This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/T2C7WIfF0wbXIdpisxkUUAqC7Vg.roa File: T2C7WIfF0wbXIdpisxkUUAqC7Vg.roa (raw, json) Hash identifier: IG8wYbRO9EgR+lhTadWwp9VBM4VCFO/ElkXU+SiTN5o= Subject key identifier: 4F:60:BB:58:87:C5:D3:06:D7:21:DA:62:B3:19:14:50:0A:82:ED:58 Certificate issuer: /CN=7de0d23a11470e2430f52e1be2e03014e2b84ee1 Certificate serial: 019B7E392CC894FB9215D48B0CF2400EE5F1 Authority key identifier: 7D:E0:D2:3A:11:47:0E:24:30:F5:2E:1B:E2:E0:30:14:E2:B8:4E:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/T2C7WIfF0wbXIdpisxkUUAqC7Vg.roa Signing time: Fri 02 Jan 2026 10:20:34 +0000 ROA not before: Fri 02 Jan 2026 10:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202709 IP address blocks: 109.70.79.0/24 maxlen: 24 2a14:e800::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:2c:c8:94:fb:92:15:d4:8b:0c:f2:40:0e:e5:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7de0d23a11470e2430f52e1be2e03014e2b84ee1 Validity Not Before: Jan 2 10:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f60bb5887c5d306d721da62b31914500a82ed58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4d:9b:1f:d5:a4:09:70:de:74:b5:4c:c5:ff: d1:bf:47:c5:d7:4f:9a:59:f8:54:47:00:cc:77:1a: b5:2d:32:8e:c7:cd:c5:92:da:1a:6a:23:8c:b8:f0: cb:87:52:7f:cc:49:0b:ca:2e:67:76:20:fe:cb:5a: c1:5b:97:dc:c7:04:db:76:60:53:68:4c:63:35:d1: 2d:7a:29:8c:7e:f3:55:02:ec:9f:89:ce:0e:f5:9b: e7:e0:df:9d:f2:92:af:74:bf:e0:cc:92:7d:96:dc: 2f:fd:53:de:16:37:b5:6e:e7:29:ed:cd:d0:e0:58: 71:51:90:d2:7e:5d:68:b0:99:35:26:87:ff:af:1b: e8:99:43:2c:a3:b7:79:4a:ce:fc:dd:97:4f:23:24: 34:93:9b:bf:1b:fe:55:0d:5c:58:fc:01:a1:26:b0: 2d:23:e4:7c:82:08:a4:40:dd:b1:0a:5a:d9:85:d9: 74:a2:a1:22:1d:f0:82:b2:73:ad:b6:95:c9:41:9f: fd:66:b8:2c:15:15:11:7c:a4:50:32:31:d7:de:33: 62:9d:52:81:14:03:44:e7:e0:82:34:60:f6:1c:f1: 51:ec:06:a0:bf:7f:ed:e1:d8:a2:d6:e1:78:40:ac: 39:91:87:1f:a5:40:3f:98:e8:c4:74:67:d7:c7:77: f1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:60:BB:58:87:C5:D3:06:D7:21:DA:62:B3:19:14:50:0A:82:ED:58 X509v3 Authority Key Identifier: keyid:7D:E0:D2:3A:11:47:0E:24:30:F5:2E:1B:E2:E0:30:14:E2:B8:4E:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/T2C7WIfF0wbXIdpisxkUUAqC7Vg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.70.79.0/24 IPv6: 2a14:e800::/29 Signature Algorithm: sha256WithRSAEncryption 46:12:5b:fe:b1:fb:34:ac:b3:a8:0b:54:ca:76:56:43:53:c3: c0:a2:39:b6:47:59:88:85:c6:12:d8:7a:1f:1b:76:3a:77:64: 