This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/tNc2jSWdykqlG-PkB4v9MVhio4k.roa File: tNc2jSWdykqlG-PkB4v9MVhio4k.roa (raw, json) Hash identifier: k9a+KYr8wPbQKXd8Zqw2THkgTe3lauXtnm8eqnhZ3Nk= Subject key identifier: B4:D7:36:8D:25:9D:CA:4A:A5:1B:E3:E4:07:8B:FD:31:58:62:A3:89 Certificate issuer: /CN=0232a4bfb7796405a556b759f1d193e4c4d37129 Certificate serial: 019B7E37AF7E797A0438DD074EA2C8B66ACE Authority key identifier: 02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/tNc2jSWdykqlG-PkB4v9MVhio4k.roa Signing time: Fri 02 Jan 2026 10:18:57 +0000 ROA not before: Fri 02 Jan 2026 10:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 36671 IP address blocks: 212.133.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:af:7e:79:7a:04:38:dd:07:4e:a2:c8:b6:6a:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0232a4bfb7796405a556b759f1d193e4c4d37129 Validity Not Before: Jan 2 10:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4d7368d259dca4aa51be3e4078bfd315862a389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:52:f7:95:28:dc:21:05:21:a1:01:90:8c:89: 54:c7:ff:1f:44:ef:50:2e:78:90:de:e4:e3:69:5b: af:16:50:80:d0:8f:11:53:fe:b0:82:f7:35:be:31: 26:ea:4d:05:a0:3a:6b:d6:53:80:4a:09:bf:e9:94: 25:60:b0:b5:91:e5:46:fb:e3:ff:78:c4:40:b8:55: dc:1b:a8:08:33:99:61:d2:a7:76:f1:98:3f:26:2a: 2b:e1:9f:5c:67:57:2c:ec:1f:d9:35:2a:c0:91:b4: 5a:9e:95:f9:4d:33:8f:c4:f8:1c:ae:59:db:01:d2: e0:59:c7:6e:b9:5f:47:16:b3:57:42:ef:c8:f0:6d: d3:4b:e3:ff:98:b5:74:e2:d1:f8:d4:1f:26:20:7b: 45:ae:d1:2c:77:5e:b2:26:d0:c4:5f:20:de:d6:7d: 67:6f:c6:7e:7b:2f:f0:54:da:a7:31:ed:80:7b:19: b7:e5:f6:8d:f4:38:de:13:c3:c9:4b:4c:55:c0:3d: 04:e6:87:a6:f1:30:da:da:c3:1a:3f:1f:fc:f0:02: aa:35:fa:c5:59:ff:48:86:37:f3:93:8d:2e:39:35: d0:62:a5:d4:56:b0:5f:ef:02:84:e1:d4:c3:2e:bb: 03:d1:f3:e2:84:57:d3:d4:1d:3c:6c:0e:13:06:1b: 95:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:D7:36:8D:25:9D:CA:4A:A5:1B:E3:E4:07:8B:FD:31:58:62:A3:89 X509v3 Authority Key Identifier: keyid:02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/tNc2jSWdykqlG-PkB4v9MVhio4k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.133.79.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:2e:b2:26:65:b4:76:a3:97:22:aa:4a:d5:95:55:c4:72:ea: a2:d0:d8:f3:66:42:d8:69:a8:ec:11:a5:8c:5e:a3:a0:05:01: 4f:bf:a4:80:24:a6:a1:ed:b6:81:33:27:58:83:7c:c8:48:ca: ff:40:4d:f5:c4:f5:76:c3:16:9d:56:a0:f7:36:95:fa:24:19: ef:1a:10:ec:4e:52:50:9c:17:86:87:3d:78:fb:6e:a7:3f:7e: 05:20:1b:0f:9c:73:41:33:f9:a7:e8:76:1e:19:e1:88:f8:bb: c2:01:79:25:dd:21:6c:15:75:55:f0:83:79:9c:dc:05:91:8e: 2c:70:5e:ee:c7:50:91:42:72:c6:75:8b:b2:e2:c6:53:77:62: 5b:48:2a:83:16:b0:00:e8:b9:a2:0d:3a:94:53:52:d1:bf:cb: 63:9e:f3:77:ec:96:e3:f6:b1:46:91:07:29:d5:12:76:eb:e1: 6c:70:da:f3:46:95:73:da:5d:08:34:99:22:95:5e:d1:d1:79: 0e:dd:0f:5e:5f:b4:b1:46:cf:10:ff:4d:34:04:77:ee:90:34: 1a:a5:6f:cf:d3:c5:50:fa:d6:fd:a8:ad:f9:c6:0e:ee:aa:f9: c8:ba:c9:e4:3d:7c:00:d7:cc:a7:90:5f:5e:ad:f1:27:84:69: e7:d9:bc:07 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N69+eXoEON0HTqLItmrOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMzJhNGJmYjc3OTY0MDVhNTU2Yjc1OWYxZDE5M2U0YzRk MzcxMjkwHhcNMjYwMTAyMTAxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGQ3MzY4ZDI1OWRjYTRhYTUxYmUzZTQwNzhiZmQzMTU4NjJhMzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1L3lSjcIQUhoQGQjIlUx/8fRO9Q LniQ3uTjaVuvFlCA0I8RU/6wgvc1vjEm6k0FoDpr1lOASgm/6ZQlYLC1keVG++P/ eMRAuFXcG6gIM5lh0qd28Zg/Jior4Z9cZ1cs7B/ZNSrAkbRanpX5TTOPxPgcrlnb AdLgWcduuV9HFrNXQu/I8G3TS+P/mLV04tH41B8mIHtFrtEsd16yJtDEXyDe1n1n b8Z+ey/wVNqnMe2Aexm35faN9DjeE8PJS0xVwD0E5oem8TDa2sMaPx/88AKqNfrF Wf9Ihjfzk40uOTXQYqXUVrBf7wKE4dTDLrsD0fPihFfT1B08bA4TBhuV5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLTXNo0lncpKpRvj5AeL/TFYYqOJMB8GA1UdIwQY MBaAFAIypL+3eWQFpVa3WfHRk+TE03EpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9hN2NlN2EtODQ0My00NmViLThjYmEt M2JiNGQ2MjAwNTE4LzEvdE5jMmpTV2R5a3FsRy1Qa0I0djlNVmhpbzRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9hN2NlN2EtODQ0My00NmViLThjYmEtM2JiNGQ2MjAwNTE4 LzEvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1IVPMA0G CSqGSIb3DQEBCwUAA4IBAQAKLrImZbR2o5ciqkrVlVXEcuqi0NjzZkLYaajsEaWM XqOgBQFPv6SAJKah7baBMydYg3zISMr/QE31xPV2wxadVqD3NpX6JBnvGhDsTlJQ nBeGhz14+26nP34FIBsPnHNBM/mn6HYeGeGI+LvCAXkl3SFsFXVV8IN5nNwFkY4s cF7ux1CRQnLGdYuy4sZTd2JbSCqDFrAA6LmiDTqUU1LRv8tjnvN37Jbj9rFGkQcp 1RJ26+FscNrzRpVz2l0INJkilV7R0XkO3Q9eX7SxRs8Q/000BHfukDQapW/P08VQ +tb9qK35xg7uqvnIusnkPXwA18ynkF9erfEnhGnn2bwH -----END CERTIFICATE-----Generated at Sun Jan 25 07:16:14 2026 by rpki-client