This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/TMIETZCkfwkv20GhYgXVDmLAdSE.roa File: TMIETZCkfwkv20GhYgXVDmLAdSE.roa (raw, json) Hash identifier: rj6hnXGmK4tKBpRVA2yKPqqLtv9PZV5O4KXBEttP6pM= Subject key identifier: 4C:C2:04:4D:90:A4:7F:09:2F:DB:41:A1:62:05:D5:0E:62:C0:75:21 Certificate issuer: /CN=13fe9bcebae228b36c883c27ea5518e704c10991 Certificate serial: 019B7A5AAAD9E769FAB808A75C0193D792F3 Authority key identifier: 13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/TMIETZCkfwkv20GhYgXVDmLAdSE.roa Signing time: Thu 01 Jan 2026 16:18:40 +0000 ROA not before: Thu 01 Jan 2026 16:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213887 IP address blocks: 94.141.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.mft rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:aa:d9:e7:69:fa:b8:08:a7:5c:01:93:d7:92:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13fe9bcebae228b36c883c27ea5518e704c10991 Validity Not Before: Jan 1 16:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4cc2044d90a47f092fdb41a16205d50e62c07521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:da:22:e1:71:7e:32:c6:9d:99:d0:09:3e:97: 13:74:4f:8f:e6:f3:78:3e:8a:30:38:a8:ee:e6:cc: 2a:c5:fa:49:49:df:0d:d8:63:a7:15:0c:da:a0:44: 0f:88:26:77:c8:6c:62:ca:0e:f1:4f:74:b2:8b:f8: 22:78:c7:2e:b3:c8:2e:00:0b:90:7a:07:82:cc:b1: d8:b6:9b:c9:b5:bb:66:64:5b:4e:8f:9a:34:3f:c7: 89:31:ec:d8:7e:85:12:3c:93:0f:90:61:5a:84:5d: dc:c4:55:26:3d:a9:46:82:a9:96:5d:72:db:c1:fb: 6b:11:14:84:61:af:9d:11:ff:7f:70:cd:df:79:23: 9e:73:89:1b:90:ec:4a:72:49:0b:75:37:bb:17:d2: 91:e2:6e:33:7f:1b:44:35:03:98:89:9c:8b:45:18: 10:52:c0:07:47:21:c6:5e:3b:fa:92:aa:96:d5:c9: 5c:66:14:9b:91:8f:55:8e:de:29:0a:94:90:bc:d4: 49:73:aa:fd:7f:9a:36:89:9c:94:25:43:42:af:bf: a9:df:9f:b7:17:55:a9:d1:76:a3:a9:cd:01:84:c5: ef:91:81:6d:a8:89:8c:89:89:2e:92:f1:58:80:a5: 6e:a8:a3:ae:6c:b1:22:da:be:b7:66:39:d4:b4:e8: 5a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:C2:04:4D:90:A4:7F:09:2F:DB:41:A1:62:05:D5:0E:62:C0:75:21 X509v3 Authority Key Identifier: keyid:13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/TMIETZCkfwkv20GhYgXVDmLAdSE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.141.123.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:35:bc:43:6a:a4:cd:86:f1:28:e7:7e:d2:8e:f5:51:9a:59: a2:42:c2:7e:58:0c:5d:a4:5f:34:05:6e:53:b8:bd:20:ea:14: e7:de:34:e9:ee:99:e8:a0:f9:9a:55:80:30:e5:dc:a5:74:e1: 29:40:9f:f6:03:82:51:1b:1b:03:43:49:20:f7:9a:16:3d:88: d9:14:4c:9f:e8:a1:37:ad:d6:d9:6b:3b:f6:b2:7a:72:85:c8: 12:8e:14:74:d5:d7:69:8e:d8:84:15:e7:da:8e:19:f8:9c:1a: 75:79:52:6e:38:52:b4:4a:17:9f:a1:1a:99:9d:b7:05:30:9c: 5e:3e:d3:7a:61:fa:7e:a4:d3:24:46:1e:13:69:ba:d6:16:ee: 93:79:28:05:3d:e6:d7:a0:66:07:18:d9:6e:50:ab:32:d0:bb: 5a:50:29:97:2f:68:3c:8e:a8:ca:ec:07:28:77:fd:b8:52:fc: 8a:d5:29:ee:bd:15:71:0c:4b:3f:e5:74:60:59:d9:5b:98:9e: 14:72:41:f2:95:54:17:91:a8:4a:3b:ac:34:0f:8b:ec:e9:a8: c2:5f:3c:8e:b0:95:21:2e:33:0b:7f:ad:f6:06:57:00:83:c1: 7b:b2:32:a7:ad:7f:04:8e:b9:89:47:fb:9c:9a:68:c2:84:a3: 4a:28:b3:ef -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WqrZ52n6uAinXAGT15LzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZmU5YmNlYmFlMjI4YjM2Yzg4M2MyN2VhNTUxOGU3MDRj MTA5OTEwHhcNMjYwMTAxMTYxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Y2MyMDQ0ZDkwYTQ3ZjA5MmZkYjQxYTE2MjA1ZDUwZTYyYzA3NTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNoi4XF+MsadmdAJPpcTdE+P5vN4 PoowOKju5swqxfpJSd8N2GOnFQzaoEQPiCZ3yGxiyg7xT3Syi/gieMcus8guAAuQ egeCzLHYtpvJtbtmZFtOj5o0P8eJMezYfoUSPJMPkGFahF3cxFUmPalGgqmWXXLb wftrERSEYa+dEf9/cM3feSOec4kbkOxKckkLdTe7F9KR4m4zfxtENQOYiZyLRRgQ UsAHRyHGXjv6kqqW1clcZhSbkY9Vjt4pCpSQvNRJc6r9f5o2iZyUJUNCr7+p35+3 F1Wp0Xajqc0BhMXvkYFtqImMiYkukvFYgKVuqKOubLEi2r63ZjnUtOhaFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEzCBE2QpH8JL9tBoWIF1Q5iwHUhMB8GA1UdIwQY MBaAFBP+m8664iizbIg8J+pVGOcEwQmRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRV82YnpycmlLTE5zaUR3bjZsVVk1d1RCQ1pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS81MGE3ZGEtMTYyYi00YmRlLWIwYzQt NWUyZDYwNzBlZjgzLzEvVE1JRVRaQ2tmd2t2MjBHaFlnWFZEbUxBZFNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS81MGE3ZGEtMTYyYi00YmRlLWIwYzQtNWUyZDYwNzBlZjgz LzEvRV82YnpycmlLTE5zaUR3bjZsVVk1d1RCQ1pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXo17MA0G CSqGSIb3DQEBCwUAA4IBAQA9NbxDaqTNhvEo537SjvVRmlmiQsJ+WAxdpF80BW5T uL0g6hTn3jTp7pnooPmaVYAw5dyldOEpQJ/2A4JRGxsDQ0kg95oWPYjZFEyf6KE3 rdbZazv2snpyhcgSjhR01ddpjtiEFefajhn4nBp1eVJuOFK0ShefoRqZnbcFMJxe PtN6Yfp+pNMkRh4TabrWFu6TeSgFPebXoGYHGNluUKsy0LtaUCmXL2g8jqjK7Aco d/24UvyK1SnuvRVxDEs/5XRgWdlbmJ4UckHylVQXkahKO6w0D4vs6ajCXzyOsJUh LjMLf632BlcAg8F7sjKnrX8EjrmJR/ucmmjChKNKKLPv -----END CERTIFICATE-----Generated at Sun Jan 25 15:11:30 2026 by rpki-client