This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/T_9Nupq1QtdGed_iwoc4AH5rQ3A.roa File: T_9Nupq1QtdGed_iwoc4AH5rQ3A.roa (raw, json) Hash identifier: u8SWNWsR1YqwiTS51c4B27JGvI8Gi01uv4oyKJW5qZE= Subject key identifier: 4F:FF:4D:BA:9A:B5:42:D7:46:79:DF:E2:C2:87:38:00:7E:6B:43:70 Certificate issuer: /CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f Certificate serial: 019B7910C940B03B8A18CDB09220484D82C5 Authority key identifier: 12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/T_9Nupq1QtdGed_iwoc4AH5rQ3A.roa Signing time: Thu 01 Jan 2026 10:18:21 +0000 ROA not before: Thu 01 Jan 2026 10:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203694 IP address blocks: 185.132.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:c9:40:b0:3b:8a:18:cd:b0:92:20:48:4d:82:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f Validity Not Before: Jan 1 10:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4fff4dba9ab542d74679dfe2c28738007e6b4370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3f:22:73:4a:5b:d0:45:38:87:74:b6:91:1a: cd:33:de:5d:1e:ac:c7:c5:01:b4:56:c8:4f:65:61: 71:a3:7e:e3:ea:95:08:fc:2e:1e:b2:6b:6b:d1:32: 31:11:66:8c:14:f8:16:62:48:09:b5:07:1b:06:bd: 86:9c:d5:8f:25:96:ed:36:44:ce:b4:35:a6:62:2e: 77:2b:50:53:e1:b0:28:f1:40:00:cb:96:38:0f:bb: 0d:00:a2:b5:cb:44:8a:53:ce:4b:e3:02:6d:e1:92: 8d:65:3c:47:f0:81:7a:f6:41:f2:e7:38:7a:bc:d3: 20:84:bf:7e:e3:b6:66:c4:39:4f:fa:13:44:2b:23: 21:4b:79:60:d4:03:7b:2e:2f:1c:29:b7:dc:68:f4: b3:0c:a8:03:f6:58:c8:68:fa:fd:e1:9b:2c:f5:0f: df:96:8b:68:88:7f:cb:80:97:b5:48:23:d9:7b:4e: f8:9d:f9:94:70:c9:76:c0:0a:f3:aa:18:fb:9d:95: c6:29:3f:46:36:9a:23:39:a9:79:9b:6b:89:2d:19: 10:53:42:1c:0f:dc:8e:92:29:d5:9f:6b:69:19:a9: 1b:50:fb:9c:54:c7:96:29:4f:41:bb:a4:e8:16:4a: 9a:53:33:d8:2a:cf:74:52:91:59:81:51:d7:12:68: 4c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:FF:4D:BA:9A:B5:42:D7:46:79:DF:E2:C2:87:38:00:7E:6B:43:70 X509v3 Authority Key Identifier: keyid:12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/T_9Nupq1QtdGed_iwoc4AH5rQ3A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.132.124.0/24 Signature Algorithm: sha256WithRSAEncryption 76:62:1b:ce:ac:e6:e4:ad:1d:dd:15:4f:a8:4b:6f:07:c5:e4: 6b:57:7e:9e:2f:28:e4:dc:58:8e:89:d2:a6:50:18:c0:06:0d: ec:23:e7:c0:f2:ca:0d:86:a7:34:49:7a:ab:2d:82:39:15:4a: 48:70:3e:3f:ea:b5:d6:fb:c6:70:48:76:8e:a8:94:a0:ff:35: 1f:9f:f8:3d:e4:b9:c7:00:4f:f7:0d:b8:da:28:a1:49:e3:60: 35:70:13:9b:a4:aa:75:4d:e3:56:95:c0:c0:54:c7:c9:fc:74: 97:d2:9c:8b:be:06:ee:be:8d:23:c4:af:a6:29:84:7d:1d:5f: 67:8c:3e:21:01:a9:dd:c5:2d:09:9a:ff:58:8c:8e:7a:3c:c7: a0:be:87:5c:0f:a7:93:79:1c:76:53:b3:5d:4a:12:d5:86:4a: 30:fc:c5:07:18:68:7a:24:f6:6f:21:a1:6e:aa:9a:d9:8a:7a: 93:3f:93:44:aa:ea:71:06:32:e5:f8:46:bc:41:6f:f7:d2:33: 9d:27:2c:f6:a7:60:db:f4:61:51:8b:e1:0c:0f:f7:ff:e5:41: 94:5c:b5:a3:b1:cf:51:1f:e9:33:34:b5:9f:bc:fd:36:59:6c: 8d:e1:56:ce:87:81:b8:9e:39:2a:20:b5:ab:05:64:e6:7a:fd: 46:ac:ab:c8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EMlAsDuKGM2wkiBITYLFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYjE2NzRiYmYwZDExOGYyNTU0ZjgwY2FmZDNlZjFiMzlk OGFlM2YwHhcNMjYwMTAxMTAxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZmZmNGRiYTlhYjU0MmQ3NDY3OWRmZTJjMjg3MzgwMDdlNmI0MzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqz8ic0pb0EU4h3S2kRrNM95dHqzH xQG0VshPZWFxo37j6pUI/C4esmtr0TIxEWaMFPgWYkgJtQcbBr2GnNWPJZbtNkTO tDWmYi53K1BT4bAo8UAAy5Y4D7sNAKK1y0SKU85L4wJt4ZKNZTxH8IF69kHy5zh6 vNMghL9+47ZmxDlP+hNEKyMhS3lg1AN7Li8cKbfcaPSzDKgD9ljIaPr94Zss9Q/f lotoiH/LgJe1SCPZe074nfmUcMl2wArzqhj7nZXGKT9GNpojOal5m2uJLRkQU0Ic D9yOkinVn2tpGakbUPucVMeWKU9Bu6ToFkqaUzPYKs90UpFZgVHXEmhMTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE//TbqatULXRnnf4sKHOAB+a0NwMB8GA1UdIwQY MBaAFBKxZ0u/DRGPJVT4DK/T7xs52K4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXJGblM3OE5FWThsVlBnTXI5UHZHem5Zcmo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8yMzk5ZDItOGUyNC00OGYyLWJlODgt ZjM3MWY5OGE3NTNiLzEvVF85TnVwcTFRdGRHZWRfaXdvYzRBSDVyUTNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8yMzk5ZDItOGUyNC00OGYyLWJlODgtZjM3MWY5OGE3NTNi LzEvRXJGblM3OE5FWThsVlBnTXI5UHZHem5Zcmo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYR8MA0G CSqGSIb3DQEBCwUAA4IBAQB2YhvOrObkrR3dFU+oS28HxeRrV36eLyjk3FiOidKm UBjABg3sI+fA8soNhqc0SXqrLYI5FUpIcD4/6rXW+8ZwSHaOqJSg/zUfn/g95LnH AE/3DbjaKKFJ42A1cBObpKp1TeNWlcDAVMfJ/HSX0pyLvgbuvo0jxK+mKYR9HV9n jD4hAandxS0Jmv9YjI56PMegvodcD6eTeRx2U7NdShLVhkow/MUHGGh6JPZvIaFu qprZinqTP5NEqupxBjLl+Ea8QW/30jOdJyz2p2Db9GFRi+EMD/f/5UGUXLWjsc9R H+kzNLWfvP02WWyN4VbOh4G4njkqILWrBWTmev1GrKvI -----END CERTIFICATE-----Generated at Sat Jan 3 06:28:21 2026 by rpki-client