This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/tPolntRW3EVoA5WCEpAsWda33Aw.roa File: tPolntRW3EVoA5WCEpAsWda33Aw.roa (raw, json) Hash identifier: R4nNUtjVrvsZ3qcmSOyRAEFItuX7aMB4GwPwNz7Vta4= Subject key identifier: B4:FA:25:9E:D4:56:DC:45:68:03:95:82:12:90:2C:59:D6:B7:DC:0C Certificate issuer: /CN=4127b0c0fe7c08935e258713fcf90fe958ee03ee Certificate serial: 019B797ED74081A22FBB4593E7D40B9CFD99 Authority key identifier: 41:27:B0:C0:FE:7C:08:93:5E:25:87:13:FC:F9:0F:E9:58:EE:03:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/tPolntRW3EVoA5WCEpAsWda33Aw.roa Signing time: Thu 01 Jan 2026 12:18:34 +0000 ROA not before: Thu 01 Jan 2026 12:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212850 IP address blocks: 185.120.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d7:40:81:a2:2f:bb:45:93:e7:d4:0b:9c:fd:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4127b0c0fe7c08935e258713fcf90fe958ee03ee Validity Not Before: Jan 1 12:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4fa259ed456dc456803958212902c59d6b7dc0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:03:01:a5:50:be:10:45:50:fe:81:b6:b4:94: 71:35:db:d9:3c:c3:97:5e:fd:bd:8a:57:7e:22:0f: ce:cf:23:09:dd:68:32:ae:d1:6f:1a:a4:0b:ee:e0: 46:fd:5e:f9:7f:95:0c:a9:f4:3a:81:56:35:95:46: 00:2a:e3:89:69:ba:46:da:c1:dc:0e:67:17:65:1e: 1a:ec:9a:b6:0d:ee:9c:86:a1:9b:b2:5f:74:98:bc: 68:ee:2f:87:5f:76:ac:6c:de:3e:09:5b:99:5b:31: 0d:d7:e0:e9:4c:d7:39:ae:70:df:65:20:e3:30:74: c2:43:7c:da:50:01:b7:03:f2:5f:25:e7:c3:92:e9: e8:78:c7:33:21:e0:94:f0:05:19:ab:e1:7e:6a:98: dd:0e:b5:b5:4c:14:04:78:92:71:14:a1:b9:cb:19: 05:7d:f4:16:3d:c4:df:f6:9d:03:67:64:22:86:e4: 0e:a4:30:0f:fe:60:ea:ac:24:75:d2:72:61:bc:eb: 36:a3:df:5a:d3:3a:93:aa:7c:9a:35:ab:5a:ab:70: df:57:df:25:5b:12:f3:a0:de:11:52:17:b7:c0:a5: f8:21:ef:08:d6:ed:43:bd:06:27:e4:44:90:ef:2f: cc:a3:1c:a4:03:d1:6a:03:01:ee:d0:ab:0d:a7:fe: af:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:FA:25:9E:D4:56:DC:45:68:03:95:82:12:90:2C:59:D6:B7:DC:0C X509v3 Authority Key Identifier: keyid:41:27:B0:C0:FE:7C:08:93:5E:25:87:13:FC:F9:0F:E9:58:EE:03:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/tPolntRW3EVoA5WCEpAsWda33Aw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.120.140.