This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/TJcBJB8tMVwgDD5VmpPQL_K5MUc.roa File: TJcBJB8tMVwgDD5VmpPQL_K5MUc.roa (raw, json) Hash identifier: SHSnvcEgiE0T0omJOGKRwDEpcU7UTWSZBFiCrzeaHso= Subject key identifier: 4C:97:01:24:1F:2D:31:5C:20:0C:3E:55:9A:93:D0:2F:F2:B9:31:47 Certificate issuer: /CN=808e238e30dcb759759fb8a394d9e211a28b9d87 Certificate serial: 019B77588BDAD246C4FFF29F8F6195FFA8EC Authority key identifier: 80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/TJcBJB8tMVwgDD5VmpPQL_K5MUc.roa Signing time: Thu 01 Jan 2026 02:17:30 +0000 ROA not before: Thu 01 Jan 2026 02:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51522 IP address blocks: 91.247.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:8b:da:d2:46:c4:ff:f2:9f:8f:61:95:ff:a8:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=808e238e30dcb759759fb8a394d9e211a28b9d87 Validity Not Before: Jan 1 02:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c9701241f2d315c200c3e559a93d02ff2b93147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d2:70:4b:3c:24:3d:b0:c4:b0:ce:0c:1e:50: 33:40:ec:d3:0c:ee:23:66:0d:df:41:9f:6f:1a:45: 85:96:9a:04:d4:0e:67:b6:84:3e:dc:31:64:d7:41: 32:36:35:b0:97:83:bf:55:ed:8b:25:10:7a:60:f7: 62:42:b6:fa:b3:dc:04:9c:d0:10:0d:bc:0c:89:46: b7:af:13:19:cf:a3:2a:c9:2e:05:85:b3:07:86:37: 38:4a:e3:0a:72:09:ca:c3:e1:b7:fe:c9:2f:a8:11: e7:39:28:0c:37:21:46:f5:d9:85:cc:13:49:04:e9: e4:80:f0:05:2f:4d:dd:44:11:71:cc:b7:49:19:aa: 5b:b6:be:6f:3d:63:a0:5b:04:d1:ff:b8:db:ac:92: c8:3d:01:09:c9:04:2c:3f:e9:67:6b:9b:b1:bb:c5: 7b:51:90:6f:d0:35:79:20:1e:58:f7:78:b5:4f:b6: c0:09:75:a0:7b:62:1f:c5:6c:62:b5:19:5b:9f:48: 68:12:8f:a1:74:c5:d1:9a:d3:32:a3:ce:eb:eb:51: f8:5f:c6:a3:bf:ec:c2:78:70:d5:6e:54:ad:a5:9b: 55:df:99:00:01:23:b3:68:b7:b8:9d:79:88:98:55: 33:88:11:c6:45:2c:ec:71:0f:78:b5:ed:ba:aa:11: 87:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:97:01:24:1F:2D:31:5C:20:0C:3E:55:9A:93:D0:2F:F2:B9:31:47 X509v3 Authority Key Identifier: keyid:80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/TJcBJB8tMVwgDD5VmpPQL_K5MUc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.247.112.0/21 Signature Algorithm: sha256WithRSAEncryption 75:72:db:d8:1b:52:74:19:4b:b7:21:d3:48:39:76:78:f9:b0: 89:2e:ca:2f:2a:d5:83:50:f5:60:b2:43:5b:f4:40:df:de:4a: 21:8b:0c:d9:f3:73:9f:35:58:0e:59:f5:00:35:98:70:56:80: b7:a1:7a:09:2a:7a:25:29:d0:f2:41:ae:6b:fd:79:89:d5:79: 6a:4b:43:c6:35:96:aa:47:81:6f:71:f4:0c:cd:5d:a7:c0:51: a0:63:5c:1b:a8:36:87:98:ff:34:e0:ea:71:72:b1:4d:6f:cb: f3:99:55:f1:01:b6:36:a5:b6:1d:19:78:ce:57:1b:4f:98:8f: 58:bd:99:3e:2e:0a:11:e4:25:67:7c:f0:b3:49:41:13:8e:a2: a4:e6:77:25:9c:16:9c:ba:45:61:df:c4:db:23:d4:93:a4:97: d7:c8:a1:63:cf:3e:61:c5:13:93:4d:1f:19:48:44:3a:6e:fe: 96:67:75:97:fb:ed:3c:2f:dc:6f:ed:56:a0:80:84:4b:f1:60: 05:c3:04:61:57:38:91:a6:44:ec:0d:a9:95:47:e9:71:06:6b: 38:1c:a8:be:a6:48:69:80:5f:78:62:14:92:d8:80:59:58:e3: 48:60:ee:dc:ff:36:b4:e0:c1:09:35:a1:1d:f2:c4:a6:8d:47: e3:25:5e:3c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WIva0kbE//Kfj2GV/6jsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwOGUyMzhlMzBkY2I3NTk3NTlmYjhhMzk0ZDllMjExYTI4 YjlkODcwHhcNMjYwMTAxMDIxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Yzk3MDEyNDFmMmQzMTVjMjAwYzNlNTU5YTkzZDAyZmYyYjkzMTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dJwSzwkPbDEsM4MHlAzQOzTDO4j Zg3fQZ9vGkWFlpoE1A5ntoQ+3DFk10EyNjWwl4O/Ve2LJRB6YPdiQrb6s9wEnNAQ DbwMiUa3rxMZz6MqyS4FhbMHhjc4SuMKcgnKw+G3/skvqBHnOSgMNyFG9dmFzBNJ BOnkgPAFL03dRBFxzLdJGapbtr5vPWOgWwTR/7jbrJLIPQEJyQQsP+lna5uxu8V7 UZBv0DV5IB5Y93i1T7bACXWge2IfxWxitRlbn0hoEo+hdMXRmtMyo87r61H4X8aj v+zCeHDVblStpZtV35kAASOzaLe4nXmImFUziBHGRSzscQ94te26qhGHdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEyXASQfLTFcIAw+VZqT0C/yuTFHMB8GA1UdIwQY MBaAFICOI44w3LdZdZ+4o5TZ4hGii52HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0k0ampqRGN0MWwxbjdpamxObmlFYUtMblljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi83YjJjZDYtYjFmMy00M2ZjLTlmMDkt Y2Q5NzQwNDI2NDlmLzEvVEpjQkpCOHRNVndnREQ1Vm1wUFFMX0s1TVVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi83YjJjZDYtYjFmMy00M2ZjLTlmMDktY2Q5NzQwNDI2NDlm LzEvZ0k0ampqRGN0MWwxbjdpamxObmlFYUtMblljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDW/dwMA0G CSqGSIb3DQEBCwUAA4IBAQB1ctvYG1J0GUu3IdNIOXZ4+bCJLsovKtWDUPVgskNb 9EDf3kohiwzZ83OfNVgOWfUANZhwVoC3oXoJKnolKdDyQa5r/XmJ1XlqS0PGNZaq R4FvcfQMzV2nwFGgY1wbqDaHmP804OpxcrFNb8vzmVXxAbY2pbYdGXjOVxtPmI9Y vZk+LgoR5CVnfPCzSUETjqKk5nclnBacukVh38TbI9STpJfXyKFjzz5hxROTTR8Z SEQ6bv6WZ3WX++08L9xv7VaggIRL8WAFwwRhVziRpkTsDamVR+lxBms4HKi+pkhp gF94YhSS2IBZWONIYO7c/za04MEJNaEd8sSmjUfjJV48 -----END CERTIFICATE-----Generated at Mon Jan 26 04:55:25 2026 by rpki-client