This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/0tMWDsmaNpirizCIuYm2kQJNSB4.roa File: 0tMWDsmaNpirizCIuYm2kQJNSB4.roa (raw, json) Hash identifier: 7gDJtEKwpzRoEr+LF0O50BFAilj5lath99QLh0PO740= Subject key identifier: D2:D3:16:0E:C9:9A:36:98:AB:8B:30:88:B9:89:B6:91:02:4D:48:1E Certificate issuer: /CN=e8a32e8a6ac6f6ec37860ee7c07eb8df93147779 Certificate serial: 019B7AC7B455C0B005E059124737185B2F19 Authority key identifier: E8:A3:2E:8A:6A:C6:F6:EC:37:86:0E:E7:C0:7E:B8:DF:93:14:77:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KMuimrG9uw3hg7nwH6435MUd3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/0tMWDsmaNpirizCIuYm2kQJNSB4.roa Signing time: Thu 01 Jan 2026 18:17:46 +0000 ROA not before: Thu 01 Jan 2026 18:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204896 IP address blocks: 91.142.112.0/20 maxlen: 20 185.143.148.0/22 maxlen: 22 2a00:17b0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.mft rsync://rpki.ripe.net/repository/DEFAULT/6KMuimrG9uw3hg7nwH6435MUd3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:b4:55:c0:b0:05:e0:59:12:47:37:18:5b:2f:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8a32e8a6ac6f6ec37860ee7c07eb8df93147779 Validity Not Before: Jan 1 18:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2d3160ec99a3698ab8b3088b989b691024d481e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:0f:87:93:ca:15:b1:b4:77:2b:e4:6e:93:c9: f4:e7:18:95:2f:22:9d:ce:68:05:ae:4f:2d:f8:50: c2:60:19:75:61:0a:89:b1:85:da:3a:61:ab:4e:ea: fc:77:43:e6:11:c6:4c:2e:51:88:d1:f1:bd:e9:f9: 40:7b:66:83:24:d4:cc:37:86:9a:5c:2b:51:2d:f4: 42:e3:7b:5b:1d:df:08:d7:8c:ba:1f:ee:66:bc:fe: b7:f9:fe:ae:9a:2d:a7:01:a9:cc:55:bb:a0:cb:cf: 40:1f:b1:0a:51:49:2c:d1:13:14:45:c7:7d:91:61: 13:1e:10:eb:ac:54:e1:1e:79:41:5c:d3:01:ca:35: da:6a:b4:61:b6:1b:b7:a8:f7:9a:7f:17:08:ac:8b: d3:12:95:f5:cf:42:39:03:d3:95:fd:2e:1c:c2:52: 02:4a:fc:d5:2e:c7:a3:6d:19:30:92:54:4b:51:08: 84:80:a8:2a:f1:0e:11:e4:0e:12:a4:56:40:04:69: 13:df:84:48:63:1c:43:18:66:d8:93:67:75:36:02: c0:47:50:c1:c2:52:73:17:80:c5:75:57:a6:f2:09: 05:d9:ed:b4:f7:f5:13:a9:54:c4:00:d7:e8:90:7c: 37:c8:2d:3c:e3:79:0d:c3:fe:ca:ca:6e:7c:58:bd: 95:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:D3:16:0E:C9:9A:36:98:AB:8B:30:88:B9:89:B6:91:02:4D:48:1E X509v3 Authority Key Identifier: keyid:E8:A3:2E:8A:6A:C6:F6:EC:37:86:0E:E7:C0:7E:B8:DF:93:14:77:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KMuimrG9uw3hg7nwH6435MUd3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/0tMWDsmaNpirizCIuYm2kQJNSB4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.142.112.0/20 185.143.148.0/22 