This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/T3y-vjZIxVWN7JxZPOetrQJcWz0.roa File: T3y-vjZIxVWN7JxZPOetrQJcWz0.roa (raw, json) Hash identifier: XkyUMDJqJv6+3HQxI00RxtfuBMdhPrCaA/EHDWTyM5E= Subject key identifier: 4F:7C:BE:BE:36:48:C5:55:8D:EC:9C:59:3C:E7:AD:AD:02:5C:5B:3D Certificate issuer: /CN=e2c756c691073752260eda0b29df3140cec48c18 Certificate serial: 019B78A335FE37C104C723286495869032CD Authority key identifier: E2:C7:56:C6:91:07:37:52:26:0E:DA:0B:29:DF:31:40:CE:C4:8C:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sdWxpEHN1ImDtoLKd8xQM7EjBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/T3y-vjZIxVWN7JxZPOetrQJcWz0.roa Signing time: Thu 01 Jan 2026 08:18:40 +0000 ROA not before: Thu 01 Jan 2026 08:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60508 IP address blocks: 93.90.76.0/22 maxlen: 22 93.90.76.0/24 maxlen: 24 93.90.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft rsync://rpki.ripe.net/repository/DEFAULT/4sdWxpEHN1ImDtoLKd8xQM7EjBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:35:fe:37:c1:04:c7:23:28:64:95:86:90:32:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c756c691073752260eda0b29df3140cec48c18 Validity Not Before: Jan 1 08:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f7cbebe3648c5558dec9c593ce7adad025c5b3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ac:93:ab:30:7b:98:fd:92:e8:4a:9e:83:ea: d7:5e:d0:9f:36:eb:7a:12:56:4b:40:c0:cd:bd:29: 1e:58:90:9f:f4:0f:c1:0c:32:78:06:e7:45:e5:10: f4:d5:31:42:d6:99:5a:07:29:70:4d:29:7b:af:18: cc:6f:90:c8:f8:c1:8e:a6:a8:d4:93:0d:d4:be:bd: 42:4a:88:38:7b:8b:fc:e0:70:51:c9:1a:9a:b4:25: 16:10:2c:0f:ae:b0:58:92:55:73:83:da:1e:71:ff: 3d:fb:71:f0:7f:2c:df:75:77:91:11:33:2d:20:b9: 39:92:ee:1d:7f:ab:95:9d:98:39:ec:e8:aa:eb:59: d0:3b:84:52:ed:fd:1e:fc:dc:56:36:f4:37:bf:81: d0:28:fe:60:05:e4:bc:89:88:a4:b6:1a:df:72:2a: 40:1b:5f:2a:b8:03:fa:0d:15:90:ce:71:5a:3b:45: 86:b5:1f:31:77:e2:f0:68:05:1b:aa:88:84:64:5e: d3:e5:42:dd:62:4b:7e:c8:f6:a0:bf:b9:9d:09:04: d1:22:b7:73:eb:56:f3:0c:39:41:e7:c6:00:31:11: 3f:11:e0:f5:0e:2a:48:58:64:16:52:77:06:5d:3b: d1:58:b9:d6:fa:00:e2:0a:ae:39:61:7e:9e:12:6c: 83:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:7C:BE:BE:36:48:C5:55:8D:EC:9C:59:3C:E7:AD:AD:02:5C:5B:3D X509v3 Authority Key Identifier: keyid:E2:C7:56:C6:91:07:37:52:26:0E:DA:0B:29:DF:31:40:CE:C4:8C:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sdWxpEHN1ImDtoLKd8xQM7EjBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/T3y-vjZIxVWN7JxZPOetrQJcWz0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.90.76.0/22 