This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/TerM9KfzJsRRkdvjMKo5OW1_vg4.roa File: TerM9KfzJsRRkdvjMKo5OW1_vg4.roa (raw, json) Hash identifier: 4hf+yhqdXpUZCf15GpEdNxp1wNaJ6uMaWZCGmy9se7g= Subject key identifier: 4D:EA:CC:F4:A7:F3:26:C4:51:91:DB:E3:30:AA:39:39:6D:7F:BE:0E Certificate issuer: /CN=534633f19f61d6546ebabf7de9fb7aa987ed5bf3 Certificate serial: 019B797E92BA989029CB6FD3ABEC3505E0AD Authority key identifier: 53:46:33:F1:9F:61:D6:54:6E:BA:BF:7D:E9:FB:7A:A9:87:ED:5B:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0Yz8Z9h1lRuur996ft6qYftW_M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/TerM9KfzJsRRkdvjMKo5OW1_vg4.roa Signing time: Thu 01 Jan 2026 12:18:16 +0000 ROA not before: Thu 01 Jan 2026 12:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1103 IP address blocks: 141.252.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.crl rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft rsync://rpki.ripe.net/repository/DEFAULT/U0Yz8Z9h1lRuur996ft6qYftW_M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:92:ba:98:90:29:cb:6f:d3:ab:ec:35:05:e0:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=534633f19f61d6546ebabf7de9fb7aa987ed5bf3 Validity Not Before: Jan 1 12:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4deaccf4a7f326c45191dbe330aa39396d7fbe0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:33:6f:c1:d0:80:c8:8f:2f:a4:8c:6f:d5:2f: 1b:5e:71:d2:d6:5d:c8:c4:0a:d2:5c:72:87:a1:f2: 4f:18:42:c9:ad:8c:dc:bf:c9:b9:ae:61:a0:84:e0: 16:18:f6:e2:1e:02:b9:bf:d0:76:5f:51:00:43:5b: 25:c7:9d:12:49:cc:40:40:bd:ff:69:93:5e:2e:bb: ba:fc:ee:9a:14:49:1c:d2:b4:3c:65:a3:97:96:1f: 55:52:8b:56:fb:40:0a:c7:38:c7:c6:53:e7:95:b9: d7:42:86:c2:7f:52:5a:8b:13:74:fe:79:79:16:38: dd:fa:e6:33:c2:93:99:24:e9:95:f6:52:fe:c3:3b: d4:15:00:b9:82:20:50:b7:e7:54:52:63:7d:90:4f: 8a:dc:4d:ea:7c:42:e2:f5:07:6a:e3:a1:3b:2e:fd: 83:94:5f:28:0b:a9:0b:7b:63:9a:c8:85:8e:d1:66: 7e:fb:13:ea:5e:b8:2f:31:66:be:33:86:0f:db:71: cb:53:94:58:c9:e3:af:8b:6f:44:fb:25:92:13:42: cb:b9:81:b9:30:fe:eb:24:75:2d:2e:0a:af:5c:b0: 00:93:56:6f:3b:dc:31:3e:77:71:20:bd:8b:24:8b: 2c:57:e9:95:f1:91:74:22:15:e9:e1:63:19:db:10: 81:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:EA:CC:F4:A7:F3:26:C4:51:91:DB:E3:30:AA:39:39:6D:7F:BE:0E X509v3 Authority Key Identifier: keyid:53:46:33:F1:9F:61:D6:54:6E:BA:BF:7D:E9:FB:7A:A9:87:ED:5B:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0Yz8Z9h1lRuur996ft6qYftW_M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/TerM9KfzJsRRkdvjMKo5OW1_vg4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.252.0.0/16 