This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/T4oLWvtGkXnIZT9-9x1LOu0VW-U.roa File: T4oLWvtGkXnIZT9-9x1LOu0VW-U.roa (raw, json) Hash identifier: G6kuFvQwsgczzQTnExC5MPe1xhFcrC4A2B7/fKDah3o= Subject key identifier: 4F:8A:0B:5A:FB:46:91:79:C8:65:3F:7E:F7:1D:4B:3A:ED:15:5B:E5 Certificate issuer: /CN=f9df80f7c692e86d3cd6b755d06cf7ce9c137ff2 Certificate serial: 019B2B6AF9ACC090AD018A3103B7526506B8 Authority key identifier: F9:DF:80:F7:C6:92:E8:6D:3C:D6:B7:55:D0:6C:F7:CE:9C:13:7F:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/T4oLWvtGkXnIZT9-9x1LOu0VW-U.roa Signing time: Wed 17 Dec 2025 08:26:29 +0000 ROA not before: Wed 17 Dec 2025 08:26:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 5505 IP address blocks: 185.123.204.0/22 maxlen: 22 185.123.204.0/24 maxlen: 24 185.123.205.0/24 maxlen: 24 185.123.206.0/24 maxlen: 24 185.123.207.0/24 maxlen: 24 185.210.226.0/24 maxlen: 24 185.210.227.0/24 maxlen: 24 2a03:9320::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.crl rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:6a:f9:ac:c0:90:ad:01:8a:31:03:b7:52:65:06:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9df80f7c692e86d3cd6b755d06cf7ce9c137ff2 Validity Not Before: Dec 17 08:26:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4f8a0b5afb469179c8653f7ef71d4b3aed155be5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:6b:61:a6:fa:a7:ea:ab:db:2e:99:0c:ed:89: cd:15:fa:03:3f:78:a4:bd:3e:14:4e:d9:ea:a2:cd: 60:7d:37:5d:ad:66:9d:60:58:8e:37:77:b6:ef:b8: 66:2f:a6:4d:f6:87:6d:1f:34:eb:ac:e8:99:ff:3b: 40:68:f8:2b:12:5e:83:3e:ef:5f:17:cb:ef:cc:ca: 7a:d5:7d:be:4b:c5:ac:42:23:7f:0c:59:be:0b:8b: 39:f5:1c:b8:37:fc:a6:db:c6:f5:3d:e4:73:2d:1d: 7f:76:d4:dd:2b:51:d8:90:e4:63:f5:2b:f4:63:9d: 6e:1c:e5:26:aa:6e:c8:fa:c6:ee:b4:e4:00:f4:49: 14:6b:3f:dd:b0:3d:29:86:fb:5f:17:09:5f:fa:d4: 15:7a:f2:d7:53:7f:e3:e4:0e:bb:18:f4:39:01:4b: a3:fb:51:9a:36:e6:32:45:0f:fd:f4:45:14:8e:a4: 47:fb:a9:c3:61:51:ac:87:a4:a2:cb:4a:4c:9a:31: 9c:f3:36:29:33:ba:e1:4f:22:5d:66:4e:69:85:a8: 17:00:13:2c:c4:f7:f8:91:d4:b3:68:5d:0e:87:29: 1d:4f:3b:ff:d9:0d:f2:f4:4c:a5:23:df:de:e6:af: c7:3f:3b:70:93:ee:4d:11:61:5c:b1:19:51:e1:84: d3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:8A:0B:5A:FB:46:91:79:C8:65:3F:7E:F7:1D:4B:3A:ED:15:5B:E5 X509v3 Authority Key Identifier: keyid:F9:DF:80:F7:C6:92:E8:6D:3C:D6:B7:55:D0:6C:F7:CE:9C:13:7F:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/T4oLWvtGkXnIZT9-9x1LOu0VW-U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.123.204.0/22 185.210.226.0/23 IPv6: 2a03:9320::/32 Signature