This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/TF8KSi-DuhED0p9n9N5dVWabzRk.roa File: TF8KSi-DuhED0p9n9N5dVWabzRk.roa (raw, json) Hash identifier: 39Z2dsiv//rq6lSkgmQdDk1aolP4R2gp4zSwQSQYE8w= Subject key identifier: 4C:5F:0A:4A:2F:83:BA:11:03:D2:9F:67:F4:DE:5D:55:66:9B:CD:19 Certificate issuer: /CN=cc6532649a6aef4714841b9c8f54660d889b0629 Certificate serial: 019B7E3933825D7E8B3A8242966D2E662E01 Authority key identifier: CC:65:32:64:9A:6A:EF:47:14:84:1B:9C:8F:54:66:0D:88:9B:06:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/TF8KSi-DuhED0p9n9N5dVWabzRk.roa Signing time: Fri 02 Jan 2026 10:20:36 +0000 ROA not before: Fri 02 Jan 2026 10:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15983 IP address blocks: 195.234.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.crl rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:33:82:5d:7e:8b:3a:82:42:96:6d:2e:66:2e:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc6532649a6aef4714841b9c8f54660d889b0629 Validity Not Before: Jan 2 10:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c5f0a4a2f83ba1103d29f67f4de5d55669bcd19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:13:0b:29:4e:45:c9:07:89:77:d7:88:d9:85: 68:a0:95:8c:ff:39:1c:5a:c1:7f:95:64:2f:cb:6b: 5e:57:38:53:9d:63:04:69:16:c6:be:7a:6d:f2:24: 96:5f:3a:4f:b8:16:24:38:37:8f:82:7c:12:d0:91: 57:09:63:05:b0:fe:30:74:f7:1b:be:9c:aa:56:7e: f6:2b:0b:d4:f7:15:b4:3b:80:07:b4:d2:5a:67:5c: 50:8c:74:e8:1d:cd:c7:40:79:8e:8e:31:32:a8:fa: cf:93:ab:61:c2:ec:f4:cb:ea:1f:dd:a2:72:b1:db: 03:d9:45:a5:14:4e:f2:5c:13:bb:8b:1b:08:15:bd: d1:52:58:f8:4b:5f:0f:f8:d6:2c:86:0f:d9:89:07: 91:b7:e0:79:e8:11:84:70:8a:f9:65:31:5c:b2:08: a0:46:52:85:3a:29:f9:24:32:9e:d5:db:08:40:e6: d0:f5:72:98:8b:d8:d9:c6:18:52:89:b5:8e:c0:d0: ea:74:d9:38:87:d8:59:6e:e8:18:7d:75:ce:32:c5: 7e:b6:2b:62:ba:74:85:fa:b6:12:06:7f:d0:0b:5f: ac:71:61:28:1b:44:20:60:de:d3:f1:19:66:31:7e: 0e:d1:1e:4f:2d:a8:2d:02:6c:71:a4:03:34:57:a8: 0a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:5F:0A:4A:2F:83:BA:11:03:D2:9F:67:F4:DE:5D:55:66:9B:CD:19 X509v3 Authority Key Identifier: keyid:CC:65:32:64:9A:6A:EF:47:14:84:1B:9C:8F:54:66:0D:88:9B:06:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/TF8KSi-DuhED0p9n9N5dVWabzRk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.234.145.