This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/TTo4BVEjNXzzXJclZ-0-kt2DI5w.roa File: TTo4BVEjNXzzXJclZ-0-kt2DI5w.roa (raw, json) Hash identifier: hjAmuYuA2bu34wGu3wYkNL+2UTuhOaLaJGD6bAnWUE8= Subject key identifier: 4D:3A:38:05:51:23:35:7C:F3:5C:97:25:67:ED:3E:92:DD:83:23:9C Certificate issuer: /CN=cd963dd01ec80de9e138c9de44a36d48f06b93fd Certificate serial: 019B7F1602D854321CCE4844CBB923502E23 Authority key identifier: CD:96:3D:D0:1E:C8:0D:E9:E1:38:C9:DE:44:A3:6D:48:F0:6B:93:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/TTo4BVEjNXzzXJclZ-0-kt2DI5w.roa Signing time: Fri 02 Jan 2026 14:21:47 +0000 ROA not before: Fri 02 Jan 2026 14:21:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29119 IP address blocks: 141.98.209.0/24 maxlen: 24 2a12:96c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:16:02:d8:54:32:1c:ce:48:44:cb:b9:23:50:2e:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd963dd01ec80de9e138c9de44a36d48f06b93fd Validity Not Before: Jan 2 14:21:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d3a38055123357cf35c972567ed3e92dd83239c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0c:4d:06:ee:fb:03:71:0e:c4:ac:46:4b:53: 36:65:c6:a7:90:b4:91:25:26:15:93:98:1e:30:4b: cc:9a:12:fc:d8:89:cb:a4:49:62:e3:42:36:2c:eb: 6f:39:22:b2:be:7b:bb:6e:87:c5:d6:3b:08:b8:a7: f3:cf:38:68:82:96:27:ea:1c:28:7b:0e:a3:ad:49: cf:a2:5d:0a:b3:08:c8:a0:80:d8:40:b6:10:0a:f0: c2:4d:18:82:b3:e5:7b:7f:14:ae:c9:41:3e:c3:84: d0:16:84:19:5b:03:26:0d:36:29:9d:88:c1:a5:ea: ad:be:cd:be:2e:ca:fb:a5:47:45:8f:db:c4:3b:fe: 21:28:37:1d:10:31:97:d4:ba:2a:8e:e7:84:8e:67: d8:2a:ef:4c:36:2b:1b:60:9d:1b:01:4c:92:18:29: a3:1a:4a:67:0b:37:c7:55:e2:2e:1b:3f:de:4e:89: be:9b:f4:fc:0c:40:82:a7:05:d8:15:43:92:80:f7: e8:37:3b:e3:31:2f:78:58:6c:55:3a:68:4d:76:4f: 5b:d0:27:c2:5d:04:03:91:25:17:dc:38:85:da:04: 46:e6:33:2b:3d:77:32:aa:9c:e5:7d:de:c1:94:ba: 9b:db:c3:12:92:57:ef:e5:5d:62:c5:ad:9d:58:e0: 3f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:3A:38:05:51:23:35:7C:F3:5C:97:25:67:ED:3E:92:DD:83:23:9C X509v3 Authority Key Identifier: keyid:CD:96:3D:D0:1E:C8:0D:E9:E1:38:C9:DE:44:A3:6D:48:F0:6B:93:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/TTo4BVEjNXzzXJclZ-0-kt2DI5w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.98.209.0/24 IPv6: 2a12:96c0::/29 Signature Algorithm: sha256WithRSAEncryption 14:01:c0:c1:c9:20:c5:1b:10:a9:d8:f1:47:9d:09:02:4a:a3: 2e:a1:cf:54:73:65:34:34:de:a8:61:7a:8a:82:9d:2b:9f:87: f3:a9:2c:24:ba:e6:c8:e1:2c:12:54:19:cd:c9:2a:18:1c:aa: 3f:cf:05:ef:03:98:51:bc:0d:33:46:9f:b4:6e:96:fa:cc:3d: ca:fc:7e:2c:2f:78:d1:dc:34:9d:5f:45:8f:68:bb:76:a4:a4: 05:92:0d:5d:5b:17:5d:c5:39:77:72:4f:1e:3e:aa:d8:87:18: 11:1e:0e:cd:fa:d2:0c:a8:b7:bd:2f:24:75:76:54:ff:2a:3e: f4:c1:95:04:8f:a3:25:24:f9:cf:eb:dd:e0:45:61:73:5b:4d: 78:74:e9:7e:70:c1:1e:e8:46:4c:6f:45:75:7a:9a:06:a3:22: b3:f8:7f:79:be:eb:23:31:ca:90:d9:3c:2e:ad:50:df:33:fd: ca:21:82:91:47:d6:f5:69:01:a8:7c:70:40:6a:25:d4:5e:68: b2:64:c8:3b:70:1b:4b:ad:b7:90:3a:c9:f7:dd:8a:3a:c1:09: 2b:32:e4:88:ac:07:28:99:f6:62:0c:f0:16:5c:30:78:2d:5c: 85:dd:5f:76:29:0d:36:fd:17:f8:c9:58:6e:1e:33:bb:4e:7d: 02:71:2b:41 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/FgLYVDIczkhEy7kjUC4jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkOTYzZGQwMWVjODBkZTllMTM4YzlkZTQ0YTM2ZDQ4ZjA2 YjkzZmQwHhcNMjYwMTAyMTQyMTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDNhMzgwNTUxMjMzNTdjZjM1Yzk3MjU2N2VkM2U5MmRkODMyMzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgxNBu77A3EOxKxGS1M2ZcankLSR JSYVk5geMEvMmhL82InLpEli40I2LOtvOSKyvnu7bofF1jsIuKfzzzhogpYn6hwo ew6jrUnPol0KswjIoIDYQLYQCvDCTRiCs+V7fxSuyUE+w4TQFoQZWwMmDTYpnYjB peqtvs2+Lsr7pUdFj9vEO/4hKDcdEDGX1LoqjueEjmfYKu9MNisbYJ0bAUySGCmj GkpnCzfHVeIuGz/eTom+m/T8DECCpwXYFUOSgPfoNzvjMS94WGxVOmhNdk9b0CfC XQQDkSUX3DiF2gRG5jMrPXcyqpzlfd7BlLqb28MSklfv5V1ixa2dWOA/fQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFE06OAVRIzV881yXJWftPpLdgyOcMB8GA1UdIwQY MBaAFM2WPdAeyA3p4TjJ3kSjbUjwa5P9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelpZOTBCN0lEZW5oT01uZVJLTnRTUEJya18wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lNDAzYWEtN2ZhNS00ZDk2LWI0OWYt NmNmMTY1MjM5YmQ5LzEvVFRvNEJWRWpOWHp6WEpjbFotMC1rdDJESTV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9lNDAzYWEtN2ZhNS00ZDk2LWI0OWYtNmNmMTY1MjM5YmQ5 LzEvelpZOTBCN0lEZW5oT01uZVJLTnRTUEJya18wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAjWLRMA0E AgACMAcDBQMqEpbAMA0GCSqGSIb3DQEBCwUAA4IBAQAUAcDBySDFGxCp2PFHnQkC SqMuoc9Uc2U0NN6oYXqKgp0rn4fzqSwkuubI4SwSVBnNySoYHKo/zwXvA5hRvA0z Rp+0bpb6zD3K/H4sL3jR3DSdX0WPaLt2pKQFkg1dWxddxTl3ck8ePqrYhxgRHg7N +tIMqLe9LyR1dlT/Kj70wZUEj6MlJPnP693gRWFzW014dOl+cMEe6EZMb0V1epoG oyKz+H95vusjMcqQ2TwurVDfM/3KIYKRR9b1aQGofHBAaiXUXmiyZMg7cBtLrbeQ Osn33Yo6wQkrMuSIrAcomfZiDPAWXDB4LVyF3V92KQ02/Rf4yVhuHjO7Tn0CcStB -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:36 2026 by rpki-client