This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/T4PSpNaqkAOQJjuBdAFdx3zKgyY.roa File: T4PSpNaqkAOQJjuBdAFdx3zKgyY.roa (raw, json) Hash identifier: sU9bxlF1T+hrGzv9LaagfpQyLm85yMt1O7DFm4yEcJY= Subject key identifier: 4F:83:D2:A4:D6:AA:90:03:90:26:3B:81:74:01:5D:C7:7C:CA:83:26 Certificate issuer: /CN=0072c08f74d2a842a71f23ab61499b52694fc7a5 Certificate serial: 019B7CEE5E9F17C466DAFEF8255168BDCFAD Authority key identifier: 00:72:C0:8F:74:D2:A8:42:A7:1F:23:AB:61:49:9B:52:69:4F:C7:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHLAj3TSqEKnHyOrYUmbUmlPx6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/T4PSpNaqkAOQJjuBdAFdx3zKgyY.roa Signing time: Fri 02 Jan 2026 04:19:15 +0000 ROA not before: Fri 02 Jan 2026 04:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31027 IP address blocks: 194.50.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/AHLAj3TSqEKnHyOrYUmbUmlPx6U.crl rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/AHLAj3TSqEKnHyOrYUmbUmlPx6U.mft rsync://rpki.ripe.net/repository/DEFAULT/AHLAj3TSqEKnHyOrYUmbUmlPx6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:5e:9f:17:c4:66:da:fe:f8:25:51:68:bd:cf:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0072c08f74d2a842a71f23ab61499b52694fc7a5 Validity Not Before: Jan 2 04:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f83d2a4d6aa900390263b8174015dc77cca8326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:95:0d:4a:57:b3:96:7e:29:60:07:52:17:11: 30:73:24:06:91:b4:7d:b3:ff:c1:cf:34:e8:40:d2: 60:6e:7e:3d:5e:72:4d:fb:68:8c:43:73:15:8d:cd: 86:a5:bf:c2:d2:5c:9c:de:50:2b:ff:88:22:fc:9b: f3:1b:f4:c3:55:58:c3:2a:fa:c9:7b:21:05:ba:09: 42:e4:3a:b5:de:d5:0c:2a:95:53:92:bc:56:ec:c5: e4:f2:a4:cb:0b:31:36:d7:97:70:fc:4a:ee:5f:60: e1:98:c2:f6:93:a8:96:f9:c9:b7:4e:4a:a1:c0:48: 3f:ca:dc:10:fe:16:1f:89:cd:24:2e:85:97:a7:7e: 29:56:8f:c8:07:52:84:e6:df:98:6e:2e:60:3d:51: 62:0a:be:8d:a1:08:a9:04:bf:c4:5e:1c:f9:89:01: 57:0a:f4:ae:8b:c0:f5:b3:87:a0:06:6a:76:93:4b: 42:d6:7c:27:59:67:b7:c0:17:ec:6b:89:75:45:3d: 4a:4b:1e:09:87:1d:59:87:8e:cf:18:a3:59:2a:d9: 7c:88:d6:14:83:7d:87:e9:e8:4d:62:32:e7:83:1e: cd:27:73:00:d6:04:20:6b:17:51:45:99:38:4c:58: 7f:3d:f9:2d:c3:7f:bf:f0:1c:8c:f7:ec:57:0b:50: 98:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:83:D2:A4:D6:AA:90:03:90:26:3B:81:74:01:5D:C7:7C:CA:83:26 X509v3 Authority Key Identifier: keyid:00:72:C0:8F:74:D2:A8:42:A7:1F:23:AB:61:49:9B:52:69:4F:C7:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHLAj3TSqEKnHyOrYUmbUmlPx6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/T4PSpNaqkAOQJjuBdAFdx3zKgyY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/AHLAj3TSqEKnHyOrYUmbUmlPx6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.50.57.0/24 