This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/tCvoacxleMB9yGDGnAfFdo0WlTI.roa File: tCvoacxleMB9yGDGnAfFdo0WlTI.roa (raw, json) Hash identifier: VjHjMtZB60JL98x/DGGU032KDm/K3byOwRHzZ2BUCwc= Subject key identifier: B4:2B:E8:69:CC:65:78:C0:7D:C8:60:C6:9C:07:C5:76:8D:16:95:32 Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b Certificate serial: 019B7C7F6470A33918592A534F5DB26BA39B Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/tCvoacxleMB9yGDGnAfFdo0WlTI.roa Signing time: Fri 02 Jan 2026 02:18:02 +0000 ROA not before: Fri 02 Jan 2026 02:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215789 IP address blocks: 213.189.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:64:70:a3:39:18:59:2a:53:4f:5d:b2:6b:a3:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b Validity Not Before: Jan 2 02:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b42be869cc6578c07dc860c69c07c5768d169532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:97:a2:02:c1:e0:47:0c:b1:f6:53:f5:ab:fa: 04:12:ca:2c:b7:1f:a3:af:a1:20:bd:e9:ce:49:08: c5:3e:4f:40:bd:a5:2a:6f:62:2f:72:8c:92:1d:fb: 48:5a:59:92:bb:94:fe:93:10:33:9e:dd:a9:5f:60: 51:0f:59:75:f7:b2:ea:71:c3:5f:e8:64:b3:bf:b8: 7d:42:f2:20:6f:ca:97:3e:3c:bf:e4:3e:87:4a:a8: 9e:61:fe:bb:b0:c3:d3:72:05:4c:95:97:1e:de:30: 07:8f:30:56:3b:58:2d:9b:0f:4a:9f:98:aa:87:be: 9c:2b:d3:89:aa:e5:9c:b9:46:58:a1:3d:78:8d:c2: 8b:ed:d7:d2:d5:bd:bb:72:55:c5:0f:da:6f:40:7d: 8f:d0:31:bf:56:da:a9:dd:84:c1:d6:78:f1:64:b1: 59:f1:0b:fa:f6:b9:7b:2f:e0:74:fd:aa:c5:c7:d4: d4:fa:a7:3d:c8:80:95:a4:51:57:8b:cb:5a:58:6c: 58:ea:4f:e7:e9:61:8b:aa:89:65:58:e3:00:cc:89: 3f:a1:44:76:65:1a:f3:96:d9:a6:86:4f:cf:0a:63: 45:f1:05:3a:ca:e0:16:ca:42:ba:37:9a:62:4b:d7: 97:f4:b3:d4:ad:5f:20:d0:30:5b:75:bb:08:64:80: 3c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:2B:E8:69:CC:65:78:C0:7D:C8:60:C6:9C:07:C5:76:8D:16:95:32 X509v3 Authority Key Identifier: keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/tCvoacxleMB9yGDGnAfFdo0WlTI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.189.60.0/24 Signature Algorithm: sha256WithRSAEncryption 59:8d:91:3e:fe:dd:1d:85:7f:09:8e:0f:b1:0c:a8:ff:0b:01: f4:84:38:97:b3:e4:90:ab:48:24:2c:46:a3:1b:6c:98:9b:14: 98:09:f7:d5:38:a3:61:bd:b7:a4:1f:c6:5a:86:e1:d9:64:65: 1f:27:06:0c:f5:9f:ce:12:6d:57:9b:10:60:39:44:f3:1c:07: c2:58:21:b7:ed:a0:ce:9d:eb:cc:fd:7c:5f:a2:17:c5:38:90: 17:5f:c3:f7:e9:b5:6b:87:20:16:68:17:35:7a:be:9d:24:1d: f2:c8:1b:36:57:8c:d5:37:64:4f:c8:b5:9b:c2:ce:b3:e2:69: f0:bd:c0:a8:d7:16:94:11:d8:d7:95:62:97:3b:28:ca:86:dc: 6d:64:e0:c8:a8:96:da:cc:62:9b:b7:4d:68:20:7e:c6:82:3c: 8b:85:be:60:1d:84:aa:8c:07:e4:39:e5:e2:a5:c7:8c:ba:60: 56:46:f9:fe:80:df:c3:d8:54:72:4e:5b:ef:1f:40:1c:41:a2: 9a:63:01:c7:2a:f3:79:d7:3d:5d:c5:fa:70:45:7d:13:07:42: 7c:86:76:7d:64:c5:63:6c:4d:01:a1:bc:b4:ec:3e:d1:38:19: ae:f5:31:01:c9:3d:56:1d:e0:07:de:e7:7d:e3:55:b5:db:e7: 22:51:0e:07 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f2RwozkYWSpTT12ya6ObMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YzUxMGZjOWI4NjVkOTZlM2FmYzdjNTYwNTZlZmFkOWEz MzBjNWIwHhcNMjYwMTAyMDIxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDJiZTg2OWNjNjU3OGMwN2RjODYwYzY5YzA3YzU3NjhkMTY5NTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpeiAsHgRwyx9lP1q/oEEsostx+j r6EgvenOSQjFPk9AvaUqb2IvcoySHftIWlmSu5T+kxAznt2pX2BRD1l197LqccNf 6GSzv7h9QvIgb8qXPjy/5D6HSqieYf67sMPTcgVMlZce3jAHjzBWO1gtmw9Kn5iq h76cK9OJquWcuUZYoT14jcKL7dfS1b27clXFD9pvQH2P0DG/Vtqp3YTB1njxZLFZ 8Qv69rl7L+B0/arFx9TU+qc9yICVpFFXi8taWGxY6k/n6WGLqollWOMAzIk/oUR2 ZRrzltmmhk/PCmNF8QU6yuAWykK6N5piS9eX9LPUrV8g0DBbdbsIZIA82QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLQr6GnMZXjAfchgxpwHxXaNFpUyMB8GA1UdIwQY MBaAFGjFEPybhl2W46/HxWBW762aMwxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEt NWQ2NjVlOTk4ZjZhLzEvdEN2b2FjeGxlTUI5eUdER25BZkZkbzBXbFRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEtNWQ2NjVlOTk4ZjZh LzEvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1b08MA0G CSqGSIb3DQEBCwUAA4IBAQBZjZE+/t0dhX8Jjg+xDKj/CwH0hDiXs+SQq0gkLEaj G2yYmxSYCffVOKNhvbekH8ZahuHZZGUfJwYM9Z/OEm1XmxBgOUTzHAfCWCG37aDO nevM/XxfohfFOJAXX8P36bVrhyAWaBc1er6dJB3yyBs2V4zVN2RPyLWbws6z4mnw vcCo1xaUEdjXlWKXOyjKhtxtZODIqJbazGKbt01oIH7GgjyLhb5gHYSqjAfkOeXi pceMumBWRvn+gN/D2FRyTlvvH0AcQaKaYwHHKvN51z1dxfpwRX0TB0J8hnZ9ZMVj bE0Boby07D7ROBmu9TEByT1WHeAH3ud941W12+ciUQ4H -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:12 2026 by rpki-client