This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/Tb3ZP8jCF88QUUjfET9_-Hcpu9M.roa File: Tb3ZP8jCF88QUUjfET9_-Hcpu9M.roa (raw, json) Hash identifier: iQIVqlpU95wZ1Y2M7mnw2rHSBBZvM/n/nZYpuMemFV4= Subject key identifier: 4D:BD:D9:3F:C8:C2:17:CF:10:51:48:DF:11:3F:7F:F8:77:29:BB:D3 Certificate issuer: /CN=0024b1f1359110bff991e9ac6f51469fdcb487af Certificate serial: 019B77C6789BE4A18F93B1543184B8C9DB29 Authority key identifier: 00:24:B1:F1:35:91:10:BF:F9:91:E9:AC:6F:51:46:9F:DC:B4:87:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/Tb3ZP8jCF88QUUjfET9_-Hcpu9M.roa Signing time: Thu 01 Jan 2026 04:17:34 +0000 ROA not before: Thu 01 Jan 2026 04:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47894 IP address blocks: 94.103.32.0/24 maxlen: 24 94.103.33.0/24 maxlen: 24 94.103.34.0/24 maxlen: 24 94.103.35.0/24 maxlen: 24 94.103.44.0/24 maxlen: 24 94.103.45.0/24 maxlen: 24 94.103.46.0/24 maxlen: 24 94.103.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.crl rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:78:9b:e4:a1:8f:93:b1:54:31:84:b8:c9:db:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0024b1f1359110bff991e9ac6f51469fdcb487af Validity Not Before: Jan 1 04:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4dbdd93fc8c217cf105148df113f7ff87729bbd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6f:01:86:95:e2:36:7b:79:91:48:8f:a5:d9: c6:f3:66:f9:bd:fe:d6:44:e0:a5:d5:94:cc:8f:a5: 95:d8:92:f5:f1:e2:97:0f:46:12:d5:78:17:69:9b: 28:04:d6:e3:97:ec:07:4a:21:cc:c6:09:e2:21:48: 06:b7:4a:54:85:26:16:81:12:45:bb:2c:98:9c:e4: bd:17:e9:a1:27:e0:ef:8e:c5:09:d7:2a:0c:70:7d: fc:de:8b:36:cb:cb:07:fc:4a:ff:5f:ef:cb:9e:a6: c0:1c:68:a6:25:2d:11:ee:06:2f:22:ba:fb:28:ce: 8d:c2:83:03:91:55:91:ad:cf:c7:b4:cc:61:2a:ec: 06:a5:a5:6e:83:e9:28:0a:39:63:f2:d9:20:0d:d3: 4e:97:56:2b:a6:52:ba:ea:6d:73:57:f7:a2:64:c4: 08:31:fd:c9:81:f8:f6:83:dc:71:93:a8:4c:36:30: a5:b2:c8:fa:a2:5e:90:a7:e4:8b:b4:83:2f:12:f9: e2:dd:f5:3d:5e:9d:4c:bb:93:06:5b:41:ba:5e:12: 49:22:39:70:07:43:7c:be:fd:5e:2a:6e:cd:a5:2e: 41:91:e6:af:96:11:b0:d7:be:26:4a:1b:e3:24:e5: e7:92:03:0c:df:ce:fe:0e:a2:71:52:92:3d:4d:62: 0d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:BD:D9:3F:C8:C2:17:CF:10:51:48:DF:11:3F:7F:F8:77:29:BB:D3 X509v3 Authority Key Identifier: keyid:00:24:B1:F1:35:91:10:BF:F9:91:E9:AC:6F:51:46:9F:DC:B4:87:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/Tb3ZP8jCF88QUUjfET9_-Hcpu9M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.103.32.0/22 94.103.44.0/22 Signature Algorithm: sha256WithRSAEncryption 4d:55:61:a3:07:93:6e:63:4e:9f:a6:50:47:06:cb:a5:b9:30: 1e:67:6b:37:09:b5:3e:60:ba:cb:49:45:b0:f3:b6:06:4d:b0: 1b:4f:ee:ed:d5:34:fa:0f:a0:de:d4:79:e0:38:bf:dc:ce:de: a9:df:e1:44:7d:c0:6e:06:32:35:51:e6:e8:3e:7e:10:8c:00: e2:7e:c3:9e:09:18:3b:af:8a:4b:cf:25:c8:14:5b:e5:15:b3: b4:d8:0b:3f:e2:f3:44:93:2e:27:0d:77:c8:62:07:84:38:95: 8f:50:1e:65:f9:1d:36:a7:ab:0b:d1:68:df:c8:d6:4e:17:3c: 74:2d:ce:b3:52:0a:00:f1:d7:4d:a8:40:ff:0a:14:12:d4:10: d5:99:67:1b:b2:1e:ce:60:aa:b9:51:2d:ee:8a:c3:33:e5:c5: 7c:d5:a5:08:33:4f:4d:01:92:62:52:be:8c:ce:d5:8c:7a:87: 3e:ce:b9:27:9c:24:dc:eb:d0:76:80:aa:fa:ab:0a:cc:52:26: fe:29:45:7e:72:eb:f4:65:c2:14:d7:51:35:27:89:9c:4e:45: dd:17:97:90:ac:99:06:06:95:74:c1:3e:0a:83:bf:2a:9e:df: 1b:a9:0e:83:e9:29:62:d8:0b:07:ba:09:41:07:4c:05:43:60: f1:55:36:76 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xnib5KGPk7FUMYS4ydspMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMjRiMWYxMzU5MTEwYmZmOTkxZTlhYzZmNTE0NjlmZGNi NDg3YWYwHhcNMjYwMTAxMDQxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZGJkZDkzZmM4YzIxN2NmMTA1MTQ4ZGYxMTNmN2ZmODc3MjliYmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAom8BhpXiNnt5kUiPpdnG82b5vf7W ROCl1ZTMj6WV2JL18eKXD0YS1XgXaZsoBNbjl+wHSiHMxgniIUgGt0pUhSYWgRJF uyyYnOS9F+mhJ+DvjsUJ1yoMcH383os2y8sH/Er/X+/LnqbAHGimJS0R7gYvIrr7 KM6NwoMDkVWRrc/HtMxhKuwGpaVug+koCjlj8tkgDdNOl1YrplK66m1zV/eiZMQI Mf3Jgfj2g9xxk6hMNjClssj6ol6Qp+SLtIMvEvni3fU9Xp1Mu5MGW0G6XhJJIjlw B0N8vv1eKm7NpS5BkeavlhGw174mShvjJOXnkgMM387+DqJxUpI9TWINJwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFE292T/IwhfPEFFI3xE/f/h3KbvTMB8GA1UdIwQY MBaAFAAksfE1kRC/+ZHprG9RRp/ctIevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUNTeDhUV1JFTF81a2Vtc2IxRkduOXkwaDY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iNTk3YzQtNmEzMi00MDA4LWIyZWUt MmRhNjI1ZWI3MjQyLzEvVGIzWlA4akNGODhRVVVqZkVUOV8tSGNwdTlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9iNTk3YzQtNmEzMi00MDA4LWIyZWUtMmRhNjI1ZWI3MjQy LzEvQUNTeDhUV1JFTF81a2Vtc2IxRkduOXkwaDY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCXmcgAwQC XmcsMA0GCSqGSIb3DQEBCwUAA4IBAQBNVWGjB5NuY06fplBHBsuluTAeZ2s3CbU+ YLrLSUWw87YGTbAbT+7t1TT6D6De1HngOL/czt6p3+FEfcBuBjI1UeboPn4QjADi fsOeCRg7r4pLzyXIFFvlFbO02As/4vNEky4nDXfIYgeEOJWPUB5l+R02p6sL0Wjf yNZOFzx0Lc6zUgoA8ddNqED/ChQS1BDVmWcbsh7OYKq5US3uisMz5cV81aUIM09N AZJiUr6MztWMeoc+zrknnCTc69B2gKr6qwrMUib+KUV+cuv0ZcIU11E1J4mcTkXd F5eQrJkGBpV0wT4Kg78qnt8bqQ6D6Sli2AsHuglBB0wFQ2DxVTZ2 -----END CERTIFICATE-----Generated at Mon Jan 26 04:20:21 2026 by rpki-client