IPv6: 2a00:17b0::/32 Signature Algorithm: sha256WithRSAEncryption 7e:9e:78:0d:32:10:db:97:ef:c5:da:6c:e3:f5:df:08:c5:2d: 4f:90:00:eb:1c:de:21:55:a5:f6:91:cf:6c:96:e0:21:fb:9e: 82:67:6b:05:20:3c:4e:46:84:2a:c0:4b:10:ac:6e:11:fc:58: 99:9e:b8:88:60:cc:92:b6:2e:95:ce:a2:0f:bb:dc:1d:3f:03: 28:56:2d:e6:b9:76:40:90:56:ea:b4:64:9c:f7:09:bd:37:0c: 0a:64:4e:76:85:e1:7f:52:26:53:8a:7c:96:a3:84:37:8d:e8: dc:ee:c8:3e:54:48:34:6f:d0:18:10:99:51:26:2d:24:4b:0c: 70:83:36:93:28:e5:81:0d:4d:51:df:fc:98:4c:35:7b:f1:83: c4:69:34:3e:37:96:f8:0d:3e:e8:ee:e8:89:2f:51:c8:b9:8c: a3:f2:05:52:e5:56:1a:b4:08:05:d2:8f:91:cd:3d:6e:7a:63: 4c:04:49:be:17:4f:d1:a3:02:ae:d4:45:19:19:78:a9:7f:c3: 9a:13:73:17:86:8a:08:a5:8f:c0:34:51:49:3c:06:7e:f8:89: bb:fa:0a:0b:14:4d:27:e8:a8:b7:34:3e:43:26:0c:2d:2e:55: 50:d5:96:5b:dd:72:ab:38:75:6e:e0:f7:7c:52:49:65:b1:7f: 05:7a:36:68 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6x7RVwLAF4FkSRzcYWy8ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4YTMyZThhNmFjNmY2ZWMzNzg2MGVlN2MwN2ViOGRmOTMx NDc3NzkwHhcNMjYwMTAxMTgxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmQzMTYwZWM5OWEzNjk4YWI4YjMwODhiOTg5YjY5MTAyNGQ0ODFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/g+Hk8oVsbR3K+Ruk8n05xiVLyKd zmgFrk8t+FDCYBl1YQqJsYXaOmGrTur8d0PmEcZMLlGI0fG96flAe2aDJNTMN4aa XCtRLfRC43tbHd8I14y6H+5mvP63+f6umi2nAanMVbugy89AH7EKUUks0RMURcd9 kWETHhDrrFThHnlBXNMByjXaarRhthu3qPeafxcIrIvTEpX1z0I5A9OV/S4cwlIC SvzVLsejbRkwklRLUQiEgKgq8Q4R5A4SpFZABGkT34RIYxxDGGbYk2d1NgLAR1DB wlJzF4DFdVem8gkF2e209/UTqVTEANfokHw3yC0843kNw/7Kym58WL2VkQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFNLTFg7JmjaYq4swiLmJtpECTUgeMB8GA1UdIwQY MBaAFOijLopqxvbsN4YO58B+uN+TFHd5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNktNdWltckc5dXczaGc3bndINjQzNU1VZDNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9jNGJmZDQtYTBhMS00MzM0LTg2MGEt NGZhNTM3ZGJlMmU5LzEvMHRNV0RzbWFOcGlyaXpDSXVZbTJrUUpOU0I0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9jNGJmZDQtYTBhMS00MzM0LTg2MGEtNGZhNTM3ZGJlMmU5 LzEvNktNdWltckc5dXczaGc3bndINjQzNU1VZDNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEW45wAwQC uY+UMA0EAgACMAcDBQAqABewMA0GCSqGSIb3DQEBCwUAA4IBAQB+nngNMhDbl+/F 2mzj9d8IxS1PkADrHN4hVaX2kc9sluAh+56CZ2sFIDxORoQqwEsQrG4R/FiZnriI YMySti6VzqIPu9wdPwMoVi3muXZAkFbqtGSc9wm9NwwKZE52heF/UiZTinyWo4Q3 jejc7sg+VEg0b9AYEJlRJi0kSwxwgzaTKOWBDU1R3/yYTDV78YPEaTQ+N5b4DT7o 7uiJL1HIuYyj8gVS5VYatAgF0o+RzT1uemNMBEm+F0/RowKu1EUZGXipf8OaE3MX hooIpY/ANFFJPAZ++Im7+goLFE0n6Ki3ND5DJgwtLlVQ1ZZb3XKrOHVu4Pd8Ukll sX8FejZo -----END CERTIFICATE-----Generated at Sun Jan 25 15:12:19 2026 by rpki-client