This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/TNzdy3BwDq7Ray6Z5SvDVSbtn6s.roa File: TNzdy3BwDq7Ray6Z5SvDVSbtn6s.roa (raw, json) Hash identifier: 8DAMy1BHBoqCmfTfrrToTqC0+T4MaMlEUb4i3KOyJik= Subject key identifier: 4C:DC:DD:CB:70:70:0E:AE:D1:6B:2E:99:E5:2B:C3:55:26:ED:9F:AB Certificate issuer: /CN=2f7a32c737ac307807476a697b0baf6b9004568e Certificate serial: 019B7DCAF8B409D69ED60C9CD6EF9467DC94 Authority key identifier: 2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/TNzdy3BwDq7Ray6Z5SvDVSbtn6s.roa Signing time: Fri 02 Jan 2026 08:20:12 +0000 ROA not before: Fri 02 Jan 2026 08:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198247 IP address blocks: 195.94.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:f8:b4:09:d6:9e:d6:0c:9c:d6:ef:94:67:dc:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f7a32c737ac307807476a697b0baf6b9004568e Validity Not Before: Jan 2 08:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4cdcddcb70700eaed16b2e99e52bc35526ed9fab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:bd:62:13:72:21:b2:95:fb:e7:75:c2:ae:79: fe:16:c1:3f:99:a1:84:ea:00:97:a9:c9:a9:59:71: ad:f4:17:50:bb:c1:a6:bb:ff:12:6b:86:55:b7:0a: e4:a9:73:80:51:ff:d7:22:66:62:df:f8:e7:10:28: 45:45:07:72:de:2b:76:29:6f:79:13:ce:e2:e1:a3: 7a:bb:0d:58:0b:7c:3d:8e:e0:5b:5e:03:1d:36:65: d0:7f:22:f0:29:79:99:3c:1a:bb:41:d9:04:88:08: 9d:ae:aa:02:d2:c1:ef:95:85:f7:43:0a:6f:0f:5f: 04:99:ae:bc:3d:70:72:10:b0:9a:c9:f9:9d:88:e4: bc:92:ce:dd:88:2f:56:84:0d:0d:0a:e8:98:d9:30: b3:1b:c6:1f:86:1a:8f:12:2b:7b:69:03:c4:4a:4e: 4b:aa:08:22:a3:18:ad:33:d8:4a:90:d5:3f:de:76: d2:66:ae:60:36:29:9d:24:a0:ed:78:e5:b3:e8:54: 7f:ef:d2:43:f4:97:b4:ed:71:f2:7e:fe:58:78:1c: 1c:fd:76:df:48:e9:4c:bd:1e:0d:39:f6:e6:e6:da: d8:60:4f:71:ae:4b:39:4c:3a:3b:ec:2f:e2:8e:0d: 23:4a:0b:63:15:11:94:e5:97:b5:ee:cd:cf:69:a1: 84:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:DC:DD:CB:70:70:0E:AE:D1:6B:2E:99:E5:2B:C3:55:26:ED:9F:AB X509v3 Authority Key Identifier: keyid:2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/TNzdy3BwDq7Ray6Z5SvDVSbtn6s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.94.28.0/24 Signature Algorithm: sha256WithRSAEncryption 38:8b:b1:11:55:65:ce:dc:c6:9e:f5:af:cb:37:28:af:5a:91: 46:9c:0b:09:ac:d8:a7:7c:04:02:9d:f9:cf:2a:f3:7d:ef:66: 5d:98:e0:a9:c6:8b:f5:f2:a0:d9:a9:3f:bd:e6:26:c7:b8:3d: