This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/T8EMDfdTagVi8bf6NhEesbphXJM.roa File: T8EMDfdTagVi8bf6NhEesbphXJM.roa (raw, json) Hash identifier: 6hI+AFXo6hDL1fXoGqP37i5aqqR9mXhECfOEwKoiPow= Subject key identifier: 4F:C1:0C:0D:F7:53:6A:05:62:F1:B7:FA:36:11:1E:B1:BA:61:5C:93 Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c Certificate serial: 019B7B361892464514EE68782CF80FB3B42D Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/T8EMDfdTagVi8bf6NhEesbphXJM.roa Signing time: Thu 01 Jan 2026 20:18:21 +0000 ROA not before: Thu 01 Jan 2026 20:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214530 IP address blocks: 31.14.100.0/23 maxlen: 23 86.105.170.0/24 maxlen: 24 86.106.156.0/24 maxlen: 24 89.33.45.0/24 maxlen: 24 89.33.238.0/23 maxlen: 23 89.35.117.0/24 maxlen: 24 89.36.148.0/23 maxlen: 23 89.36.196.0/24 maxlen: 24 89.37.159.0/24 maxlen: 24 89.38.138.0/23 maxlen: 23 89.40.136.0/23 maxlen: 23 188.241.104.0/24 maxlen: 24 188.241.105.0/24 maxlen: 24 188.241.184.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:18:92:46:45:14:ee:68:78:2c:f8:0f:b3:b4:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c Validity Not Before: Jan 1 20:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4fc10c0df7536a0562f1b7fa36111eb1ba615c93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:14:c2:99:85:b2:93:11:70:e2:0f:ad:9b:e3: a0:ca:69:b9:24:bd:c3:bd:34:f5:1e:9c:bf:6d:40: 21:6b:95:2d:13:cb:b3:25:ef:28:44:e0:08:cb:fd: 0e:5e:08:44:aa:32:13:38:5f:e9:01:26:f1:a9:94: 8f:59:72:34:d0:f9:5d:36:04:d2:f7:6f:fc:87:a1: 00:d1:0d:03:51:93:e8:a0:98:a1:d1:94:e0:bd:2e: 05:fe:9a:0a:1d:b6:f8:7f:6b:a6:c9:3e:dc:08:6c: 7d:5a:9c:04:e7:4a:e8:44:46:f3:d7:4b:f7:0f:84: ad:84:7c:a0:b5:98:2f:26:7a:22:f2:91:07:60:c0: 70:89:12:d9:02:29:ca:91:70:01:01:56:49:92:69: 5a:8a:b8:91:ea:55:04:c3:57:32:40:a4:18:57:45: eb:31:5b:d6:c7:aa:2d:0c:dc:61:4c:59:bd:25:b9: 5f:8a:1a:e5:8d:50:5d:bd:0e:4c:45:d9:50:a1:22: 78:38:2d:2b:82:a4:4a:0f:7a:14:de:d7:3d:33:5d: 68:46:7f:d8:6f:68:3a:ff:a7:8f:0c:77:e1:6e:6f: 1a:45:47:04:a7:38:90:c6:ef:be:b3:68:2e:e1:6d: 3b:58:6f:88:09:3d:23:ca:63:31:75:65:5e:bf:68: 4b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:C1:0C:0D:F7:53:6A:05:62:F1:B7:FA:36:11:1E:B1:BA:61:5C:93 X509v3 Authority Key Identifier: keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/T8EMDfdTagVi8bf6NhEesbphXJM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.14.100.0/23 86.105.170.0/24 86.106.156.0/24 89.33.45.0/24 89.33.238.0/23 89.35.117.0/24 89.36.148.0/23 89.36.196.0/24 