This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/tWk8_qiddKPFwvBChXygjosFxfs.roa File: tWk8_qiddKPFwvBChXygjosFxfs.roa (raw, json) Hash identifier: l9/b6N+haDaG/tVx4P4Y2DzGqshnTNzH3azJieIxhfU= Subject key identifier: B5:69:3C:FE:A8:9D:74:A3:C5:C2:F0:42:85:7C:A0:8E:8B:05:C5:FB Certificate issuer: /CN=ffc3f5ca4792d94d1aa36eb5ea3aa1b4043cd014 Certificate serial: 019B05F5BD89643EC659A064B9CBAA0E5FC4 Authority key identifier: FF:C3:F5:CA:47:92:D9:4D:1A:A3:6E:B5:EA:3A:A1:B4:04:3C:D0:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8P1ykeS2U0ao2616jqhtAQ80BQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/tWk8_qiddKPFwvBChXygjosFxfs.roa Signing time: Wed 10 Dec 2025 01:52:29 +0000 ROA not before: Wed 10 Dec 2025 01:52:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 5405 IP address blocks: 185.242.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.mft rsync://rpki.ripe.net/repository/DEFAULT/_8P1ykeS2U0ao2616jqhtAQ80BQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:05:f5:bd:89:64:3e:c6:59:a0:64:b9:cb:aa:0e:5f:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffc3f5ca4792d94d1aa36eb5ea3aa1b4043cd014 Validity Not Before: Dec 10 01:52:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b5693cfea89d74a3c5c2f042857ca08e8b05c5fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:30:88:2f:02:20:bd:52:60:1d:bb:c0:92:6d: a9:c5:28:20:db:1b:a2:33:d9:8a:06:f3:30:44:06: f8:7a:57:72:a9:22:34:12:76:32:dc:55:07:91:95: 19:6e:98:5a:76:53:ae:73:f4:65:d9:fc:33:7c:5f: 64:15:7a:9c:f0:cb:74:f0:f5:78:9c:b4:51:24:08: ac:de:cf:19:ee:22:72:f2:08:fd:11:4a:ca:df:d8: 68:91:ce:93:6e:a0:48:31:4d:7e:a5:8d:7a:62:c5: 3f:12:d6:a8:4c:2c:a2:08:b3:7d:b0:0b:66:38:c3: 09:57:b7:76:20:cc:15:f1:40:35:72:4e:6b:70:28: c5:09:03:f1:90:71:c5:fa:f5:3e:39:07:a8:af:7e: ef:34:8a:72:fe:51:f2:c6:2a:2c:e4:a3:94:39:ac: 39:cd:01:51:28:c0:45:91:3c:4f:24:a2:b1:90:77: ba:74:4b:0e:e5:da:b0:22:9a:00:af:7a:c1:67:3f: c9:0d:59:e4:eb:04:43:f2:8c:51:4e:67:72:08:7e: 3d:10:47:11:fc:da:74:67:e2:cc:d4:1f:d3:6d:9d: 67:fb:73:57:fa:88:a1:d6:24:86:10:d6:ea:49:c9: 18:e9:09:f8:e3:56:eb:3a:59:9c:75:42:4d:4e:88: 4f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:69:3C:FE:A8:9D:74:A3:C5:C2:F0:42:85:7C:A0:8E:8B:05:C5:FB X509v3 Authority Key Identifier: keyid:FF:C3:F5:CA:47:92:D9:4D:1A:A3:6E:B5:EA:3A:A1:B4:04:3C:D0:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8P1ykeS2U0ao2616jqhtAQ80BQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/tWk8_qiddKPFwvBChXygjosFxfs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.242.76.