This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/T4FApCxhFe83q9A7YZlC1nZYzIE.roa File: T4FApCxhFe83q9A7YZlC1nZYzIE.roa (raw, json) Hash identifier: LjUt5usAgPWHNriSJWMg7OS8Oagi6w46/dUqLi/UEzA= Subject key identifier: 4F:81:40:A4:2C:61:15:EF:37:AB:D0:3B:61:99:42:D6:76:58:CC:81 Certificate issuer: /CN=3d8a553e05f0319bf452fa206c14ccda87304654 Certificate serial: 019B77C72105D86E4510AEBCFBF864F8201F Authority key identifier: 3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/T4FApCxhFe83q9A7YZlC1nZYzIE.roa Signing time: Thu 01 Jan 2026 04:18:17 +0000 ROA not before: Thu 01 Jan 2026 04:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50998 IP address blocks: 178.248.160.0/21 maxlen: 24 185.175.180.0/22 maxlen: 24 2a03:2200:2000::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:21:05:d8:6e:45:10:ae:bc:fb:f8:64:f8:20:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8a553e05f0319bf452fa206c14ccda87304654 Validity Not Before: Jan 1 04:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f8140a42c6115ef37abd03b619942d67658cc81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:be:06:2c:b6:01:21:ce:7e:f6:3b:c7:e9:86: 39:dc:be:e4:44:9b:e9:2f:3e:bd:c7:00:ae:70:4e: 72:60:d1:fa:26:83:83:e3:50:7c:d6:93:f1:8a:4c: 5d:47:c5:36:6b:95:e6:fe:c2:b6:06:32:42:52:ba: 44:ea:04:02:e2:d7:42:da:56:41:2d:b0:38:5b:f6: 72:47:24:48:9b:b2:b9:c7:af:90:90:39:5e:94:18: 02:eb:ff:e8:2b:98:c4:5f:6c:a5:79:fe:c3:a5:fc: 0c:47:cb:9f:88:c9:69:24:f7:8c:f7:8d:ec:66:cc: fa:c1:bf:2f:b8:b6:06:a0:6f:eb:ee:a3:fc:87:5a: 83:1f:e8:c5:6e:75:84:65:2d:97:19:0a:a0:cd:62: 6b:28:fb:31:86:b3:cf:c4:43:6b:11:78:43:ea:de: 6b:c9:1d:70:38:23:13:07:81:ea:13:13:d5:be:29: 2a:05:1e:91:fc:88:c3:d1:ca:f6:4b:a5:df:57:23: d9:da:4e:96:c9:cc:1f:e6:0a:4e:e3:a4:8e:5d:db: e3:b4:bc:46:01:b1:cf:55:f5:75:38:f2:46:45:bb: 94:ce:53:9f:63:c6:10:39:6a:1a:be:14:d8:a0:9f: f3:3e:69:62:60:89:f1:fd:5f:5a:82:ef:18:7e:ba: 9e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:81:40:A4:2C:61:15:EF:37:AB:D0:3B:61:99:42:D6:76:58:CC:81 X509v3 Authority Key Identifier: keyid:3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/T4FApCxhFe83q9A7YZlC1nZYzIE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.248.160.0/21 185.175.180.0/22 IPv6: 2a03:2200:2000::/39 Signature Algorithm: sha256WithRSAEncryption 58:b6:26:80:0e:24:68:f9:d3:6f:42:d7:81:18:4f:94:76:9d: ac:83:71:b1:11:fa:f8:91:bb:0f:9e:86:44:37:95:2a:e2:dc: 