This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/tz4P9nF3Ei3wUS8VYP6Gfwtlguc.roa File: tz4P9nF3Ei3wUS8VYP6Gfwtlguc.roa (raw, json) Hash identifier: WI+TvaMT1Y9cC04iUl0U1l9xEwrwqSAkBoEDvp55Sj0= Subject key identifier: B7:3E:0F:F6:71:77:12:2D:F0:51:2F:15:60:FE:86:7F:0B:65:82:E7 Certificate issuer: /CN=94c86c9b35d782116b2cd8583a27ceb403b8f61a Certificate serial: 019B7910BD4F0AC0D866FAAA79F43CF8D6EF Authority key identifier: 94:C8:6C:9B:35:D7:82:11:6B:2C:D8:58:3A:27:CE:B4:03:B8:F6:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lMhsmzXXghFrLNhYOifOtAO49ho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/tz4P9nF3Ei3wUS8VYP6Gfwtlguc.roa Signing time: Thu 01 Jan 2026 10:18:18 +0000 ROA not before: Thu 01 Jan 2026 10:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29256 IP address blocks: 188.247.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/lMhsmzXXghFrLNhYOifOtAO49ho.crl rsync://rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/lMhsmzXXghFrLNhYOifOtAO49ho.mft rsync://rpki.ripe.net/repository/DEFAULT/lMhsmzXXghFrLNhYOifOtAO49ho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:bd:4f:0a:c0:d8:66:fa:aa:79:f4:3c:f8:d6:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94c86c9b35d782116b2cd8583a27ceb403b8f61a Validity Not Before: Jan 1 10:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b73e0ff67177122df0512f1560fe867f0b6582e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9d:9e:97:d6:86:eb:c5:e6:ef:07:ed:cc:b9: a7:64:9d:9a:da:de:3c:c2:c6:5c:6c:14:79:0e:c3: 7a:e5:c1:76:65:fa:c8:ca:88:50:a3:d2:ce:d2:5c: 0f:a2:85:43:8b:92:f7:6f:c4:5c:b2:6c:46:16:e0: 02:12:fd:eb:14:61:14:5c:24:16:b3:04:7a:84:73: 81:26:33:57:68:a7:74:66:80:de:2f:76:ac:7e:4b: ad:fa:2b:5a:e0:43:71:48:6c:6b:0b:d8:72:23:14: 85:71:8a:fc:7d:1e:18:37:59:0a:a5:38:5a:c3:0a: 1c:75:4d:45:5f:55:e0:b8:3e:e0:04:52:ec:d6:c1: da:0d:6d:38:1e:bb:1b:40:7f:63:e9:b3:44:07:16: 43:82:76:a9:03:a2:71:ce:49:bf:e1:6d:dc:d9:e0: 6d:88:1d:96:49:ef:91:f5:16:66:57:6d:03:4a:0d: 51:e2:4d:cd:92:fd:75:98:7f:a8:76:a7:0c:9e:5a: d7:44:3d:ee:92:f9:66:6f:5f:97:0a:00:47:b4:f8: f4:a1:01:fe:8d:c3:8e:c4:57:c4:b7:5d:17:16:24: f3:46:ea:97:f2:b9:b8:ea:71:2d:e9:2e:e0:bf:d7: 5f:6e:2f:a9:34:b6:5a:c6:b3:5e:cd:d0:5e:1d:96: 94:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:3E:0F:F6:71:77:12:2D:F0:51:2F:15:60:FE:86:7F:0B:65:82:E7 X509v3 Authority Key Identifier: keyid:94:C8:6C:9B:35:D7:82:11:6B:2C:D8:58:3A:27:CE:B4:03:B8:F6:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lMhsmzXXghFrLNhYOifOtAO49ho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/tz4P9nF3Ei3wUS8VYP6Gfwtlguc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/lMhsmzXXghFrLNhYOifOtAO49ho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.247.0.0/19 