This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/TaB7twEIitPVY03TiZNuZ4p06Yw.roa File: TaB7twEIitPVY03TiZNuZ4p06Yw.roa (raw, json) Hash identifier: eRTMsU/F25f/rG9nFVLqPWp6f9ggINQHxvG/2sQoyBE= Subject key identifier: 4D:A0:7B:B7:01:08:8A:D3:D5:63:4D:D3:89:93:6E:67:8A:74:E9:8C Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88 Certificate serial: 019B991B80EA4AFC46C303409BA1F195E583 Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/TaB7twEIitPVY03TiZNuZ4p06Yw.roa Signing time: Wed 07 Jan 2026 15:37:55 +0000 ROA not before: Wed 07 Jan 2026 15:37:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205536 IP address blocks: 94.184.10.0/24 maxlen: 24 94.184.17.0/24 maxlen: 24 94.184.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:99:1b:80:ea:4a:fc:46:c3:03:40:9b:a1:f1:95:e5:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88 Validity Not Before: Jan 7 15:37:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4da07bb701088ad3d5634dd389936e678a74e98c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7a:74:a7:2a:60:eb:e5:45:59:d0:aa:b8:42: 4e:fe:1c:9d:46:bb:ba:5c:ef:3c:38:35:03:df:50: b5:37:04:63:2b:75:ee:d9:21:96:1e:35:5c:25:cf: ed:e8:f6:5a:60:3d:34:a3:0c:5d:78:a0:74:25:12: c5:28:5f:43:a2:49:3b:05:cf:89:21:31:00:ec:69: a4:6f:18:2c:c5:fc:4c:66:dc:6c:6b:53:90:6e:f6: 13:a9:6e:df:9b:ce:3a:38:88:bc:cf:54:dc:4d:4e: 27:5a:e0:c7:fc:14:88:17:13:a1:c6:9e:4d:7a:c9: 81:fd:a9:9e:ef:4a:67:d2:d6:7a:3f:ac:3b:6c:8f: 41:a5:ab:35:8d:f1:c6:ab:d3:98:53:dc:e1:02:b4: a6:15:97:92:b1:04:07:f4:e9:d2:33:45:0b:42:2a: 28:ec:38:ca:27:ce:62:54:71:5c:1c:11:c7:9e:2f: dd:87:b8:58:5c:e4:cd:f6:59:bf:1f:2c:b4:16:d9: 2e:3f:04:16:34:dd:9b:09:1e:ab:d1:79:ee:71:a1: 37:3c:ad:e3:1f:ea:4b:66:63:ac:8e:46:98:d0:56: eb:e7:78:85:55:78:8d:b6:a5:96:12:d0:06:32:99: 03:bf:02:09:55:6b:a5:0f:92:61:cc:91:43:0d:38: 45:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A0:7B:B7:01:08:8A:D3:D5:63:4D:D3:89:93:6E:67:8A:74:E9:8C X509v3 Authority Key Identifier: keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/TaB7twEIitPVY03TiZNuZ4p06Yw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.184.10.0/24 94.184.17.0-94.184.18.255 Signature Algorithm: sha256WithRSAEncryption 68:53:26:eb:40:63:f3:cd:a1:54:36:81:9b:50:18:47:f3:ea: 01:98:7d:6a:87:74:fd:ba:f3:cc:ee:e3:a4:e3:5c:ec:21:e1: 4f:02:33:5b:71:60:61:07:b5:a9:57:57:46:0b:ec:90:4e:86: be:5a:a7:8e:d5:e2:7e:b2:b9:28:27:a5:6c:94:b2:2a:6c:98: c1:de:9a:c8:42:b0:6a:1b:f7:20:5e:b0:dd:c7:5e:d6:de:8b: 09:c3:47:39:a9:b3:2a:e3:b0:31:45:d5:98:a0:9c:87:2a:14: c1:12:fa:da:5a:6b:d1:2e:87:75:15:99:0f:07:95:b2:ab:56: 3b:6f:00:59:ab:17:de:19:77:51:6c:ff:7e:4d:1c:11:77:36: 56:46:f0:64:d0:13:cd:36:45:57:8c:40:d7:d8:6d:f2:e1:23: 2c:ab:1c:27:e7:3d:15:92:01:ea:25:56:32:ed:f9:99:fc:1f: 93:87:dd:c8:a6:97:31:9f:cc:2d:e4:d5:8a:63:c6:ec:c1:5f: de:ec:8b:98:3d:c4:82:b3:7f:79:04:3a:45:15:e1:bd:d9:d0: 3d:c0:95:42:68:78:c1:0f:63:d9:02:f0:71:ab:e4:7e:b9:35: 1b:5e:17:d2:4b:5f:22:88:cc:5f:5a:65:3d:80:3c:79:00:60: 8c:a5:82:55 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZuZG4DqSvxGwwNAm6HxleWDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4M2Q3NjA1MTAxN2QwYWZhOTE1ZmNmYjc5MGEwMGY0NjY3 YjBhODgwHhcNMjYwMTA3MTUzNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZGEwN2JiNzAxMDg4YWQzZDU2MzRkZDM4OTkzNmU2NzhhNzRlOThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnp0pypg6+VFWdCquEJO/hydRru6 XO88ODUD31C1NwRjK3Xu2SGWHjVcJc/t6PZaYD00owxdeKB0JRLFKF9Dokk7Bc+J ITEA7GmkbxgsxfxMZtxsa1OQbvYTqW7fm846OIi8z1TcTU4nWuDH/BSIFxOhxp5N esmB/ame70pn0tZ6P6w7bI9Bpas1jfHGq9OYU9zhArSmFZeSsQQH9OnSM0ULQioo 7DjKJ85iVHFcHBHHni/dh7hYXOTN9lm/Hyy0FtkuPwQWNN2bCR6r0XnucaE3PK3j H+pLZmOsjkaY0Fbr53iFVXiNtqWWEtAGMpkDvwIJVWulD5JhzJFDDThFYwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFE2ge7cBCIrT1WNN04mTbmeKdOmMMB8GA1UdIwQY MBaAFFg9dgUQF9CvqRX8+3kKAPRmewqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGIt ZGE2MTUzODg1ZjNiLzEvVGFCN3R3RUlpdFBWWTAzVGlaTnVaNHAwNll3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGItZGE2MTUzODg1ZjNi LzEvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAXrgKMAwD BABeuBEDBABeuBIwDQYJKoZIhvcNAQELBQADggEBAGhTJutAY/PNoVQ2gZtQGEfz 6gGYfWqHdP2688zu46TjXOwh4U8CM1txYGEHtalXV0YL7JBOhr5ap47V4n6yuSgn pWyUsipsmMHemshCsGob9yBesN3HXtbeiwnDRzmpsyrjsDFF1ZignIcqFMES+tpa a9Euh3UVmQ8HlbKrVjtvAFmrF94Zd1Fs/35NHBF3NlZG8GTQE802RVeMQNfYbfLh IyyrHCfnPRWSAeolVjLt+Zn8H5OH3cimlzGfzC3k1YpjxuzBX97si5g9xIKzf3kE OkUV4b3Z0D3AlUJoeMEPY9kC8HGr5H65NRteF9JLXyKIzF9aZT2APHkAYIylglU= -----END CERTIFICATE-----Generated at Mon Jan 26 01:16:01 2026 by rpki-client