This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/TX_u3ri8rca4P81egD9tMMtVs-E.roa File: TX_u3ri8rca4P81egD9tMMtVs-E.roa (raw, json) Hash identifier: VizDbLVqd0zmsz68Is1wbARP6+9Ai1vW465jIZXJ0vw= Subject key identifier: 4D:7F:EE:DE:B8:BC:AD:C6:B8:3F:CD:5E:80:3F:6D:30:CB:55:B3:E1 Certificate issuer: /CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714 Certificate serial: 019B7D5B8ABF1CC6401CB3B1C6E132EF197E Authority key identifier: 4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/TX_u3ri8rca4P81egD9tMMtVs-E.roa Signing time: Fri 02 Jan 2026 06:18:29 +0000 ROA not before: Fri 02 Jan 2026 06:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12743 IP address blocks: 194.9.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:8a:bf:1c:c6:40:1c:b3:b1:c6:e1:32:ef:19:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714 Validity Not Before: Jan 2 06:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d7feedeb8bcadc6b83fcd5e803f6d30cb55b3e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ad:f7:bd:2a:94:01:24:67:16:aa:af:98:9e: 77:c9:f0:84:76:c5:cf:d1:c2:61:28:30:bf:1b:02: ee:80:5e:64:01:ff:44:54:d0:80:c9:0d:60:01:fd: 75:5e:66:dd:61:be:84:e7:77:c1:c4:b3:dc:f9:6a: 52:33:df:30:1c:27:dd:b9:09:c4:fa:8c:09:1d:4a: 7f:a8:58:e1:18:5a:e1:de:8b:1f:df:92:52:e2:2a: 7e:68:2a:fd:54:3d:47:f0:67:9f:35:7c:a1:43:af: 08:38:63:65:46:cb:1c:ab:36:29:31:ee:68:01:e6: d6:a9:12:52:8d:3a:ea:e9:9b:a6:82:91:72:79:e8: 41:f3:f5:85:0f:3a:65:1b:65:6b:d5:0f:a3:33:ba: 5c:d2:16:59:90:55:61:3a:e6:9e:9f:b2:bc:62:d6: 15:f8:cf:95:53:67:39:5b:0e:0d:42:6c:7c:b8:a1: 4b:24:70:f1:f9:50:52:5f:02:38:83:2f:c7:aa:c7: d4:2d:6f:67:49:a8:09:13:e2:8a:07:ae:52:66:29: de:69:80:a2:3b:c2:82:e0:e8:ef:52:12:a5:68:18: 78:62:1b:01:8e:ad:b6:48:4e:44:20:f2:e0:96:42: 5d:ab:81:98:71:36:d4:8d:23:42:bf:9a:82:9a:1d: 18:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:7F:EE:DE:B8:BC:AD:C6:B8:3F:CD:5E:80:3F:6D:30:CB:55:B3:E1 X509v3 Authority Key Identifier: keyid:4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/TX_u3ri8rca4P81egD9tMMtVs-E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.9.223.0/24 Signature Algorithm: sha256WithRSAEncryption 23:6f:47:65:76:b3:ca:d7:58:8c:dc:aa:7b:89:4a:3b:f4:91: 44:db:8e:a3:d0:b6:d8:81:19:72:c1:3c:1a:c0:00:91:53:ef: 71:2d:df:b1:a4:76:69:59:25:b8:3d:0a:40:f8:f7:3c:79:46: c5:bb:4e:a1:65:da:12:b2:81:7a:b3:d1:37:8a:ce:d7:69:01: cd:df:4a:3a:8b:28:13:7d:88:60:ff:4b:fe:9d:00:4b:5c:32: 7c:21:cd:38:20:de:c8:2b:ac:fa:0d:64:0f:3e:5e:18:4e:01: 7c:2e:a6:8b:7b:f8:c7:51:35:e4:39:1c:c0:44:28:b6:7a:94: c2:53:b1:fd:ad:aa:ab:6d:94:aa:9c:13:f8:28:2a:ed:94:9c: 13:ac:97:db:b4:b9:58:d5:5b:a8:82:c2:ca:18:9a:24:c5:05: 08:b9:f0:a0:5e:0c:a3:ea:57:b7:4f:a4:b1:c0:cc:f2:ef:46: fd:3d:5a:8f:6c:e1:a3:db:3b:c1:2e:28:08:c4:ed:69:1b:0b: 76:4e:ab:d2:c2:fc:a3:b7:e2:38:99:3d:1d:ab:83:68:f7:47: 3a:66:13:2b:91:9f:d4:75:bc:f0:eb:cb:ef:1a:1b:1d:51:70: fe:43:18:7b:10:c0:4c:85:6e:a4:90:b4:76:4e:fe:c3:0a:4b: 72:fc:0e:42 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W4q/HMZAHLOxxuEy7xl+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlY2Y1MzAwN2M3OWNjNWUyZjJkNzM1NmJhOTEyMWE3OGMw Yzc3MTQwHhcNMjYwMTAyMDYxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDdmZWVkZWI4YmNhZGM2YjgzZmNkNWU4MDNmNmQzMGNiNTViM2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs633vSqUASRnFqqvmJ53yfCEdsXP 0cJhKDC/GwLugF5kAf9EVNCAyQ1gAf11XmbdYb6E53fBxLPc+WpSM98wHCfduQnE +owJHUp/qFjhGFrh3osf35JS4ip+aCr9VD1H8GefNXyhQ68IOGNlRsscqzYpMe5o AebWqRJSjTrq6ZumgpFyeehB8/WFDzplG2Vr1Q+jM7pc0hZZkFVhOuaen7K8YtYV +M+VU2c5Ww4NQmx8uKFLJHDx+VBSXwI4gy/HqsfULW9nSagJE+KKB65SZineaYCi O8KC4OjvUhKlaBh4YhsBjq22SE5EIPLglkJdq4GYcTbUjSNCv5qCmh0Y+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE1/7t64vK3GuD/NXoA/bTDLVbPhMB8GA1UdIwQY MBaAFE7PUwB8ecxeLy1zVrqRIaeMDHcUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHM5VEFIeDV6RjR2TFhOV3VwRWhwNHdNZHhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82NDhjNzUtMmJlOC00YmZkLWExYjEt Y2I4YjNhMDk0MjA5LzEvVFhfdTNyaThyY2E0UDgxZWdEOXRNTXRWcy1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi82NDhjNzUtMmJlOC00YmZkLWExYjEtY2I4YjNhMDk0MjA5 LzEvVHM5VEFIeDV6RjR2TFhOV3VwRWhwNHdNZHhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgnfMA0G CSqGSIb3DQEBCwUAA4IBAQAjb0dldrPK11iM3Kp7iUo79JFE246j0LbYgRlywTwa wACRU+9xLd+xpHZpWSW4PQpA+Pc8eUbFu06hZdoSsoF6s9E3is7XaQHN30o6iygT fYhg/0v+nQBLXDJ8Ic04IN7IK6z6DWQPPl4YTgF8LqaLe/jHUTXkORzARCi2epTC U7H9raqrbZSqnBP4KCrtlJwTrJfbtLlY1VuogsLKGJokxQUIufCgXgyj6le3T6Sx wMzy70b9PVqPbOGj2zvBLigIxO1pGwt2TqvSwvyjt+I4mT0dq4No90c6ZhMrkZ/U dbzw68vvGhsdUXD+Qxh7EMBMhW6kkLR2Tv7DCkty/A5C -----END CERTIFICATE-----Generated at Mon Jan 26 01:02:06 2026 by rpki-client