This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/_0K0MbXez9Zk6hM4BfuXTicksww.roa File: _0K0MbXez9Zk6hM4BfuXTicksww.roa (raw, json) Hash identifier: jphVj9+5Y1KjhS9qQGa/Rzumw9Jp9UB9+NvyfpBCLSc= Subject key identifier: FF:42:B4:31:B5:DE:CF:D6:64:EA:13:38:05:FB:97:4E:27:24:B3:0C Certificate issuer: /CN=d8772aac1b62b87d6b01d57a1a00a6a72b8a7da6 Certificate serial: 019B7BA4E991CDC10C677AF1B28F2E45501C Authority key identifier: D8:77:2A:AC:1B:62:B8:7D:6B:01:D5:7A:1A:00:A6:A7:2B:8A:7D:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/_0K0MbXez9Zk6hM4BfuXTicksww.roa Signing time: Thu 01 Jan 2026 22:19:23 +0000 ROA not before: Thu 01 Jan 2026 22:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1299 IP address blocks: 139.123.225.0/24 maxlen: 24 139.123.228.0/24 maxlen: 24 193.24.66.0/24 maxlen: 25 193.24.68.0/24 maxlen: 25 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:e9:91:cd:c1:0c:67:7a:f1:b2:8f:2e:45:50:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8772aac1b62b87d6b01d57a1a00a6a72b8a7da6 Validity Not Before: Jan 1 22:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff42b431b5decfd664ea133805fb974e2724b30c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ec:af:40:8c:b0:b5:d6:94:75:4f:58:97:48: 63:76:e0:df:12:ca:51:da:49:66:51:d7:3b:37:3f: 1f:c2:76:83:76:6f:79:38:4f:30:41:4e:4d:52:4a: 96:33:69:ad:bd:2f:c6:2f:bf:24:43:0e:51:37:77: 8f:bb:8f:c4:0a:b1:63:05:47:fa:03:43:62:58:25: 4a:5b:8a:a4:6f:71:99:35:48:eb:81:78:87:5e:95: 7e:d7:fa:db:54:9b:4f:c5:68:1e:5b:5d:74:80:a0: a2:1d:36:d5:83:8b:d0:88:08:3b:e5:99:7c:bc:e7: 11:65:1c:51:1c:97:62:ba:a7:1b:cf:22:51:a4:c9: 69:b9:6c:9e:65:c6:7c:63:8d:00:66:08:12:b4:98: 0d:64:4d:90:aa:f4:08:7a:72:1c:ec:66:02:49:95: 7f:b6:02:75:e5:43:1d:d8:75:f9:f7:8d:df:ce:17: 6f:60:ec:0e:54:bf:13:d7:fe:3e:c1:01:9a:54:48: bc:c7:99:4a:93:b7:4a:bd:00:8d:9b:50:2c:59:fb: 74:67:94:cb:70:91:e9:9f:f5:0b:2e:d6:c7:95:05: 54:bf:5d:c5:80:38:1b:31:eb:9e:1d:7f:35:43:16: 9b:c0:b4:3c:ac:e0:3b:d7:fd:a7:ff:75:50:a3:57: 6e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:42:B4:31:B5:DE:CF:D6:64:EA:13:38:05:FB:97:4E:27:24:B3:0C X509v3 Authority Key Identifier: keyid:D8:77:2A:AC:1B:62:B8:7D:6B:01:D5:7A:1A:00:A6:A7:2B:8A:7D:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/_0K0MbXez9Zk6hM4BfuXTicksww.