This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/tEALMFY5mRNnPeI1w2B4fh6s5fw.roa File: tEALMFY5mRNnPeI1w2B4fh6s5fw.roa (raw, json) Hash identifier: OpvOgmRGG0JJ9f1GQilIMwIzyL+4wnLk8rAzuKjlbwM= Subject key identifier: B4:40:0B:30:56:39:99:13:67:3D:E2:35:C3:60:78:7E:1E:AC:E5:FC Certificate issuer: /CN=547841eeff20c78b33d411dae51a692adb892e31 Certificate serial: 019B7DCB0A01D728F91474F5A3039EE74DF6 Authority key identifier: 54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/tEALMFY5mRNnPeI1w2B4fh6s5fw.roa Signing time: Fri 02 Jan 2026 08:20:16 +0000 ROA not before: Fri 02 Jan 2026 08:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199292 IP address blocks: 212.225.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:0a:01:d7:28:f9:14:74:f5:a3:03:9e:e7:4d:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=547841eeff20c78b33d411dae51a692adb892e31 Validity Not Before: Jan 2 08:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4400b3056399913673de235c360787e1eace5fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d8:6c:14:ba:7e:1d:7e:1b:a7:c5:e6:ae:e6: 66:78:8f:2e:19:c0:50:52:ee:3c:b4:bb:74:50:99: 4c:8d:c7:66:41:59:7f:d3:36:21:be:27:59:0a:92: cc:97:50:e9:16:24:75:74:57:3a:e6:23:d4:42:41: 32:8e:73:2d:9b:11:aa:0a:a9:2a:de:36:04:3e:f7: cc:eb:5b:6d:cf:c5:04:b5:79:f0:cf:32:13:83:1a: 45:74:3f:dd:56:6c:f6:77:0f:c8:3e:09:fc:78:0f: 24:82:c8:de:8e:9b:e1:97:7e:de:da:cb:21:5e:6f: 7c:5c:eb:8b:e4:43:51:ef:3e:31:26:7d:1d:1b:ff: 9e:62:2b:a7:42:af:82:a5:64:33:10:a5:71:ba:79: 23:77:d6:6f:27:8a:47:42:6c:3b:49:03:0d:de:91: 06:9a:f2:20:5d:c2:4a:4c:66:aa:8b:48:95:5a:16: c3:d1:ad:90:3d:2c:3e:2e:cc:cc:d9:db:d2:a4:58: 36:a7:9f:9d:b2:90:83:8a:a4:1a:d6:0c:6a:05:b6: e0:60:69:c1:6b:a8:d7:11:a4:80:97:93:f4:55:a3: aa:f0:3e:48:9e:9a:b0:a5:01:2d:28:a2:b1:89:1d: c9:e6:db:35:59:c6:7e:68:0c:2c:c5:21:3d:29:2d: 77:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:40:0B:30:56:39:99:13:67:3D:E2:35:C3:60:78:7E:1E:AC:E5:FC X509v3 Authority Key Identifier: keyid:54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/tEALMFY5mRNnPeI1w2B4fh6s5fw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.225.253.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:09:c1:23:12:75:68:57:5b:2e:03:3b:49:91:40:95:35:95: 92:2a:32:24:01:d2:84:c1:a3:8d:ab:59:c8:c2:ac:3d:e9:1c: dd:7a:9c:0e:0a:78:bd:b8:db:27:91:50:ef:cf:c4:31:e9:cf: 3c:f1:79:ed:a4:7b:88:bb:98:c8:ab:98:49:50:18:3d:fc:cc: 8a:22:14:11:64:fe:7d:cd:9e:83:fa:52:d0:01:7e:b8:61:38: e7:11:2f:bc:d0:f4:48:60:cd:f5:bc:3b:ff:de:03:5b:4f:91: ad:96:25:df:f4:31:e9:6d:78:65:16:7e:58:ac:c3:42:35:95: f7:2e:16:0b:a1:7a:4b:50:78:65:00:3f:8f:37:e0:92:9e:c5: 35:d2:a3:31:0e:06:17:a2:f1:0b:f5:bb:29:36:6d:47:ba:b4: eb:df:88:e4:b6:a2:32:1c:aa:47:f3:33:8a:ae:db:d3:7b:15: a4:98:6b:dc:84:57:22:c9:7e:08:c6:37:79:df:2c:07:dc:69: 39:8a:14:27:4f:b1:60:fa:b8:87:40:c5:06:ae:73:b9:97:26: d8:c8:bf:2b:2d:f3:f9:b0:8e:7a:f8:7d:21:ff:0a:53:ba:60: 44:ed:fc:fc:8b:32:2c:c6:77:51:32:97:a4:66:14:93:43:b8: 68:04:9a:13 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ywoB1yj5FHT1owOe5032MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Nzg0MWVlZmYyMGM3OGIzM2Q0MTFkYWU1MWE2OTJhZGI4 OTJlMzEwHhcNMjYwMTAyMDgyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDQwMGIzMDU2Mzk5OTEzNjczZGUyMzVjMzYwNzg3ZTFlYWNlNWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNhsFLp+HX4bp8XmruZmeI8uGcBQ Uu48tLt0UJlMjcdmQVl/0zYhvidZCpLMl1DpFiR1dFc65iPUQkEyjnMtmxGqCqkq 3jYEPvfM61ttz8UEtXnwzzITgxpFdD/dVmz2dw/IPgn8eA8kgsjejpvhl37e2ssh Xm98XOuL5ENR7z4xJn0dG/+eYiunQq+CpWQzEKVxunkjd9ZvJ4pHQmw7SQMN3pEG mvIgXcJKTGaqi0iVWhbD0a2QPSw+LszM2dvSpFg2p5+dspCDiqQa1gxqBbbgYGnB a6jXEaSAl5P0VaOq8D5InpqwpQEtKKKxiR3J5ts1WcZ+aAwsxSE9KS13YQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLRACzBWOZkTZz3iNcNgeH4erOX8MB8GA1UdIwQY MBaAFFR4Qe7/IMeLM9QR2uUaaSrbiS4xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkhoQjd2OGd4NHN6MUJIYTVScHBLdHVKTGpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9jOGQzOTMtM2UyOC00ZjA3LTk5NmIt MzY2YmExNzAwZmUwLzEvdEVBTE1GWTVtUk5uUGVJMXcyQjRmaDZzNWZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9jOGQzOTMtM2UyOC00ZjA3LTk5NmItMzY2YmExNzAwZmUw LzEvVkhoQjd2OGd4NHN6MUJIYTVScHBLdHVKTGpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1OH9MA0G CSqGSIb3DQEBCwUAA4IBAQBsCcEjEnVoV1suAztJkUCVNZWSKjIkAdKEwaONq1nI wqw96RzdepwOCni9uNsnkVDvz8Qx6c888XntpHuIu5jIq5hJUBg9/MyKIhQRZP59 zZ6D+lLQAX64YTjnES+80PRIYM31vDv/3gNbT5GtliXf9DHpbXhlFn5YrMNCNZX3 LhYLoXpLUHhlAD+PN+CSnsU10qMxDgYXovEL9bspNm1HurTr34jktqIyHKpH8zOK rtvTexWkmGvchFciyX4Ixjd53ywH3Gk5ihQnT7Fg+riHQMUGrnO5lybYyL8rLfP5 sI56+H0h/wpTumBE7fz8izIsxndRMpekZhSTQ7hoBJoT -----END CERTIFICATE-----Generated at Mon Jan 26 02:43:58 2026 by rpki-client