This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/TRmB2JSocGQEi2e-mXkp3-ov82I.roa File: TRmB2JSocGQEi2e-mXkp3-ov82I.roa (raw, json) Hash identifier: b1k8K9GwnxuwcGGHbApgf32Sf77no5SsZHw18emQNgQ= Subject key identifier: 4D:19:81:D8:94:A8:70:64:04:8B:67:BE:99:79:29:DF:EA:2F:F3:62 Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56 Certificate serial: 019B7C80709EB151002D87EA2172E5376A7F Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/TRmB2JSocGQEi2e-mXkp3-ov82I.roa Signing time: Fri 02 Jan 2026 02:19:10 +0000 ROA not before: Fri 02 Jan 2026 02:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213917 IP address blocks: 80.64.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:70:9e:b1:51:00:2d:87:ea:21:72:e5:37:6a:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56 Validity Not Before: Jan 2 02:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d1981d894a87064048b67be997929dfea2ff362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0a:34:30:17:5b:af:17:60:bb:7a:a5:68:ab: cf:50:35:cd:14:02:23:a6:fd:c1:ae:e3:08:2e:53: 4e:55:19:6c:08:73:4c:ce:0d:7e:5e:75:e9:c4:e1: f7:30:97:0b:64:91:e3:4e:93:63:06:99:7e:6f:42: 6f:21:af:d7:40:09:d2:7e:7c:5e:4f:cd:58:9f:dd: 20:47:39:ff:a3:dd:2c:4e:eb:fe:e8:99:41:c9:ed: 7b:46:db:bc:ed:1d:78:c6:6a:04:2a:c0:ad:3f:55: 10:ac:e3:be:68:c4:b6:a0:f3:0b:0e:7b:99:81:31: 55:33:90:3a:81:b2:ab:ff:0b:14:0a:70:d0:5e:ed: ef:c8:f0:b1:86:3a:57:25:05:a3:a1:67:e2:3a:04: c8:f4:ba:09:17:78:40:6b:86:da:62:42:99:fa:15: 0b:87:0a:cd:89:ff:13:39:b4:c5:3d:65:12:cb:1b: 32:00:c3:d3:c5:5f:7c:f6:82:16:7c:3f:48:25:c6: 98:96:c8:89:53:6c:03:1e:9d:7a:45:e4:ee:b0:ef: b8:8a:45:af:1e:c3:f0:5c:f9:86:9f:b1:ea:e9:49: fe:ac:b3:56:25:08:74:01:a2:0f:d0:4e:7c:ee:66: a6:bf:ec:3f:1d:d4:1a:16:ee:86:c8:54:4a:f5:05: ca:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:19:81:D8:94:A8:70:64:04:8B:67:BE:99:79:29:DF:EA:2F:F3:62 X509v3 Authority Key Identifier: keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/TRmB2JSocGQEi2e-mXkp3-ov82I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.64.23.0/24 Signature Algorithm: sha256WithRSAEncryption 55:76:1b:e1:df:ae:3d:2c:ce:74:9b:a5:f3:e0:b9:49:c4:49: 92:2e:6f:4e:35:29:ef:25:1f:f9:ea:4d:d2:65:06:91:c2:17: a8:d1:2c:16:db:85:1e:ef:1e:e3:0d:6e:f8:d0:ba:37:4b:79: 64:6e:fb:a7:2b:7a:58:8e:31:f3:e9:96:c8:52:f7:ed:e6:c5: 30:c3:e2:75:6f:e6:c4:0c:86:6e:a9:f5:31:9b:20:bd:6f:d0: b8:4a:a6:6e:44:fa:a1:2e:ec:5f:da:27:5c:19:3f:05:cc:d4: 58:f6:79:cf:9e:4e:12:16:62:67:c7:95:80:f4:f6:59:d3:87: 5e:e8:77:8c:f3:0a:19:d2:56:f3:47:5b:02:8d:1b:ee:b5:bb: 41:96:bd:45:89:58:df:a5:cf:63:39:43:ef:33:ec:99:74:f6: 4c:59:63:db:d4:5d:93:44:79:8d:b1:ee:2f:8f:63:ac:af:05: 87:82:1c:45:7f:1f:d2:60:8b:67:81:d6:a4:62:66:df:30:1a: da:da:59:bc:00:29:a2:17:b0:31:d5:43:68:32:ca:c9:8e:c3: f6:ad:7a:cc:22:4c:9e:37:2a:28:6a:b0:79:2d:ca:70:2b:e9: 29:2e:7c:bf:71:69:c1:57:1f:34:0c:5e:e7:03:0c:7e:e3:ad: a0:3e:4b:a1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gHCesVEALYfqIXLlN2p/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0 ZjVlNTYwHhcNMjYwMTAyMDIxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDE5ODFkODk0YTg3MDY0MDQ4YjY3YmU5OTc5MjlkZmVhMmZmMzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgo0MBdbrxdgu3qlaKvPUDXNFAIj pv3BruMILlNOVRlsCHNMzg1+XnXpxOH3MJcLZJHjTpNjBpl+b0JvIa/XQAnSfnxe T81Yn90gRzn/o90sTuv+6JlBye17Rtu87R14xmoEKsCtP1UQrOO+aMS2oPMLDnuZ gTFVM5A6gbKr/wsUCnDQXu3vyPCxhjpXJQWjoWfiOgTI9LoJF3hAa4baYkKZ+hUL hwrNif8TObTFPWUSyxsyAMPTxV989oIWfD9IJcaYlsiJU2wDHp16ReTusO+4ikWv HsPwXPmGn7Hq6Un+rLNWJQh0AaIP0E587mamv+w/HdQaFu6GyFRK9QXK+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE0ZgdiUqHBkBItnvpl5Kd/qL/NiMB8GA1UdIwQY MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt YmE5OGYxMTIyMTIxLzEvVFJtQjJKU29jR1FFaTJlLW1Ya3AzLW92ODJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUEAXMA0G CSqGSIb3DQEBCwUAA4IBAQBVdhvh3649LM50m6Xz4LlJxEmSLm9ONSnvJR/56k3S ZQaRwheo0SwW24Ue7x7jDW740Lo3S3lkbvunK3pYjjHz6ZbIUvft5sUww+J1b+bE DIZuqfUxmyC9b9C4SqZuRPqhLuxf2idcGT8FzNRY9nnPnk4SFmJnx5WA9PZZ04de 6HeM8woZ0lbzR1sCjRvutbtBlr1FiVjfpc9jOUPvM+yZdPZMWWPb1F2TRHmNse4v j2OsrwWHghxFfx/SYItngdakYmbfMBra2lm8ACmiF7Ax1UNoMsrJjsP2rXrMIkye NyooarB5LcpwK+kpLny/cWnBVx80DF7nAwx+462gPkuh -----END CERTIFICATE-----Generated at Sat Jan 10 03:55:22 2026 by rpki-client