This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/tdeCucXFWGUBsGHwqe6hB6aeUEQ.roa File: tdeCucXFWGUBsGHwqe6hB6aeUEQ.roa (raw, json) Hash identifier: enVyFjAXmV6jKlcwgcqYoRWX2/X4d1HEfq19dhiH9Q0= Subject key identifier: B5:D7:82:B9:C5:C5:58:65:01:B0:61:F0:A9:EE:A1:07:A6:9E:50:44 Certificate issuer: /CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d Certificate serial: 019B7B35470C0C13ED2D9E4A59ADDD7769D1 Authority key identifier: 07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/tdeCucXFWGUBsGHwqe6hB6aeUEQ.roa Signing time: Thu 01 Jan 2026 20:17:27 +0000 ROA not before: Thu 01 Jan 2026 20:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202013 IP address blocks: 91.103.80.0/24 maxlen: 24 91.103.81.0/24 maxlen: 24 91.103.82.0/24 maxlen: 29 91.103.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:47:0c:0c:13:ed:2d:9e:4a:59:ad:dd:77:69:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d Validity Not Before: Jan 1 20:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5d782b9c5c5586501b061f0a9eea107a69e5044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:41:57:31:28:ce:8b:2f:43:87:b7:1f:5e:1c: 88:3e:20:85:d8:0a:98:e7:b4:95:d8:09:0a:bc:cc: 73:67:58:2a:21:d8:ac:65:1c:42:cf:d9:c1:70:4f: 55:36:db:88:34:5c:46:38:7d:69:2b:00:e7:e0:79: b7:4a:7d:19:a4:0c:ae:ca:a2:2e:7d:0a:f7:bc:d3: f4:f3:c4:3c:01:e9:e3:19:24:3d:14:af:b7:9a:7b: 0f:bd:38:c3:f8:07:3a:03:15:67:de:56:eb:d3:13: 42:9d:77:f6:14:3c:bd:ed:28:34:55:a6:17:69:14: 9e:bf:28:f5:f4:2d:0c:25:2f:fa:8d:fd:33:19:5a: 98:9a:d2:e5:ce:42:3c:b7:15:1a:e8:f2:32:a7:8e: 71:c2:8c:f7:e9:89:24:bb:64:dd:95:d1:2c:e5:36: 45:87:59:7f:9b:fa:37:7d:29:fd:94:9e:de:30:c2: 47:8f:a2:e7:61:82:30:a1:1f:31:47:bf:fc:2d:45: f4:7f:a8:4d:74:15:b5:15:9b:50:c0:1c:a1:80:ce: 4a:05:1f:8f:8f:73:83:25:b3:bb:28:ac:1c:70:e3: bd:95:f6:ea:37:7c:46:6f:d4:cf:cc:a7:9a:77:87: 15:b7:83:83:31:15:49:63:17:d4:9e:fd:b0:73:0a: d6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:D7:82:B9:C5:C5:58:65:01:B0:61:F0:A9:EE:A1:07:A6:9E:50:44 X509v3 Authority Key Identifier: keyid:07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/tdeCucXFWGUBsGHwqe6hB6aeUEQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.103.80.0/22 Signature Algorithm: sha256WithRSAEncryption 5d:33:86:8c:b6:22:ed:55:f4:66:56:78:a5:1a:24:1d:c1:89: d0:4c:cf:3c:db:70:8b:47:8a:8b:0b:05:25:cd:be:68:66:e5: 