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:0c:ae:a3:34:e3:c0:ce:a8:27:05:d7:86:a0:8b:1a:8f:cb: 2c:b7:49:09:e1:a9:0e:34:16:14:d7:3a:0e:cd:5c:3c:7f:65: b2:1a:93:b2:d1:5c:a3:9c:c7:55:2f:5c:a4:36:27:e0:d4:f9: ee:ae:f4:c6:ce:54:cd:b4:e9:4e:ac:c9:91:76:90:f2:21:1e: 41:6d:42:b0:2b:3e:f6:4f:55:2f:69:b6:a3:3c:fb:6f:30:4e: e6:00:04:34:97:52:90:86:b8:83:12:e1:85:8a:27:fe:05:db: e0:1f:14:84:cf:0a:90:f4:a6:42:87:98:65:d7:a1:0b:7c:6c: bb:f4:d3:66:3f:e1:78:3a:b1:7e:af:a7:95:91:1d:c9:49:e4: c3:78:d3:30:d2:da:46:65:de:83:44:20:26:16:61:71:12:eb: 66:07:3b:3e:bf:f5:93:db:41:61:3e:b1:49:a9:37:2e:12:d1: 68:17:4a:e3:fd:cc:ee:f5:7a:e9:b3:c0:c4:07:85:4b:6d:1d: 2a:79:54:37:1b:22:e7:16:d2:d0:28:68:8c:37:3f:3f:62:01: a8:00:c4:b7:29:32:c3:dd:1d:e7:43:1f:16:08:2f:42:7e:e9: 59:b6:49:6b:fe:88:c2:55:50:22:87:46:9b:2b:77:71:e9:09: e5:e2:85:d1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OTOCXX6LOoJClm0uZi4BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNjUzMjY0OWE2YWVmNDcxNDg0MWI5YzhmNTQ2NjBkODg5 YjA2MjkwHhcNMjYwMTAyMTAyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzVmMGE0YTJmODNiYTExMDNkMjlmNjdmNGRlNWQ1NTY2OWJjZDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshMLKU5FyQeJd9eI2YVooJWM/zkc WsF/lWQvy2teVzhTnWMEaRbGvnpt8iSWXzpPuBYkODePgnwS0JFXCWMFsP4wdPcb vpyqVn72KwvU9xW0O4AHtNJaZ1xQjHToHc3HQHmOjjEyqPrPk6thwuz0y+of3aJy sdsD2UWlFE7yXBO7ixsIFb3RUlj4S18P+NYshg/ZiQeRt+B56BGEcIr5ZTFcsgig RlKFOin5JDKe1dsIQObQ9XKYi9jZxhhSibWOwNDqdNk4h9hZbugYfXXOMsV+titi unSF+rYSBn/QC1+scWEoG0QgYN7T8RlmMX4O0R5PLagtAmxxpAM0V6gKUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFExfCkovg7oRA9KfZ/TeXVVmm80ZMB8GA1UdIwQY MBaAFMxlMmSaau9HFIQbnI9UZg2ImwYpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekdVeVpKcHE3MGNVaEJ1Y2oxUm1EWWliQmlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8zMTBkMzQtZjVkOC00ZTk2LTliN2Mt NjQ4ZjUwMWFmYWU1LzEvVEY4S1NpLUR1aEVEMHA5bjlONWRWV2FielJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8zMTBkMzQtZjVkOC00ZTk2LTliN2MtNjQ4ZjUwMWFmYWU1 LzEvekdVeVpKcHE3MGNVaEJ1Y2oxUm1EWWliQmlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+qRMA0G CSqGSIb3DQEBCwUAA4IBAQB9DK6jNOPAzqgnBdeGoIsaj8sst0kJ4akONBYU1zoO zVw8f2WyGpOy0VyjnMdVL1ykNifg1PnurvTGzlTNtOlOrMmRdpDyIR5BbUKwKz72 T1UvabajPPtvME7mAAQ0l1KQhriDEuGFiif+BdvgHxSEzwqQ9KZCh5hl16ELfGy7 9NNmP+F4OrF+r6eVkR3JSeTDeNMw0tpGZd6DRCAmFmFxEutmBzs+v/WT20FhPrFJ qTcuEtFoF0rj/czu9Xrps8DEB4VLbR0qeVQ3GyLnFtLQKGiMNz8/YgGoAMS3KTLD 3R3nQx8WCC9CfulZtklr/ojCVVAih0abK3dx6Qnl4oXR -----END CERTIFICATE-----Generated at Mon Jan 26 00:15:35 2026 by rpki-client