89.37.159.0/24 89.38.138.0/23 89.40.136.0/23 188.241.104.0/23 188.241.184.0/23 Signature Algorithm: sha256WithRSAEncryption 1d:37:78:93:97:4a:42:7d:c3:00:b3:e1:c3:b2:1b:5b:8a:e8: 1e:e9:b4:06:ca:7a:fd:7f:73:85:bb:a8:3c:0c:4f:b9:f8:55: 4f:2d:46:7d:52:7b:bd:66:fc:69:86:33:9e:e2:d2:63:fc:36: fe:90:86:63:ad:0a:74:e3:55:a7:b7:0a:e6:54:f1:95:28:25: bb:da:4b:1b:e0:23:06:fb:8f:5c:62:87:6e:c8:a7:4e:29:fa: 92:45:66:e1:76:3a:a5:29:e8:f6:d4:9e:52:81:d2:5a:b8:e5: eb:fa:19:34:57:4a:a9:36:bd:03:83:33:c2:78:64:0a:31:a0: e2:27:f9:25:2f:76:9d:5c:28:45:07:8b:b5:55:a3:5d:3f:c5: 3b:4a:1a:4a:11:e8:21:9a:f3:44:84:68:c4:3b:9f:19:c8:5a: 7a:e5:e8:25:ef:e5:25:1d:4a:89:84:16:7f:21:8b:da:36:14: ea:fd:5c:e1:af:c8:d1:73:50:7f:2b:d6:a4:26:06:ec:d4:1d: d4:a0:55:89:c1:8f:66:40:eb:0c:87:d7:99:1b:e7:c7:7a:85: 78:67:7d:56:89:76:ec:ba:81:27:0d:2a:66:ca:71:14:9a:ba: fb:c9:b7:09:29:c1:ce:37:95:26:30:4b:49:f7:63:2d:8e:cb: 0b:13:b2:80 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgISAZt7NhiSRkUU7mh4LPgPs7QtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZjEzMmRmMTNlNGJlNTNkODI1MGM4YzQ4NDIwMjY0ZWVm NmMxNGMwHhcNMjYwMTAxMjAxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZmMxMGMwZGY3NTM2YTA1NjJmMWI3ZmEzNjExMWViMWJhNjE1YzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9hTCmYWykxFw4g+tm+Ogymm5JL3D vTT1Hpy/bUAha5UtE8uzJe8oROAIy/0OXghEqjITOF/pASbxqZSPWXI00PldNgTS 92/8h6EA0Q0DUZPooJih0ZTgvS4F/poKHbb4f2umyT7cCGx9WpwE50roREbz10v3 D4SthHygtZgvJnoi8pEHYMBwiRLZAinKkXABAVZJkmlairiR6lUEw1cyQKQYV0Xr MVvWx6otDNxhTFm9JblfihrljVBdvQ5MRdlQoSJ4OC0rgqRKD3oU3tc9M11oRn/Y b2g6/6ePDHfhbm8aRUcEpziQxu++s2gu4W07WG+ICT0jymMxdWVev2hLAwIDAQAB o4ICUTCCAk0wHQYDVR0OBBYEFE/BDA33U2oFYvG3+jYRHrG6YVyTMB8GA1UdIwQY MBaAFH3xMt8T5L5T2CUMjEhCAmTu9sFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYt OTc3ODY3NGVkYzk3LzEvVDhFTURmZFRhZ1ZpOGJmNk5oRWVzYnBoWEpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYtOTc3ODY3NGVkYzk3 LzEvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQBHw5kAwQA VmmqAwQAVmqcAwQAWSEtAwQBWSHuAwQAWSN1AwQBWSSUAwQAWSTEAwQAWSWfAwQB WSaKAwQBWSiIAwQBvPFoAwQBvPG4MA0GCSqGSIb3DQEBCwUAA4IBAQAdN3iTl0pC fcMAs+HDshtbiuge6bQGynr9f3OFu6g8DE+5+FVPLUZ9Unu9ZvxphjOe4tJj/Db+ kIZjrQp041WntwrmVPGVKCW72ksb4CMG+49cYoduyKdOKfqSRWbhdjqlKej21J5S gdJauOXr+hk0V0qpNr0DgzPCeGQKMaDiJ/klL3adXChFB4u1VaNdP8U7ShpKEegh mvNEhGjEO58ZyFp65egl7+UlHUqJhBZ/IYvaNhTq/Vzhr8jRc1B/K9akJgbs1B3U oFWJwY9mQOsMh9eZG+fHeoV4Z31WiXbsuoEnDSpmynEUmrr7ybcJKcHON5UmMEtJ 92MtjssLE7KA -----END CERTIFICATE-----Generated at Sun Jan 25 21:19:44 2026 by rpki-client