This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/tCljQdoQCYAGdZbsiUMFE-XsaJE.roa File: tCljQdoQCYAGdZbsiUMFE-XsaJE.roa (raw, json) Hash identifier: 00v6c7Mm0TodzD2o33hMR8x5qaiYr+lOoZwclNiSZ/E= Subject key identifier: B4:29:63:41:DA:10:09:80:06:75:96:EC:89:43:05:13:E5:EC:68:91 Certificate issuer: /CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c Certificate serial: 019B76EB288596F55AD2D84463D69F4F9294 Authority key identifier: 74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/tCljQdoQCYAGdZbsiUMFE-XsaJE.roa Signing time: Thu 01 Jan 2026 00:18:01 +0000 ROA not before: Thu 01 Jan 2026 00:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12350 IP address blocks: 193.246.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:28:85:96:f5:5a:d2:d8:44:63:d6:9f:4f:92:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c Validity Not Before: Jan 1 00:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4296341da100980067596ec89430513e5ec6891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:21:be:9a:37:9a:43:3a:c5:eb:b5:d2:5b:5a: 3e:d0:3b:15:b3:0f:18:00:3c:c4:91:cc:8e:e2:bf: ef:cc:2b:58:21:8f:2c:8b:80:c1:94:95:c0:94:0b: 45:c4:34:87:29:8a:5d:02:43:49:38:5b:e1:4e:78: 72:32:62:59:ec:bd:63:83:46:3c:9b:f3:2d:3e:4d: f7:15:17:cc:0f:8e:c3:70:11:31:15:70:47:18:a4: 96:81:c9:84:bd:7f:60:b8:db:5f:ff:56:14:6b:63: 5e:21:cb:ca:6c:45:83:f3:8a:bc:a2:74:77:4c:bc: a0:8f:af:d4:64:35:a5:ea:ce:6e:ba:81:02:f2:ef: 8e:24:fd:ee:35:be:67:96:41:7a:be:80:d6:d8:d9: 47:db:ba:c7:e6:37:7b:c7:e8:30:b8:d9:e3:75:6e: 6e:55:e1:92:94:62:6f:ab:ef:91:90:5f:11:f6:e4: 36:9d:dd:40:fe:05:10:c0:bb:12:98:96:26:53:c4: f3:ff:ff:e6:83:77:03:eb:c3:cc:57:2a:91:52:f3: 50:70:fc:00:7d:98:15:c7:2c:72:18:97:6f:b8:0b: 58:df:6b:5f:99:7f:5e:97:b8:72:47:8e:43:d8:6e: 53:5e:6e:0e:bf:f3:1a:a4:80:1c:03:09:bc:97:0d: 52:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:29:63:41:DA:10:09:80:06:75:96:EC:89:43:05:13:E5:EC:68:91 X509v3 Authority Key Identifier: keyid:74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/tCljQdoQCYAGdZbsiUMFE-XsaJE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.246.207.0/24 Signature Algorithm: sha256WithRSAEncryption 85:52:b4:a9:2c:ff:5f:55:dd:63:82:ad:7a:84:79:00:f5:47: e4:c9:44:f8:3b:98:4a:d0:86:d4:f6:18:d9:c3:90:c3:a4:d2: 8f:76:51:fa:c3:d8:68:73:cf:64:cd:cd:4e:78:d7:fd:32:8b: 74:47:90:00:1b:b5:50:26:1b:d6:b0:b3:0f:63:aa:b2:f8:de: 94:93:73:30:1a:74:17:4d:ca:71:93:01:ab:35:54:6d:32:24: 25:ee:2c:cd:a5:6f:b7:6f:f1:db:bf:eb:80:bd:5e:a2:b6:e6: f3:aa:ca:8f:54:47:3a:8f:02:31:76:0f:a0:35:ea:51:e5:94: c9:16:bb:89:74:88:85:c9:65:81:35:d6:f0:94:aa:47:71:5b: 6c:4a:f3:45:dc:d7:c4:7e:cd:37:65:c6:38:22:96:15:f0:fc: d8:b8:b2:7e:e9:45:81:6d:c3:3a:b7:29:ae:79:4f:f5:fa:f3: 20:03:bd:9a:b9:5d:ec:16:b8:20:df:fb:f6:8b:f9:d2:81:f4: 1c:46:b7:eb:e6:70:98:05:c8:91:fd:6f:1f:12:24:d4:86:c7: 78:8f:24:52:17:b9:50:66:27:86:55:79:99:cb:ac:a0:86:37: b9:ab:68:c9:5d:d9:0b:79:d1:d8:6c:0c:f5:2d:6f:72:a8:6e: 67:b7:de:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26yiFlvVa0thEY9afT5KUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NGRjYjcyZThjYjQ3OGNmYzRiMjVhZWIxZjAzYjQwNjI2 NjM3NWMwHhcNMjYwMTAxMDAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDI5NjM0MWRhMTAwOTgwMDY3NTk2ZWM4OTQzMDUxM2U1ZWM2ODkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiG+mjeaQzrF67XSW1o+0DsVsw8Y ADzEkcyO4r/vzCtYIY8si4DBlJXAlAtFxDSHKYpdAkNJOFvhTnhyMmJZ7L1jg0Y8 m/MtPk33FRfMD47DcBExFXBHGKSWgcmEvX9guNtf/1YUa2NeIcvKbEWD84q8onR3 TLygj6/UZDWl6s5uuoEC8u+OJP3uNb5nlkF6voDW2NlH27rH5jd7x+gwuNnjdW5u VeGSlGJvq++RkF8R9uQ2nd1A/gUQwLsSmJYmU8Tz///mg3cD68PMVyqRUvNQcPwA fZgVxyxyGJdvuAtY32tfmX9el7hyR45D2G5TXm4Ov/MapIAcAwm8lw1SmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLQpY0HaEAmABnWW7IlDBRPl7GiRMB8GA1UdIwQY MBaAFHRNy3Loy0eM/EslrrHwO0BiZjdcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEUzTGN1akxSNHo4U3lXdXNmQTdRR0ptTjF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81ZTFiZTktZTRlYS00Yzg0LWE4Yjct ZDBkNDc2ZjQxZmQ2LzEvdENsalFkb1FDWUFHZFpic2lVTUZFLVhzYUpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi81ZTFiZTktZTRlYS00Yzg0LWE4YjctZDBkNDc2ZjQxZmQ2 LzEvZEUzTGN1akxSNHo4U3lXdXNmQTdRR0ptTjF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwfbPMA0G CSqGSIb3DQEBCwUAA4IBAQCFUrSpLP9fVd1jgq16hHkA9UfkyUT4O5hK0IbU9hjZ w5DDpNKPdlH6w9hoc89kzc1OeNf9Mot0R5AAG7VQJhvWsLMPY6qy+N6Uk3MwGnQX TcpxkwGrNVRtMiQl7izNpW+3b/Hbv+uAvV6itubzqsqPVEc6jwIxdg+gNepR5ZTJ FruJdIiFyWWBNdbwlKpHcVtsSvNF3NfEfs03ZcY4IpYV8PzYuLJ+6UWBbcM6tymu eU/1+vMgA72auV3sFrgg3/v2i/nSgfQcRrfr5nCYBciR/W8fEiTUhsd4jyRSF7lQ ZieGVXmZy6yghje5q2jJXdkLedHYbAz1LW9yqG5nt94z -----END CERTIFICATE-----Generated at Mon Jan 26 08:37:44 2026 by rpki-client