Signature Algorithm: sha256WithRSAEncryption 9f:b2:0c:03:e7:cf:fe:e0:ab:3d:4b:a7:cf:f9:cd:97:0a:6e: 09:31:e6:e7:48:a5:70:6c:77:66:2b:c2:67:fb:ae:31:73:2b: 62:ce:66:db:6b:d7:05:44:72:18:49:81:6f:f7:d1:b7:31:17: 05:22:ac:6c:1e:7b:a2:70:45:c4:72:aa:b7:ec:56:9d:c0:b6: f6:8d:79:07:4d:87:46:8a:6e:59:f6:86:a1:57:77:45:f0:19: 63:bd:30:ea:88:3d:b9:c2:18:34:f1:9e:2a:b6:95:8e:7b:69: 6c:b9:b9:e2:c2:be:a3:6f:63:3b:e8:cf:83:56:c1:9a:be:27: 65:1b:39:28:06:e5:7e:7b:b5:04:ad:66:cd:1b:fa:37:b5:b8: 0d:ea:bf:8e:b7:3b:8b:dc:e9:40:74:85:e0:66:f3:e6:ea:cd: 14:50:fe:82:05:1d:4d:4e:f2:d6:af:a8:50:31:11:6b:96:fe: dd:ed:56:ae:2d:71:0a:46:51:e2:da:d9:de:73:39:55:8f:96: 49:bc:91:5c:a3:09:3f:15:cd:33:42:49:9e:db:84:86:6e:0e: da:cd:51:c7:2c:67:9d:a9:22:76:10:1a:89:76:8e:3d:c3:61: f4:da:c3:89:8c:79:20:46:d8:f2:85:bd:73:67:a0:60:ae:f7: 2a:5c:9d:fe -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EL1PCsDYZvqqefQ8+NbvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0Yzg2YzliMzVkNzgyMTE2YjJjZDg1ODNhMjdjZWI0MDNi OGY2MWEwHhcNMjYwMTAxMTAxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzNlMGZmNjcxNzcxMjJkZjA1MTJmMTU2MGZlODY3ZjBiNjU4MmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmp2el9aG68Xm7wftzLmnZJ2a2t48 wsZcbBR5DsN65cF2ZfrIyohQo9LO0lwPooVDi5L3b8RcsmxGFuACEv3rFGEUXCQW swR6hHOBJjNXaKd0ZoDeL3asfkut+ita4ENxSGxrC9hyIxSFcYr8fR4YN1kKpTha wwocdU1FX1XguD7gBFLs1sHaDW04HrsbQH9j6bNEBxZDgnapA6Jxzkm/4W3c2eBt iB2WSe+R9RZmV20DSg1R4k3Nkv11mH+odqcMnlrXRD3ukvlmb1+XCgBHtPj0oQH+ jcOOxFfEt10XFiTzRuqX8rm46nEt6S7gv9dfbi+pNLZaxrNezdBeHZaUXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLc+D/ZxdxIt8FEvFWD+hn8LZYLnMB8GA1UdIwQY MBaAFJTIbJs114IRayzYWDonzrQDuPYaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbE1oc216WFhnaEZyTE5oWU9pZk90QU80OWhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mZGQ2ODgtM2UyMy00NmY0LWEwNzMt MzViMGM5NjUyNGZhLzEvdHo0UDluRjNFaTN3VVM4VllQNkdmd3RsZ3VjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9mZGQ2ODgtM2UyMy00NmY0LWEwNzMtMzViMGM5NjUyNGZh LzEvbE1oc216WFhnaEZyTE5oWU9pZk90QU80OWhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFvPcAMA0G CSqGSIb3DQEBCwUAA4IBAQCfsgwD58/+4Ks9S6fP+c2XCm4JMebnSKVwbHdmK8Jn +64xcytizmbba9cFRHIYSYFv99G3MRcFIqxsHnuicEXEcqq37FadwLb2jXkHTYdG im5Z9oahV3dF8BljvTDqiD25whg08Z4qtpWOe2lsubniwr6jb2M76M+DVsGavidl GzkoBuV+e7UErWbNG/o3tbgN6r+OtzuL3OlAdIXgZvPm6s0UUP6CBR1NTvLWr6hQ MRFrlv7d7VauLXEKRlHi2tneczlVj5ZJvJFcowk/Fc0zQkme24SGbg7azVHHLGed qSJ2EBqJdo49w2H02sOJjHkgRtjyhb1zZ6BgrvcqXJ3+ -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:15 2026 by rpki-client