This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/T-yHWQIKrIU-HkMZzlKXfpYvnmE.roa File: T-yHWQIKrIU-HkMZzlKXfpYvnmE.roa (raw, json) Hash identifier: 6QSFy2DfTCLZpgF8WBvvEXqsQJWkkelI/B/nt8LQ35Q= Subject key identifier: 4F:EC:87:59:02:0A:AC:85:3E:1E:43:19:CE:52:97:7E:96:2F:9E:61 Certificate issuer: /CN=0bebcee4d23379aed81aecffc7a742b35acdddb3 Certificate serial: 019B7FF16169BEFE59E77A3FB10C467E4243 Authority key identifier: 0B:EB:CE:E4:D2:33:79:AE:D8:1A:EC:FF:C7:A7:42:B3:5A:CD:DD:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-vO5NIzea7YGuz_x6dCs1rN3bM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/T-yHWQIKrIU-HkMZzlKXfpYvnmE.roa Signing time: Fri 02 Jan 2026 18:21:24 +0000 ROA not before: Fri 02 Jan 2026 18:21:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206236 IP address blocks: 45.14.232.0/23 maxlen: 23 195.245.66.0/24 maxlen: 24 2a0e:1580::/29 maxlen: 29 2a10:1a40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/C-vO5NIzea7YGuz_x6dCs1rN3bM.crl rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/C-vO5NIzea7YGuz_x6dCs1rN3bM.mft rsync://rpki.ripe.net/repository/DEFAULT/C-vO5NIzea7YGuz_x6dCs1rN3bM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:61:69:be:fe:59:e7:7a:3f:b1:0c:46:7e:42:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bebcee4d23379aed81aecffc7a742b35acdddb3 Validity Not Before: Jan 2 18:21:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4fec8759020aac853e1e4319ce52977e962f9e61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e7:5f:f4:41:9b:74:1f:03:97:5d:b5:99:b2: 0f:e7:78:90:6c:7c:d6:61:ac:4b:36:dc:f9:41:03: 4c:92:dc:29:70:94:44:d2:22:e3:b7:29:d3:f1:03: f0:ef:45:9d:7c:c3:f3:4d:95:da:af:e1:51:ad:6c: 11:3b:51:17:80:fe:82:dc:7d:d9:d8:dc:29:d9:30: 61:64:2a:0a:0f:de:b9:4c:33:e8:46:aa:18:7b:d5: b5:3e:5b:af:03:29:3f:25:e8:7a:83:fc:0d:74:bc: 8c:03:c4:d4:47:66:8f:b3:ff:05:58:74:19:7c:8c: 01:f5:38:63:02:f0:2e:40:cb:27:75:9e:c7:9b:cf: 4c:30:1d:af:f2:75:1c:52:45:da:13:7c:45:2a:ed: cc:07:b5:01:e9:4c:43:da:b7:de:78:9c:41:cb:45: 4e:7c:37:f9:8a:45:40:be:65:90:ac:38:b5:9c:f2: e4:19:d1:b2:ac:89:21:b9:9a:5c:88:61:3c:d8:78: 45:83:84:bb:57:f6:b1:3c:d9:56:0f:a2:dd:04:8f: 74:dd:97:27:e0:cc:47:38:9f:7b:38:21:9f:3b:33: b7:8f:b3:4a:19:08:d8:01:fd:30:60:82:eb:13:f1: 24:9e:7d:2f:a9:56:bf:0d:f2:0e:57:39:ec:2c:df: b1:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:EC:87:59:02:0A:AC:85:3E:1E:43:19:CE:52:97:7E:96:2F:9E:61 X509v3 Authority Key Identifier: keyid:0B:EB:CE:E4:D2:33:79:AE:D8:1A:EC:FF:C7:A7:42:B3:5A:CD:DD:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-vO5NIzea7YGuz_x6dCs1rN3bM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/T-yHWQIKrIU-HkMZzlKXfpYvnmE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/C-vO5NIzea7YGuz_x6dCs1rN3bM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.14.232.0/23 