This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/TzNDKIgnXyebc98shaF_lgOCi6s.roa File: TzNDKIgnXyebc98shaF_lgOCi6s.roa (raw, json) Hash identifier: xrJNMYFkTQ1dfaAgHt3UvZimA9Jq6mAdGz+xSeudcNA= Subject key identifier: 4F:33:43:28:88:27:5F:27:9B:73:DF:2C:85:A1:7F:96:03:82:8B:AB Certificate issuer: /CN=611bb6e31eee3b72ade7b1a590e2e62aaf5c3eb0 Certificate serial: 019B78A2F95FA90370E926C70583828B4AD9 Authority key identifier: 61:1B:B6:E3:1E:EE:3B:72:AD:E7:B1:A5:90:E2:E6:2A:AF:5C:3E:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRu24x7uO3Kt57GlkOLmKq9cPrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/TzNDKIgnXyebc98shaF_lgOCi6s.roa Signing time: Thu 01 Jan 2026 08:18:25 +0000 ROA not before: Thu 01 Jan 2026 08:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30781 IP address blocks: 91.212.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.crl rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.mft rsync://rpki.ripe.net/repository/DEFAULT/YRu24x7uO3Kt57GlkOLmKq9cPrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:f9:5f:a9:03:70:e9:26:c7:05:83:82:8b:4a:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=611bb6e31eee3b72ade7b1a590e2e62aaf5c3eb0 Validity Not Before: Jan 1 08:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f33432888275f279b73df2c85a17f9603828bab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:52:80:c8:19:db:35:83:db:a0:d9:12:14:c4: e8:16:4e:40:74:e2:7c:ec:f8:04:3b:a7:09:37:fe: 93:3f:9a:78:a7:8a:9e:1f:59:b8:8f:25:25:c9:22: 93:29:2e:f5:98:5e:ca:98:35:68:39:af:51:ce:38: 1b:e8:88:0b:a2:ee:fd:11:f2:45:be:2f:c6:97:8a: 85:db:71:b1:b2:76:0b:7a:2a:5f:e5:56:30:94:44: 3d:af:a8:88:ac:7c:b3:9a:4b:ba:a2:d4:13:7e:5b: 1f:38:c6:f6:87:c8:d2:31:be:c9:fe:5a:76:2d:9c: 20:43:86:36:44:f4:33:a5:26:a6:23:ea:2b:6b:01: f5:9b:12:ae:d0:c0:b7:29:63:4a:29:c3:c4:1d:13: fb:1d:cb:04:d2:9c:0f:c3:1e:c9:13:41:0c:b9:88: f6:26:71:c0:cd:9a:3c:b7:49:fb:29:19:4d:b9:96: 0c:e3:4b:79:bf:18:fc:26:cc:d2:57:a1:65:06:a8: e7:27:86:c6:b5:c9:fb:0b:c2:b1:8a:6f:37:9c:a0: 67:0d:d6:0b:ba:17:c5:4f:83:a9:fc:21:5c:40:c3: 28:2b:b4:04:2d:3f:2e:48:35:23:1c:5b:c8:ab:50: 5c:de:d6:dc:f1:ab:4b:b1:c3:a3:0d:9c:2e:9f:c2: 8a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:33:43:28:88:27:5F:27:9B:73:DF:2C:85:A1:7F:96:03:82:8B:AB X509v3 Authority Key Identifier: keyid:61:1B:B6:E3:1E:EE:3B:72:AD:E7:B1:A5:90:E2:E6:2A:AF:5C:3E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRu24x7uO3Kt57GlkOLmKq9cPrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/TzNDKIgnXyebc98shaF_lgOCi6s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.238.