This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/TJn7hrwQDusGI6b-JvzCy0ryuuI.roa File: TJn7hrwQDusGI6b-JvzCy0ryuuI.roa (raw, json) Hash identifier: jB76SwGUuXPBEx6T4Yw/Gggaft9shy0ZMidb4G0i9nM= Subject key identifier: 4C:99:FB:86:BC:10:0E:EB:06:23:A6:FE:26:FC:C2:CB:4A:F2:BA:E2 Certificate issuer: /CN=fb987244611b5230536744b6a89f044f32f462ea Certificate serial: 019B7C129BFEC162FF40F21B0D0F4F2C4EEC Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/TJn7hrwQDusGI6b-JvzCy0ryuuI.roa Signing time: Fri 02 Jan 2026 00:19:12 +0000 ROA not before: Fri 02 Jan 2026 00:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5522 IP address blocks: 85.206.40.0/22 maxlen: 24 2a00:1eb8:e006::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:9b:fe:c1:62:ff:40:f2:1b:0d:0f:4f:2c:4e:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea Validity Not Before: Jan 2 00:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c99fb86bc100eeb0623a6fe26fcc2cb4af2bae2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0a:22:94:2f:e0:cb:4a:48:1b:71:66:14:46: 80:72:c7:7e:65:53:0d:56:0b:06:d5:c6:c7:46:42: 5d:13:b0:2f:69:02:77:03:c4:3c:7a:d5:07:c8:93: b4:73:70:40:a9:4d:fb:22:0f:01:43:fc:b1:fa:88: 08:7a:43:78:44:ff:f2:24:ad:b0:84:4d:0a:ff:f2: e3:c2:d9:39:4d:91:6e:b4:ca:76:95:74:45:6c:9c: 2b:b6:7a:dc:ea:fe:fc:e0:97:bb:0a:3c:12:bf:1b: df:35:7a:ad:56:a7:67:7a:c8:ce:3e:d0:1c:bc:9d: 24:74:4d:e9:39:a8:49:34:16:7b:c0:68:55:cf:0d: 2d:9a:9c:3c:d3:96:55:e4:5b:9a:d0:80:5f:83:cf: 54:bb:93:81:cc:ac:d7:dc:fe:c9:12:d3:4d:13:75: 2e:df:01:f4:c4:d8:dc:23:82:7c:2e:d9:60:b8:bc: 86:7f:3a:e0:b6:c7:66:a4:ca:92:31:a0:d2:25:53: 41:ec:76:71:08:19:78:ec:f9:9c:5f:d1:40:eb:98: a4:3f:22:56:6b:91:64:6d:99:50:9c:21:89:8d:e6: 2a:22:2d:97:e6:66:da:4b:84:c7:e8:be:1a:91:4a: 5d:b2:99:a7:74:68:ca:b7:0a:24:b4:48:22:23:06: 33:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:99:FB:86:BC:10:0E:EB:06:23:A6:FE:26:FC:C2:CB:4A:F2:BA:E2 X509v3 Authority Key Identifier: keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/TJn7hrwQDusGI6b-JvzCy0ryuuI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.206.40.0/22 IPv6: 2a00:1eb8:e006::/48 Signature Algorithm: sha256WithRSAEncryption 58:be:9e:8d:9e:89:fc:82:bb:bf:a8:92:44:ec:29:02:14:ee: d7:8a:e8:5a:8c:ba:1a:7b:00:de:66:ae:6a:81:e7:b4:be:33: 0f:89:bd:6d:dd:7b:2f:96:af:2a:3d:f4:65:54:a5:93:05:f7: 