This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/tBlYFSzWvbFvxf9f-MzOzaib52c.roa File: tBlYFSzWvbFvxf9f-MzOzaib52c.roa (raw, json) Hash identifier: +QoYpfs3CrNYgE/1grCeAjj1v6GUGqrmR7t3xV7iiic= Subject key identifier: B4:19:58:15:2C:D6:BD:B1:6F:C5:FF:5F:F8:CC:CE:CD:A8:9B:E7:67 Certificate issuer: /CN=4c7844abef711c232c84f83c807a420af3804728 Certificate serial: 019B76EB80D0D72BCDD4C89FCDD5FE2B0587 Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/tBlYFSzWvbFvxf9f-MzOzaib52c.roa Signing time: Thu 01 Jan 2026 00:18:23 +0000 ROA not before: Thu 01 Jan 2026 00:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203300 IP address blocks: 185.139.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:80:d0:d7:2b:cd:d4:c8:9f:cd:d5:fe:2b:05:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c7844abef711c232c84f83c807a420af3804728 Validity Not Before: Jan 1 00:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b41958152cd6bdb16fc5ff5ff8cccecda89be767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d8:1d:6f:13:2f:db:ba:da:08:57:01:10:7a: a1:d0:99:4a:5c:4f:06:23:4e:6b:22:e7:69:ab:72: a0:c9:ee:ed:ff:93:9f:c4:e1:70:7b:d7:cf:f5:7f: e8:7a:d3:02:38:71:df:43:58:63:4e:88:ac:bd:0d: 23:f7:2a:a4:e9:80:af:b5:17:17:f0:c5:ce:87:a7: 0b:27:d4:1a:c2:50:ba:94:e2:07:02:ab:59:4f:5a: 99:37:54:60:22:90:b4:cb:16:d7:25:61:52:56:39: c2:44:43:11:ae:50:91:b6:fb:0c:05:0c:f7:a8:cb: 89:62:98:66:7c:c3:43:4a:7a:02:34:2e:4b:ba:6d: bb:04:13:c8:2e:9e:90:b6:af:d8:02:7b:3f:a4:cb: 41:40:b8:a6:12:33:6c:1b:8a:56:08:09:39:46:43: fc:26:a5:75:21:13:92:5b:97:e7:96:19:8e:ab:92: ce:6f:1a:38:a2:04:0c:78:8a:a3:ff:48:0f:e9:5f: ce:c2:68:ab:94:ad:c9:9a:b8:a6:0c:84:fc:5b:e0: 48:02:10:c9:38:85:25:52:34:be:3f:65:75:3f:1d: e1:78:03:75:c7:2c:9b:5d:78:fd:fd:7a:47:47:2a: 5f:04:f6:51:5b:46:79:e6:a1:62:28:71:bd:17:d1: ab:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:19:58:15:2C:D6:BD:B1:6F:C5:FF:5F:F8:CC:CE:CD:A8:9B:E7:67 X509v3 Authority Key Identifier: keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/tBlYFSzWvbFvxf9f-MzOzaib52c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.139.152.0/22 Signature Algorithm: sha256WithRSAEncryption 4a:bb:e5:62:3c:ff:be:84:a7:c8:c6:75:c2:58:f2:5d:db:6a: e2:27:eb:d1:01:ce:1e:5b:59:8d:b2:e2:f7:34:db:f3:ce:21: d3:15:d7:8b:1f:6b:cc:26:58:51:88:37:db:85:01:56:11:69: 36:a0:44:46:33:19:f3:9e:dd:0d:35:c5:ae:1f:ea:ad:74:f6: 2a:2e:8e:07:23:ff:7b:de:b3:7b:fc:d8:bf:84:e6:6d:ec:66: fe:25:d0:d8:9e:ad:12:2b:a8:55:9e:f0:fa:e5:64:76:64:10: 4b:57:1e:6a:8e:1e:21:5c:8a:17:e5:82:ad:47:7b:50:d5:5f: be:b9:e1:76:ca:59:07:14:d6:3f:be:b1:22:53:be:16:eb:d2: e0:50:b6:5d:49:9e:65:f0:52:e9:47:39:d7:c3:d5:75:13:dd: 36:aa:bf:ba:00:52:f8:59:28:ac:83:f2:27:4b:1d:7e:60:3c: 29:50:47:35:f6:6e:62:ba:b4:6f:19:33:80:3b:b9:a8:59:39: 89:e8:15:4e:39:84:13:1b:fe:9f:e8:a2:37:33:49:61:8c:fd: b3:aa:c3:2b:e6:9c:74:82:80:7d:ab:25:49:8f:db:c3:f4:30: 14:54:d8:1e:aa:f0:c8:5b:b4:cf:0e:70:57:c0:21:2d:f6:01: 7a:1d:4d:55 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt264DQ1yvN1MifzdX+KwWHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNzg0NGFiZWY3MTFjMjMyYzg0ZjgzYzgwN2E0MjBhZjM4 MDQ3MjgwHhcNMjYwMTAxMDAxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDE5NTgxNTJjZDZiZGIxNmZjNWZmNWZmOGNjY2VjZGE4OWJlNzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNgdbxMv27raCFcBEHqh0JlKXE8G I05rIudpq3Kgye7t/5OfxOFwe9fP9X/oetMCOHHfQ1hjToisvQ0j9yqk6YCvtRcX 8MXOh6cLJ9QawlC6lOIHAqtZT1qZN1RgIpC0yxbXJWFSVjnCREMRrlCRtvsMBQz3 qMuJYphmfMNDSnoCNC5Lum27BBPILp6Qtq/YAns/pMtBQLimEjNsG4pWCAk5RkP8 JqV1IROSW5fnlhmOq5LObxo4ogQMeIqj/0gP6V/OwmirlK3JmrimDIT8W+BIAhDJ OIUlUjS+P2V1Px3heAN1xyybXXj9/XpHRypfBPZRW0Z55qFiKHG9F9GrWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLQZWBUs1r2xb8X/X/jMzs2om+dnMB8GA1UdIwQY MBaAFEx4RKvvcRwjLIT4PIB6QgrzgEcoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgt ZGFiNmI4M2NmN2VjLzEvdEJsWUZTeld2YkZ2eGY5Zi1Nek96YWliNTJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgtZGFiNmI4M2NmN2Vj LzEvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYuYMA0G CSqGSIb3DQEBCwUAA4IBAQBKu+ViPP++hKfIxnXCWPJd22riJ+vRAc4eW1mNsuL3 NNvzziHTFdeLH2vMJlhRiDfbhQFWEWk2oERGMxnznt0NNcWuH+qtdPYqLo4HI/97 3rN7/Ni/hOZt7Gb+JdDYnq0SK6hVnvD65WR2ZBBLVx5qjh4hXIoX5YKtR3tQ1V++ ueF2ylkHFNY/vrEiU74W69LgULZdSZ5l8FLpRznXw9V1E902qr+6AFL4WSisg/In Sx1+YDwpUEc19m5iurRvGTOAO7moWTmJ6BVOOYQTG/6f6KI3M0lhjP2zqsMr5px0 goB9qyVJj9vD9DAUVNgeqvDIW7TPDnBXwCEt9gF6HU1V -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:05 2026 by rpki-client