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.123.225.0/24 139.123.228.0/24 193.24.66.0/24 193.24.68.0/24 Signature Algorithm: sha256WithRSAEncryption 36:8f:ff:f1:c3:5c:cd:df:15:eb:ed:58:68:ec:af:a9:17:ab: ed:da:0a:4a:08:25:19:15:e1:c0:bf:be:75:50:c5:a4:77:2b: 2d:47:d2:eb:c3:0e:f3:02:13:a8:25:c8:e7:71:56:2e:a2:4d: 02:66:eb:c4:ac:36:f2:20:46:bd:71:f6:5e:a4:46:04:a6:7b: 1d:3a:b2:0c:33:29:b7:92:86:51:24:bb:72:8d:59:b0:8e:1f: 45:1c:15:75:13:dc:93:ec:a4:5a:38:6f:4c:68:6f:03:04:77: 75:de:b9:84:6f:ec:f5:a3:70:28:79:aa:10:c1:38:cc:e9:70: e2:57:fb:5a:b7:4e:a9:0f:3a:15:05:4a:82:1f:a9:f9:68:2c: 1e:8a:1a:33:14:40:9c:3d:1e:e2:56:fb:36:1d:68:d6:c2:2a: 9a:bf:9a:f3:08:5a:68:54:91:bb:16:62:71:86:c3:88:24:b4: 3e:8e:8d:e3:1e:55:15:c7:0b:02:0e:3b:61:33:d5:e0:b2:1b: ea:f1:eb:4d:d5:5d:88:38:d2:6e:ed:68:f7:bc:96:4c:e7:7d: 8e:e9:9c:04:02:17:74:f7:1a:a6:2c:d8:0d:22:dc:a5:ba:c0: 86:15:ce:7c:34:6e:d8:08:60:b1:06:cb:63:83:78:31:92:b5: d8:7a:ea:b2 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt7pOmRzcEMZ3rxso8uRVAcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4NzcyYWFjMWI2MmI4N2Q2YjAxZDU3YTFhMDBhNmE3MmI4 YTdkYTYwHhcNMjYwMTAxMjIxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjQyYjQzMWI1ZGVjZmQ2NjRlYTEzMzgwNWZiOTc0ZTI3MjRiMzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+yvQIywtdaUdU9Yl0hjduDfEspR 2klmUdc7Nz8fwnaDdm95OE8wQU5NUkqWM2mtvS/GL78kQw5RN3ePu4/ECrFjBUf6 A0NiWCVKW4qkb3GZNUjrgXiHXpV+1/rbVJtPxWgeW110gKCiHTbVg4vQiAg75Zl8 vOcRZRxRHJdiuqcbzyJRpMlpuWyeZcZ8Y40AZggStJgNZE2QqvQIenIc7GYCSZV/ tgJ15UMd2HX5943fzhdvYOwOVL8T1/4+wQGaVEi8x5lKk7dKvQCNm1AsWft0Z5TL cJHpn/ULLtbHlQVUv13FgDgbMeueHX81QxabwLQ8rOA71/2n/3VQo1dudQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFP9CtDG13s/WZOoTOAX7l04nJLMMMB8GA1UdIwQY MBaAFNh3KqwbYrh9awHVehoApqcrin2mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkhjcXJCdGl1SDFyQWRWNkdnQ21weXVLZmFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My82MTZhNTgtNTM0Mi00MzJjLWE5YzUt MzMzYmVlY2ZmNmY0LzEvXzBLME1iWGV6OVprNmhNNEJmdVhUaWNrc3d3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My82MTZhNTgtNTM0Mi00MzJjLWE5YzUtMzMzYmVlY2ZmNmY0 LzEvMkhjcXJCdGl1SDFyQWRWNkdnQ21weXVLZmFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAi3vhAwQA i3vkAwQAwRhCAwQAwRhEMA0GCSqGSIb3DQEBCwUAA4IBAQA2j//xw1zN3xXr7Vho 7K+pF6vt2gpKCCUZFeHAv751UMWkdystR9Lrww7zAhOoJcjncVYuok0CZuvErDby IEa9cfZepEYEpnsdOrIMMym3koZRJLtyjVmwjh9FHBV1E9yT7KRaOG9MaG8DBHd1 3rmEb+z1o3AoeaoQwTjM6XDiV/tat06pDzoVBUqCH6n5aCweihozFECcPR7iVvs2 HWjWwiqav5rzCFpoVJG7FmJxhsOIJLQ+jo3jHlUVxwsCDjthM9Xgshvq8etN1V2I ONJu7Wj3vJZM532O6ZwEAhd09xqmLNgNItylusCGFc58NG7YCGCxBstjg3gxkrXY euqy -----END CERTIFICATE-----Generated at Sun Jan 11 18:13:07 2026 by rpki-client