This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/tM3rrLe-_dhZ0LqNTWbRHwcH0a0.roa File: tM3rrLe-_dhZ0LqNTWbRHwcH0a0.roa (raw, json) Hash identifier: mCMHaaXhfT9VeDu9M4tgELO+5HgeDqSNi4Gr5v6WmTA= Subject key identifier: B4:CD:EB:AC:B7:BE:FD:D8:59:D0:BA:8D:4D:66:D1:1F:07:07:D1:AD Certificate issuer: /CN=547841eeff20c78b33d411dae51a692adb892e31 Certificate serial: 019B7DCB0B813688777F2CFF26711E2D4EBD Authority key identifier: 54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/tM3rrLe-_dhZ0LqNTWbRHwcH0a0.roa Signing time: Fri 02 Jan 2026 08:20:17 +0000 ROA not before: Fri 02 Jan 2026 08:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205624 IP address blocks: 89.39.154.0/24 maxlen: 24 91.151.101.0/24 maxlen: 24 171.33.235.0/24 maxlen: 24 212.225.227.0/24 maxlen: 24 212.225.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:0b:81:36:88:77:7f:2c:ff:26:71:1e:2d:4e:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=547841eeff20c78b33d411dae51a692adb892e31 Validity Not Before: Jan 2 08:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4cdebacb7befdd859d0ba8d4d66d11f0707d1ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0c:8e:f6:d4:ee:d5:e9:f3:db:05:8d:67:23: ae:60:a1:c9:99:81:be:30:a9:94:aa:0b:8e:c6:8c: 08:e8:78:75:40:9f:a5:f9:d8:dc:ee:5f:f1:90:10: 69:dd:b2:b4:71:42:f3:f9:3a:22:27:c8:76:de:d4: 04:7e:2b:54:36:3e:01:05:55:d3:f4:41:a5:22:fe: 4e:db:ef:f4:9d:05:c6:08:82:ac:90:1d:37:df:df: c3:c4:01:e1:46:cf:bf:12:88:b0:48:71:93:be:07: 5e:39:07:58:9c:f3:a8:dd:23:e4:80:87:cb:19:bd: 85:d9:f3:b5:c4:60:86:ed:66:64:4a:fb:de:10:7b: b6:5a:c1:de:3e:a4:5c:72:71:ab:fa:c5:99:3c:df: 3f:9c:0a:e0:5a:8f:28:16:d0:2e:5e:5a:06:89:8e: 1d:50:4c:1f:df:fc:16:34:bd:e7:c5:0e:cd:30:45: 84:0a:36:f6:72:18:d7:e6:20:b6:e7:68:2d:1a:98: d7:ea:fb:17:3b:e3:e8:7b:70:13:89:0b:67:53:a0: 30:15:bc:c7:82:4b:62:dd:96:68:1b:c0:fb:6e:17: 85:18:bd:7b:8b:36:79:3c:5d:b3:96:8a:0c:9e:6c: 32:9d:ba:14:9d:5c:4e:19:71:5f:73:d8:d8:c5:ad: 8f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:CD:EB:AC:B7:BE:FD:D8:59:D0:BA:8D:4D:66:D1:1F:07:07:D1:AD X509v3 Authority Key Identifier: keyid:54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/tM3rrLe-_dhZ0LqNTWbRHwcH0a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.39.154.0/24 91.151.101.0/24 171.33.235.0/24 212.225.227.0/24 212.225.244.0/24 Signature Algorithm: sha256WithRSAEncryption 40:d6:ac:cf:e8:6b:a0:b8:0f:99:71:cd:92:c8:ea:2a:74:c7: fc:08:8a:3d:f2:bc:2d:61:bc:7c:f4:2a:1d:46:84:ab:b3:63: 