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:35:cc:61:eb:05:67:7e:45:4a:bb:ca:fe:28:83:5c:4a:a8: 49:99:c0:5c:98:e2:ec:26:8c:59:2e:d3:1c:a0:ab:84:0e:28: 70:42:20:aa:76:72:f7:d2:ed:22:81:c4:a2:56:45:e2:e9:89: 39:5b:38:49:33:6e:a9:38:82:0c:a2:85:03:ad:96:8b:8e:07: f4:4d:98:22:a0:e4:7e:24:28:73:ee:da:ff:6d:06:55:65:44: f3:5b:95:36:5e:2d:69:4c:7e:7d:7b:7c:ae:4f:9b:f7:a3:1f: 9b:a6:8f:78:c4:2d:2e:bd:f5:f7:6a:50:07:07:f3:72:ef:33: fc:d6:8d:31:2a:13:4d:39:be:38:ab:8e:83:50:58:a1:56:5e: 9b:8a:71:0c:8c:6e:65:a6:71:8a:91:ff:e4:02:5a:50:f6:d0: f5:cf:1b:29:88:4e:6b:22:72:e3:32:3a:4f:2d:b2:35:08:7b: fc:31:59:72:25:d0:6b:5e:56:01:0b:04:f9:ef:ac:78:db:32: 31:33:04:fe:4c:f0:00:7b:f0:f4:65:8a:ed:32:ff:54:e4:35: df:1c:f6:d8:b9:48:6f:61:b3:fb:b6:35:10:25:28:ab:37:dd: 72:d4:f7:6e:30:87:86:e8:ea:c0:61:ec:77:81:1b:2c:f1:05: 94:9d:0d:95 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ovlfqQNw6SbHBYOCi0rZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxMWJiNmUzMWVlZTNiNzJhZGU3YjFhNTkwZTJlNjJhYWY1 YzNlYjAwHhcNMjYwMTAxMDgxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjMzNDMyODg4Mjc1ZjI3OWI3M2RmMmM4NWExN2Y5NjAzODI4YmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1KAyBnbNYPboNkSFMToFk5AdOJ8 7PgEO6cJN/6TP5p4p4qeH1m4jyUlySKTKS71mF7KmDVoOa9Rzjgb6IgLou79EfJF vi/Gl4qF23GxsnYLeipf5VYwlEQ9r6iIrHyzmku6otQTflsfOMb2h8jSMb7J/lp2 LZwgQ4Y2RPQzpSamI+orawH1mxKu0MC3KWNKKcPEHRP7HcsE0pwPwx7JE0EMuYj2 JnHAzZo8t0n7KRlNuZYM40t5vxj8JszSV6FlBqjnJ4bGtcn7C8Kxim83nKBnDdYL uhfFT4Op/CFcQMMoK7QELT8uSDUjHFvIq1Bc3tbc8atLscOjDZwun8KKbwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE8zQyiIJ18nm3PfLIWhf5YDgourMB8GA1UdIwQY MBaAFGEbtuMe7jtyreexpZDi5iqvXD6wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVJ1MjR4N3VPM0t0NTdHbGtPTG1LcTljUHJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9kNjRiODMtYmI4Ny00OTU0LTg5NDMt NjNlZWI5ODFhM2JkLzEvVHpOREtJZ25YeWViYzk4c2hhRl9sZ09DaTZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9kNjRiODMtYmI4Ny00OTU0LTg5NDMtNjNlZWI5ODFhM2Jk LzEvWVJ1MjR4N3VPM0t0NTdHbGtPTG1LcTljUHJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9TuMA0G CSqGSIb3DQEBCwUAA4IBAQAbNcxh6wVnfkVKu8r+KINcSqhJmcBcmOLsJoxZLtMc oKuEDihwQiCqdnL30u0igcSiVkXi6Yk5WzhJM26pOIIMooUDrZaLjgf0TZgioOR+ JChz7tr/bQZVZUTzW5U2Xi1pTH59e3yuT5v3ox+bpo94xC0uvfX3alAHB/Ny7zP8 1o0xKhNNOb44q46DUFihVl6binEMjG5lpnGKkf/kAlpQ9tD1zxspiE5rInLjMjpP LbI1CHv8MVlyJdBrXlYBCwT576x42zIxMwT+TPAAe/D0ZYrtMv9U5DXfHPbYuUhv YbP7tjUQJSirN91y1PduMIeG6OrAYex3gRss8QWUnQ2V -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:29 2026 by rpki-client