Signature Algorithm: sha256WithRSAEncryption 02:12:78:f1:ef:ce:c7:a2:9f:03:9f:0c:6f:6c:5a:31:9c:46: 43:eb:2b:83:0e:72:b6:4e:71:b4:de:79:91:b2:a7:30:16:fd: 65:f5:f9:c6:12:b0:66:43:b3:f6:04:f7:02:b1:0f:e9:a6:98: 9c:18:55:19:0f:cf:ea:c4:5c:0e:9a:6c:63:97:6d:f0:6c:86: 35:7d:d6:35:09:fe:73:aa:ad:4c:40:76:23:7e:ef:3a:6b:90: a2:be:eb:22:3d:51:c0:1f:a7:f2:12:8a:ed:6f:42:5d:c6:d8: e9:c7:9f:77:c8:92:fd:d7:5c:f1:37:16:5a:e4:a3:fe:4b:bf: 66:6c:bc:f1:c6:a8:1d:5d:1e:9c:3e:34:5c:6c:21:4e:04:a9: 04:49:0b:43:4c:9d:c7:35:a2:f2:27:1d:11:51:53:4c:cc:1c: 06:fb:78:d7:d5:f6:c4:aa:06:1a:f8:51:58:0a:6a:41:3e:05: ea:a0:74:e5:86:95:0f:f6:5e:c3:a0:a6:67:85:10:90:8c:79: 3f:ac:9b:1e:f3:0d:6b:3d:68:fa:5a:4a:29:59:e0:d3:62:f2: 38:04:5e:2c:62:7d:a6:f5:c6:c4:b0:5c:bc:7c:5a:84:b1:cc: ad:20:50:0a:df:35:fd:7b:22:a9:42:e5:31:19:54:23:89:bf: 87:51:34:8f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87l6fF8Rm2v74JVFovc+tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNzJjMDhmNzRkMmE4NDJhNzFmMjNhYjYxNDk5YjUyNjk0 ZmM3YTUwHhcNMjYwMTAyMDQxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjgzZDJhNGQ2YWE5MDAzOTAyNjNiODE3NDAxNWRjNzdjY2E4MzI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5UNSlezln4pYAdSFxEwcyQGkbR9 s//BzzToQNJgbn49XnJN+2iMQ3MVjc2Gpb/C0lyc3lAr/4gi/JvzG/TDVVjDKvrJ eyEFuglC5Dq13tUMKpVTkrxW7MXk8qTLCzE215dw/EruX2DhmML2k6iW+cm3Tkqh wEg/ytwQ/hYfic0kLoWXp34pVo/IB1KE5t+Ybi5gPVFiCr6NoQipBL/EXhz5iQFX CvSui8D1s4egBmp2k0tC1nwnWWe3wBfsa4l1RT1KSx4Jhx1Zh47PGKNZKtl8iNYU g32H6ehNYjLngx7NJ3MA1gQgaxdRRZk4TFh/Pfktw3+/8ByM9+xXC1CYLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE+D0qTWqpADkCY7gXQBXcd8yoMmMB8GA1UdIwQY MBaAFABywI900qhCpx8jq2FJm1JpT8elMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUhMQWozVFNxRUtuSHlPcllVbWJVbWxQeDZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9hYzhlN2MtNDE3NC00ODBlLWJmYWYt NjY3ZDY2NDY5Y2Q5LzEvVDRQU3BOYXFrQU9RSmp1QmRBRmR4M3pLZ3lZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9hYzhlN2MtNDE3NC00ODBlLWJmYWYtNjY3ZDY2NDY5Y2Q5 LzEvQUhMQWozVFNxRUtuSHlPcllVbWJVbWxQeDZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjI5MA0G CSqGSIb3DQEBCwUAA4IBAQACEnjx787Hop8DnwxvbFoxnEZD6yuDDnK2TnG03nmR sqcwFv1l9fnGErBmQ7P2BPcCsQ/pppicGFUZD8/qxFwOmmxjl23wbIY1fdY1Cf5z qq1MQHYjfu86a5CivusiPVHAH6fyEortb0Jdxtjpx593yJL911zxNxZa5KP+S79m bLzxxqgdXR6cPjRcbCFOBKkESQtDTJ3HNaLyJx0RUVNMzBwG+3jX1fbEqgYa+FFY CmpBPgXqoHTlhpUP9l7DoKZnhRCQjHk/rJse8w1rPWj6WkopWeDTYvI4BF4sYn2m 9cbEsFy8fFqEscytIFAK3zX9eyKpQuUxGVQjib+HUTSP -----END CERTIFICATE-----Generated at Mon Jan 26 04:40:31 2026 by rpki-client