Algorithm: sha256WithRSAEncryption 48:d1:27:4d:56:1d:26:8f:93:e6:80:86:38:5a:08:26:07:8f: 89:2a:9c:df:ca:f8:95:4f:56:da:53:56:58:27:ea:b1:43:a7: a0:fa:d0:dd:d9:6e:f2:c8:09:f8:e0:60:2b:44:51:6f:32:bf: a4:ec:7f:29:45:7d:1b:bd:43:9a:ec:f2:3c:18:fe:b3:ea:b0: 20:a0:4f:79:ce:71:6b:d6:b7:89:b2:db:51:4f:b8:52:ab:9a: 71:7c:be:b1:44:6e:dc:ee:6c:a1:1f:64:36:aa:c6:a8:13:16: 5f:1f:c8:cd:1b:7a:a9:b0:c3:2e:78:29:70:7b:08:5e:15:a0: f1:51:33:8f:99:1b:bf:92:f2:6f:97:ce:13:8b:b5:50:3f:5a: b5:18:e6:53:0a:70:74:42:33:88:4d:3f:d5:a3:69:f0:0a:16: f4:e4:26:5c:61:d7:10:ef:72:00:b8:9c:07:fd:1b:f9:5a:d7: eb:82:e3:34:29:59:2a:ec:23:9f:cb:97:a7:9e:f8:e9:42:7d: 73:19:75:73:39:17:3a:cb:4b:96:ed:ab:f4:5b:17:bd:2e:ba: 4c:b5:17:9d:60:28:02:fc:29:cf:ff:92:b1:14:ea:4d:72:97: 41:c3:a8:7e:b4:e5:ca:e0:21:8b:bf:6e:b4:3e:3e:79:45:d0: 79:a6:b3:f9 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZsravmswJCtAYoxA7dSZQa4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5ZGY4MGY3YzY5MmU4NmQzY2Q2Yjc1NWQwNmNmN2NlOWMx MzdmZjIwHhcNMjUxMjE3MDgyNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjhhMGI1YWZiNDY5MTc5Yzg2NTNmN2VmNzFkNGIzYWVkMTU1YmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA52thpvqn6qvbLpkM7YnNFfoDP3ik vT4UTtnqos1gfTddrWadYFiON3e277hmL6ZN9odtHzTrrOiZ/ztAaPgrEl6DPu9f F8vvzMp61X2+S8WsQiN/DFm+C4s59Ry4N/ym28b1PeRzLR1/dtTdK1HYkORj9Sv0 Y51uHOUmqm7I+sbutOQA9EkUaz/dsD0phvtfFwlf+tQVevLXU3/j5A67GPQ5AUuj +1GaNuYyRQ/99EUUjqRH+6nDYVGsh6Siy0pMmjGc8zYpM7rhTyJdZk5phagXABMs xPf4kdSzaF0OhykdTzv/2Q3y9EylI9/e5q/HPztwk+5NEWFcsRlR4YTTKQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFE+KC1r7RpF5yGU/fvcdSzrtFVvlMB8GA1UdIwQY MBaAFPnfgPfGkuhtPNa3VdBs986cE3/yMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1kLUE5OGFTNkcwODFyZFYwR3ozenB3VGZfSS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcvNjcxZWU0LWFkODEtNDU0Zi05NjVm LTYyYTRlNjc1ZWFlYi8xL1Q0b0xXdnRHa1huSVpUOS05eDFMT3UwVlctVS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNTcvNjcxZWU0LWFkODEtNDU0Zi05NjVmLTYyYTRlNjc1ZWFl Yi8xLzEtZC1BOThhUzZHMDgxcmRWMEd6M3pwd1RmX0kuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAK5e8wD BAG50uIwDQQCAAIwBwMFACoDkyAwDQYJKoZIhvcNAQELBQADggEBAEjRJ01WHSaP k+aAhjhaCCYHj4kqnN/K+JVPVtpTVlgn6rFDp6D60N3ZbvLICfjgYCtEUW8yv6Ts fylFfRu9Q5rs8jwY/rPqsCCgT3nOcWvWt4my21FPuFKrmnF8vrFEbtzubKEfZDaq xqgTFl8fyM0beqmwwy54KXB7CF4VoPFRM4+ZG7+S8m+XzhOLtVA/WrUY5lMKcHRC M4hNP9WjafAKFvTkJlxh1xDvcgC4nAf9G/la1+uC4zQpWSrsI5/Ll6ee+OlCfXMZ dXM5FzrLS5btq/RbF70uuky1F51gKAL8Kc//krEU6k1yl0HDqH605crgIYu/brQ+ PnlF0Hmms/k= -----END CERTIFICATE-----Generated at Tue Dec 23 20:41:38 2025 by rpki-client