This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/tZjmsStp0VcKPFFLWR9K3de-3PQ.roa File: tZjmsStp0VcKPFFLWR9K3de-3PQ.roa (raw, json) Hash identifier: OEQhtHW2/RhfDyyYWpUnjsi1Rb0UQYxvnkk2lrldW2w= Subject key identifier: B5:98:E6:B1:2B:69:D1:57:0A:3C:51:4B:59:1F:4A:DD:D7:BE:DC:F4 Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Certificate serial: 019B797ED176D753596D27BE74DA367C0920 Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/tZjmsStp0VcKPFFLWR9K3de-3PQ.roa Signing time: Thu 01 Jan 2026 12:18:32 +0000 ROA not before: Thu 01 Jan 2026 12:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204544 IP address blocks: 5.56.132.0/24 maxlen: 24 79.143.84.0/24 maxlen: 24 87.236.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d1:76:d7:53:59:6d:27:be:74:da:36:7c:09:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Validity Not Before: Jan 1 12:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b598e6b12b69d1570a3c514b591f4addd7bedcf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d9:ff:16:d7:da:9b:a8:cb:e7:4a:9a:78:80: ae:9a:50:8c:85:d8:bf:23:55:a5:45:0e:de:3e:70: 01:47:17:04:5f:41:20:d4:7f:b6:1c:a4:33:88:06: de:d0:20:00:90:68:b5:8d:43:90:18:65:ef:54:ed: 9d:b1:f3:6f:db:d5:43:ce:56:a4:fa:52:fe:91:56: 43:c6:ae:f8:99:aa:29:d1:89:63:0b:fe:5f:0c:22: 53:e0:08:3a:db:d9:0c:06:81:b4:38:c5:f0:c2:df: 1b:04:00:e7:a1:74:e1:1a:35:d2:a6:25:f9:fc:cc: f2:7f:d4:88:3b:98:43:1d:4f:1b:be:79:44:75:ae: 5e:11:57:26:07:5b:d8:1b:32:fc:e9:9e:88:58:93: 25:81:ca:79:f7:a7:a7:b9:b4:92:c4:36:56:11:8e: d1:8d:dd:bb:71:09:7b:b4:ac:74:6f:38:c4:1a:f8: d2:16:bc:e8:72:c8:91:36:36:88:34:b1:dc:b0:bc: 2f:d5:33:4b:73:ac:49:a1:44:a0:9a:ee:82:f6:09: 14:72:8e:f1:a7:27:d5:39:fe:e3:66:63:21:b9:c4: 8f:7e:03:17:59:55:97:cb:f6:d1:50:ed:3c:1c:3b: 97:e7:ff:2b:63:d8:80:7a:3b:b6:cc:9e:79:68:46: 1b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:98:E6:B1:2B:69:D1:57:0A:3C:51:4B:59:1F:4A:DD:D7:BE:DC:F4 X509v3 Authority Key Identifier: keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/tZjmsStp0VcKPFFLWR9K3de-3PQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.56.132.0/24 79.143.84.0/24 87.236.209.0/24 Signature Algorithm: sha256WithRSAEncryption 42:a6:1d:20:93:96:99:18:3f:e4:43:bd:1e:7c:13:69:3a:4d: 66:78:5b:53:f9:31:62:26:bf:03:3a:77:63:f2:9b:93:a4:38: 4b:0d:ee:60:d5:81:56:0e:d5:99:d5:63:76:81:c5:36:ef:ea: c6:56:26:ee:13:15:c0:7c:b7:c8:b8:e7:2e:a6:1c:8a:72:86: da:3e:01:ff:cf:bf:79:c0:c4:f3:e4:4c:d5:4d:7d:1d:f0:99: 95:8e:b2:29:c7:25:73:7d:6c:c9:68:89:bf:cb:9c:77:8d:94: 00:40:fa:12:9b:47:e3:25:b0:93:75:6f:33:a1:77:ec:ce:8d: 9c:0e:9e:94:8a:c4:25:03:5f:83:94:24:40:0d:05:17:fc:ac: 09:6f:ad:dc:ec:cc:97:91:9a:69:3c:de:b8:53:b0:cd:62:5b: e3:be:41:ea:75:02:0e:6e:16:83:27:dd:1a:2d:72:71:9a:46: b2:be:6d:06:1a:a4:1b:f8:8f:c6:6a:e4:10:c1:68:73:fb:f9: 1a:f7:4b:dd:cd:29:7a:2f:d7:75:24:de:5d:54:51:62:72:e9: 2d:4b:e8:be:41:79:fb:49:69:ce:16:8b:bf:3c:8f:dd:45:f0: 39:b8:8b:39:e0:63:e3:73:1d:3a:d5:70:aa:f5:a9:7c:29:8d: 9c:8a:6f:87 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5ftF211NZbSe+dNo2fAkgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYmY2NDY0Y2U2ZTE5YTRkY2Y4YTMyYjI3YTJmMWNiZTE1 NTEwNTUwHhcNMjYwMTAxMTIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTk4ZTZiMTJiNjlkMTU3MGEzYzUxNGI1OTFmNGFkZGQ3YmVkY2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttn/Ftfam6jL50qaeICumlCMhdi/ I1WlRQ7ePnABRxcEX0Eg1H+2HKQziAbe0CAAkGi1jUOQGGXvVO2dsfNv29VDzlak +lL+kVZDxq74maop0YljC/5fDCJT4Ag629kMBoG0OMXwwt8bBADnoXThGjXSpiX5 /Mzyf9SIO5hDHU8bvnlEda5eEVcmB1vYGzL86Z6IWJMlgcp596enubSSxDZWEY7R jd27cQl7tKx0bzjEGvjSFrzocsiRNjaINLHcsLwv1TNLc6xJoUSgmu6C9gkUco7x pyfVOf7jZmMhucSPfgMXWVWXy/bRUO08HDuX5/8rY9iAeju2zJ55aEYb9wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLWY5rEradFXCjxRS1kfSt3Xvtz0MB8GA1UdIwQY MBaAFJK/ZGTObhmk3PijKyei8cvhVRBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzct YjUzZTMwZTE0MTJhLzEvdFpqbXNTdHAwVmNLUEZGTFdSOUszZGUtM1BRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzctYjUzZTMwZTE0MTJh LzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABTiEAwQA T49UAwQAV+zRMA0GCSqGSIb3DQEBCwUAA4IBAQBCph0gk5aZGD/kQ70efBNpOk1m eFtT+TFiJr8DOndj8puTpDhLDe5g1YFWDtWZ1WN2gcU27+rGVibuExXAfLfIuOcu phyKcobaPgH/z795wMTz5EzVTX0d8JmVjrIpxyVzfWzJaIm/y5x3jZQAQPoSm0fj JbCTdW8zoXfszo2cDp6UisQlA1+DlCRADQUX/KwJb63c7MyXkZppPN64U7DNYlvj vkHqdQIObhaDJ90aLXJxmkayvm0GGqQb+I/GauQQwWhz+/ka90vdzSl6L9d1JN5d VFFicuktS+i+QXn7SWnOFou/PI/dRfA5uIs54GPjcx061XCq9al8KY2cim+H -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:08 2026 by rpki-client