This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/TJ2UCD3Urxqqt9VYyEf23Fmmaqc.roa File: TJ2UCD3Urxqqt9VYyEf23Fmmaqc.roa (raw, json) Hash identifier: ofKvq3GVg7zKLaiA8CE5CKSDJCDWtrOUHXHufuUJ1ug= Subject key identifier: 4C:9D:94:08:3D:D4:AF:1A:AA:B7:D5:58:C8:47:F6:DC:59:A6:6A:A7 Certificate issuer: /CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078 Certificate serial: 019B78A36459E629026297CC7BE6617E1774 Authority key identifier: 60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/TJ2UCD3Urxqqt9VYyEf23Fmmaqc.roa Signing time: Thu 01 Jan 2026 08:18:52 +0000 ROA not before: Thu 01 Jan 2026 08:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24631 IP address blocks: 109.95.64.0/24 maxlen: 24 109.95.66.0/24 maxlen: 24 109.95.67.0/24 maxlen: 24 109.95.69.0/24 maxlen: 24 109.95.70.0/24 maxlen: 24 109.95.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:64:59:e6:29:02:62:97:cc:7b:e6:61:7e:17:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078 Validity Not Before: Jan 1 08:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c9d94083dd4af1aaab7d558c847f6dc59a66aa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b0:0d:5f:35:8d:73:31:9b:b6:41:e0:92:8e: 01:bf:20:8c:ec:82:62:b6:d9:55:f7:9b:de:0a:44: 29:09:c2:54:8c:1f:7c:52:7d:d5:5f:7d:49:9c:ea: 90:80:6f:17:d7:e5:0b:79:a8:fa:ad:d2:83:df:e9: 66:d1:bf:2d:30:90:8a:8d:82:a2:1b:27:6e:15:74: db:3f:df:8a:2f:d7:30:c2:6f:fe:ab:28:ae:7c:e8: c5:dd:14:5f:05:75:7d:16:a9:49:8a:54:2a:cb:1d: e0:bc:6f:e8:89:08:eb:47:e6:c1:75:97:ee:5f:5a: 0e:e6:72:70:4c:58:3d:9c:aa:77:62:86:b6:18:ca: 1b:0a:42:0d:c8:89:db:32:46:28:61:d7:18:32:c5: d9:ac:d3:b1:e9:2b:6d:e8:6f:70:fc:96:48:59:db: 71:05:20:9e:4e:7d:73:bc:cd:ea:7c:07:c3:cf:c1: 41:70:78:bb:a8:d0:5a:5e:91:ba:d3:43:00:bf:76: 43:a5:4b:86:da:10:54:1c:4e:a6:eb:8d:8e:b2:2f: e8:d1:20:e2:43:4a:86:53:d2:d1:e9:0d:56:1d:8a: de:b9:08:a4:c4:24:ab:69:a8:fa:84:ea:01:dd:ba: aa:9f:1f:2e:66:f2:b3:54:5d:80:7d:a5:ea:23:6f: c1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:9D:94:08:3D:D4:AF:1A:AA:B7:D5:58:C8:47:F6:DC:59:A6:6A:A7 X509v3 Authority Key Identifier: keyid:60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/TJ2UCD3Urxqqt9VYyEf23Fmmaqc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.95.64.0/24 109.95.66.0/23 109.95.69.0-109.95.71.255 Signature Algorithm: sha256WithRSAEncryption 7a:43:ba:27:15:79:31:cd:87:85:6d:26:ac:17:53:99:cc:7e: 12:6a:9e:88:fb:d9:62:50:35:d7:dd:46:13:89:56:a5:66:22: c9:29:dd:87:85:07:cb:44:de:f4:22:19:3d:c8:3f:f4:2f:ae: 5e:62:29:54:e7:45:11:4a:b2:ff:35:39:49:d9:00:24:69:01: cb:0e:ba:75:69:15:4a:c8:a1:bb:b3:77:e3:a9:ce:62:42:31: d4:7d:2a:8b:ed:d6:d5:05:be:43:0a:d0:0e:e7:88:22:30:87: 28:b5:cc:b7:42:67:f3:e9:23:19:76:90:6a:de:96:e7:6a:66: 4a:b4:1d:92:1d:8a:af:62:27:b1:b1:96:99:d1:07:ec:61:3b: fc:54:ca:1e:b4:fd:d2:e3:17:53:62:d6:e2:c3:4f:e6:79:41: 2c:cb:67:78:d2:49:a0:6c:18:3a:da:6b:b6:15:39:83:fc:f9: bd:35:e9:cc:9a:21:1b:fd:fd:df:20:92:9c:dd:f3:c5:59:7c: 14:de:0b:27:7d:f0:c8:cf:f9:b4:25:ef:d7:64:42:4b:39:52: fe:67:29:01:15:9e:33:f6:f4:34:eb:9b:91:95:19:77:a4:c7: 8f:f7:10:40:94:f7:86:80:a0:d9:18:2f:6b:a5:cf:e1:ac:b4: ec:2d:44:36 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt4o2RZ5ikCYpfMe+Zhfhd0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZWJkNGY3YWMzZDI0OTIwZGUxYzFmZjExODVkOTUwN2U5 YWQwNzgwHhcNMjYwMTAxMDgxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzlkOTQwODNkZDRhZjFhYWFiN2Q1NThjODQ3ZjZkYzU5YTY2YWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7ANXzWNczGbtkHgko4BvyCM7IJi ttlV95veCkQpCcJUjB98Un3VX31JnOqQgG8X1+ULeaj6rdKD3+lm0b8tMJCKjYKi GyduFXTbP9+KL9cwwm/+qyiufOjF3RRfBXV9FqlJilQqyx3gvG/oiQjrR+bBdZfu X1oO5nJwTFg9nKp3Yoa2GMobCkINyInbMkYoYdcYMsXZrNOx6Stt6G9w/JZIWdtx BSCeTn1zvM3qfAfDz8FBcHi7qNBaXpG600MAv3ZDpUuG2hBUHE6m642Osi/o0SDi Q0qGU9LR6Q1WHYreuQikxCSraaj6hOoB3bqqnx8uZvKzVF2AfaXqI2/B5wIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFEydlAg91K8aqrfVWMhH9txZpmqnMB8GA1UdIwQY MBaAFGDr1PesPSSSDeHB/xGF2VB+mtB4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWU92VTk2dzlKSklONGNIX0VZWFpVSDZhMEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi85MDUzNzgtMjI4YS00MWI0LWJjZTgt ODdkM2IwMjNkOTE5LzEvVEoyVUNEM1VyeHFxdDlWWXlFZjIzRm1tYXFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi85MDUzNzgtMjI4YS00MWI0LWJjZTgtODdkM2IwMjNkOTE5 LzEvWU92VTk2dzlKSklONGNIX0VZWFpVSDZhMEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAbV9AAwQB bV9CMAwDBABtX0UDBANtX0AwDQYJKoZIhvcNAQELBQADggEBAHpDuicVeTHNh4Vt JqwXU5nMfhJqnoj72WJQNdfdRhOJVqVmIskp3YeFB8tE3vQiGT3IP/Qvrl5iKVTn RRFKsv81OUnZACRpAcsOunVpFUrIobuzd+OpzmJCMdR9Kovt1tUFvkMK0A7niCIw hyi1zLdCZ/PpIxl2kGreludqZkq0HZIdiq9iJ7GxlpnRB+xhO/xUyh60/dLjF1Ni 1uLDT+Z5QSzLZ3jSSaBsGDraa7YVOYP8+b016cyaIRv9/d8gkpzd88VZfBTeCyd9 8MjP+bQl79dkQks5Uv5nKQEVnjP29DTrm5GVGXekx4/3EECU94aAoNkYL2ulz+Gs tOwtRDY= -----END CERTIFICATE-----Generated at Sun Jan 25 23:49:02 2026 by rpki-client