Signature Algorithm: sha256WithRSAEncryption 6f:dd:3b:d1:50:8f:ae:60:f8:ea:ec:62:fc:aa:67:52:b5:eb: 44:19:3f:6e:66:7f:9d:6b:1a:9f:6e:b6:61:89:4d:a5:63:cf: 69:c7:79:78:11:a0:44:b4:12:bb:1a:51:d2:b4:d3:b4:91:aa: 90:91:59:20:d2:98:63:32:10:56:6c:4c:d3:81:45:33:3b:a0: b3:4f:ae:f9:a6:52:bf:9d:65:cf:ab:97:01:46:55:65:96:a9: 33:72:9d:43:04:64:bc:2b:83:48:a2:47:4f:83:9b:ee:b1:f2: d6:fe:3c:b6:b1:de:74:ba:d7:52:27:ae:d3:f3:3e:ab:4a:bc: 31:55:66:d5:c9:eb:0e:14:8b:fa:dc:db:8f:af:f6:7c:dd:a2: 7b:10:f0:b8:4f:3f:58:60:d6:6c:11:f5:bd:49:53:1b:15:ff: c5:7f:e5:93:15:da:ae:c1:d5:19:84:45:2f:a2:39:ad:ed:6f: 8d:d6:30:3d:82:8e:e4:f5:f6:36:b2:48:e7:8e:3b:92:ad:ae: 64:cf:62:f3:b6:d4:13:44:a5:9c:7d:da:24:ae:03:26:d1:0c: 33:16:09:0e:ae:e4:f0:46:3d:3d:01:47:d4:ca:37:3b:21:b2: f3:2d:05:65:3a:a2:d3:1e:fb:2c:22:e9:5c:0f:ff:ee:a5:4b: f9:1c:3c:d8 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt5fpK6mJApy2/Tq+w1BeCtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNDYzM2YxOWY2MWQ2NTQ2ZWJhYmY3ZGU5ZmI3YWE5ODdl ZDViZjMwHhcNMjYwMTAxMTIxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZGVhY2NmNGE3ZjMyNmM0NTE5MWRiZTMzMGFhMzkzOTZkN2ZiZTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zNvwdCAyI8vpIxv1S8bXnHS1l3I xArSXHKHofJPGELJrYzcv8m5rmGghOAWGPbiHgK5v9B2X1EAQ1slx50SScxAQL3/ aZNeLru6/O6aFEkc0rQ8ZaOXlh9VUotW+0AKxzjHxlPnlbnXQobCf1JaixN0/nl5 Fjjd+uYzwpOZJOmV9lL+wzvUFQC5giBQt+dUUmN9kE+K3E3qfELi9Qdq46E7Lv2D lF8oC6kLe2OayIWO0WZ++xPqXrgvMWa+M4YP23HLU5RYyeOvi29E+yWSE0LLuYG5 MP7rJHUtLgqvXLAAk1ZvO9wxPndxIL2LJIssV+mV8ZF0IhXp4WMZ2xCBIwIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFE3qzPSn8ybEUZHb4zCqOTltf74OMB8GA1UdIwQY MBaAFFNGM/GfYdZUbrq/fen7eqmH7VvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTBZejhaOWgxbFJ1dXI5OTZmdDZxWWZ0V19NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC84YmY3OGQtYzNiNS00NjkxLTgxMDgt ZjBjYWQ5ZmY2NWJlLzEvVGVyTTlLZnpKc1JSa2R2ak1LbzVPVzFfdmc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC84YmY3OGQtYzNiNS00NjkxLTgxMDgtZjBjYWQ5ZmY2NWJl LzEvVTBZejhaOWgxbFJ1dXI5OTZmdDZxWWZ0V19NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjfwwDQYJ KoZIhvcNAQELBQADggEBAG/dO9FQj65g+OrsYvyqZ1K160QZP25mf51rGp9utmGJ TaVjz2nHeXgRoES0ErsaUdK007SRqpCRWSDSmGMyEFZsTNOBRTM7oLNPrvmmUr+d Zc+rlwFGVWWWqTNynUMEZLwrg0iiR0+Dm+6x8tb+PLax3nS611InrtPzPqtKvDFV ZtXJ6w4Ui/rc24+v9nzdonsQ8LhPP1hg1mwR9b1JUxsV/8V/5ZMV2q7B1RmERS+i Oa3tb43WMD2CjuT19jaySOeOO5KtrmTPYvO21BNEpZx92iSuAybRDDMWCQ6u5PBG PT0BR9TKNzshsvMtBWU6otMe+ywi6VwP/+6lS/kcPNg= -----END CERTIFICATE-----Generated at Sun Jan 25 21:04:43 2026 by rpki-client