b2:2a:91:5f:1d:66:83:83:92:46:db:00:f1:1c:9a:24:81:d3: be:c5:fa:59:b5:9f:eb:15:96:12:06:e3:20:96:9b:24:ec:90: 5f:39:dc:00:1a:ba:7f:15:c0:a9:74:8f:9b:be:58:47:17:81: f1:1d:fa:78:7a:cf:47:62:35:22:c5:0c:e4:d5:14:93:2d:94: 38:0d:3f:d8:8c:6e:97:fb:5d:0b:f0:f7:d7:e3:45:ac:cf:4d: c3:c2:72:f1:b7:aa:d2:ba:d5:a9:98:d4:90:b4:f0:a1:b7:26: c7:87:d7:4e:61:87:73:7b:2a:19:a0:4b:30:ef:a7:0e:7b:db: 1b:2a:4d:26:e6:8a:c0:dd:30:33:58:18:af:6f:52:6d:1a:0f: 0e:13:93:33:67:25:6f:f8:c9:ec:e0:16:4a:89:9b:b3:de:8d: 5f:2f:12:6b:3e:44:dc:57:e4:c4:af:00:1b:11:c1:89:35:ce: b7:9e:b5:87:17:aa:f5:52:a2:b5:9e:86:65:b4:6a:e2:5f:41: 78:8a:44:e1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yvi0Cdae1gyc1u+UZ9yUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmN2EzMmM3MzdhYzMwNzgwNzQ3NmE2OTdiMGJhZjZiOTAw NDU2OGUwHhcNMjYwMTAyMDgyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Y2RjZGRjYjcwNzAwZWFlZDE2YjJlOTllNTJiYzM1NTI2ZWQ5ZmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnb1iE3IhspX753XCrnn+FsE/maGE 6gCXqcmpWXGt9BdQu8Gmu/8Sa4ZVtwrkqXOAUf/XImZi3/jnEChFRQdy3it2KW95 E87i4aN6uw1YC3w9juBbXgMdNmXQfyLwKXmZPBq7QdkEiAidrqoC0sHvlYX3Qwpv D18Ema68PXByELCayfmdiOS8ks7diC9WhA0NCuiY2TCzG8YfhhqPEit7aQPESk5L qggioxitM9hKkNU/3nbSZq5gNimdJKDteOWz6FR/79JD9Je07XHyfv5YeBwc/Xbf SOlMvR4NOfbm5trYYE9xrks5TDo77C/ijg0jSgtjFRGU5Ze17s3PaaGEnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEzc3ctwcA6u0WsumeUrw1Um7Z+rMB8GA1UdIwQY MBaAFC96Msc3rDB4B0dqaXsLr2uQBFaOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDNveXh6ZXNNSGdIUjJwcGV3dXZhNUFFVm80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8yNDAwMGMtYjVkMi00OGRjLWI5NTkt ZTk1YTI0OTYxNTdlLzEvVE56ZHkzQndEcTdSYXk2WjVTdkRWU2J0bjZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8yNDAwMGMtYjVkMi00OGRjLWI5NTktZTk1YTI0OTYxNTdl LzEvTDNveXh6ZXNNSGdIUjJwcGV3dXZhNUFFVm80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw14cMA0G CSqGSIb3DQEBCwUAA4IBAQA4i7ERVWXO3Mae9a/LNyivWpFGnAsJrNinfAQCnfnP KvN972ZdmOCpxov18qDZqT+95ibHuD2yKpFfHWaDg5JG2wDxHJokgdO+xfpZtZ/r FZYSBuMglpsk7JBfOdwAGrp/FcCpdI+bvlhHF4HxHfp4es9HYjUixQzk1RSTLZQ4 DT/YjG6X+10L8PfX40Wsz03DwnLxt6rSutWpmNSQtPChtybHh9dOYYdzeyoZoEsw 76cOe9sbKk0m5orA3TAzWBivb1JtGg8OE5MzZyVv+Mns4BZKiZuz3o1fLxJrPkTc V+TErwAbEcGJNc63nrWHF6r1UqK1noZltGriX0F4ikTh -----END CERTIFICATE-----Generated at Sun Jan 25 15:12:48 2026 by rpki-client