This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/T1OvHFftNNlGPitqCZpRH3rTfdg.roa File: T1OvHFftNNlGPitqCZpRH3rTfdg.roa (raw, json) Hash identifier: i2tI++ucWgYgczpnJGGuTJLzzkGUgnBDzek2lMGw/V4= Subject key identifier: 4F:53:AF:1C:57:ED:34:D9:46:3E:2B:6A:09:9A:51:1F:7A:D3:7D:D8 Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B775956A3D191982B22C3FE3EFA9CD83A Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/T1OvHFftNNlGPitqCZpRH3rTfdg.roa Signing time: Thu 01 Jan 2026 02:18:22 +0000 ROA not before: Thu 01 Jan 2026 02:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51626 IP address blocks: 89.40.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:56:a3:d1:91:98:2b:22:c3:fe:3e:fa:9c:d8:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f53af1c57ed34d9463e2b6a099a511f7ad37dd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5e:14:f6:a7:d6:69:72:3e:62:c6:63:ad:ca: 1e:00:6a:c0:c9:00:ec:a9:bb:7c:d9:36:83:76:b5: 68:82:3c:24:36:ce:53:28:8e:6d:e5:0d:de:75:a7: ee:6b:22:7d:93:1f:b6:ec:42:97:7c:34:ed:a7:5d: 8e:a1:a5:bb:5b:62:aa:59:06:7d:0c:57:9a:f9:eb: cd:13:9c:a5:d4:a4:53:c7:85:cb:5c:80:84:aa:f2: 4e:e0:44:19:50:ef:3a:4d:7c:0a:ac:4c:1b:77:a0: 63:09:8c:20:8f:64:cd:9c:cf:92:c3:d7:51:cf:3f: c1:4f:cb:1f:15:f7:70:cb:30:ed:fe:67:35:39:f4: b3:0a:96:bf:fc:e6:b2:63:50:76:6b:e9:de:45:a8: 76:87:90:19:4c:3f:c3:87:2d:e0:0a:8a:c4:4b:bc: 47:5e:c3:49:a4:fb:5e:10:73:56:6c:b6:9f:aa:f5: e2:c6:80:89:d8:72:fe:d5:4f:6c:f8:53:b4:3c:94: 1f:c4:d0:3b:4f:55:a1:9c:7f:5a:de:b6:ee:c8:c9: 5c:0b:7a:dd:92:08:53:85:1c:c0:cc:da:cc:cd:14: 1f:3b:c5:94:73:aa:cf:3c:07:cd:3e:c2:a7:22:7e: 81:30:78:33:ee:21:a4:c3:0f:09:1b:d4:69:ec:d3: 95:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:53:AF:1C:57:ED:34:D9:46:3E:2B:6A:09:9A:51:1F:7A:D3:7D:D8 X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/T1OvHFftNNlGPitqCZpRH3rTfdg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.40.100.0/22 Signature Algorithm: sha256WithRSAEncryption c5:f0:3d:83:50:6f:f3:25:ac:c7:57:9e:52:c2:b3:12:d5:4c: ad:82:20:57:66:ef:4b:47:ff:b6:54:0c:96:cd:72:da:0d:8f: 23:a2:fa:a8:d8:31:e7:67:01:c0:88:da:5b:1d:24:5f:07:f9: 0f:aa:e4:d3:be:39:4c:2f:7b:27:df:ea:ba:7e:9c:00:f7:a1: 98:56:5a:63:ac:73:90:e3:3c:fb:98:78:18:b9:92:9e:bb:c9: 62:14:fb:f2:71:19:2b:e0:c6:73:a9:fd:45:ee:1e:75:33:f5: ed:f0:8e:ee:f5:c6:7b:f1:93:24:3f:e7:90:3b:5a:a6:92:69: 6b:85:6b:0b:d4:ed:70:10:2b:3d:ee:d5:17:01:d5:85:fe:c0: e5:4f:a1:16:14:e5:9c:22:37:85:7c:c1:dd:5b:4d:58:eb:f8: 97:c8:24:3c:c5:6c:48:1c:81:54:45:a3:54:05:49:67:51:9c: 63:e5:0e:97:bb:ce:4b:3c:51:9e:ac:51:48:ca:47:24:b5:a8: 28:0d:53:42:d6:6f:81:96:7b:a9:60:8b:5e:6e:c5:80:af:13: 73:81:e5:07:2e:ef:b0:0c:e2:63:79:cf:7c:85:7e:b8:e7:69: 42:07:52:98:00:5e:4c:33:db:0e:b0:8a:74:d6:e5:4b:6a:fc: 7a:73:0e:12 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WVaj0ZGYKyLD/j76nNg6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjUzYWYxYzU3ZWQzNGQ5NDYzZTJiNmEwOTlhNTExZjdhZDM3ZGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAql4U9qfWaXI+YsZjrcoeAGrAyQDs qbt82TaDdrVogjwkNs5TKI5t5Q3edafuayJ9kx+27EKXfDTtp12OoaW7W2KqWQZ9 DFea+evNE5yl1KRTx4XLXICEqvJO4EQZUO86TXwKrEwbd6BjCYwgj2TNnM+Sw9dR zz/BT8sfFfdwyzDt/mc1OfSzCpa//OayY1B2a+neRah2h5AZTD/Dhy3gCorES7xH XsNJpPteEHNWbLafqvXixoCJ2HL+1U9s+FO0PJQfxNA7T1WhnH9a3rbuyMlcC3rd kghThRzAzNrMzRQfO8WUc6rPPAfNPsKnIn6BMHgz7iGkww8JG9Rp7NOV+wIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFE9TrxxX7TTZRj4ragmaUR96033YMB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xL1QxT3ZIRmZ0Tk5sR1BpdHFDWnBSSDNyVGZkZy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJZKGQw DQYJKoZIhvcNAQELBQADggEBAMXwPYNQb/MlrMdXnlLCsxLVTK2CIFdm70tH/7ZU DJbNctoNjyOi+qjYMednAcCI2lsdJF8H+Q+q5NO+OUwveyff6rp+nAD3oZhWWmOs c5DjPPuYeBi5kp67yWIU+/JxGSvgxnOp/UXuHnUz9e3wju71xnvxkyQ/55A7WqaS aWuFawvU7XAQKz3u1RcB1YX+wOVPoRYU5ZwiN4V8wd1bTVjr+JfIJDzFbEgcgVRF o1QFSWdRnGPlDpe7zks8UZ6sUUjKRyS1qCgNU0LWb4GWe6lgi15uxYCvE3OB5Qcu 77AM4mN5z3yFfrjnaUIHUpgAXkwz2w6winTW5Utq/HpzDhI= -----END CERTIFICATE-----Generated at Sun Jan 25 17:34:02 2026 by rpki-client