This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/T8qj0TqqRzvgZV6bToFz4c0FM-4.roa File: T8qj0TqqRzvgZV6bToFz4c0FM-4.roa (raw, json) Hash identifier: RUkC3kCoEXyWtFRshNXK5Ou2vFrdu7iWv96bVF4GwyY= Subject key identifier: 4F:CA:A3:D1:3A:AA:47:3B:E0:65:5E:9B:4E:81:73:E1:CD:05:33:EE Certificate issuer: /CN=37ca50022828d901bf42b2798f7844104b05404d Certificate serial: 019B7EA63845C7ACF438897DBAA559146B46 Authority key identifier: 37:CA:50:02:28:28:D9:01:BF:42:B2:79:8F:78:44:10:4B:05:40:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N8pQAigo2QG_QrJ5j3hEEEsFQE0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/T8qj0TqqRzvgZV6bToFz4c0FM-4.roa Signing time: Fri 02 Jan 2026 12:19:41 +0000 ROA not before: Fri 02 Jan 2026 12:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42677 IP address blocks: 195.248.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.crl rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft rsync://rpki.ripe.net/repository/DEFAULT/N8pQAigo2QG_QrJ5j3hEEEsFQE0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 00:55:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:38:45:c7:ac:f4:38:89:7d:ba:a5:59:14:6b:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37ca50022828d901bf42b2798f7844104b05404d Validity Not Before: Jan 2 12:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4fcaa3d13aaa473be0655e9b4e8173e1cd0533ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b5:d7:5f:b0:a2:0b:90:cf:40:93:4b:f9:21: ab:0f:bb:57:0d:75:ea:3e:3f:e7:f7:3d:12:76:a6: 3b:c8:ad:7b:92:80:2e:fd:dc:15:7f:b9:5f:de:43: c7:27:b5:11:e1:53:67:6f:1d:d6:db:e3:c2:62:d1: 20:9d:21:4b:0d:f6:de:0a:f8:05:4e:f6:56:48:ad: 0f:f0:13:df:a2:51:0e:27:1b:9d:eb:31:99:cb:0f: b6:b2:ea:e5:ba:2f:11:07:43:7b:da:c2:e0:08:4e: e0:cc:5b:d3:18:b3:2a:d6:78:21:52:e2:02:ab:00: e2:a8:19:78:9e:ca:34:96:83:b9:f7:68:21:a2:bb: b1:32:bb:31:22:14:e0:48:ac:b7:c4:a4:91:9e:87: d7:80:95:b4:1b:44:07:19:34:2f:f9:ad:75:e4:e9: d3:61:88:3d:15:4e:bf:96:36:4e:16:57:4c:27:c2: e4:99:3a:ed:0f:ed:4d:f7:de:32:9d:94:c2:45:f5: d7:ad:d1:fa:91:c6:6d:5b:bf:ae:c4:a8:fa:3e:d7: 1e:16:d7:eb:69:b2:f7:83:b3:63:82:55:ac:48:54: cc:97:b0:93:90:ea:60:3b:e7:6f:b0:29:ba:30:2e: ef:b5:a4:3b:01:81:3a:a2:72:79:dc:ee:d4:ca:5a: c9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:CA:A3:D1:3A:AA:47:3B:E0:65:5E:9B:4E:81:73:E1:CD:05:33:EE X509v3 Authority Key Identifier: keyid:37:CA:50:02:28:28:D9:01:BF:42:B2:79:8F:78:44:10:4B:05:40:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8pQAigo2QG_QrJ5j3hEEEsFQE0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/T8qj0TqqRzvgZV6bToFz4c0FM-4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.248.232.0/23 