This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/ToG3fqXyy5d5Ca1p5NmDib0lvZI.roa File: ToG3fqXyy5d5Ca1p5NmDib0lvZI.roa (raw, json) Hash identifier: oyYGCSqaAaDI1i5xJfDf0vsTp+UTW82dEmnGT90lSos= Subject key identifier: 4E:81:B7:7E:A5:F2:CB:97:79:09:AD:69:E4:D9:83:89:BD:25:BD:92 Certificate issuer: /CN=191ee3af820563494647551a5206ef0c45cf95c9 Certificate serial: 019B7AC91A0FE041209DC60FFA364B379FE0 Authority key identifier: 19:1E:E3:AF:82:05:63:49:46:47:55:1A:52:06:EF:0C:45:CF:95:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GR7jr4IFY0lGR1UaUgbvDEXPlck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/ToG3fqXyy5d5Ca1p5NmDib0lvZI.roa Signing time: Thu 01 Jan 2026 18:19:18 +0000 ROA not before: Thu 01 Jan 2026 18:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12727 IP address blocks: 95.131.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.mft rsync://rpki.ripe.net/repository/DEFAULT/GR7jr4IFY0lGR1UaUgbvDEXPlck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:1a:0f:e0:41:20:9d:c6:0f:fa:36:4b:37:9f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=191ee3af820563494647551a5206ef0c45cf95c9 Validity Not Before: Jan 1 18:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e81b77ea5f2cb977909ad69e4d98389bd25bd92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f1:4d:0e:40:2c:de:5e:71:6c:ab:86:ab:79: bc:2f:17:54:dd:69:b2:2e:86:b7:24:e5:15:1e:69: f3:b0:99:cd:f5:7b:c2:50:59:f5:df:c5:19:b2:a6: 7c:f9:a9:48:5a:a7:7f:34:40:1f:84:e5:26:e0:fa: 26:a7:5b:fb:38:f7:30:5a:2b:34:bb:b0:a4:d0:94: c2:5a:4c:a9:9a:5d:b6:af:0b:66:39:95:cf:dc:db: 12:29:83:72:93:aa:9d:48:ee:4f:87:82:17:a0:8c: 57:fd:71:2f:30:c9:2e:29:c1:43:b0:3a:50:7e:19: bd:0a:6f:61:3e:47:75:9f:a0:d3:83:d1:64:90:ef: 7f:46:66:00:83:55:7b:a6:e4:ef:f2:9f:e8:3d:ad: 22:70:d8:59:38:aa:31:b2:64:00:52:43:b2:40:7e: 46:65:96:d3:5e:b6:b4:3b:03:00:35:95:63:9b:de: f1:87:f7:a6:f5:21:af:63:55:ea:f3:a2:0f:07:14: 3a:d5:66:a8:65:79:38:6e:c5:7e:cc:ea:71:2a:6b: d0:4a:c4:87:0f:fd:93:d1:d1:4d:e5:3b:8b:51:ff: 69:2d:a4:05:26:d5:2b:41:b1:d6:ce:30:9b:9a:24: 53:7a:d8:54:07:65:52:35:12:27:76:e7:59:db:4d: 33:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:81:B7:7E:A5:F2:CB:97:79:09:AD:69:E4:D9:83:89:BD:25:BD:92 X509v3 Authority Key Identifier: keyid:19:1E:E3:AF:82:05:63:49:46:47:55:1A:52:06:EF:0C:45:CF:95:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GR7jr4IFY0lGR1UaUgbvDEXPlck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/ToG3fqXyy5d5Ca1p5NmDib0lvZI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.131.18.0/23 