This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/tDI9go-g4CqghW05S71dg1-pcIU.roa File: tDI9go-g4CqghW05S71dg1-pcIU.roa (raw, json) Hash identifier: ziudTSLoj2qHvEkRBq06kMjV08QbQZjdB8rDgu7yyDk= Subject key identifier: B4:32:3D:82:8F:A0:E0:2A:A0:85:6D:39:4B:BD:5D:83:5F:A9:70:85 Certificate issuer: /CN=143239651db6aab1bcb67325f785b5ee1f4025cb Certificate serial: 019B7B356C27504FBAD778872995522FA107 Authority key identifier: 14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/tDI9go-g4CqghW05S71dg1-pcIU.roa Signing time: Thu 01 Jan 2026 20:17:37 +0000 ROA not before: Thu 01 Jan 2026 20:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42724 IP address blocks: 45.155.127.0/24 maxlen: 24 193.3.167.0/24 maxlen: 24 194.36.84.0/24 maxlen: 24 194.36.86.0/24 maxlen: 24 194.36.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:6c:27:50:4f:ba:d7:78:87:29:95:52:2f:a1:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143239651db6aab1bcb67325f785b5ee1f4025cb Validity Not Before: Jan 1 20:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4323d828fa0e02aa0856d394bbd5d835fa97085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8d:79:f6:e1:a4:e9:a2:90:d5:c8:7f:15:98: e3:13:9b:83:2e:65:22:96:2b:3f:4b:32:ba:18:02: cf:2a:c5:33:29:21:6d:7b:93:7c:01:23:17:4a:cd: 53:fb:84:3d:ab:a0:72:0a:c7:16:86:2e:07:1f:03: ba:b0:2c:97:6c:b9:41:49:5a:41:34:be:57:13:61: fc:e8:f5:c7:45:f9:57:d9:9e:e9:b2:ce:df:37:d2: cb:29:bf:03:51:49:0e:c1:f8:1e:e6:c6:4b:3d:26: c4:ce:4f:46:97:6c:80:a6:25:28:14:80:1e:61:6f: a7:4a:35:a1:8e:44:5e:d3:ea:05:bd:a6:20:63:23: f5:74:36:e9:58:1c:e7:8e:38:f1:62:75:6f:54:0f: 30:b9:b7:12:ce:57:0b:38:16:ac:cc:a0:a8:56:ec: 4e:b5:e9:b7:1a:8b:81:67:ae:2f:45:35:d0:22:da: c0:33:93:f0:40:85:e7:b0:30:cf:fd:eb:ab:56:a4: 82:bb:01:48:ff:fc:01:97:10:12:55:26:0e:0c:f7: 78:f9:e4:39:a2:fb:bb:57:d0:fd:1c:89:5d:dd:ee: de:f0:ab:98:ed:2b:f8:56:fc:f3:2b:78:6f:a2:19: 8e:c2:91:c3:d0:ca:72:b0:9e:16:ec:d3:ff:c8:4a: b4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:32:3D:82:8F:A0:E0:2A:A0:85:6D:39:4B:BD:5D:83:5F:A9:70:85 X509v3 Authority Key Identifier: keyid:14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/tDI9go-g4CqghW05S71dg1-pcIU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.127.0/24 193.3.167.0/24 194.36.84.0/24 194.36.86.0/23 Signature Algorithm: sha256WithRSAEncryption 13:90:01:50:6a:75:80:7b:d7:24:df:2f:fc:9b:49:46:56:3e: 15:b0:d3:e3:2c:1f:62:1e:c7:15:9b:9d:c6:96:98:da:06:04: 