195.245.66.0/24 IPv6: 2a0e:1580::/29 2a10:1a40::/29 Signature Algorithm: sha256WithRSAEncryption 36:9f:51:d2:48:30:23:a5:9b:91:fc:49:46:b6:c9:01:d6:20: 6e:18:80:d3:3f:46:b7:a8:f9:14:dd:91:56:6c:af:84:8a:40: 62:13:9d:8a:0d:f9:e4:f1:cf:d4:34:e7:b5:ea:48:62:4a:22: 45:f2:ea:75:aa:01:1a:bd:9e:85:b6:10:6d:c6:17:b5:42:c7: d0:72:66:50:e8:6b:7f:44:25:52:3b:f8:83:b0:0f:f7:02:ec: b2:8f:86:09:8b:ee:71:c2:41:c6:a9:80:38:ed:35:2c:6e:73: 9a:d8:7b:22:9c:21:25:bf:d0:c9:f5:57:22:da:a5:d2:b0:7b: ce:4e:7d:23:fe:4f:63:60:b9:dc:c7:42:63:f1:eb:07:8f:eb: 54:f2:17:d0:e7:b2:9e:e2:62:69:1d:e7:07:6e:85:ae:05:f1: cb:d6:3f:9e:41:94:f6:2a:35:e1:6d:45:f1:c1:b2:4d:db:37: 67:c5:bf:23:df:77:a8:e9:78:94:31:dd:6f:10:a4:ba:f1:9b: 62:6b:91:39:e5:aa:7f:b7:19:cd:d7:f8:a6:2e:41:e0:2f:b1: 14:d3:59:1f:ec:63:2b:ea:fc:fe:d3:02:97:d7:d8:99:1e:d0: c1:c9:a6:a4:d0:12:e7:ef:09:66:3b:28:af:85:cd:0b:cb:84: 70:3c:77:83 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt/8WFpvv5Z53o/sQxGfkJDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZWJjZWU0ZDIzMzc5YWVkODFhZWNmZmM3YTc0MmIzNWFj ZGRkYjMwHhcNMjYwMTAyMTgyMTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZmVjODc1OTAyMGFhYzg1M2UxZTQzMTljZTUyOTc3ZTk2MmY5ZTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoudf9EGbdB8Dl121mbIP53iQbHzW YaxLNtz5QQNMktwpcJRE0iLjtynT8QPw70WdfMPzTZXar+FRrWwRO1EXgP6C3H3Z 2Nwp2TBhZCoKD965TDPoRqoYe9W1PluvAyk/Jeh6g/wNdLyMA8TUR2aPs/8FWHQZ fIwB9ThjAvAuQMsndZ7Hm89MMB2v8nUcUkXaE3xFKu3MB7UB6UxD2rfeeJxBy0VO fDf5ikVAvmWQrDi1nPLkGdGyrIkhuZpciGE82HhFg4S7V/axPNlWD6LdBI903Zcn 4MxHOJ97OCGfOzO3j7NKGQjYAf0wYILrE/Eknn0vqVa/DfIOVznsLN+xWwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFE/sh1kCCqyFPh5DGc5Sl36WL55hMB8GA1UdIwQY MBaAFAvrzuTSM3mu2Brs/8enQrNazd2zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQy12TzVOSXplYTdZR3V6X3g2ZENzMXJOM2JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8xZjMzMjItNmFmNy00N2FiLThkYzUt OTlhMTFmNjM4NWFiLzEvVC15SFdRSUtySVUtSGtNWnpsS1hmcFl2bm1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8xZjMzMjItNmFmNy00N2FiLThkYzUtOTlhMTFmNjM4NWFi LzEvQy12TzVOSXplYTdZR3V6X3g2ZENzMXJOM2JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQBLQ7oAwQA w/VCMBQEAgACMA4DBQMqDhWAAwUDKhAaQDANBgkqhkiG9w0BAQsFAAOCAQEANp9R 0kgwI6WbkfxJRrbJAdYgbhiA0z9Gt6j5FN2RVmyvhIpAYhOdig355PHP1DTntepI YkoiRfLqdaoBGr2ehbYQbcYXtULH0HJmUOhrf0QlUjv4g7AP9wLsso+GCYvuccJB xqmAOO01LG5zmth7IpwhJb/QyfVXItql0rB7zk59I/5PY2C53MdCY/HrB4/rVPIX 0OeynuJiaR3nB26FrgXxy9Y/nkGU9io14W1F8cGyTds3Z8W/I993qOl4lDHdbxCk uvGbYmuROeWqf7cZzdf4pi5B4C+xFNNZH+xjK+r8/tMCl9fYmR7QwcmmpNAS5+8J Zjsor4XNC8uEcDx3gw== -----END CERTIFICATE-----Generated at Mon Jan 26 14:22:48 2026 by rpki-client