Signature Algorithm: sha256WithRSAEncryption 84:05:4c:63:08:bc:87:b4:d7:4f:8c:ad:74:af:e1:7c:b2:7f: 3f:fd:65:23:0c:3d:e9:34:eb:57:72:95:71:49:ca:3f:df:28: d9:9d:6d:f7:33:2b:4f:23:b6:16:9c:6d:c2:6c:2a:9d:b9:fc: b2:c5:eb:cf:10:f4:01:36:17:d6:ab:b2:2f:d8:e7:67:2d:64: 44:03:1c:02:46:4f:d9:8d:d6:a0:7a:74:e7:51:af:65:33:f5: eb:63:e3:af:79:de:96:87:48:96:8a:98:f5:fc:2c:9f:84:e8: 07:14:01:80:fd:8b:73:56:8d:f5:1f:7a:f9:5c:dd:64:5b:e8: 23:03:f5:a3:2e:e4:37:13:41:27:7e:c0:3f:3c:ce:a5:49:ef: 89:8d:51:a7:eb:00:9b:3e:3a:06:23:f9:76:65:00:94:e6:b0: b4:0e:d1:5e:31:93:6a:49:7a:08:c6:49:70:ab:63:d8:ec:37: 0f:cf:74:b5:36:93:33:a4:8f:54:10:d5:de:31:80:04:b1:96: d8:f8:08:a1:b9:9a:97:50:5f:17:87:f6:42:f2:a9:e4:e1:4b: b2:03:cd:1c:63:86:a0:65:6b:62:d0:44:5b:e9:64:e8:ab:a6: 2e:79:c5:e4:a9:1a:a0:32:86:d4:5c:13:20:2f:97:d0:a3:90: d4:93:08:14 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pjhFx6z0OIl9uqVZFGtGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3Y2E1MDAyMjgyOGQ5MDFiZjQyYjI3OThmNzg0NDEwNGIw NTQwNGQwHhcNMjYwMTAyMTIxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZmNhYTNkMTNhYWE0NzNiZTA2NTVlOWI0ZTgxNzNlMWNkMDUzM2VlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7XXX7CiC5DPQJNL+SGrD7tXDXXq Pj/n9z0SdqY7yK17koAu/dwVf7lf3kPHJ7UR4VNnbx3W2+PCYtEgnSFLDfbeCvgF TvZWSK0P8BPfolEOJxud6zGZyw+2surlui8RB0N72sLgCE7gzFvTGLMq1nghUuIC qwDiqBl4nso0loO592ghoruxMrsxIhTgSKy3xKSRnofXgJW0G0QHGTQv+a115OnT YYg9FU6/ljZOFldMJ8LkmTrtD+1N994ynZTCRfXXrdH6kcZtW7+uxKj6PtceFtfr abL3g7NjglWsSFTMl7CTkOpgO+dvsCm6MC7vtaQ7AYE6onJ53O7UylrJlwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE/Ko9E6qkc74GVem06Bc+HNBTPuMB8GA1UdIwQY MBaAFDfKUAIoKNkBv0KyeY94RBBLBUBNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjhwUUFpZ28yUUdfUXJKNWozaEVFRXNGUUUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9lZjk0OTgtNDRmNC00ZmZkLTg0NGYt NWM4MzBmZTRiYWQwLzEvVDhxajBUcXFSenZnWlY2YlRvRno0YzBGTS00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9lZjk0OTgtNDRmNC00ZmZkLTg0NGYtNWM4MzBmZTRiYWQw LzEvTjhwUUFpZ28yUUdfUXJKNWozaEVFRXNGUUUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw/joMA0G CSqGSIb3DQEBCwUAA4IBAQCEBUxjCLyHtNdPjK10r+F8sn8//WUjDD3pNOtXcpVx Sco/3yjZnW33MytPI7YWnG3CbCqdufyyxevPEPQBNhfWq7Iv2OdnLWREAxwCRk/Z jdagenTnUa9lM/XrY+Oved6Wh0iWipj1/CyfhOgHFAGA/YtzVo31H3r5XN1kW+gj A/WjLuQ3E0EnfsA/PM6lSe+JjVGn6wCbPjoGI/l2ZQCU5rC0DtFeMZNqSXoIxklw q2PY7DcPz3S1NpMzpI9UENXeMYAEsZbY+AihuZqXUF8Xh/ZC8qnk4UuyA80cY4ag ZWti0ERb6WToq6YuecXkqRqgMobUXBMgL5fQo5DUkwgU -----END CERTIFICATE-----Generated at Tue Jan 6 07:42:23 2026 by rpki-client