2f:ca:48:92:86:32:8d:79:7b:20:3e:4b:f3:a8:16:0c:32:f1: 7f:0b:56:5c:1a:00:c3:02:ae:8e:d8:f2:f6:d3:9f:90:1b:5d: c4:e6:f1:96:c0:38:be:f7:30:02:f3:e2:eb:cb:dc:0d:8b:71: ff:2f:06:33:2b:97:78:54:d4:a2:aa:81:d0:10:cc:d1:e3:32: 5d:fd:80:5b:9d:b3:9c:b8:0a:70:e3:54:c1:5a:8b:8e:f1:12: b7:f2:aa:29:b8:5a:df:f6:bc:38:1a:21:0e:9d:80:5d:2f:ed: 19:f8:92:6b:94:37:69:79:5d:03:df:4a:51:04:a1:c2:4c:23: f4:c2:ce:58:0f:b5:86:b6:55:45:43:12:c8:72:77:b6:6c:16: 55:4c:62:ec:3d:91:3b:27:fb:09:fa:0c:76:a1:1e:f4:07:d4: 1e:8c:09:f4:da:e5:a7:9b:57:b7:b0:8b:21:f5:fd:aa:82:c1: 9f:ff:1f:b4:c1:fb:5f:22:6e:9c:87:8e:2e:17:29:95:a1:ce: 80:0a:f5:ef:75:55:79:40:4c:64:df:df:b9:44:8c:ff:4a:30: fb:98:1a:a5 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+OSzIlPuSFdSLDPJADuXxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZTBkMjNhMTE0NzBlMjQzMGY1MmUxYmUyZTAzMDE0ZTJi ODRlZTEwHhcNMjYwMTAyMTAyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjYwYmI1ODg3YzVkMzA2ZDcyMWRhNjJiMzE5MTQ1MDBhODJlZDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwU2bH9WkCXDedLVMxf/Rv0fF10+a WfhURwDMdxq1LTKOx83FktoaaiOMuPDLh1J/zEkLyi5ndiD+y1rBW5fcxwTbdmBT aExjNdEteimMfvNVAuyfic4O9Zvn4N+d8pKvdL/gzJJ9ltwv/VPeFje1bucp7c3Q 4FhxUZDSfl1osJk1Jof/rxvomUMso7d5Ss783ZdPIyQ0k5u/G/5VDVxY/AGhJrAt I+R8ggikQN2xClrZhdl0oqEiHfCCsnOttpXJQZ/9ZrgsFRURfKRQMjHX3jNinVKB FANE5+CCNGD2HPFR7Aagv3/t4dii1uF4QKw5kYcfpUA/mOjEdGfXx3fx8QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFE9gu1iHxdMG1yHaYrMZFFAKgu1YMB8GA1UdIwQY MBaAFH3g0joRRw4kMPUuG+LgMBTiuE7hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmVEU09oRkhEaVF3OVM0YjR1QXdGT0s0VHVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mMTkwNjAtMzc4Mi00YmRmLTgzYzAt MGNlOTgxM2Q0OTI1LzEvVDJDN1dJZkYwd2JYSWRwaXN4a1VVQXFDN1ZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9mMTkwNjAtMzc4Mi00YmRmLTgzYzAtMGNlOTgxM2Q0OTI1 LzEvZmVEU09oRkhEaVF3OVM0YjR1QXdGT0s0VHVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAbUZPMA0E AgACMAcDBQMqFOgAMA0GCSqGSIb3DQEBCwUAA4IBAQBGElv+sfs0rLOoC1TKdlZD U8PAojm2R1mIhcYS2HofG3Y6d2QvykiShjKNeXsgPkvzqBYMMvF/C1ZcGgDDAq6O 2PL205+QG13E5vGWwDi+9zAC8+Lry9wNi3H/LwYzK5d4VNSiqoHQEMzR4zJd/YBb nbOcuApw41TBWouO8RK38qopuFrf9rw4GiEOnYBdL+0Z+JJrlDdpeV0D30pRBKHC TCP0ws5YD7WGtlVFQxLIcne2bBZVTGLsPZE7J/sJ+gx2oR70B9QejAn02uWnm1e3 sIsh9f2qgsGf/x+0wftfIm6ch44uFymVoc6ACvXvdVV5QExk39+5RIz/SjD7mBql -----END CERTIFICATE-----Generated at Mon Jan 26 07:51:39 2026 by rpki-client