This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/tXmLrxvg5P19LKcFcwpM22Ekbt8.roa File: tXmLrxvg5P19LKcFcwpM22Ekbt8.roa (raw, json) Hash identifier: 6toc+sBgc1NEsqiLqJzbi/jVjcSYilb06CubyR9HJrk= Subject key identifier: B5:79:8B:AF:1B:E0:E4:FD:7D:2C:A7:05:73:0A:4C:DB:61:24:6E:DF Certificate issuer: /CN=06cf19e197bdaf94e6100e0e17808e13d4854f9c Certificate serial: 019BB6D9EFCB50BCC4F2ED32FBEA4FE4760B Authority key identifier: 06:CF:19:E1:97:BD:AF:94:E6:10:0E:0E:17:80:8E:13:D4:85:4F:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/tXmLrxvg5P19LKcFcwpM22Ekbt8.roa Signing time: Tue 13 Jan 2026 10:14:54 +0000 ROA not before: Tue 13 Jan 2026 10:14:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201602 IP address blocks: 185.241.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b6:d9:ef:cb:50:bc:c4:f2:ed:32:fb:ea:4f:e4:76:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06cf19e197bdaf94e6100e0e17808e13d4854f9c Validity Not Before: Jan 13 10:14:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5798baf1be0e4fd7d2ca705730a4cdb61246edf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0c:33:db:40:e4:b3:44:dd:fc:20:5c:ed:2a: 8a:27:43:d7:87:c1:18:98:03:c0:c0:57:32:92:09: 4a:7a:66:81:2a:dd:fe:87:da:39:23:a3:2b:04:75: 23:e1:76:34:28:ee:c8:c1:9a:97:5c:6b:80:56:0a: 93:64:9b:21:77:e9:37:09:38:3b:52:49:4a:29:23: 78:7c:bc:20:27:ad:1b:50:b4:2b:9f:10:bf:2c:20: e7:70:b2:aa:61:f9:eb:e5:2d:da:ab:d7:48:a2:26: db:be:bd:17:00:e6:43:d7:df:61:e5:3f:74:35:79: 0d:49:a7:fa:08:c9:56:f7:33:36:96:9a:75:35:e3: 97:c5:8d:d1:55:61:0b:4e:44:c3:e5:2e:db:40:05: c4:60:77:d8:c8:c8:bb:1d:1b:4c:45:b8:8c:ce:c2: cd:36:81:30:da:4d:ee:f8:7a:e0:f6:6a:9c:b2:7b: 9e:b9:e0:c7:55:12:bf:c8:b4:13:79:d8:cc:2d:17: 15:49:82:5f:8e:56:37:ea:bc:d2:dc:3f:79:b1:62: a9:e6:b8:04:4d:0f:f6:5e:d2:27:22:0b:7d:3e:f4: 90:38:f6:c4:fb:d6:da:08:79:93:13:fa:4f:b3:a0: 8d:e3:6e:a8:0f:07:a4:55:3c:55:95:f5:9e:6f:0b: 73:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:79:8B:AF:1B:E0:E4:FD:7D:2C:A7:05:73:0A:4C:DB:61:24:6E:DF X509v3 Authority Key Identifier: keyid:06:CF:19:E1:97:BD:AF:94:E6:10:0E:0E:17:80:8E:13:D4:85:4F:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/tXmLrxvg5P19LKcFcwpM22Ekbt8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.241.144.0/22 Signature Algorithm: sha256WithRSAEncryption 75:47:e4:6f:eb:33:4a:b2:a3:0c:bc:bb:b6:cf:1e:17:6c:83: 1e:10:2e:46:b8:be:91:9f:ab:c1:19:2d:bc:ab:e4:2b:66:d7: 