This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/tmpjXkdMeErzXzSF-Knv6lEK4MM.roa File: tmpjXkdMeErzXzSF-Knv6lEK4MM.roa (raw, json) Hash identifier: 59w580G8bYKyMW9mWYISKVPkaSir7aOf2hHeB7WsN6s= Subject key identifier: B6:6A:63:5E:47:4C:78:4A:F3:5F:34:85:F8:A9:EF:EA:51:0A:E0:C3 Certificate issuer: /CN=c7983b3a9758fcbe78733d9155aed266c882a23c Certificate serial: 019B76EB3C3F1BD9D2DDC473FA4F58334F98 Authority key identifier: C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/tmpjXkdMeErzXzSF-Knv6lEK4MM.roa Signing time: Thu 01 Jan 2026 00:18:06 +0000 ROA not before: Thu 01 Jan 2026 00:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30782 IP address blocks: 130.255.152.0/21 maxlen: 21 185.91.212.0/22 maxlen: 22 195.234.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:3c:3f:1b:d9:d2:dd:c4:73:fa:4f:58:33:4f:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7983b3a9758fcbe78733d9155aed266c882a23c Validity Not Before: Jan 1 00:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b66a635e474c784af35f3485f8a9efea510ae0c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bf:e5:bb:7b:6f:d9:bf:d9:4b:43:ca:dd:55: c3:9b:f6:20:22:c1:ac:51:be:1f:83:0e:f0:74:e4: e8:92:ea:ab:b3:47:dc:cf:34:1f:d5:1f:9f:98:c4: c2:d5:7f:24:b5:48:e2:40:36:3d:36:04:8b:69:4f: be:14:f9:c3:46:3e:13:da:e4:9d:28:ff:fc:43:be: 5a:38:5c:fe:6a:19:45:e9:f0:fd:e9:3b:62:83:9c: c1:b3:1b:dc:4b:54:f1:24:88:5d:f4:4f:53:da:d9: df:8a:c4:94:26:ad:b3:b0:50:3b:50:e9:69:db:ac: 9b:76:32:8d:8b:a0:8c:0f:c0:66:b4:9a:77:e7:9b: b4:47:7e:c3:5e:17:c9:32:0b:0a:75:f8:fb:46:c7: 9c:f1:8e:2f:d0:94:35:7a:9e:6f:9e:bc:9a:57:d9: 4f:79:95:3e:90:91:ef:10:39:78:4e:1a:ea:8f:de: d1:d1:c2:59:77:bb:35:0c:3f:77:c5:ce:b0:02:91: ae:98:a3:4a:ad:e4:d3:8d:c0:6d:aa:87:c9:b0:2b: 1b:39:02:5b:7b:36:d8:3d:f4:91:4f:a5:76:40:be: 3b:10:24:f7:42:54:df:a9:6c:8c:b5:b6:f8:58:00: 31:47:d6:65:34:33:23:f6:c6:ce:07:d1:d7:89:e0: 13:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:6A:63:5E:47:4C:78:4A:F3:5F:34:85:F8:A9:EF:EA:51:0A:E0:C3 X509v3 Authority Key Identifier: keyid:C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/tmpjXkdMeErzXzSF-Knv6lEK4MM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.255.152.0/21 185.91.212.0/22 195.234.20.0/23 Signature Algorithm: sha256WithRSAEncryption 5c:93:fa:48:bb:44:99:eb:e9:06:7d:8f:ad:4e:a7:6d:9d:83: 3f:58:95:f5:a1:6d:94:d1:2a:38:f2:89:42:70:00:71:5a:39: ab:54:b1:b1:94:35:20:fa:2d:55:de:cd:05:3d:b4:cd:7e:a7: 98:f4:4b:40:dd:77:9b:e3:ee:df:da:32:a1:96:b5:41:5a:c4: a6:6b:d3:5d:8d:d9:bf:4b:5c:95:36:4d:b5:b7:5b:96:1a:30: 60:28:55:68:ac:9b:52:1e:c3:d1:ca:59:06:f8:a0:51:43:09: 5c:d7:72:6c:5d:42:dd:f3:02:11:df:cb:57:6a:39:37:33:65: df:ed:f8:e1:b1:2c:3c:bf:68:ec:00:15:b0:1c:35:9c:e9:22: b7:d6:42:43:6f:ad:42:9a:55:22:1c:b7:f4:1b:a9:00:e8:4c: 80:38:cf:60:2c:2e:90:d6:23:9e:1f:52:f6:40:a1:3e:3a:98: 76:cd:31:65:00:68:10:99:ab:84:37:49:59:1e:37:ed:ab:ff: 9a:ec:c0:07:88:ae:82:bd:1b:1e:5b:22:b2:f9:52:a7:a8:5b: f4:bc:91:15:db:42:a4:fa:06:d1:f9:cc:64:8c:ab:fa:79:15: e7:13:cc:f4:b4:c4:30:e8:e5:a6:53:f2:f2:58:ec:53:44:da: fa:06:80:f1 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt26zw/G9nS3cRz+k9YM0+YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3OTgzYjNhOTc1OGZjYmU3ODczM2Q5MTU1YWVkMjY2Yzg4 MmEyM2MwHhcNMjYwMTAxMDAxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjZhNjM1ZTQ3NGM3ODRhZjM1ZjM0ODVmOGE5ZWZlYTUxMGFlMGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvb/lu3tv2b/ZS0PK3VXDm/YgIsGs Ub4fgw7wdOTokuqrs0fczzQf1R+fmMTC1X8ktUjiQDY9NgSLaU++FPnDRj4T2uSd KP/8Q75aOFz+ahlF6fD96Ttig5zBsxvcS1TxJIhd9E9T2tnfisSUJq2zsFA7UOlp 26ybdjKNi6CMD8BmtJp355u0R37DXhfJMgsKdfj7Rsec8Y4v0JQ1ep5vnryaV9lP eZU+kJHvEDl4Thrqj97R0cJZd7s1DD93xc6wApGumKNKreTTjcBtqofJsCsbOQJb ezbYPfSRT6V2QL47ECT3QlTfqWyMtbb4WAAxR9ZlNDMj9sbOB9HXieATbQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLZqY15HTHhK8180hfip7+pRCuDDMB8GA1UdIwQY MBaAFMeYOzqXWPy+eHM9kVWu0mbIgqI8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDVnN09wZFlfTDU0Y3oyUlZhN1Nac2lDb2p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84MTFkMTYtYjUxMy00N2VkLTllNzEt MjM4NDA1ZjJjZGU5LzEvdG1walhrZE1lRXJ6WHpTRi1LbnY2bEVLNE1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC84MTFkMTYtYjUxMy00N2VkLTllNzEtMjM4NDA1ZjJjZGU5 LzEveDVnN09wZFlfTDU0Y3oyUlZhN1Nac2lDb2p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDgv+YAwQC uVvUAwQBw+oUMA0GCSqGSIb3DQEBCwUAA4IBAQBck/pIu0SZ6+kGfY+tTqdtnYM/ WJX1oW2U0So48olCcABxWjmrVLGxlDUg+i1V3s0FPbTNfqeY9EtA3Xeb4+7f2jKh lrVBWsSma9Ndjdm/S1yVNk21t1uWGjBgKFVorJtSHsPRylkG+KBRQwlc13JsXULd 8wIR38tXajk3M2Xf7fjhsSw8v2jsABWwHDWc6SK31kJDb61CmlUiHLf0G6kA6EyA OM9gLC6Q1iOeH1L2QKE+Oph2zTFlAGgQmauEN0lZHjftq/+a7MAHiK6CvRseWyKy +VKnqFv0vJEV20Kk+gbR+cxkjKv6eRXnE8z0tMQw6OWmU/LyWOxTRNr6BoDx -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:05 2026 by rpki-client