79:9f:60:7d:b7:84:d7:63:5a:1a:f7:d6:e9:43:9f:95:a3:4b: 6e:2e:e1:14:36:4b:cc:62:14:e3:ee:37:a9:0b:1f:31:a2:cf: 04:4b:71:4a:42:9a:33:39:b0:cc:78:29:08:00:99:95:7d:a2: 69:2f:2f:4b:27:24:14:92:99:0b:5d:32:7c:46:4f:4a:43:1e: 3c:5a:4a:1a:99:0a:11:eb:ac:dd:9f:04:2e:13:21:a1:31:d8: d1:80:d5:fa:66:1a:85:76:bf:8b:31:fd:3a:45:c7:2e:82:3c: 15:dd:31:94:85:9d:6b:93:3e:fd:5c:81:e8:7c:a3:49:b6:88: e8:10:8e:1b:71:d2:02:7a:46:79:6d:df:3e:a4:97:bf:e5:46: 18:ed:af:77:e6:40:f7:e9:59:c4:7d:b3:1d:bd:15:73:0f:0d: a0:e7:e7:dc:eb:ae:98:3a:98:79:a1:b7:35:2c:3a:4f:42:88: 99:5e:0d:d3:7b:fa:f0:7e:eb:e0:e7:8e:b9:7f:d4:bb:8c:ee: 69:55:45:7d:d3:49:06:b0:22:1f:55:5c:75:79:9f:cd:7e:d6: 67:99:df:84 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt3xyEF2G5FEK68+/hk+CAfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOGE1NTNlMDVmMDMxOWJmNDUyZmEyMDZjMTRjY2RhODcz MDQ2NTQwHhcNMjYwMTAxMDQxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjgxNDBhNDJjNjExNWVmMzdhYmQwM2I2MTk5NDJkNjc2NThjYzgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnr4GLLYBIc5+9jvH6YY53L7kRJvp Lz69xwCucE5yYNH6JoOD41B81pPxikxdR8U2a5Xm/sK2BjJCUrpE6gQC4tdC2lZB LbA4W/ZyRyRIm7K5x6+QkDlelBgC6//oK5jEX2ylef7DpfwMR8ufiMlpJPeM943s Zsz6wb8vuLYGoG/r7qP8h1qDH+jFbnWEZS2XGQqgzWJrKPsxhrPPxENrEXhD6t5r yR1wOCMTB4HqExPVvikqBR6R/IjD0cr2S6XfVyPZ2k6Wycwf5gpO46SOXdvjtLxG AbHPVfV1OPJGRbuUzlOfY8YQOWoavhTYoJ/zPmliYInx/V9agu8YfrqegwIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFE+BQKQsYRXvN6vQO2GZQtZ2WMyBMB8GA1UdIwQY MBaAFD2KVT4F8DGb9FL6IGwUzNqHMEZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFlwVlBnWHdNWnYwVXZvZ2JCVE0yb2N3UmxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy81MmNlNTQtZTQ5Yy00MTFjLTg1Mjct MGZiNDgyM2Y1Yjg3LzEvVDRGQXBDeGhGZTgzcTlBN1labEMxblpZeklFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy81MmNlNTQtZTQ5Yy00MTFjLTg1MjctMGZiNDgyM2Y1Yjg3 LzEvUFlwVlBnWHdNWnYwVXZvZ2JCVE0yb2N3UmxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQDsvigAwQC ua+0MA4EAgACMAgDBgEqAyIAIDANBgkqhkiG9w0BAQsFAAOCAQEAWLYmgA4kaPnT b0LXgRhPlHadrINxsRH6+JG7D56GRDeVKuLceZ9gfbeE12NaGvfW6UOflaNLbi7h FDZLzGIU4+43qQsfMaLPBEtxSkKaMzmwzHgpCACZlX2iaS8vSyckFJKZC10yfEZP SkMePFpKGpkKEeus3Z8ELhMhoTHY0YDV+mYahXa/izH9OkXHLoI8Fd0xlIWda5M+ /VyB6HyjSbaI6BCOG3HSAnpGeW3fPqSXv+VGGO2vd+ZA9+lZxH2zHb0Vcw8NoOfn 3OuumDqYeaG3NSw6T0KImV4N03v68H7r4OeOuX/Uu4zuaVVFfdNJBrAiH1VcdXmf zX7WZ5nfhA== -----END CERTIFICATE-----Generated at Sun Jan 25 18:09:36 2026 by rpki-client