79:37:65:22:11:ea:26:ba:70:b2:e1:17:20:d0:3f:fb:55:d8: cd:ef:cc:5b:55:7a:d4:c9:eb:a6:49:78:a0:2e:eb:9f:e5:cc: 01:f7:ed:7f:91:4d:be:98:28:65:55:e8:dc:12:ac:67:11:e3: f7:d7:45:16:b0:69:6a:02:68:8e:dc:6f:59:8c:37:2e:e1:24: 1d:38:12:89:9f:88:59:fa:e1:db:66:a4:73:5b:8d:ed:18:b4: 59:df:fd:d8:13:0c:3c:0e:f5:69:f1:f0:16:d4:47:d4:d2:db: f6:01:db:0a:8f:28:f5:34:3d:9b:0d:7b:56:2f:bb:d7:9c:79: a9:2f:b3:02:9a:ef:ee:0f:bc:b4:60:44:fa:38:7c:4a:1d:63: ed:1b:0e:84:57:83:64:88:39:b8:84:05:b7:c0:37:44:43:ae: db:a5:e5:aa:25:43:cd:2e:99:30:46:f0:97:3f:3a:8d:27:46: 3f:58:f0:24:b4:1f:1e:c4:f9:ce:cc:85:df:ea:ab:12:20:31: b1:af:2a:6c:78:cb:95:55:3c:9f:25:f0:63:aa:12:f1:b9:39: 81:df:f8:86 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZu22e/LULzE8u0y++pP5HYLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2Y2YxOWUxOTdiZGFmOTRlNjEwMGUwZTE3ODA4ZTEzZDQ4 NTRmOWMwHhcNMjYwMTEzMTAxNDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTc5OGJhZjFiZTBlNGZkN2QyY2E3MDU3MzBhNGNkYjYxMjQ2ZWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQwz20Dks0Td/CBc7SqKJ0PXh8EY mAPAwFcykglKemaBKt3+h9o5I6MrBHUj4XY0KO7IwZqXXGuAVgqTZJshd+k3CTg7 UklKKSN4fLwgJ60bULQrnxC/LCDncLKqYfnr5S3aq9dIoibbvr0XAOZD199h5T90 NXkNSaf6CMlW9zM2lpp1NeOXxY3RVWELTkTD5S7bQAXEYHfYyMi7HRtMRbiMzsLN NoEw2k3u+Hrg9mqcsnueueDHVRK/yLQTedjMLRcVSYJfjlY36rzS3D95sWKp5rgE TQ/2XtInIgt9PvSQOPbE+9baCHmTE/pPs6CN426oDwekVTxVlfWebwtzewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLV5i68b4OT9fSynBXMKTNthJG7fMB8GA1UdIwQY MBaAFAbPGeGXva+U5hAODheAjhPUhU+cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnM4WjRaZTlyNVRtRUE0T0Y0Q09FOVNGVDV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi85OGQ2MjAtMTU5OS00ODYzLTk2Mjkt MzU2NTA1MzAzYzQ5LzEvdFhtTHJ4dmc1UDE5TEtjRmN3cE0yMkVrYnQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi85OGQ2MjAtMTU5OS00ODYzLTk2MjktMzU2NTA1MzAzYzQ5 LzEvQnM4WjRaZTlyNVRtRUE0T0Y0Q09FOVNGVDV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufGQMA0G CSqGSIb3DQEBCwUAA4IBAQB1R+Rv6zNKsqMMvLu2zx4XbIMeEC5GuL6Rn6vBGS28 q+QrZtd5N2UiEeomunCy4Rcg0D/7VdjN78xbVXrUyeumSXigLuuf5cwB9+1/kU2+ mChlVejcEqxnEeP310UWsGlqAmiO3G9ZjDcu4SQdOBKJn4hZ+uHbZqRzW43tGLRZ 3/3YEww8DvVp8fAW1EfU0tv2AdsKjyj1ND2bDXtWL7vXnHmpL7MCmu/uD7y0YET6 OHxKHWPtGw6EV4NkiDm4hAW3wDdEQ67bpeWqJUPNLpkwRvCXPzqNJ0Y/WPAktB8e xPnOzIXf6qsSIDGxrypseMuVVTyfJfBjqhLxuTmB3/iG -----END CERTIFICATE-----Generated at Sun Jan 25 22:28:43 2026 by rpki-client