2f:d8:79:65:02:12:b9:56:96:2d:be:b8:b3:bf:40:56:89:e2: e8:27:c3:1c:53:77:7e:23:ea:b3:d6:ff:49:23:1f:e1:bf:ad: d7:4e:33:de:b9:a7:28:33:06:fb:93:35:54:fe:fd:27:74:84: 10:74:5e:ab:11:70:d7:74:7d:fe:a4:de:aa:a0:39:ef:44:e2: c8:97:98:3c:d1:c8:61:1c:a8:65:6a:d8:c1:e7:b8:a6:2d:73: bc:60:6f:b6:4a:1a:f6:fd:69:f8:77:f1:58:4a:4c:fa:5b:8f: 6b:b0:8f:50:31:06:20:80:68:62:bb:b2:cc:56:06:07:75:37: a3:a7:82:e0:f4:51:2c:d8:97:54:ee:eb:30:8a:65:3f:5a:d7: 3d:b2:ea:cb:f4:16:fa:3b:b7:5a:47:79:b6:5b:e4:a6:c3:81: 55:04:85:f0:86:ab:1a:3b:fe:85:5b:a5:bf:8d:96:84:9d:6d: a4:6c:10:df:96:3c:ff:e7:95:65:26:9e:f8:93:26:9f:67:62: bf:1c:14:a1 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgISAZt8Epv+wWL/QPIbDQ9PLE7sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiOTg3MjQ0NjExYjUyMzA1MzY3NDRiNmE4OWYwNDRmMzJm NDYyZWEwHhcNMjYwMTAyMDAxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Yzk5ZmI4NmJjMTAwZWViMDYyM2E2ZmUyNmZjYzJjYjRhZjJiYWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgoilC/gy0pIG3FmFEaAcsd+ZVMN VgsG1cbHRkJdE7AvaQJ3A8Q8etUHyJO0c3BAqU37Ig8BQ/yx+ogIekN4RP/yJK2w hE0K//Ljwtk5TZFutMp2lXRFbJwrtnrc6v784Je7CjwSvxvfNXqtVqdnesjOPtAc vJ0kdE3pOahJNBZ7wGhVzw0tmpw805ZV5Fua0IBfg89Uu5OBzKzX3P7JEtNNE3Uu 3wH0xNjcI4J8LtlguLyGfzrgtsdmpMqSMaDSJVNB7HZxCBl47PmcX9FA65ikPyJW a5FkbZlQnCGJjeYqIi2X5mbaS4TH6L4akUpdspmndGjKtwoktEgiIwYz8wIDAQAB o4ICHDCCAhgwHQYDVR0OBBYEFEyZ+4a8EA7rBiOm/ib8wstK8rriMB8GA1UdIwQY MBaAFPuYckRhG1IwU2dEtqifBE8y9GLqMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS01aHlSR0ViVWpCVFowUzJxSjhFVHpMMFl1by5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvMzE5ZDdjLTdlNzYtNDMwOC1iYzAw LWJlNTgzMmQ1ZjdhYS8xL1RKbjdocndRRHVzR0k2Yi1KdnpDeTByeXV1SS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNDQvMzE5ZDdjLTdlNzYtNDMwOC1iYzAwLWJlNTgzMmQ1Zjdh YS8xLzEtNWh5UkdFYlVqQlRaMFMycUo4RVR6TDBZdW8uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAJVzigw DwQCAAIwCQMHACoAHrjgBjANBgkqhkiG9w0BAQsFAAOCAQEAWL6ejZ6J/IK7v6iS ROwpAhTu14roWoy6GnsA3mauaoHntL4zD4m9bd17L5avKj30ZVSlkwX3L9h5ZQIS uVaWLb64s79AVoni6CfDHFN3fiPqs9b/SSMf4b+t104z3rmnKDMG+5M1VP79J3SE EHReqxFw13R9/qTeqqA570TiyJeYPNHIYRyoZWrYwee4pi1zvGBvtkoa9v1p+Hfx WEpM+luPa7CPUDEGIIBoYruyzFYGB3U3o6eC4PRRLNiXVO7rMIplP1rXPbLqy/QW +ju3Wkd5tlvkpsOBVQSF8IarGjv+hVulv42WhJ1tpGwQ35Y8/+eVZSae+JMmn2di vxwUoQ== -----END CERTIFICATE-----Generated at Sun Jan 25 18:08:25 2026 by rpki-client