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:d5:5f:9d:8a:20:86:ac:55:c5:20:1d:09:f0:de:6b:f4:ba: 1c:dd:57:b1:e0:d9:14:f2:15:ab:07:fc:ed:8b:f0:7d:b1:6f: 42:2e:7c:a1:73:76:5b:ab:0a:2a:c3:37:96:c8:2a:42:84:2e: 96:48:f6:dc:02:0d:30:eb:d1:9f:e2:d0:12:3e:1f:b1:d6:c0: 33:2c:09:5e:6e:21:ca:d0:49:b1:72:89:b3:d4:9e:69:69:1b: 31:b3:e7:d1:1e:0e:67:24:e0:a3:9c:37:67:2c:97:9a:b3:62: 45:c6:2e:a8:c0:08:96:0d:95:76:64:ab:c0:36:a8:7c:aa:a4: df:66:f0:eb:d8:e1:3a:f4:9d:a2:5e:0e:57:8c:91:da:50:42: 0d:44:7d:1e:99:15:ce:a5:b0:d9:4c:a2:e6:ab:be:61:49:8a: b2:92:d7:1b:89:bb:88:df:83:7d:76:bb:06:d6:52:3d:86:5b: fd:ca:9b:b9:0e:02:03:76:2f:df:3c:70:bd:0a:2e:0b:4b:a9: c3:34:78:77:44:16:c3:63:59:f9:c4:d5:bf:34:2f:94:26:58: d3:98:e0:fc:e7:fa:5e:7e:46:5a:a2:d3:11:99:9e:86:9e:5c: ae:d3:5b:1c:86:94:2d:e9:91:6f:5b:11:e3:a2:ac:ee:53:fb: f3:3d:60:58 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsF9b2JZD7GWaBkucuqDl/EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYzNmNWNhNDc5MmQ5NGQxYWEzNmViNWVhM2FhMWI0MDQz Y2QwMTQwHhcNMjUxMjEwMDE1MjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTY5M2NmZWE4OWQ3NGEzYzVjMmYwNDI4NTdjYTA4ZThiMDVjNWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDCILwIgvVJgHbvAkm2pxSgg2xui M9mKBvMwRAb4eldyqSI0EnYy3FUHkZUZbphadlOuc/Rl2fwzfF9kFXqc8Mt08PV4 nLRRJAis3s8Z7iJy8gj9EUrK39hokc6TbqBIMU1+pY16YsU/EtaoTCyiCLN9sAtm OMMJV7d2IMwV8UA1ck5rcCjFCQPxkHHF+vU+OQeor37vNIpy/lHyxios5KOUOaw5 zQFRKMBFkTxPJKKxkHe6dEsO5dqwIpoAr3rBZz/JDVnk6wRD8oxRTmdyCH49EEcR /Np0Z+LM1B/TbZ1n+3NX+oih1iSGENbqSckY6Qn441brOlmcdUJNTohP3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLVpPP6onXSjxcLwQoV8oI6LBcX7MB8GA1UdIwQY MBaAFP/D9cpHktlNGqNuteo6obQEPNAUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzhQMXlrZVMyVTBhbzI2MTZqcWh0QVE4MEJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mZDY5NjMtZDI1Yy00MDJmLTllYTEt MjhlZDBmOTI4MTMzLzEvdFdrOF9xaWRkS1BGd3ZCQ2hYeWdqb3NGeGZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mZDY5NjMtZDI1Yy00MDJmLTllYTEtMjhlZDBmOTI4MTMz LzEvXzhQMXlrZVMyVTBhbzI2MTZqcWh0QVE4MEJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufJMMA0G CSqGSIb3DQEBCwUAA4IBAQAN1V+diiCGrFXFIB0J8N5r9Loc3Vex4NkU8hWrB/zt i/B9sW9CLnyhc3ZbqwoqwzeWyCpChC6WSPbcAg0w69Gf4tASPh+x1sAzLAlebiHK 0Emxcomz1J5paRsxs+fRHg5nJOCjnDdnLJeas2JFxi6owAiWDZV2ZKvANqh8qqTf ZvDr2OE69J2iXg5XjJHaUEINRH0emRXOpbDZTKLmq75hSYqyktcbibuI34N9drsG 1lI9hlv9ypu5DgIDdi/fPHC9Ci4LS6nDNHh3RBbDY1n5xNW/NC+UJljTmOD85/pe fkZaotMRmZ6Gnlyu01schpQt6ZFvWxHjoqzuU/vzPWBY -----END CERTIFICATE-----Generated at Sun Dec 21 01:07:08 2025 by rpki-client