Signature Algorithm: sha256WithRSAEncryption 06:72:ca:93:b2:3e:53:df:2f:ec:68:fd:f4:9f:0e:47:73:fe: 53:32:66:4d:d2:46:a3:8b:9d:53:cb:39:e8:23:7f:a8:d6:37: 5b:21:70:59:54:ac:dd:ad:b8:70:df:c0:c6:c2:ac:89:2e:7e: c5:01:ab:b4:b4:78:3d:54:1c:dd:74:7e:82:50:cc:86:ca:60: 17:ef:81:60:31:8f:c1:20:e1:9d:b8:d6:c8:75:3f:f1:0d:88: 66:03:5e:c2:75:a4:0f:9a:2d:83:09:ac:d5:9b:55:ec:90:6d: 43:51:a4:69:d9:d3:f2:97:32:28:8e:6c:a9:f9:d9:e7:9a:75: a7:77:39:8e:ae:76:29:f2:d0:85:3f:a5:08:dc:93:5b:57:34: 71:76:9f:11:33:83:4a:58:20:38:e4:97:36:55:e7:fe:75:a4: 6e:54:84:59:7d:50:1d:be:23:5d:5e:b9:82:8e:e3:8d:00:cb: 19:ee:92:b2:c9:14:fc:e9:64:64:b4:14:02:50:f4:f9:a2:69: c9:31:6d:c2:ea:48:51:2a:65:8d:dd:0a:e4:75:03:01:87:91: d2:77:fc:eb:ba:03:b8:87:2f:c1:6d:d8:db:c1:e9:5b:cb:f5: d2:22:56:ac:0b:57:01:79:3d:06:63:2e:bf:22:ae:1a:8c:e3: 43:8b:6c:e9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yRoP4EEgncYP+jZLN5/gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MWVlM2FmODIwNTYzNDk0NjQ3NTUxYTUyMDZlZjBjNDVj Zjk1YzkwHhcNMjYwMTAxMTgxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTgxYjc3ZWE1ZjJjYjk3NzkwOWFkNjllNGQ5ODM4OWJkMjViZDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PFNDkAs3l5xbKuGq3m8LxdU3Wmy Loa3JOUVHmnzsJnN9XvCUFn138UZsqZ8+alIWqd/NEAfhOUm4Pomp1v7OPcwWis0 u7Ck0JTCWkypml22rwtmOZXP3NsSKYNyk6qdSO5Ph4IXoIxX/XEvMMkuKcFDsDpQ fhm9Cm9hPkd1n6DTg9FkkO9/RmYAg1V7puTv8p/oPa0icNhZOKoxsmQAUkOyQH5G ZZbTXra0OwMANZVjm97xh/em9SGvY1Xq86IPBxQ61WaoZXk4bsV+zOpxKmvQSsSH D/2T0dFN5TuLUf9pLaQFJtUrQbHWzjCbmiRTethUB2VSNRIndudZ200z3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE6Bt36l8suXeQmtaeTZg4m9Jb2SMB8GA1UdIwQY MBaAFBke46+CBWNJRkdVGlIG7wxFz5XJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1I3anI0SUZZMGxHUjFVYVVnYnZERVhQbGNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9hM2RmODEtMjA5Ni00OTNkLWIxMDYt NDZkNmNlYTIwMzQyLzEvVG9HM2ZxWHl5NWQ1Q2ExcDVObURpYjBsdlpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9hM2RmODEtMjA5Ni00OTNkLWIxMDYtNDZkNmNlYTIwMzQy LzEvR1I3anI0SUZZMGxHUjFVYVVnYnZERVhQbGNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBX4MSMA0G CSqGSIb3DQEBCwUAA4IBAQAGcsqTsj5T3y/saP30nw5Hc/5TMmZN0kaji51Tyzno I3+o1jdbIXBZVKzdrbhw38DGwqyJLn7FAau0tHg9VBzddH6CUMyGymAX74FgMY/B IOGduNbIdT/xDYhmA17CdaQPmi2DCazVm1XskG1DUaRp2dPylzIojmyp+dnnmnWn dzmOrnYp8tCFP6UI3JNbVzRxdp8RM4NKWCA45Jc2Vef+daRuVIRZfVAdviNdXrmC juONAMsZ7pKyyRT86WRktBQCUPT5omnJMW3C6khRKmWN3QrkdQMBh5HSd/zrugO4 hy/Bbdjbwelby/XSIlasC1cBeT0GYy6/Iq4ajONDi2zp -----END CERTIFICATE-----Generated at Wed Jan 7 22:29:27 2026 by rpki-client