1a:33:f6:ef:44:b8:76:2c:72:41:95:ed:65:6a:31:aa:35:78: ac:a2:85:6f:5b:64:32:f2:19:9a:b2:db:37:30:1b:ed:37:7d: 7a:49:98:39:32:33:99:d9:dd:34:05:e1:90:e3:d6:ae:b3:ba: 5b:c9:ae:78:81:94:e1:dd:5a:71:e6:a3:fe:70:69:91:e6:a8: eb:a6:28:fa:ed:4a:40:96:f2:9c:b7:86:56:de:bf:6e:de:75: d8:8c:6d:db:49:51:b2:bf:17:db:0c:26:de:7e:db:a4:8d:3b: 83:67:a9:83:12:3c:80:0e:ea:87:d4:85:90:9f:3b:71:30:55: 04:f7:2b:59:8b:d9:a3:bb:9d:d0:a7:fa:db:fc:99:02:f3:ef: 4e:f4:65:1b:f5:b5:29:5d:46:63:a2:57:9b:cb:54:3c:5f:6c: c0:70:3c:4b:d6:e5:49:bf:03:8d:3d:48:9f:02:e4:1a:7a:32: dc:4a:4b:7c:23:7d:7c:7c:b3:cf:e0:d5:36:91:b3:a3:3b:08: 5b:3a:ca:0a:62:2a:11:56:d0:26:39:ed:ce:c1:94:26:cc:3b: f5:21:e6:96 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt9ywuBNoh3fyz/JnEeLU69MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Nzg0MWVlZmYyMGM3OGIzM2Q0MTFkYWU1MWE2OTJhZGI4 OTJlMzEwHhcNMjYwMTAyMDgyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGNkZWJhY2I3YmVmZGQ4NTlkMGJhOGQ0ZDY2ZDExZjA3MDdkMWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAyO9tTu1enz2wWNZyOuYKHJmYG+ MKmUqguOxowI6Hh1QJ+l+djc7l/xkBBp3bK0cULz+ToiJ8h23tQEfitUNj4BBVXT 9EGlIv5O2+/0nQXGCIKskB0339/DxAHhRs+/EoiwSHGTvgdeOQdYnPOo3SPkgIfL Gb2F2fO1xGCG7WZkSvveEHu2WsHePqRccnGr+sWZPN8/nArgWo8oFtAuXloGiY4d UEwf3/wWNL3nxQ7NMEWECjb2chjX5iC252gtGpjX6vsXO+Poe3ATiQtnU6AwFbzH gkti3ZZoG8D7bheFGL17izZ5PF2zlooMnmwynboUnVxOGXFfc9jYxa2PTQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFLTN66y3vv3YWdC6jU1m0R8HB9GtMB8GA1UdIwQY MBaAFFR4Qe7/IMeLM9QR2uUaaSrbiS4xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkhoQjd2OGd4NHN6MUJIYTVScHBLdHVKTGpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9jOGQzOTMtM2UyOC00ZjA3LTk5NmIt MzY2YmExNzAwZmUwLzEvdE0zcnJMZS1fZGhaMExxTlRXYlJId2NIMGEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9jOGQzOTMtM2UyOC00ZjA3LTk5NmItMzY2YmExNzAwZmUw LzEvVkhoQjd2OGd4NHN6MUJIYTVScHBLdHVKTGpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAWSeaAwQA W5dlAwQAqyHrAwQA1OHjAwQA1OH0MA0GCSqGSIb3DQEBCwUAA4IBAQBA1qzP6Gug uA+Zcc2SyOoqdMf8CIo98rwtYbx89CodRoSrs2MaM/bvRLh2LHJBle1lajGqNXis ooVvW2Qy8hmasts3MBvtN316SZg5MjOZ2d00BeGQ49aus7pbya54gZTh3Vpx5qP+ cGmR5qjrpij67UpAlvKct4ZW3r9u3nXYjG3bSVGyvxfbDCbeftukjTuDZ6mDEjyA DuqH1IWQnztxMFUE9ytZi9mju53Qp/rb/JkC8+9O9GUb9bUpXUZjoleby1Q8X2zA cDxL1uVJvwONPUifAuQaejLcSkt8I318fLPP4NU2kbOjOwhbOsoKYioRVtAmOe3O wZQmzDv1IeaW -----END CERTIFICATE-----Generated at Mon Jan 26 04:20:16 2026 by rpki-client