78:85:6c:6b:a4:45:a3:54:d5:38:83:19:2f:df:b4:60:fb:8a: 0a:bb:69:eb:ff:21:5e:a2:4c:f7:6e:c5:73:f4:7f:85:c1:31: 78:c8:8e:2b:17:a1:0c:c2:49:83:5a:e6:5b:72:ea:77:60:63: 8b:a4:86:6d:80:77:06:11:a4:cd:0b:1d:b9:d2:c0:7e:80:3b: d8:2c:4b:c0:a0:fc:10:67:dd:68:f2:5f:6d:ea:19:6e:ab:dc: c8:dd:15:42:23:ae:6d:87:72:7b:75:e5:24:7e:0b:c3:d6:ba: 23:db:b7:df:3f:d6:f2:23:59:f0:de:ec:4e:cc:e0:80:83:5f: 18:91:d1:59:ae:ba:52:5a:9c:9c:62:21:ff:70:e4:e8:25:3e: c5:61:7b:c2:cf:af:5d:b8:4f:ad:4a:46:ad:10:0e:ed:fd:8b: 55:6a:e3:9a:39:bd:72:f9:05:e8:d1:0b:f7:af:cf:27:28:ed: 97:bb:2a:97:1b:b6:92:b8:a1:c7:dd:6e:75:61:81:47:ce:68: 73:a7:1e:66:a5:d2:f8:3b:42:e2:08:12:ac:8e:c0:73:d5:27: 2c:0d:bb:48 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NUcMDBPtLZ5KWa3dd2nRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZDc1MzM1Zjc3YmY0MjQwOTc2Mjc3YjFkZDBlMTliYjIz YThlMWQwHhcNMjYwMTAxMjAxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNWQ3ODJiOWM1YzU1ODY1MDFiMDYxZjBhOWVlYTEwN2E2OWU1MDQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0FXMSjOiy9Dh7cfXhyIPiCF2AqY 57SV2AkKvMxzZ1gqIdisZRxCz9nBcE9VNtuINFxGOH1pKwDn4Hm3Sn0ZpAyuyqIu fQr3vNP088Q8AenjGSQ9FK+3mnsPvTjD+Ac6AxVn3lbr0xNCnXf2FDy97Sg0VaYX aRSevyj19C0MJS/6jf0zGVqYmtLlzkI8txUa6PIyp45xwoz36Ykku2TdldEs5TZF h1l/m/o3fSn9lJ7eMMJHj6LnYYIwoR8xR7/8LUX0f6hNdBW1FZtQwByhgM5KBR+P j3ODJbO7KKwccOO9lfbqN3xGb9TPzKead4cVt4ODMRVJYxfUnv2wcwrWFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLXXgrnFxVhlAbBh8KnuoQemnlBEMB8GA1UdIwQY MBaAFAfXUzX3e/QkCXYnex3Q4ZuyOo4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjlkVE5mZDc5Q1FKZGlkN0hkRGhtN0k2amgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jZTNmYTctZmM4OC00ZjQ4LWE1Y2Ut YTQ1YmJjYjM0ZGU1LzEvdGRlQ3VjWEZXR1VCc0dId3FlNmhCNmFlVUVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9jZTNmYTctZmM4OC00ZjQ4LWE1Y2UtYTQ1YmJjYjM0ZGU1 LzEvQjlkVE5mZDc5Q1FKZGlkN0hkRGhtN0k2amgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW2dQMA0G CSqGSIb3DQEBCwUAA4IBAQBdM4aMtiLtVfRmVnilGiQdwYnQTM8823CLR4qLCwUl zb5oZuV4hWxrpEWjVNU4gxkv37Rg+4oKu2nr/yFeokz3bsVz9H+FwTF4yI4rF6EM wkmDWuZbcup3YGOLpIZtgHcGEaTNCx250sB+gDvYLEvAoPwQZ91o8l9t6hluq9zI 3RVCI65th3J7deUkfgvD1roj27ffP9byI1nw3uxOzOCAg18YkdFZrrpSWpycYiH/ cOToJT7FYXvCz69duE+tSkatEA7t/YtVauOaOb1y+QXo0Qv3r88nKO2XuyqXG7aS uKHH3W51YYFHzmhzpx5mpdL4O0LiCBKsjsBz1ScsDbtI -----END CERTIFICATE-----Generated at Mon Jan 26 00:13:52 2026 by rpki-client