This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/tFL9wVh4WkSXocKu5wD0zL_9_m8.roa File: tFL9wVh4WkSXocKu5wD0zL_9_m8.roa (raw, json) Hash identifier: 6EEVwO12s7jfNRlLHqcR0cD6u3HIV2GLT5UfsJtR9iA= Subject key identifier: B4:52:FD:C1:58:78:5A:44:97:A1:C2:AE:E7:00:F4:CC:BF:FD:FE:6F Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214 Certificate serial: 019B7C8060E37F95C6D8B9E057D7AF2DF29E Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/tFL9wVh4WkSXocKu5wD0zL_9_m8.roa Signing time: Fri 02 Jan 2026 02:19:06 +0000 ROA not before: Fri 02 Jan 2026 02:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60993 IP address blocks: 128.0.53.0/24 maxlen: 24 128.0.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:60:e3:7f:95:c6:d8:b9:e0:57:d7:af:2d:f2:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214 Validity Not Before: Jan 2 02:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b452fdc158785a4497a1c2aee700f4ccbffdfe6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:73:cf:86:95:a7:c7:3a:a5:ce:f0:78:01:fd: 1c:08:76:85:c4:c1:70:f8:48:97:a3:fe:f2:4a:46: 2d:33:f8:17:90:cf:32:60:0b:38:ce:0c:ef:29:f4: 50:0f:f9:ee:54:27:87:15:df:3e:4b:34:4f:41:1d: 53:ff:90:d7:e9:93:dc:16:09:0e:68:3f:37:da:af: a1:d6:8a:0a:44:74:57:d6:4e:15:1f:a7:62:51:9b: 58:61:35:89:35:c8:b8:c1:db:4d:6f:55:32:0c:ec: 93:87:f5:c5:e4:4e:06:1b:35:90:6d:26:7f:49:52: 04:5a:02:80:96:16:59:f0:95:77:41:a6:8d:0e:c1: a9:4e:3c:b3:e7:92:f3:9b:cf:7b:d3:ed:3b:27:07: a2:02:d3:4d:7d:e0:72:7e:bc:c9:8b:13:0e:7c:2d: b4:01:63:1e:3e:cd:d4:1e:1c:79:15:93:80:12:3b: c8:ff:ea:02:52:d8:05:c2:ba:2e:90:60:e9:e3:ab: c0:9c:b4:da:b6:d2:2c:92:36:cf:94:88:56:78:72: ad:4f:e7:25:c2:40:d4:2e:35:8e:2d:4f:ed:58:38: 1e:96:52:53:e7:d8:d4:28:7b:f6:1d:f6:5d:e6:20: c8:63:99:cb:56:41:3e:a1:fb:21:91:21:57:eb:0a: 36:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:52:FD:C1:58:78:5A:44:97:A1:C2:AE:E7:00:F4:CC:BF:FD:FE:6F X509v3 Authority Key Identifier: keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/tFL9wVh4WkSXocKu5wD0zL_9_m8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.0.53.0/24 128.0.57.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:86:6c:d8:09:7d:23:93:df:a2:86:f9:6a:2c:7b:5a:9f:f5: dd:ae:5b:15:91:fa:d4:67:c0:1b:32:2d:f3:f1:a7:a4:1d:46: f1:65:bd:79:00:6e:7e:e6:7a:8f:36:3c:6b:b2:b2:5d:8f:5e: ff:a2:81:10:5a:e0:6d:4b:71:c2:e5:88:df:52:3d:47:40:73: b1:73:ad:f6:d0:85:15:c5:e5:d6:48:42:00:20:b5:22:b1:6d: 14:32:3b:c6:c2:22:93:8e:c3:fb:28:42:c3:07:16:3d:ea:49: 4f:04:0c:59:7d:99:59:1c:55:40:66:a9:6b:32:fd:c3:21:ec: e3:0c:be:13:0c:e1:16:1b:1f:90:d8:8d:19:b1:d5:98:83:a2: 96:84:a2:fc:9e:6b:18:39:77:40:1b:a7:12:ef:41:49:84:26: 6f:d1:2e:50:a8:2e:53:0d:5b:f3:bb:47:39:f2:05:e4:25:ac: 99:35:68:53:6c:02:15:3f:3e:5a:ac:76:13:22:45:c5:08:1f: 5a:a6:e7:64:9a:02:72:64:35:f3:da:dc:0e:83:ce:36:d4:60: 88:86:53:71:48:be:1c:9f:6c:fe:39:d8:f0:7f:c2:55:00:18: b5:74:57:65:49:f9:bc:4b:6a:46:d5:03:d6:9f:af:b6:3e:d6: d7:53:16:41 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gGDjf5XG2LngV9evLfKeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiOGM2YzU4YjYwN2ZmMjNhZTcxNzVhNjE2ODJjNzU0ODBm MWUyMTQwHhcNMjYwMTAyMDIxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDUyZmRjMTU4Nzg1YTQ0OTdhMWMyYWVlNzAwZjRjY2JmZmRmZTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunPPhpWnxzqlzvB4Af0cCHaFxMFw +EiXo/7ySkYtM/gXkM8yYAs4zgzvKfRQD/nuVCeHFd8+SzRPQR1T/5DX6ZPcFgkO aD832q+h1ooKRHRX1k4VH6diUZtYYTWJNci4wdtNb1UyDOyTh/XF5E4GGzWQbSZ/ SVIEWgKAlhZZ8JV3QaaNDsGpTjyz55Lzm8970+07JweiAtNNfeByfrzJixMOfC20 AWMePs3UHhx5FZOAEjvI/+oCUtgFwroukGDp46vAnLTattIskjbPlIhWeHKtT+cl wkDULjWOLU/tWDgellJT59jUKHv2HfZd5iDIY5nLVkE+ofshkSFX6wo2VQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLRS/cFYeFpEl6HCrucA9My//f5vMB8GA1UdIwQY MBaAFKuMbFi2B/8jrnF1phaCx1SA8eIUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2Mt ODhhM2M0MWZhZWUyLzEvdEZMOXdWaDRXa1NYb2NLdTV3RDB6TF85X204LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2MtODhhM2M0MWZhZWUy LzEvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAgAA1AwQA gAA5MA0GCSqGSIb3DQEBCwUAA4IBAQA8hmzYCX0jk9+ihvlqLHtan/XdrlsVkfrU Z8AbMi3z8aekHUbxZb15AG5+5nqPNjxrsrJdj17/ooEQWuBtS3HC5YjfUj1HQHOx c6320IUVxeXWSEIAILUisW0UMjvGwiKTjsP7KELDBxY96klPBAxZfZlZHFVAZqlr Mv3DIezjDL4TDOEWGx+Q2I0ZsdWYg6KWhKL8nmsYOXdAG6cS70FJhCZv0S5QqC5T DVvzu0c58gXkJayZNWhTbAIVPz5arHYTIkXFCB9apudkmgJyZDXz2twOg8421GCI hlNxSL4cn2z+Odjwf8JVABi1dFdlSfm8S2pG1QPWn6+2PtbXUxZB -----END CERTIFICATE-----Generated at Mon Jan 26 00:13:44 2026 by rpki-client