This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/TxxrVfz2u2F0xUEANYlHvUuyeVI.roa File: TxxrVfz2u2F0xUEANYlHvUuyeVI.roa (raw, json) Hash identifier: 0f/+WR0UOyysTWAKgWWvmTz3+3MFbGsdfLPYHRKrVL8= Subject key identifier: 4F:1C:6B:55:FC:F6:BB:61:74:C5:41:00:35:89:47:BD:4B:B2:79:52 Certificate issuer: /CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8 Certificate serial: 019B7E39082C5E708270D0E20E4A98A4A1F2 Authority key identifier: E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/TxxrVfz2u2F0xUEANYlHvUuyeVI.roa Signing time: Fri 02 Jan 2026 10:20:25 +0000 ROA not before: Fri 02 Jan 2026 10:20:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51424 IP address blocks: 212.4.132.0/24 maxlen: 24 212.96.184.0/24 maxlen: 24 213.211.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:08:2c:5e:70:82:70:d0:e2:0e:4a:98:a4:a1:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8 Validity Not Before: Jan 2 10:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f1c6b55fcf6bb6174c54100358947bd4bb27952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:08:57:4c:64:07:c6:0b:37:cb:88:93:f1:70: 0d:8d:78:42:e2:44:6a:b8:54:54:86:55:2a:20:25: 0c:d2:17:14:5d:9a:84:c6:78:67:c9:a0:6d:93:00: 20:75:cb:44:ec:d1:82:94:77:9e:69:73:1d:a5:52: b1:ea:2b:60:86:53:93:e9:07:bc:59:6d:22:cc:82: a0:7f:84:72:20:d2:98:1b:38:f0:5c:3c:50:27:ed: f0:ba:eb:69:18:23:e5:4c:a2:62:b7:fa:e4:d0:3e: a7:21:42:f3:24:c4:c8:47:e2:54:6f:dc:9e:3a:ce: 79:00:c7:ad:43:c8:fb:db:c4:9c:a3:5e:fa:25:2f: bd:bc:89:06:bf:b1:76:b8:d7:45:49:ef:e4:d9:65: 09:cc:f1:f8:e7:20:15:d4:6f:b7:ad:ed:f4:9d:1b: 2d:19:66:c6:fb:11:a0:fd:92:b0:15:52:39:0f:86: 78:58:b1:fc:29:27:26:66:f6:3a:91:39:c2:b2:4b: be:54:13:23:ce:dd:d1:a9:d6:43:b3:f9:e8:8e:a2: 83:6d:cb:f0:af:26:21:e2:12:85:5c:5a:ba:18:7a: 20:8c:e2:71:11:b0:0e:61:f9:e3:46:89:d6:62:ea: 8e:d7:75:7c:ce:af:bc:33:ec:fe:b5:b0:94:3e:a4: d0:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:1C:6B:55:FC:F6:BB:61:74:C5:41:00:35:89:47:BD:4B:B2:79:52 X509v3 Authority Key Identifier: keyid:E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/TxxrVfz2u2F0xUEANYlHvUuyeVI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.4.132.0/24 212.96.184.0/24 213.211.36.0/24 Signature Algorithm: sha256WithRSAEncryption 62:16:bd:ed:99:79:f2:ab:c7:5d:b5:c9:97:16:e0:1d:0e:db: 01:e1:c4:94:f1:b0:9f:0d:fe:73:d3:61:38:6e:71:4e:1d:ff: 