This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/TdF0Q3UgTm4iRlwq3nTlXHaVATI.roa File: TdF0Q3UgTm4iRlwq3nTlXHaVATI.roa (raw, json) Hash identifier: OQ2zCDNUEEm/t4Dk7N3CDcwyQKDc+o2YA3IhBjZrGzM= Subject key identifier: 4D:D1:74:43:75:20:4E:6E:22:46:5C:2A:DE:74:E5:5C:76:95:01:32 Certificate issuer: /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866 Certificate serial: 019B7CEE4442901BA95513E2BDB4F5A7EC38 Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/TdF0Q3UgTm4iRlwq3nTlXHaVATI.roa Signing time: Fri 02 Jan 2026 04:19:08 +0000 ROA not before: Fri 02 Jan 2026 04:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214922 IP address blocks: 89.47.197.0/24 maxlen: 24 89.47.198.0/24 maxlen: 24 89.47.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:44:42:90:1b:a9:55:13:e2:bd:b4:f5:a7:ec:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866 Validity Not Before: Jan 2 04:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4dd1744375204e6e22465c2ade74e55c76950132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d9:a4:8e:06:a3:89:a6:4b:c7:01:1d:c5:71: 5c:d2:d4:9b:96:37:17:53:19:48:40:c2:81:4f:66: 19:ab:50:f8:93:b9:e0:95:03:59:03:39:91:b2:c5: 5d:5d:23:59:0c:69:4b:33:20:70:4a:f2:a0:66:f9: c7:4f:53:fd:19:03:f3:d9:17:ff:9d:39:2d:f5:54: 0b:a3:a1:1b:78:a0:c8:bb:c5:b3:2f:11:d7:2c:3c: 14:b1:f1:c6:15:02:3f:25:ed:cb:fd:47:61:2e:75: 08:7b:94:b5:a7:63:61:b5:7d:0e:10:35:5c:76:84: 2c:d5:3d:5e:24:a7:11:30:66:cd:61:54:4b:bc:3c: 24:60:e3:0f:9a:63:cd:27:e4:d1:fe:ad:ae:5a:8f: 49:b1:90:df:01:9e:28:a5:c1:e4:b3:7d:1c:ed:4e: 03:d2:7a:ff:42:bc:cd:a3:e8:16:cd:74:8b:33:f0: 98:05:bb:ed:ea:d3:74:8d:b8:a7:8f:d2:33:bb:e7: 0d:f6:a4:7c:56:3b:66:86:d0:19:7f:a9:db:c1:4f: 4d:ea:23:a3:ae:ee:85:2c:f7:25:d3:2b:e0:06:1a: 8d:45:9b:41:b1:24:77:cd:b4:94:f1:7c:39:d5:73: 80:cf:7a:57:da:52:ea:40:01:47:0b:41:01:4e:7d: 75:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D1:74:43:75:20:4E:6E:22:46:5C:2A:DE:74:E5:5C:76:95:01:32 X509v3 Authority Key Identifier: keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/TdF0Q3UgTm4iRlwq3nTlXHaVATI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.47.197.0-89.47.198.255 89.47.200.0/24 Signature Algorithm: sha256WithRSAEncryption cc:99:9b:36:e3:a2:09:d8:81:fc:9f:3c:54:3d:90:be:93:a0: b4:cd:82:c7:c4:3b:f2:19:5a:72:69:ff:9a:c0:fc:e7:d7:a6: e9:36:8e:98:c8:ef:a8:5e:68:86:cb:1c:48:ff:2d:a9:f3:a4: 0d:eb:3a:18:39:18:5e:b7:cd:00:c5:06:a4:7f:4f:6d:ed:20: a0:94:88:9d:e6:0a:f3:a2:38:02:21:93:dc:6c:87:47:1f:34: 3a:29:a3:45:f3:95:10:97:b4:de:19:09:61:2a:5d:cc:3a:4d: 05:e3:f4:b9:17:a3:16:0f:30:22:0d:94:55:14:65:f3:29:02: b7:4f:30:5b:d2:67:35:13:d1:96:a6:5a:90:5b:69:47:16:ae: 69:06:b9:61:ca:4b:31:01:18:2c:6e:a5:17:33:55:96:89:ac: 8f:5f:df:df:6d:ef:89:d5:ff:9e:ad:31:fd:72:78:3d:13:1d: 18:29:59:09:5e:15:89:81:9c:08:e7:aa:e5:8e:4b:af:a9:00: 93:c7:07:d2:5c:2a:02:31:2d:2d:85:ce:37:6c:13:44:09:7e: 88:6b:a0:2c:9d:13:4f:e4:46:87:78:e6:d7:e6:39:0c:ee:27: 12:53:5f:32:39:d8:17:ba:89:91:30:a9:f8:19:90:28:f2:32: 7f:db:f3:21 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt87kRCkBupVRPivbT1p+w4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2ZTFjOGM2NWM4NmU4ZDI2ZGRiZWI2ODY1OGEzOWE3YThl Mjc4NjYwHhcNMjYwMTAyMDQxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZGQxNzQ0Mzc1MjA0ZTZlMjI0NjVjMmFkZTc0ZTU1Yzc2OTUwMTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9mkjgajiaZLxwEdxXFc0tSbljcX UxlIQMKBT2YZq1D4k7nglQNZAzmRssVdXSNZDGlLMyBwSvKgZvnHT1P9GQPz2Rf/ nTkt9VQLo6EbeKDIu8WzLxHXLDwUsfHGFQI/Je3L/UdhLnUIe5S1p2NhtX0OEDVc doQs1T1eJKcRMGbNYVRLvDwkYOMPmmPNJ+TR/q2uWo9JsZDfAZ4opcHks30c7U4D 0nr/QrzNo+gWzXSLM/CYBbvt6tN0jbinj9Izu+cN9qR8VjtmhtAZf6nbwU9N6iOj ru6FLPcl0yvgBhqNRZtBsSR3zbSU8Xw51XOAz3pX2lLqQAFHC0EBTn118wIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFE3RdEN1IE5uIkZcKt505Vx2lQEyMB8GA1UdIwQY MBaAFMbhyMZchujSbdvraGWKOaeo4nhmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHVISXhseUc2Tkp0Mi10b1pZbzVwNmppZUdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hNDUzZmUtYTY2NC00N2EyLThiOGEt Y2U1ZTAxZTcxYzkxLzEvVGRGMFEzVWdUbTRpUmx3cTNuVGxYSGFWQVRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9hNDUzZmUtYTY2NC00N2EyLThiOGEtY2U1ZTAxZTcxYzkx LzEveHVISXhseUc2Tkp0Mi10b1pZbzVwNmppZUdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABZL8UD BABZL8YDBABZL8gwDQYJKoZIhvcNAQELBQADggEBAMyZmzbjognYgfyfPFQ9kL6T oLTNgsfEO/IZWnJp/5rA/OfXpuk2jpjI76heaIbLHEj/LanzpA3rOhg5GF63zQDF BqR/T23tIKCUiJ3mCvOiOAIhk9xsh0cfNDopo0XzlRCXtN4ZCWEqXcw6TQXj9LkX oxYPMCINlFUUZfMpArdPMFvSZzUT0ZamWpBbaUcWrmkGuWHKSzEBGCxupRczVZaJ rI9f399t74nV/56tMf1yeD0THRgpWQleFYmBnAjnquWOS6+pAJPHB9JcKgIxLS2F zjdsE0QJfohroCydE0/kRod45tfmOQzuJxJTXzI52Be6iZEwqfgZkCjyMn/b8yE= -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:43 2026 by rpki-client