This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/TP8EdmtaQuhE0u-yaj1kEQeSSdI.roa File: TP8EdmtaQuhE0u-yaj1kEQeSSdI.roa (raw, json) Hash identifier: Z8pBkdUtBRFmIlcsTopww1fuGC4nTUOJyGIi0jQX0c8= Subject key identifier: 4C:FF:04:76:6B:5A:42:E8:44:D2:EF:B2:6A:3D:64:11:07:92:49:D2 Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464 Certificate serial: 019B7E37E5E1C142609FB5721B07CA24DA57 Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/TP8EdmtaQuhE0u-yaj1kEQeSSdI.roa Signing time: Fri 02 Jan 2026 10:19:11 +0000 ROA not before: Fri 02 Jan 2026 10:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39650 IP address blocks: 178.239.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:e5:e1:c1:42:60:9f:b5:72:1b:07:ca:24:da:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464 Validity Not Before: Jan 2 10:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4cff04766b5a42e844d2efb26a3d6411079249d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f1:61:fb:85:b7:26:1f:42:23:4d:0b:0b:00: bb:69:06:cc:3a:dd:78:04:9d:3d:ee:0b:f6:4f:ac: 43:68:1e:59:07:b6:aa:71:75:b1:84:39:85:82:e7: 4b:a7:87:10:f8:fa:43:dd:f0:0a:9d:d0:b1:30:93: 67:92:03:02:6f:c2:e4:40:b8:52:f6:9e:f6:55:4a: 47:93:31:89:84:6e:d6:48:bf:eb:46:4c:63:b0:72: 2f:eb:d6:76:2b:9a:3c:70:99:62:90:0f:07:2a:77: e8:fa:41:24:d7:1c:96:89:d1:96:f9:40:4d:51:f5: cb:ac:5f:dc:8c:d3:78:1c:e9:3e:18:7f:c6:e6:05: 22:c3:32:9c:d0:27:3e:e3:f2:b4:1a:cd:9a:aa:00: d4:27:fc:7b:1b:64:c4:fd:b0:87:51:b1:62:97:66: 00:96:54:d3:0d:90:d9:30:3b:6c:33:55:9b:34:58: 38:ef:8b:d9:86:44:8c:76:19:02:a9:51:43:9e:58: 45:a0:25:7c:2f:6d:ef:58:9f:16:90:b0:e0:2e:67: d4:1a:6f:62:89:f6:b0:91:59:85:69:a9:92:4c:b6: a9:63:85:d4:ad:33:d9:ad:7a:50:2a:d6:72:c7:2d: fd:99:3d:84:6b:c0:c1:76:e5:b8:f3:60:96:c1:bb: c5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:FF:04:76:6B:5A:42:E8:44:D2:EF:B2:6A:3D:64:11:07:92:49:D2 X509v3 Authority Key Identifier: keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/TP8EdmtaQuhE0u-yaj1kEQeSSdI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.239.153.0/24 Signature Algorithm: sha256WithRSAEncryption 16:c8:3c:56:09:44:18:35:00:07:e0:39:1f:37:e9:21:85:dd: 90:66:ff:7e:36:ee:e1:a2:c9:8c:1d:65:8f:bc:94:5b:2b:d7: eb:8b:ca:c0:6e:06:db:12:1d:f0:37:3b:3f:89:84:43:02:95: cc:c5:49:dc:82:1c:fb:7a:75:73:0b:ed:a6:7c:1e:13:f9:4b: b7:f8:59:39:6d:9b:09:e1:1f:f7:86:53:5d:21:7f:3e:b4:70: ea:6c:c6:10:4f:55:62:15:bb:13:18:75:b4:11:35:46:f2:36: da:41:83:7c:78:26:84:f0:a7:43:7f:cc:c7:fd:6c:8b:d2:5c: 26:1a:11:32:38:84:ad:e1:d6:69:fd:72:7d:38:9c:fd:2f:cd: c0:3a:00:e9:7b:11:25:ba:f1:ea:db:49:95:cc:5c:03:e5:ef: 52:e3:1b:57:7c:a1:18:29:33:dd:ac:b4:a3:13:04:82:03:ab: 48:e9:4b:88:7c:f8:ee:c5:30:80:fe:dc:0f:d4:7c:5b:41:e9: e6:33:0c:42:62:f5:cc:65:f1:71:74:b4:8b:32:ac:5c:ea:65: 3b:dd:47:87:b3:d4:de:eb:3a:be:ce:2a:99:5f:f6:c2:82:69: 55:d9:c0:59:7a:fc:05:a9:f4:1e:67:c7:f4:68:32:33:b3:63: b7:32:02:6f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N+XhwUJgn7VyGwfKJNpXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0 ZDY0NjQwHhcNMjYwMTAyMTAxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Y2ZmMDQ3NjZiNWE0MmU4NDRkMmVmYjI2YTNkNjQxMTA3OTI0OWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPFh+4W3Jh9CI00LCwC7aQbMOt14 BJ097gv2T6xDaB5ZB7aqcXWxhDmFgudLp4cQ+PpD3fAKndCxMJNnkgMCb8LkQLhS 9p72VUpHkzGJhG7WSL/rRkxjsHIv69Z2K5o8cJlikA8HKnfo+kEk1xyWidGW+UBN UfXLrF/cjNN4HOk+GH/G5gUiwzKc0Cc+4/K0Gs2aqgDUJ/x7G2TE/bCHUbFil2YA llTTDZDZMDtsM1WbNFg474vZhkSMdhkCqVFDnlhFoCV8L23vWJ8WkLDgLmfUGm9i ifawkVmFaamSTLapY4XUrTPZrXpQKtZyxy39mT2Ea8DBduW482CWwbvFewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEz/BHZrWkLoRNLvsmo9ZBEHkknSMB8GA1UdIwQY MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt OTg5MTY2ODgxOTY5LzEvVFA4RWRtdGFRdWhFMHUteWFqMWtFUWVTU2RJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5 LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsu+ZMA0G CSqGSIb3DQEBCwUAA4IBAQAWyDxWCUQYNQAH4DkfN+khhd2QZv9+Nu7hosmMHWWP vJRbK9fri8rAbgbbEh3wNzs/iYRDApXMxUncghz7enVzC+2mfB4T+Uu3+Fk5bZsJ 4R/3hlNdIX8+tHDqbMYQT1ViFbsTGHW0ETVG8jbaQYN8eCaE8KdDf8zH/WyL0lwm GhEyOISt4dZp/XJ9OJz9L83AOgDpexEluvHq20mVzFwD5e9S4xtXfKEYKTPdrLSj EwSCA6tI6UuIfPjuxTCA/twP1HxbQenmMwxCYvXMZfFxdLSLMqxc6mU73UeHs9Te 6zq+ziqZX/bCgmlV2cBZevwFqfQeZ8f0aDIzs2O3MgJv -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:28 2026 by rpki-client