This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/TdxQhWG2wtulK5Vb9nCA77o4y_I.roa File: TdxQhWG2wtulK5Vb9nCA77o4y_I.roa (raw, json) Hash identifier: DQ1/x26NNKj14C8KsFmS1PfWzVr7cd7MQfy8SdkpOYM= Subject key identifier: 4D:DC:50:85:61:B6:C2:DB:A5:2B:95:5B:F6:70:80:EF:BA:38:CB:F2 Certificate issuer: /CN=09c552498881876556f16e323f1ca369b25edb0c Certificate serial: 019B7F81EB59DCCDC189F65CF9BF4497725C Authority key identifier: 09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/TdxQhWG2wtulK5Vb9nCA77o4y_I.roa Signing time: Fri 02 Jan 2026 16:19:39 +0000 ROA not before: Fri 02 Jan 2026 16:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48943 IP address blocks: 193.28.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:eb:59:dc:cd:c1:89:f6:5c:f9:bf:44:97:72:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09c552498881876556f16e323f1ca369b25edb0c Validity Not Before: Jan 2 16:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ddc508561b6c2dba52b955bf67080efba38cbf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:be:8e:02:cc:6c:bb:6a:f2:25:ec:57:34:76: 30:b3:b6:d0:3c:63:6e:8a:22:62:54:c6:6a:26:c1: 36:42:c4:00:7d:c1:a5:01:6c:c0:b1:da:9b:dc:89: 88:45:96:56:09:5a:cc:1a:b9:f4:dc:95:86:7e:79: d1:df:0e:87:78:cb:f2:c3:ea:33:6b:ec:87:99:6d: 22:57:ee:37:58:2d:66:1c:f3:f8:3b:b2:2c:cf:03: 0b:d3:e4:eb:73:f9:b7:6f:64:07:1b:d6:de:fc:59: a2:6c:89:da:9b:ff:0e:f7:b7:a6:26:09:b2:3c:e7: 29:76:90:e6:9b:3b:fc:ac:6c:10:9e:8b:08:7d:3b: b5:3b:9e:be:85:84:cb:fa:08:9b:e6:d2:92:9c:5c: 88:53:46:4a:ba:2c:a1:33:5d:84:8d:49:8e:4a:f5: bb:ac:6c:c1:a9:ea:10:8e:a2:45:3d:6e:db:e1:d3: 85:ca:e7:1b:26:a2:03:70:5d:28:3f:91:47:2d:d5: 69:61:1b:20:8b:ba:b6:b4:c1:95:34:98:82:ac:1a: 43:f1:b2:e7:fc:27:34:d9:13:61:cd:93:1d:9f:29: 1a:10:8e:38:5a:d3:cf:50:b4:31:da:3d:da:75:de: 16:46:46:4e:d4:89:d6:41:a8:ce:9a:09:54:33:41: 43:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:DC:50:85:61:B6:C2:DB:A5:2B:95:5B:F6:70:80:EF:BA:38:CB:F2 X509v3 Authority Key Identifier: keyid:09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/TdxQhWG2wtulK5Vb9nCA77o4y_I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.28.12.0/24 Signature Algorithm: sha256WithRSAEncryption 38:8b:f9:ce:84:70:0c:f3:9b:e7:0a:68:98:ff:09:8e:5f:e3: bc:02:7e:12:c6:7c:97:3f:94:c3:31:aa:52:06:97:7e:b9:e3: 90:78:35:98:27:1c:ce:df:1e:fd:62:a0:7c:03:97:97:08:d1: e2:2f:0f:7e:6b:af:ab:f4:f1:a7:39:b6:e0:b1:d6:e5:a3:e1: 7d:db:6f:83:f2:0c:a8:23:1c:c2:b6:8c:55:9b:b0:ee:b9:52: dd:88:c3:77:de:2f:31:52:18:c8:b6:4b:61:8a:f1:33:9f:8d: 4e:e9:06:39:b7:0c:ff:1b:29:61:70:08:b4:ce:35:f5:cd:43: 79:42:12:a4:e6:1d:0b:ab:2f:94:6b:74:be:4c:7f:b3:1a:77: 01:c4:a4:02:90:8e:f7:c5:f9:b3:8c:91:87:65:ed:9b:af:5d: da:bf:07:df:97:4e:bb:d0:f2:e7:c0:de:10:a2:73:3c:bd:f7: a2:41:48:5f:da:4a:34:39:e5:99:eb:bf:33:ff:4b:5d:59:b3: 16:8c:a8:d8:17:ad:9e:f6:1d:9a:f5:90:46:ca:9a:f0:00:21: c5:f1:f2:9a:ec:0c:65:7a:e3:4b:6f:3b:44:89:73:f6:67:0c: 3c:1a:3a:35:ec:36:74:d4:86:2f:de:01:71:f7:a6:80:8e:57: d1:c7:90:35 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/getZ3M3BifZc+b9El3JcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5YzU1MjQ5ODg4MTg3NjU1NmYxNmUzMjNmMWNhMzY5YjI1 ZWRiMGMwHhcNMjYwMTAyMTYxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZGRjNTA4NTYxYjZjMmRiYTUyYjk1NWJmNjcwODBlZmJhMzhjYmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi76OAsxsu2ryJexXNHYws7bQPGNu iiJiVMZqJsE2QsQAfcGlAWzAsdqb3ImIRZZWCVrMGrn03JWGfnnR3w6HeMvyw+oz a+yHmW0iV+43WC1mHPP4O7IszwML0+Trc/m3b2QHG9be/FmibInam/8O97emJgmy POcpdpDmmzv8rGwQnosIfTu1O56+hYTL+gib5tKSnFyIU0ZKuiyhM12EjUmOSvW7 rGzBqeoQjqJFPW7b4dOFyucbJqIDcF0oP5FHLdVpYRsgi7q2tMGVNJiCrBpD8bLn /Cc02RNhzZMdnykaEI44WtPPULQx2j3add4WRkZO1InWQajOmglUM0FDnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE3cUIVhtsLbpSuVW/ZwgO+6OMvyMB8GA1UdIwQY MBaAFAnFUkmIgYdlVvFuMj8co2myXtsMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2NWU1NZaUJoMlZXOFc0eVB4eWphYkplMnd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jMzRjMzAtODFiNC00ZGJlLTgzZTgt MTFmMzY1YTczNTJjLzEvVGR4UWhXRzJ3dHVsSzVWYjluQ0E3N280eV9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9jMzRjMzAtODFiNC00ZGJlLTgzZTgtMTFmMzY1YTczNTJj LzEvQ2NWU1NZaUJoMlZXOFc0eVB4eWphYkplMnd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRwMMA0G CSqGSIb3DQEBCwUAA4IBAQA4i/nOhHAM85vnCmiY/wmOX+O8An4SxnyXP5TDMapS Bpd+ueOQeDWYJxzO3x79YqB8A5eXCNHiLw9+a6+r9PGnObbgsdblo+F922+D8gyo IxzCtoxVm7DuuVLdiMN33i8xUhjItkthivEzn41O6QY5twz/GylhcAi0zjX1zUN5 QhKk5h0Lqy+Ua3S+TH+zGncBxKQCkI73xfmzjJGHZe2br13avwffl0670PLnwN4Q onM8vfeiQUhf2ko0OeWZ678z/0tdWbMWjKjYF62e9h2a9ZBGyprwACHF8fKa7Axl euNLbztEiXP2Zww8Gjo17DZ01IYv3gFx96aAjlfRx5A1 -----END CERTIFICATE-----Generated at Mon Jan 26 02:07:50 2026 by rpki-client