This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/TjdLfOccjgqI2XXM8B2ZZw7tFJ8.roa File: TjdLfOccjgqI2XXM8B2ZZw7tFJ8.roa (raw, json) Hash identifier: +hak+f8WGw7BDjiRr9H4bCjNHnC7kv3i+d77lMHG2zg= Subject key identifier: 4E:37:4B:7C:E7:1C:8E:0A:88:D9:75:CC:F0:1D:99:67:0E:ED:14:9F Certificate issuer: /CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca Certificate serial: 019B7E37DECD498221874A12356B233A15ED Authority key identifier: 2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/TjdLfOccjgqI2XXM8B2ZZw7tFJ8.roa Signing time: Fri 02 Jan 2026 10:19:09 +0000 ROA not before: Fri 02 Jan 2026 10:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212623 IP address blocks: 185.216.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:de:cd:49:82:21:87:4a:12:35:6b:23:3a:15:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca Validity Not Before: Jan 2 10:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e374b7ce71c8e0a88d975ccf01d99670eed149f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:64:90:d1:24:c6:15:e9:09:84:5c:1e:e4:cc: d4:4f:90:ad:3b:4c:0a:21:d6:38:a4:e6:4e:c4:71: 54:0c:2c:5b:4b:0a:e3:6d:da:b3:22:e8:bb:6f:39: cd:37:84:84:73:84:da:7b:63:af:f5:11:8f:85:0d: e8:ef:ec:b5:ad:2d:53:c8:72:cd:30:a8:e0:b9:d7: ca:e0:9a:fc:35:34:6b:f7:66:a2:4f:1a:7d:90:88: d5:e2:1c:39:72:0b:4d:3c:e1:e8:5d:f7:1a:37:c4: 06:d4:b8:d1:d9:aa:43:8e:a1:e0:ff:ba:cf:8c:5a: c1:19:31:a8:f3:2f:57:8b:27:90:7d:1b:0a:3d:19: f0:09:01:9a:ba:23:c0:cb:b4:45:6c:d9:8b:3a:31: 7d:b9:a5:ee:8c:5f:74:b1:f6:29:33:86:5a:a6:06: b3:3e:1a:ad:08:88:70:d6:09:16:c0:2b:2e:a1:e6: 59:9a:66:a1:66:08:74:1c:7b:c3:b3:71:ab:d5:06: 51:80:e6:75:44:0f:f2:7f:59:f0:05:64:5a:1d:1e: 98:e6:26:9d:16:51:f6:da:32:92:29:10:2b:a8:fb: f1:ce:49:41:8d:7c:3d:50:f1:b0:52:09:f8:71:70: d8:7b:73:e5:4d:f4:36:5a:64:05:eb:d5:53:f4:42: 3e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:37:4B:7C:E7:1C:8E:0A:88:D9:75:CC:F0:1D:99:67:0E:ED:14:9F X509v3 Authority Key Identifier: keyid:2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/TjdLfOccjgqI2XXM8B2ZZw7tFJ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.216.51.0/24 Signature Algorithm: sha256WithRSAEncryption 45:12:00:ba:b9:0e:a6:84:2a:c5:6e:75:16:8f:d9:20:3d:17: 38:9f:5a:b4:b9:d9:d8:7b:a7:62:cd:0d:f7:f3:e6:a5:28:86: 3a:05:24:d0:11:4c:c5:8c:e1:80:1a:32:91:70:53:7a:f4:ca: 2c:1a:43:9f:b9:86:5e:c7:61:7d:1d:f4:ea:8e:22:47:a2:e9: 61:95:0f:fd:25:cc:52:50:2c:11:a8:7d:f9:39:d1:93:3b:d7: b6:a6:2c:eb:da:a6:77:95:87:3e:8c:16:f2:fc:6a:40:2e:8a: d4:c2:bf:59:0d:69:83:08:85:25:98:47:77:72:c3:1a:bc:03: 76:1f:1c:73:59:6c:21:ca:5b:18:e8:51:0a:a6:d0:18:20:99: f8:ad:81:47:e1:b0:d4:1c:f0:61:26:35:ce:e4:f4:22:2e:bd: f2:d4:48:e7:00:91:b8:7b:74:e4:2b:02:ed:3a:02:5a:fc:b1: 81:30:99:ac:f0:e2:1f:ac:60:86:e8:1e:88:cb:7d:c0:10:27: 20:0a:6b:e8:46:3b:5a:0c:4e:90:3d:b7:49:b4:42:0e:1a:d2: f2:e0:ba:90:d9:e5:b1:2a:74:84:8f:f7:34:4d:da:80:3b:8b: 59:74:a4:7a:29:c2:94:c0:aa:3e:c9:3d:97:08:0c:ca:d8:e8: c4:16:fe:4a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N97NSYIhh0oSNWsjOhXtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhZGQ0MzhhN2NlM2NiMzc5ZjI4Y2ZhMDUxY2Y2M2Q1YWQ4 ZmUzY2EwHhcNMjYwMTAyMTAxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTM3NGI3Y2U3MWM4ZTBhODhkOTc1Y2NmMDFkOTk2NzBlZWQxNDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2SQ0STGFekJhFwe5MzUT5CtO0wK IdY4pOZOxHFUDCxbSwrjbdqzIui7bznNN4SEc4Tae2Ov9RGPhQ3o7+y1rS1TyHLN MKjgudfK4Jr8NTRr92aiTxp9kIjV4hw5cgtNPOHoXfcaN8QG1LjR2apDjqHg/7rP jFrBGTGo8y9XiyeQfRsKPRnwCQGauiPAy7RFbNmLOjF9uaXujF90sfYpM4Zapgaz PhqtCIhw1gkWwCsuoeZZmmahZgh0HHvDs3Gr1QZRgOZ1RA/yf1nwBWRaHR6Y5iad FlH22jKSKRArqPvxzklBjXw9UPGwUgn4cXDYe3PlTfQ2WmQF69VT9EI+ewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE43S3znHI4KiNl1zPAdmWcO7RSfMB8GA1UdIwQY MBaAFCrdQ4p848s3nyjPoFHPY9Wtj+PKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3QxRGluemp5emVmS00tZ1VjOWoxYTJQNDhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8wYjYxY2YtODBiYS00ZThlLWEyZTUt MjBhMGQxMzBjNDU2LzEvVGpkTGZPY2NqZ3FJMlhYTThCMlpadzd0Rko4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8wYjYxY2YtODBiYS00ZThlLWEyZTUtMjBhMGQxMzBjNDU2 LzEvS3QxRGluemp5emVmS00tZ1VjOWoxYTJQNDhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudgzMA0G CSqGSIb3DQEBCwUAA4IBAQBFEgC6uQ6mhCrFbnUWj9kgPRc4n1q0udnYe6dizQ33 8+alKIY6BSTQEUzFjOGAGjKRcFN69MosGkOfuYZex2F9HfTqjiJHoulhlQ/9JcxS UCwRqH35OdGTO9e2pizr2qZ3lYc+jBby/GpALorUwr9ZDWmDCIUlmEd3csMavAN2 HxxzWWwhylsY6FEKptAYIJn4rYFH4bDUHPBhJjXO5PQiLr3y1EjnAJG4e3TkKwLt OgJa/LGBMJms8OIfrGCG6B6Iy33AECcgCmvoRjtaDE6QPbdJtEIOGtLy4LqQ2eWx KnSEj/c0TdqAO4tZdKR6KcKUwKo+yT2XCAzK2OjEFv5K -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:40 2026 by rpki-client