This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/T4jsL7kwRbLlNaXve_3W_32hFoM.roa File: T4jsL7kwRbLlNaXve_3W_32hFoM.roa (raw, json) Hash identifier: FJOo/HtzqljN7o0xBJy+iby2rmXafKenU6CHkQkrrDo= Subject key identifier: 4F:88:EC:2F:B9:30:45:B2:E5:35:A5:EF:7B:FD:D6:FF:7D:A1:16:83 Certificate issuer: /CN=c15ee2d909c9b75c6d2084e3379bf03274b776f4 Certificate serial: 019B7FF274BB662F0D799FD512A0DB405E6A Authority key identifier: C1:5E:E2:D9:09:C9:B7:5C:6D:20:84:E3:37:9B:F0:32:74:B7:76:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wV7i2QnJt1xtIITjN5vwMnS3dvQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/T4jsL7kwRbLlNaXve_3W_32hFoM.roa Signing time: Fri 02 Jan 2026 18:22:34 +0000 ROA not before: Fri 02 Jan 2026 18:22:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3303 IP address blocks: 193.135.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.crl rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft rsync://rpki.ripe.net/repository/DEFAULT/wV7i2QnJt1xtIITjN5vwMnS3dvQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:74:bb:66:2f:0d:79:9f:d5:12:a0:db:40:5e:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c15ee2d909c9b75c6d2084e3379bf03274b776f4 Validity Not Before: Jan 2 18:22:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f88ec2fb93045b2e535a5ef7bfdd6ff7da11683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:5c:a0:5b:c3:32:94:d3:26:e2:f9:c4:9c:92: f8:e6:87:23:e4:82:78:ea:50:60:6a:fb:fb:b4:5a: 2e:92:f5:1b:26:65:3b:3c:af:44:81:38:06:e1:16: 95:ec:39:0b:b6:9c:2b:3b:2c:45:63:8b:a5:9a:d9: c2:fb:f2:e9:37:78:1d:85:19:ed:26:04:dd:c4:5d: 41:2c:ee:6d:cf:7c:2c:e4:b7:6f:a2:91:25:b9:a6: 10:af:80:3d:75:ff:5a:f2:6d:2f:74:c6:d5:7c:c5: a0:ee:fa:db:57:f3:1f:99:b4:2f:2a:b5:38:9d:92: c2:e3:36:44:39:1d:f4:ab:78:f4:56:f0:a6:c1:9b: 51:31:e1:ba:ed:90:cc:fb:59:87:6d:6f:5c:33:16: 2e:18:4a:65:44:77:d6:85:5f:d1:8d:ca:5c:4f:ec: 79:78:98:6b:d6:f9:2c:a5:7d:9d:5e:f7:3f:b8:6a: 63:a7:2f:95:98:e0:47:17:86:64:97:62:9c:42:82: 9f:68:47:c1:99:c7:94:1c:99:06:b5:33:b2:6b:48: c4:f5:67:c2:a0:33:ce:af:72:bf:de:68:e6:e9:30: fe:6f:a7:04:f3:31:1b:1b:cb:5c:9b:24:fd:0c:4a: 53:d9:e1:7d:be:6b:71:ef:d2:89:15:ec:ae:de:98: ad:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:88:EC:2F:B9:30:45:B2:E5:35:A5:EF:7B:FD:D6:FF:7D:A1:16:83 X509v3 Authority Key Identifier: keyid:C1:5E:E2:D9:09:C9:B7:5C:6D:20:84:E3:37:9B:F0:32:74:B7:76:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV7i2QnJt1xtIITjN5vwMnS3dvQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/T4jsL7kwRbLlNaXve_3W_32hFoM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.135.216.0/23 