:bf:87:70:24:3d:5c:6e: 36:2f:f9:96:b8:94:a0:f4:29:00:3c:8d:7e:81:42:77:cf:bc: 2a:a5:d0:ea:b5:0c:be:25:4a:be:c9:a6:32:49:b4:d5:8f:26: ec:27:28:6e:6d:db:ad:d1:2d:89:e4:df:b9:cf:dc:8a:da:10: 75:c9:ff:4f:75:61:08:87:ae:44:f6:db:4b:c7:a4:bf:02:68: f8:6c:8d:97:91:03:38:66:80:c8:7c:e7:40:79:b6:57:a5:47: cb:b1:6b:34:31:d2:94:20:10:89:3c:2b:ee:93:59:e1:e3:d1: 21:54:0b:9d:1d:52:a7:36:74:6c:55:8e:01:c3:8e:30:4f:f5: c4:d1:56:0f:d8:b0:9b:0c:f9:71:fd:40:9f:08:22:19:56:28: b0:d7:f6:d3:c4:1e:35:f7:1e:10:7a:a8:a1:15:5c:33:58:e3: ef:fa:d0:a3:55:00:e6:5d:42:2a:d3:87:54:a6:e7:18:dd:ca: 97:d8:b8:0c:e8:4a:79:5b:79:d3:5e:c9:34:04:a6:1f:5c:0e: e3:5b:b2:b4:4b:b7:40:65:d8:f6:58:6c:b2:15:76:ab:6d:6e: 62:ef:9a:70:2c:7e:45:9d:f2:bc:ea:4d:8c:02:5d:9d:4d:c5: f0:af:58:df -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yqocu8jmGJsA3Nbw2zUuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDY5ZDlmNzQ5NjMwZjAyNTZjZjBjZWFiNTg4MzZiNDkx YTU4ZjYwHhcNMjYwMTAyMDgxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjUxNTRmODk5YmIyNThjMGQ4MzRjNGExOTNiOThkMTVkYmU5N2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQ5uDjJF0MUQUqpY4uP7HFkPKkfL 6WKz7CsHPNBwnrLfT3EMrKA8lQzV6bW7MZzabm7yMQc0ekchjTN/2x0wbmoM0OXG HhLw+aaGic13+WqB3TgZOgbLL9+drHR7HW2Xwz3MuoeMQz4bmsmbwWV8JiSm3BOm AAz++vaXvpK/nxRHBt8csAAH1kDC9bjvGSd3rvHFKUffgoewpzAw4Py9wIoMT0kG kIWNgZTzEC3rlbNX2BVQGMROj/rtbTkKqtMdmhFumxxxXrEJGx8LG96Bl4ZkWVvD 581LthqCUYkpBlGyFkNstw6BlU7gj4Go2gjyEA5XAJ/EVRDz0+B7KVLupQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE9RVPiZuyWMDYNMShk7mNFdvpfxMB8GA1UdIwQY MBaAFF3WnZ90ljDwJWzwzqtYg2tJGlj2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRhZG4zU1dNUEFsYlBET3ExaURhMGthV1BZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC82MTY5MjQtOTNiMi00ZGNiLWFlZWIt ZjNmZDY0MzMxNzA5LzEvVDFGVS1KbTdKWXdOZzB4S0dUdVkwVjItbF9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC82MTY5MjQtOTNiMi00ZGNiLWFlZWItZjNmZDY0MzMxNzA5 LzEvWGRhZG4zU1dNUEFsYlBET3ExaURhMGthV1BZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk06MMA0G CSqGSIb3DQEBCwUAA4IBAQCp9qkcKhvla99uXb+HcCQ9XG42L/mWuJSg9CkAPI1+ gUJ3z7wqpdDqtQy+JUq+yaYySbTVjybsJyhubdut0S2J5N+5z9yK2hB1yf9PdWEI h65E9ttLx6S/Amj4bI2XkQM4ZoDIfOdAebZXpUfLsWs0MdKUIBCJPCvuk1nh49Eh VAudHVKnNnRsVY4Bw44wT/XE0VYP2LCbDPlx/UCfCCIZViiw1/bTxB419x4Qeqih FVwzWOPv+tCjVQDmXUIq04dUpucY3cqX2LgM6Ep5W3nTXsk0BKYfXA7jW7K0S7dA Zdj2WGyyFXarbW5i75pwLH5FnfK86k2MAl2dTcXwr1jf -----END CERTIFICATE-----Generated at Sun Jan 25 11:11:51 2026 by rpki-client