This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/TfDpwnkDY9DTlAsJc9Iqnduzj8A.roa File: TfDpwnkDY9DTlAsJc9Iqnduzj8A.roa (raw, json) Hash identifier: XbrnUGWje15/NR9HfumBox3YZkdHMNSMKy7Az9ObxUM= Subject key identifier: 4D:F0:E9:C2:79:03:63:D0:D3:94:0B:09:73:D2:2A:9D:DB:B3:8F:C0 Certificate issuer: /CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32 Certificate serial: 019B797F14B907B795E1C61F408425DF426A Authority key identifier: A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/TfDpwnkDY9DTlAsJc9Iqnduzj8A.roa Signing time: Thu 01 Jan 2026 12:18:50 +0000 ROA not before: Thu 01 Jan 2026 12:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41983 IP address blocks: 77.74.180.0/22 maxlen: 22 91.103.64.0/21 maxlen: 21 93.159.224.0/23 maxlen: 23 2a03:2480::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:14:b9:07:b7:95:e1:c6:1f:40:84:25:df:42:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32 Validity Not Before: Jan 1 12:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4df0e9c2790363d0d3940b0973d22a9ddbb38fc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e0:e8:5a:75:34:eb:b8:2e:0f:2d:d1:b2:a6: e5:08:b2:48:c7:58:36:14:8c:b7:0d:4f:d2:60:34: 58:64:f9:ef:6a:e8:ee:df:df:1b:11:ff:aa:43:29: 9a:e7:4b:ec:98:3e:61:9c:b7:cb:e5:f8:41:52:69: 17:47:3c:71:2e:94:b8:0a:b6:d8:d7:22:cb:3d:2d: 06:c0:60:51:3f:2b:96:e6:8f:a9:38:7a:ed:e9:37: 71:c5:67:5c:16:05:91:88:94:fa:f0:6b:d7:de:83: 76:eb:9c:aa:18:77:2d:c4:88:94:44:2d:cf:36:c4: c0:fb:3b:df:e0:69:0d:ac:96:13:9a:b1:c4:67:92: 5b:f5:38:95:43:a8:9e:b7:ec:92:7e:30:52:4c:08: 43:9b:ad:87:cc:db:12:70:42:31:7d:6a:3f:d4:67: 5a:4c:fa:a6:e6:ff:ca:c5:14:a6:23:de:ee:9e:eb: 9d:b1:c7:58:51:c7:83:43:1e:e4:09:8e:b4:27:f1: fa:c1:e9:26:67:91:3c:1c:0e:d3:3d:59:fd:8e:ac: 92:e9:e8:aa:ba:0c:b2:e1:05:9c:43:07:ff:70:63: bc:c1:02:80:28:ee:dd:84:39:36:61:60:7c:44:e3: 11:04:dd:92:60:60:13:f2:92:41:6f:7a:72:61:67: 87:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F0:E9:C2:79:03:63:D0:D3:94:0B:09:73:D2:2A:9D:DB:B3:8F:C0 X509v3 Authority Key Identifier: keyid:A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/TfDpwnkDY9DTlAsJc9Iqnduzj8A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.74.180.0/22 91.103.64.0/21 93.159.224.0/23 IPv6: 2a03:2480::/33 Signature Algorithm: sha256WithRSAEncryption 26:15:4c:c9:35:d7:fa:2c:c4:74:1b:a4:6e:b8:89:56:28:98: aa:c0:0b:b6:e1:64:61:04:40:6a:e0:f8:98:6f:57:11:32:b2: a2:4c:26:68:39:09:e0:c5:83:8d:ea:24:84:3f:49:b0:24:87: 35:52:90:c9:46:65:7e:cf:6b:db:e4:b9:66:b5:08:38:f0:61: 54:c2:d3:35:8c:7c:6a:b0:4e:b4:52:e3:6e:e5:c1:b8:91:4e: 95:03:99:81:52:43:60:57:dc:37:87:b8:82:8a:33:1a:ba:ab: 0b:5f:63:54:5f:ee:0a:71:0d:8c:dc:08:56:33:71:5b:81:b8: 85:ad:35:2a:bb:c6:f2:d5:19:0c:0f:72:e6:e0:47:a5:1f:09: c9:fd:54:f0:9f:27:ea:bd:3e:cb:c1:93:60:3b:19:b7:1e:30: 5e:53:e5:78:3e:d6:ee:01:87:98:30:49:54:86:5c:a4:89:da: c2:5f:8d:95:7e:77:f6:77:15:39:20:3f:e2:bc:29:a8:2c:91: 7a:63:8a:1b:7e:7f:45:1e:04:58:58:11:05:46:7e:59:c9:1f: 88:ab:54:3c:73:4e:44:4f:f6:51:b3:3f:93:3b:94:3d:d1:0b: 32:27:c4:6b:e8:b7:be:d0:e3:69:73:0a:c1:d4:a7:3c:92:a5: 8b:44:c2:24 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt5fxS5B7eV4cYfQIQl30JqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZDg1YWRlMmIwZDRlYzFjYTA5MmE4ZTI3MDNjMTkyMDBj NzJmMzIwHhcNMjYwMTAxMTIxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZGYwZTljMjc5MDM2M2QwZDM5NDBiMDk3M2QyMmE5ZGRiYjM4ZmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uDoWnU067guDy3RsqblCLJIx1g2 FIy3DU/SYDRYZPnvauju398bEf+qQyma50vsmD5hnLfL5fhBUmkXRzxxLpS4CrbY 1yLLPS0GwGBRPyuW5o+pOHrt6TdxxWdcFgWRiJT68GvX3oN265yqGHctxIiURC3P NsTA+zvf4GkNrJYTmrHEZ5Jb9TiVQ6iet+ySfjBSTAhDm62HzNsScEIxfWo/1Gda TPqm5v/KxRSmI97unuudscdYUceDQx7kCY60J/H6wekmZ5E8HA7TPVn9jqyS6eiq ugyy4QWcQwf/cGO8wQKAKO7dhDk2YWB8ROMRBN2SYGAT8pJBb3pyYWeH2wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFE3w6cJ5A2PQ05QLCXPSKp3bs4/AMB8GA1UdIwQY MBaAFKfYWt4rDU7BygkqjicDwZIAxy8yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDloYTNpc05Uc0hLQ1NxT0p3UEJrZ0RITHpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS80MDMxNDItZGNmYy00ZmI1LWFlMWYt MDRiMGJmNjBiOWI3LzEvVGZEcHdua0RZOURUbEFzSmM5SXFuZHV6ajhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS80MDMxNDItZGNmYy00ZmI1LWFlMWYtMDRiMGJmNjBiOWI3 LzEvcDloYTNpc05Uc0hLQ1NxT0p3UEJrZ0RITHpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAYBAIAATASAwQCTUq0AwQD W2dAAwQBXZ/gMA4EAgACMAgDBgcqAySAADANBgkqhkiG9w0BAQsFAAOCAQEAJhVM yTXX+izEdBukbriJViiYqsALtuFkYQRAauD4mG9XETKyokwmaDkJ4MWDjeokhD9J sCSHNVKQyUZlfs9r2+S5ZrUIOPBhVMLTNYx8arBOtFLjbuXBuJFOlQOZgVJDYFfc N4e4goozGrqrC19jVF/uCnENjNwIVjNxW4G4ha01KrvG8tUZDA9y5uBHpR8Jyf1U 8J8n6r0+y8GTYDsZtx4wXlPleD7W7gGHmDBJVIZcpInawl+NlX539ncVOSA/4rwp qCyRemOKG35/RR4EWFgRBUZ+WckfiKtUPHNORE/2UbM/kzuUPdELMifEa+i3vtDj aXMKwdSnPJKli0TCJA== -----END CERTIFICATE-----Generated at Sun Jan 25 19:37:38 2026 by rpki-client