This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/TTEzQtE5d70mBmiMli4rrHXXguQ.roa File: TTEzQtE5d70mBmiMli4rrHXXguQ.roa (raw, json) Hash identifier: xIxbskYOAuc9Yjyt/8RKTk7K32KNqi0KQcR/yqDrqdI= Subject key identifier: 4D:31:33:42:D1:39:77:BD:26:06:68:8C:96:2E:2B:AC:75:D7:82:E4 Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748 Certificate serial: 019B791134ED7218DE21A777572238D37CF4 Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/TTEzQtE5d70mBmiMli4rrHXXguQ.roa Signing time: Thu 01 Jan 2026 10:18:49 +0000 ROA not before: Thu 01 Jan 2026 10:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198350 IP address blocks: 109.236.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:34:ed:72:18:de:21:a7:77:57:22:38:d3:7c:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748 Validity Not Before: Jan 1 10:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d313342d13977bd2606688c962e2bac75d782e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cd:c4:7e:af:1a:fc:7c:41:7a:45:b9:3a:31: e2:1a:12:a2:b7:44:c9:b5:54:fa:5e:bf:44:73:8f: 3e:c9:2e:e0:ba:cf:28:35:2d:31:cb:b2:91:05:de: 47:91:a6:3c:19:6d:fd:7b:64:69:e1:0b:59:d0:a2: d5:c2:7c:bb:bf:35:45:74:b5:c6:d7:60:16:5d:3f: 0e:9b:40:5d:a7:78:85:39:00:26:34:3f:f6:ff:9f: ef:e2:cf:70:dd:f9:ac:3f:96:9a:53:05:0e:a8:b3: 9b:78:43:53:0d:89:75:4a:b8:d1:26:37:ae:8f:85: f4:06:ed:43:8a:93:d8:c8:04:54:7e:82:de:cb:a3: ff:45:6f:0f:d6:38:ec:e7:bc:ed:92:f9:16:d8:c4: 22:52:d0:b2:ca:6f:72:2d:71:54:99:a8:ed:ca:91: 9b:0e:0f:3a:2d:6c:4f:c0:74:92:07:54:d6:31:f2: 23:c6:91:d7:ee:00:a8:33:8d:17:35:5c:8d:8e:9c: e0:88:91:9e:1a:17:5f:c0:ed:dd:1e:e9:78:3d:4a: 6c:ba:03:81:70:3d:f6:08:05:f1:96:50:cd:2c:53: 87:e1:0d:fb:bd:f8:97:8a:5f:ab:3d:57:71:50:33: f5:7b:17:8d:83:3b:1b:e6:a8:68:f9:f0:3d:17:ff: 56:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:31:33:42:D1:39:77:BD:26:06:68:8C:96:2E:2B:AC:75:D7:82:E4 X509v3 Authority Key Identifier: keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/TTEzQtE5d70mBmiMli4rrHXXguQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.236.247.0/24 Signature Algorithm: sha256WithRSAEncryption b0:8f:1d:4d:7e:a2:26:d2:58:b3:ca:c7:8e:26:eb:1b:68:aa: d1:f7:74:14:c2:33:d7:4b:4b:ef:ef:d4:2a:85:60:92:88:86: 14:47:b8:d4:64:3b:12:b1:82:80:fd:a4:88:1f:8d:49:bd:7e: 73:fa:6c:aa:33:85:47:1d:65:9a:9b:85:88:78:0d:c7:6e:30: ca:6f:e5:98:72:c4:ca:5c:85:7c:f5:6b:7d:a2:b5:22:4e:a0: 00:7c:e1:6c:f9:7f:8b:42:56:81:b7:cd:03:56:8c:f2:2e:67: 6c:db:81:a9:d6:2e:ae:0b:8c:77:c8:e2:94:fd:d6:28:fc:cb: c9:af:97:c8:6c:a8:b7:de:3f:cb:fa:e3:3a:be:68:1a:49:67: 27:35:b5:a9:00:00:c2:69:f9:69:52:58:31:90:66:d6:4f:a7: 1c:9c:3a:a0:b0:3b:0b:5c:2c:bb:2c:f4:11:6d:4b:16:54:32: 3d:3e:a6:be:c3:f8:96:01:98:e5:09:3a:72:06:1a:fa:37:00: 53:e4:26:b0:1a:35:9b:02:ec:8a:fa:a6:53:d3:c5:89:e7:46: 71:4d:32:5c:1d:9c:94:48:6d:5f:e8:7f:2e:af:03:02:49:91: 26:50:66:ea:37:4d:ab:14:c9:8e:bb:70:2f:05:67:38:bd:10: d8:6f:23:3e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ETTtchjeIad3VyI403z0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYzM0MmMwNmFhY2MzNTlkMzk0MzlmZjU4ZGVmYThlYTE4 NzU3NDgwHhcNMjYwMTAxMTAxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDMxMzM0MmQxMzk3N2JkMjYwNjY4OGM5NjJlMmJhYzc1ZDc4MmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxc3Efq8a/HxBekW5OjHiGhKit0TJ tVT6Xr9Ec48+yS7gus8oNS0xy7KRBd5HkaY8GW39e2Rp4QtZ0KLVwny7vzVFdLXG 12AWXT8Om0Bdp3iFOQAmND/2/5/v4s9w3fmsP5aaUwUOqLObeENTDYl1SrjRJjeu j4X0Bu1DipPYyARUfoLey6P/RW8P1jjs57ztkvkW2MQiUtCyym9yLXFUmajtypGb Dg86LWxPwHSSB1TWMfIjxpHX7gCoM40XNVyNjpzgiJGeGhdfwO3dHul4PUpsugOB cD32CAXxllDNLFOH4Q37vfiXil+rPVdxUDP1exeNgzsb5qho+fA9F/9WCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE0xM0LROXe9JgZojJYuK6x114LkMB8GA1UdIwQY MBaAFDPDQsBqrMNZ05Q5/1je+o6hh1dIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUt N2YyMzMzNjA0OTk3LzEvVFRFelF0RTVkNzBtQm1pTWxpNHJySFhYZ3VRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUtN2YyMzMzNjA0OTk3 LzEvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbez3MA0G CSqGSIb3DQEBCwUAA4IBAQCwjx1NfqIm0lizyseOJusbaKrR93QUwjPXS0vv79Qq hWCSiIYUR7jUZDsSsYKA/aSIH41JvX5z+myqM4VHHWWam4WIeA3HbjDKb+WYcsTK XIV89Wt9orUiTqAAfOFs+X+LQlaBt80DVozyLmds24Gp1i6uC4x3yOKU/dYo/MvJ r5fIbKi33j/L+uM6vmgaSWcnNbWpAADCaflpUlgxkGbWT6ccnDqgsDsLXCy7LPQR bUsWVDI9Pqa+w/iWAZjlCTpyBhr6NwBT5CawGjWbAuyK+qZT08WJ50ZxTTJcHZyU SG1f6H8urwMCSZEmUGbqN02rFMmOu3AvBWc4vRDYbyM+ -----END CERTIFICATE-----Generated at Mon Jan 26 09:25:19 2026 by rpki-client