This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/T61hxzmMLcTtOU-ZAMD-kJzDfDQ.roa File: T61hxzmMLcTtOU-ZAMD-kJzDfDQ.roa (raw, json) Hash identifier: PO4SeGqz6rEhd9x3tpohbJVG3cB1N9xITfHvSHEi1Jw= Subject key identifier: 4F:AD:61:C7:39:8C:2D:C4:ED:39:4F:99:00:C0:FE:90:9C:C3:7C:34 Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Certificate serial: 019B77C7736B63B23014FE79F8C10B4688E9 Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/T61hxzmMLcTtOU-ZAMD-kJzDfDQ.roa Signing time: Thu 01 Jan 2026 04:18:38 +0000 ROA not before: Thu 01 Jan 2026 04:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198762 IP address blocks: 5.8.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:73:6b:63:b2:30:14:fe:79:f8:c1:0b:46:88:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Validity Not Before: Jan 1 04:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4fad61c7398c2dc4ed394f9900c0fe909cc37c34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:15:9b:d4:b2:2e:56:9c:b3:88:f5:cb:06:fd: 1d:c3:3e:c6:a3:7a:e9:fe:e5:6e:7d:74:16:e1:a2: a2:98:ea:7a:06:ae:b4:a1:a6:f2:c4:ae:10:ce:20: c6:9d:f9:be:91:69:21:52:44:4d:89:7f:45:cc:40: d2:5c:f0:2d:c7:4c:1e:37:80:d0:41:80:22:3c:e2: 20:32:31:89:83:5b:b0:95:a6:1a:85:7d:01:94:aa: cd:86:4a:d3:46:0f:3d:8b:0b:0f:0e:8c:93:c3:de: 4c:6b:7a:c3:d5:71:a8:65:a0:f9:7e:fc:0c:e1:c6: d3:8b:f9:a8:de:35:34:66:63:b1:92:37:40:15:a8: e3:71:62:69:9e:98:d2:d9:ee:67:a4:4f:ba:95:74: c8:46:bc:d8:29:f0:4e:fd:9e:25:a1:db:15:75:c7: ae:ad:da:31:2d:e8:b2:a0:d0:cb:50:f7:f9:e0:1e: 39:4e:51:c7:d3:a8:61:29:ce:16:71:9d:b9:f4:cb: 59:5d:75:51:48:f7:fe:80:47:34:94:6f:fd:1b:f5: 06:b4:c1:f1:4a:18:85:bf:89:64:69:55:d7:54:91: 73:39:a8:81:a8:6c:9d:33:a0:9d:4f:6f:66:78:d1: 48:01:83:aa:6f:67:da:13:50:58:40:f1:ad:eb:e8: 40:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:AD:61:C7:39:8C:2D:C4:ED:39:4F:99:00:C0:FE:90:9C:C3:7C:34 X509v3 Authority Key Identifier: keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/T61hxzmMLcTtOU-ZAMD-kJzDfDQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.8.176.0/24 Signature Algorithm: sha256WithRSAEncryption 93:39:7e:2b:8d:37:05:8d:85:2a:97:cc:a7:e7:72:27:34:02: 56:f6:cb:ad:c3:9f:6b:eb:40:bd:be:a6:fd:58:ee:e0:58:2b: 93:ec:10:11:d9:e2:86:8d:62:a4:96:83:cc:0c:b6:e4:b4:79: bd:d2:1d:a7:93:b6:f8:40:bf:8c:3e:f5:4b:5f:b3:1a:4b:d6: f7:61:99:37:6b:7b:28:65:52:e9:75:7b:64:d9:ae:67:5f:ef: fa:0a:0b:19:14:8f:b8:ba:70:ef:0e:5b:ec:93:d7:fb:71:21: 37:40:ed:e5:b2:17:f4:f6:7b:97:51:4e:26:63:50:51:a2:7e: 1d:2a:3e:13:94:44:49:fb:b9:dd:39:72:91:17:e5:cf:8f:a0: 59:f5:b3:54:d3:af:bd:00:28:21:54:6f:11:3e:8e:03:14:d4: 96:fe:5d:2a:24:0f:70:e6:02:f1:63:d3:84:ec:0e:3a:c8:a1: 3d:13:80:36:0a:80:ff:7e:6e:6f:5e:90:04:3b:25:1a:0c:14: 77:13:1a:01:c9:c6:19:00:ec:39:65:80:41:8a:ce:b0:9c:3c: db:59:44:d2:9c:47:91:f4:6a:66:00:fc:26:b2:aa:35:62:7c: 1c:b7:be:ed:99:54:ff:ab:93:ac:28:e5:32:af:25:07:d4:97: 47:00:39:d3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3NrY7IwFP55+MELRojpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx Nzg1YzAwHhcNMjYwMTAxMDQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZmFkNjFjNzM5OGMyZGM0ZWQzOTRmOTkwMGMwZmU5MDljYzM3YzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRWb1LIuVpyziPXLBv0dwz7Go3rp /uVufXQW4aKimOp6Bq60oabyxK4QziDGnfm+kWkhUkRNiX9FzEDSXPAtx0weN4DQ QYAiPOIgMjGJg1uwlaYahX0BlKrNhkrTRg89iwsPDoyTw95Ma3rD1XGoZaD5fvwM 4cbTi/mo3jU0ZmOxkjdAFajjcWJpnpjS2e5npE+6lXTIRrzYKfBO/Z4lodsVdceu rdoxLeiyoNDLUPf54B45TlHH06hhKc4WcZ259MtZXXVRSPf+gEc0lG/9G/UGtMHx ShiFv4lkaVXXVJFzOaiBqGydM6CdT29meNFIAYOqb2faE1BYQPGt6+hAcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE+tYcc5jC3E7TlPmQDA/pCcw3w0MB8GA1UdIwQY MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct ODllNTZjODBkMWQwLzEvVDYxaHh6bU1MY1R0T1UtWkFNRC1rSnpEZkRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABQiwMA0G CSqGSIb3DQEBCwUAA4IBAQCTOX4rjTcFjYUql8yn53InNAJW9sutw59r60C9vqb9 WO7gWCuT7BAR2eKGjWKkloPMDLbktHm90h2nk7b4QL+MPvVLX7MaS9b3YZk3a3so ZVLpdXtk2a5nX+/6CgsZFI+4unDvDlvsk9f7cSE3QO3lshf09nuXUU4mY1BRon4d Kj4TlERJ+7ndOXKRF+XPj6BZ9bNU06+9ACghVG8RPo4DFNSW/l0qJA9w5gLxY9OE 7A46yKE9E4A2CoD/fm5vXpAEOyUaDBR3ExoBycYZAOw5ZYBBis6wnDzbWUTSnEeR 9GpmAPwmsqo1Ynwct77tmVT/q5OsKOUyryUH1JdHADnT -----END CERTIFICATE-----Generated at Sun Jan 25 22:41:48 2026 by rpki-client