Signature Algorithm: sha256WithRSAEncryption 01:e0:70:09:a5:f1:f5:15:72:b8:a7:fd:be:63:6f:9e:c3:36: 06:15:55:36:3b:41:7a:0c:56:cf:61:e1:4d:83:fd:47:b6:a5: 6b:87:56:49:f8:48:8b:ff:62:48:4d:0b:a5:cc:e7:78:bf:ce: 83:b0:04:18:da:52:bf:3a:03:c3:30:d5:f5:71:ca:5a:7b:b3: 64:e4:46:55:7b:ff:bd:68:03:6f:fb:7a:1a:c7:10:03:c6:5b: 5d:74:22:a8:ce:20:0b:ff:b2:ed:52:ca:03:20:8c:fe:7b:86: 3c:82:aa:e2:db:83:e2:f0:62:bb:51:11:0b:af:f6:a6:05:17: 93:a9:9c:0d:f4:57:93:19:b8:f9:ab:b3:1b:b4:b1:03:c2:15: 72:f3:3a:b6:73:43:4b:a2:3c:e0:b4:68:c5:a4:0e:54:e4:85: 5b:33:12:ac:bc:f7:df:53:6e:81:ac:35:b9:23:03:7d:f8:d0: 22:fc:0d:c8:0c:12:c6:fb:a8:c6:e2:1e:11:82:8d:3a:4a:0a: c8:33:14:a8:db:7e:3a:03:ba:53:8e:29:58:45:22:ea:74:9a: c8:d8:e9:05:a3:5a:b9:fd:f4:d7:b7:4d:74:65:8d:5c:c0:1d: f0:d9:c9:bd:c3:62:06:2c:7b:24:2b:fc:4b:8d:72:51:74:e9: aa:be:f2:d3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8nS7Zi8NeZ/VEqDbQF5qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxNWVlMmQ5MDljOWI3NWM2ZDIwODRlMzM3OWJmMDMyNzRi Nzc2ZjQwHhcNMjYwMTAyMTgyMjM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Zjg4ZWMyZmI5MzA0NWIyZTUzNWE1ZWY3YmZkZDZmZjdkYTExNjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7VygW8MylNMm4vnEnJL45ocj5IJ4 6lBgavv7tFoukvUbJmU7PK9EgTgG4RaV7DkLtpwrOyxFY4ulmtnC+/LpN3gdhRnt JgTdxF1BLO5tz3ws5LdvopEluaYQr4A9df9a8m0vdMbVfMWg7vrbV/MfmbQvKrU4 nZLC4zZEOR30q3j0VvCmwZtRMeG67ZDM+1mHbW9cMxYuGEplRHfWhV/RjcpcT+x5 eJhr1vkspX2dXvc/uGpjpy+VmOBHF4Zkl2KcQoKfaEfBmceUHJkGtTOya0jE9WfC oDPOr3K/3mjm6TD+b6cE8zEbG8tcmyT9DEpT2eF9vmtx79KJFeyu3pitGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE+I7C+5MEWy5TWl73v91v99oRaDMB8GA1UdIwQY MBaAFMFe4tkJybdcbSCE4zeb8DJ0t3b0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1Y3aTJRbkp0MXh0SUlUak41dndNblMzZHZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9hNzY1ZGEtNGFhMS00N2EyLThiNWQt ZWJlNDM5MDVlYjgxLzEvVDRqc0w3a3dSYkxsTmFYdmVfM1dfMzJoRm9NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9hNzY1ZGEtNGFhMS00N2EyLThiNWQtZWJlNDM5MDVlYjgx LzEvd1Y3aTJRbkp0MXh0SUlUak41dndNblMzZHZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwYfYMA0G CSqGSIb3DQEBCwUAA4IBAQAB4HAJpfH1FXK4p/2+Y2+ewzYGFVU2O0F6DFbPYeFN g/1HtqVrh1ZJ+EiL/2JITQulzOd4v86DsAQY2lK/OgPDMNX1ccpae7Nk5EZVe/+9 aANv+3oaxxADxltddCKoziAL/7LtUsoDIIz+e4Y8gqri24Pi8GK7URELr/amBReT qZwN9FeTGbj5q7MbtLEDwhVy8zq2c0NLojzgtGjFpA5U5IVbMxKsvPffU26BrDW5 IwN9+NAi/A3IDBLG+6jG4h4Rgo06SgrIMxSo2346A7pTjilYRSLqdJrI2OkFo1q5 /fTXt010ZY1cwB3w2cm9w2IGLHskK/xLjXJRdOmqvvLT -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:40 2026 by rpki-client