Signature Algorithm: sha256WithRSAEncryption 47:ec:33:de:9b:71:ab:12:29:4c:a8:dd:99:11:e7:67:89:c5: 9b:0e:7b:e7:96:e1:df:94:55:61:75:76:ed:49:f3:3c:20:3e: 05:c7:ab:df:fa:71:29:7a:6a:c6:38:22:9f:a5:92:76:ac:8a: 87:53:be:12:69:cf:39:7b:81:56:99:4c:c2:8d:c0:4e:78:d0: b4:3b:79:70:9e:b9:1d:36:19:31:67:c6:ff:2b:61:a4:10:a2: b8:6b:65:1b:1e:08:82:8d:a7:04:f6:c9:2d:bc:74:0c:cf:e0: fd:33:86:24:d6:16:59:c2:85:1f:33:f4:a9:c5:a7:70:d3:5e: dd:48:c3:7c:93:69:b7:38:5f:18:32:d0:a7:d1:cd:63:f3:d0: d2:e2:4a:80:37:55:ae:36:cb:b5:0c:3a:a6:af:20:25:2a:d2: f7:c0:75:3d:8c:d6:67:25:a8:d7:15:ae:c7:6e:b9:8c:c2:88: f5:f1:d7:36:85:1d:6e:7c:db:57:54:50:f9:e5:3a:68:66:ec: 49:ff:30:d2:60:38:a7:b0:d0:2a:73:3a:bc:68:0b:0f:f6:e5: f5:16:62:ee:4b:9c:48:12:98:b0:0e:f8:31:b4:60:92:e6:11: f9:28:2a:71:ff:94:49:d0:e3:93:8a:a6:e6:c5:db:a6:c9:dd: 8e:b6:64:6d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ozX+N8EExyMoZJWGkDLNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzc1NmM2OTEwNzM3NTIyNjBlZGEwYjI5ZGYzMTQwY2Vj NDhjMTgwHhcNMjYwMTAxMDgxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjdjYmViZTM2NDhjNTU1OGRlYzljNTkzY2U3YWRhZDAyNWM1YjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqyTqzB7mP2S6Eqeg+rXXtCfNut6 ElZLQMDNvSkeWJCf9A/BDDJ4BudF5RD01TFC1plaBylwTSl7rxjMb5DI+MGOpqjU kw3Uvr1CSog4e4v84HBRyRqatCUWECwPrrBYklVzg9oecf89+3HwfyzfdXeRETMt ILk5ku4df6uVnZg57Oiq61nQO4RS7f0e/NxWNvQ3v4HQKP5gBeS8iYikthrfcipA G18quAP6DRWQznFaO0WGtR8xd+LwaAUbqoiEZF7T5ULdYkt+yPagv7mdCQTRIrdz 61bzDDlB58YAMRE/EeD1DipIWGQWUncGXTvRWLnW+gDiCq45YX6eEmyDCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE98vr42SMVVjeycWTznra0CXFs9MB8GA1UdIwQY MBaAFOLHVsaRBzdSJg7aCynfMUDOxIwYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNkV3hwRUhOMUltRHRvTEtkOHhRTTdFakJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC80NTRmMTEtZmMzNS00OThjLWE3YzAt NWE0ZDhiNGUzZjBhLzEvVDN5LXZqWkl4VldON0p4WlBPZXRyUUpjV3owLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC80NTRmMTEtZmMzNS00OThjLWE3YzAtNWE0ZDhiNGUzZjBh LzEvNHNkV3hwRUhOMUltRHRvTEtkOHhRTTdFakJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXVpMMA0G CSqGSIb3DQEBCwUAA4IBAQBH7DPem3GrEilMqN2ZEednicWbDnvnluHflFVhdXbt SfM8ID4Fx6vf+nEpemrGOCKfpZJ2rIqHU74Sac85e4FWmUzCjcBOeNC0O3lwnrkd NhkxZ8b/K2GkEKK4a2UbHgiCjacE9sktvHQMz+D9M4Yk1hZZwoUfM/Spxadw017d SMN8k2m3OF8YMtCn0c1j89DS4kqAN1WuNsu1DDqmryAlKtL3wHU9jNZnJajXFa7H brmMwoj18dc2hR1ufNtXVFD55TpoZuxJ/zDSYDinsNAqczq8aAsP9uX1FmLuS5xI EpiwDvgxtGCS5hH5KCpx/5RJ0OOTiqbmxdumyd2OtmRt -----END CERTIFICATE-----Generated at Mon Jan 26 05:32:09 2026 by rpki-client