67:98:10:39:3b:ff:c1:08:fd:c7:94:39:87:1c:c2:43:e0:bc: 8f:b4:5b:29:bd:68:5e:33:84:70:f5:ea:85:fb:38:6f:2c:6c: c5:f2:02:19:56:be:cb:f5:f6:14:e5:aa:7f:18:28:b4:7d:73: 10:8e:fc:4c:02:f5:fb:95:54:45:c1:dc:c9:98:f7:ad:38:a9: 54:ac:ff:42:d5:d3:d7:35:33:0b:53:ce:e7:81:a5:e1:1b:19: 8a:e0:97:da:35:2b:9e:b2:aa:ad:53:27:3f:23:3c:ee:67:a5: a5:ab:f2:33:b4:43:84:74:73:59:11:00:35:2e:b6:e4:9d:41: 7d:5b:1a:03:a5:bf:93:b5:a0:cb:93:d3:0b:0f:6f:30:93:1b: 16:7b:41:df:20:d1:d1:4e:89:3b:7f:63:d5:26:37:3e:02:7e: 9f:28:11:38:b3:1e:e3:9c:6a:39:e3:ea:a9:76:63:78:a1:7d: a6:2e:26:de:c8:1a:23:55:cd:31:76:a2:7b:5c:01:f5:0f:ae: 09:15:c8:99:ea:80:f7:a7:58:97:21:d1:b9:aa:5f:87:65:3b: be:24:29:2b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+OQgsXnCCcNDiDkqYpKHyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ZDZjNmU4YmNlZDQwYmQwMzJkMTc3MThjMWIxZTM5YWU4 NDFhZTgwHhcNMjYwMTAyMTAyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjFjNmI1NWZjZjZiYjYxNzRjNTQxMDAzNTg5NDdiZDRiYjI3OTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsghXTGQHxgs3y4iT8XANjXhC4kRq uFRUhlUqICUM0hcUXZqExnhnyaBtkwAgdctE7NGClHeeaXMdpVKx6itghlOT6Qe8 WW0izIKgf4RyINKYGzjwXDxQJ+3wuutpGCPlTKJit/rk0D6nIULzJMTIR+JUb9ye Os55AMetQ8j728Sco176JS+9vIkGv7F2uNdFSe/k2WUJzPH45yAV1G+3re30nRst GWbG+xGg/ZKwFVI5D4Z4WLH8KScmZvY6kTnCsku+VBMjzt3RqdZDs/nojqKDbcvw ryYh4hKFXFq6GHogjOJxEbAOYfnjRonWYuqO13V8zq+8M+z+tbCUPqTQjQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFE8ca1X89rthdMVBADWJR71LsnlSMB8GA1UdIwQY MBaAFOXWxui87UC9Ay0XcYwbHjmuhBroMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWRiRzZMenRRTDBETFJkeGpCc2VPYTZFR3VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wODk0ZjctZTI0ZC00NzI4LThjYWQt YmQyNDliNjI1Nzk3LzEvVHh4clZmejJ1MkYweFVFQU5ZbEh2VXV5ZVZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wODk0ZjctZTI0ZC00NzI4LThjYWQtYmQyNDliNjI1Nzk3 LzEvNWRiRzZMenRRTDBETFJkeGpCc2VPYTZFR3VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQA1ASEAwQA 1GC4AwQA1dMkMA0GCSqGSIb3DQEBCwUAA4IBAQBiFr3tmXnyq8ddtcmXFuAdDtsB 4cSU8bCfDf5z02E4bnFOHf9nmBA5O//BCP3HlDmHHMJD4LyPtFspvWheM4Rw9eqF +zhvLGzF8gIZVr7L9fYU5ap/GCi0fXMQjvxMAvX7lVRFwdzJmPetOKlUrP9C1dPX NTMLU87ngaXhGxmK4JfaNSuesqqtUyc/IzzuZ6Wlq/IztEOEdHNZEQA1LrbknUF9 WxoDpb+TtaDLk9MLD28wkxsWe0HfINHRTok7f2PVJjc+An6fKBE4sx7jnGo54+qp dmN4oX2mLibeyBojVc0xdqJ7XAH1D64JFciZ6oD3p1iXIdG5ql+HZTu+JCkr -----END CERTIFICATE-----Generated at Sun Jan 25 17:48:03 2026 by rpki-client