31:77:4c:fd:44:83:96:5d:ef:1a:7d:11:03:68:5e:d5:af:76: 7f:f9:04:45:3a:4e:1d:d4:c8:40:67:38:2b:96:c1:e9:22:4a: d0:26:5b:68:b5:f5:ce:af:cc:aa:00:99:85:c0:34:07:2c:ef: bb:77:3e:03:0d:aa:dc:df:21:4d:a5:48:2a:1c:7f:bd:30:61: 62:a7:d0:60:67:a8:6b:f3:f7:bf:34:6b:87:ce:ac:5f:72:32: 81:73:9c:b6:2b:fb:ef:d0:89:a2:ff:a6:3f:2b:17:0a:c3:37: c6:0e:35:b8:d2:bf:ad:b6:3c:22:3a:6a:ae:a7:0c:ed:ab:17: 1e:cf:06:74:2d:a8:56:c9:e3:06:74:80:20:45:9c:f6:76:62: bf:54:cb:05:7b:7a:57:a0:f7:3e:1b:7f:53:bb:be:6b:07:1b: 8b:8e:ff:c6:4e:66:78:a3:7f:97:4b:83:89:26:aa:6b:a1:a6: 0c:68:66:36:e0:ea:80:b0:0a:be:97:9e:af:89:0d:6b:71:75: e3:e6:3e:29:19:7a:ed:d4:26:c9:32:32:5a:da:4a:4e:56:63: 47:6e:53:40 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt7NWwnUE+613iHKZVSL6EHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0MzIzOTY1MWRiNmFhYjFiY2I2NzMyNWY3ODViNWVlMWY0 MDI1Y2IwHhcNMjYwMTAxMjAxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDMyM2Q4MjhmYTBlMDJhYTA4NTZkMzk0YmJkNWQ4MzVmYTk3MDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzY159uGk6aKQ1ch/FZjjE5uDLmUi lis/SzK6GALPKsUzKSFte5N8ASMXSs1T+4Q9q6ByCscWhi4HHwO6sCyXbLlBSVpB NL5XE2H86PXHRflX2Z7pss7fN9LLKb8DUUkOwfge5sZLPSbEzk9Gl2yApiUoFIAe YW+nSjWhjkRe0+oFvaYgYyP1dDbpWBznjjjxYnVvVA8wubcSzlcLOBaszKCoVuxO tem3GouBZ64vRTXQItrAM5PwQIXnsDDP/eurVqSCuwFI//wBlxASVSYODPd4+eQ5 ovu7V9D9HIld3e7e8KuY7Sv4VvzzK3hvohmOwpHD0MpysJ4W7NP/yEq0FQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFLQyPYKPoOAqoIVtOUu9XYNfqXCFMB8GA1UdIwQY MBaAFBQyOWUdtqqxvLZzJfeFte4fQCXLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkRJNVpSMjJxckc4dG5NbDk0VzE3aDlBSmNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC82ZjQ2ZDktM2FmMC00MmFhLWIzMzQt NmVlYzc3ZDliOTg1LzEvdERJOWdvLWc0Q3FnaFcwNVM3MWRnMS1wY0lVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC82ZjQ2ZDktM2FmMC00MmFhLWIzMzQtNmVlYzc3ZDliOTg1 LzEvRkRJNVpSMjJxckc4dG5NbDk0VzE3aDlBSmNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALZt/AwQA wQOnAwQAwiRUAwQBwiRWMA0GCSqGSIb3DQEBCwUAA4IBAQATkAFQanWAe9ck3y/8 m0lGVj4VsNPjLB9iHscVm53GlpjaBgQxd0z9RIOWXe8afREDaF7Vr3Z/+QRFOk4d 1MhAZzgrlsHpIkrQJltotfXOr8yqAJmFwDQHLO+7dz4DDarc3yFNpUgqHH+9MGFi p9BgZ6hr8/e/NGuHzqxfcjKBc5y2K/vv0Imi/6Y/KxcKwzfGDjW40r+ttjwiOmqu pwztqxcezwZ0LahWyeMGdIAgRZz2dmK/VMsFe3pXoPc+G39Tu75rBxuLjv/GTmZ4 o3+XS4OJJqproaYMaGY24OqAsAq+l56viQ1rcXXj5j4pGXrt1CbJMjJa2kpOVmNH blNA -----END CERTIFICATE-----Generated at Sun Jan 25 14:36:33 2026 by rpki-client