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:29:6a:22:02:cb:39:db:7d:94:14:67:e7:dd:5b:a1:7a:c7: 7e:5a:51:17:da:8c:dd:38:f2:44:99:89:0c:57:42:a5:2c:3e: ce:be:2a:f4:06:12:89:9e:fc:ec:2f:aa:d2:ed:2e:44:bd:a9: 58:82:7f:ed:6d:d6:86:16:ff:36:e9:84:30:85:70:b5:06:22: 91:54:a1:01:ad:00:cf:22:24:13:ba:96:74:cb:01:e7:f4:73: c5:2f:d9:61:9d:a3:8f:aa:7c:63:7b:89:e5:b8:c3:79:3b:0b: 86:5f:60:d6:c2:68:89:19:6d:d7:5e:e5:ab:4a:e3:ac:d8:64: 1e:03:bb:01:62:35:ef:01:37:c3:c4:92:01:b2:41:4b:ed:cf: 44:9d:05:05:93:0b:2f:87:6d:5c:d2:a4:e5:94:c6:5a:79:80: fa:8d:5b:46:9b:48:94:8a:56:82:a3:d2:b0:f1:fd:4e:e0:3d: 2e:13:25:14:f3:ca:ac:49:a8:e0:04:79:11:fc:3b:4a:19:06: f6:eb:46:fc:91:ab:9a:3f:90:9a:cb:67:76:c6:9e:b0:02:35: d6:2c:e5:40:67:77:e0:7f:76:1a:b5:7c:2f:fa:3e:13:1f:28: 2f:5c:91:8d:b3:d6:35:bc:2e:6f:eb:c4:79:34:80:d0:b7:67: aa:49:a0:e3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ftdAgaIvu0WT59QLnP2ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMjdiMGMwZmU3YzA4OTM1ZTI1ODcxM2ZjZjkwZmU5NThl ZTAzZWUwHhcNMjYwMTAxMTIxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGZhMjU5ZWQ0NTZkYzQ1NjgwMzk1ODIxMjkwMmM1OWQ2YjdkYzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQMBpVC+EEVQ/oG2tJRxNdvZPMOX Xv29ild+Ig/OzyMJ3WgyrtFvGqQL7uBG/V75f5UMqfQ6gVY1lUYAKuOJabpG2sHc DmcXZR4a7Jq2De6chqGbsl90mLxo7i+HX3asbN4+CVuZWzEN1+DpTNc5rnDfZSDj MHTCQ3zaUAG3A/JfJefDkunoeMczIeCU8AUZq+F+apjdDrW1TBQEeJJxFKG5yxkF ffQWPcTf9p0DZ2QihuQOpDAP/mDqrCR10nJhvOs2o99a0zqTqnyaNataq3DfV98l WxLzoN4RUhe3wKX4Ie8I1u1DvQYn5ESQ7y/MoxykA9FqAwHu0KsNp/6vPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLT6JZ7UVtxFaAOVghKQLFnWt9wMMB8GA1UdIwQY MBaAFEEnsMD+fAiTXiWHE/z5D+lY7gPuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVNld3dQNThDSk5lSlljVF9Qa1A2Vmp1QS00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9iZTI5MDMtMzUzOC00NmZmLWFhZTQt YmQxZDQ4ZDUxMmNlLzEvdFBvbG50UlczRVZvQTVXQ0VwQXNXZGEzM0F3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9iZTI5MDMtMzUzOC00NmZmLWFhZTQtYmQxZDQ4ZDUxMmNl LzEvUVNld3dQNThDSk5lSlljVF9Qa1A2Vmp1QS00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXiMMA0G CSqGSIb3DQEBCwUAA4IBAQB/KWoiAss5232UFGfn3Vuhesd+WlEX2ozdOPJEmYkM V0KlLD7Ovir0BhKJnvzsL6rS7S5EvalYgn/tbdaGFv826YQwhXC1BiKRVKEBrQDP IiQTupZ0ywHn9HPFL9lhnaOPqnxje4nluMN5OwuGX2DWwmiJGW3XXuWrSuOs2GQe A7sBYjXvATfDxJIBskFL7c9EnQUFkwsvh21c0qTllMZaeYD6jVtGm0iUilaCo9Kw 8f1O4D0uEyUU88qsSajgBHkR/DtKGQb260b8kauaP5Cay2d2xp6wAjXWLOVAZ3fg f3YatXwv+j4THygvXJGNs9Y1vC5v68R5NIDQt2eqSaDj -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:41 2026 by rpki-client