This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/30f69c-410e-46d4-b6db-ff8658e1356c/1/TPLcHoqHuR4YCnfHnUviK379rnA.roa File: TPLcHoqHuR4YCnfHnUviK379rnA.roa (raw, json) Hash identifier: kSe9xf3ILVit6zgFOeGdS0GH8eUobdI1Jk4eU4ILe5o= Subject key identifier: 4C:F2:DC:1E:8A:87:B9:1E:18:0A:77:C7:9D:4B:E2:2B:7E:FD:AE:70 Certificate issuer: /CN=78167dd9603b9fb7af501559cb3737d47a2d5437 Certificate serial: 019B7F834E28843A992379B3BE567EDFA6ED Authority key identifier: 78:16:7D:D9:60:3B:9F:B7:AF:50:15:59:CB:37:37:D4:7A:2D:54:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eBZ92WA7n7evUBVZyzc31HotVDc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/30f69c-410e-46d4-b6db-ff8658e1356c/1/TPLcHoqHuR4YCnfHnUviK379rnA.roa Signing time: Fri 02 Jan 2026 16:21:10 +0000 ROA not before: Fri 02 Jan 2026 16:21:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60265 IP address blocks: 91.199.126.0/24 maxlen: 24 2a01:bf00::/32 maxlen: 40 2a01:bf00:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/30f69c-410e-46d4-b6db-ff8658e1356c/1/eBZ92WA7n7evUBVZyzc31HotVDc.crl rsync://rpki.ripe.net/repository/DEFAULT/26/30f69c-410e-46d4-b6db-ff8658e1356c/1/eBZ92WA7n7evUBVZyzc31HotVDc.mft rsync://rpki.ripe.net/repository/DEFAULT/eBZ92WA7n7evUBVZyzc31HotVDc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:4e:28:84:3a:99:23:79:b3:be:56:7e:df:a6:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78167dd9603b9fb7af501559cb3737d47a2d5437 Validity Not Before: Jan 2 16:21:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4cf2dc1e8a87b91e180a77c79d4be22b7efdae70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6b:9b:79:48:19:63:c5:33:db:96:3f:39:76: 22:ec:f1:f8:b0:d8:2c:76:e7:31:1b:23:e8:07:61: f3:18:ea:ec:06:66:14:80:86:87:12:d3:33:b5:1a: 98:1b:bc:c7:9b:d7:9f:15:a0:bd:6a:05:e0:43:40: b4:40:cf:b1:b0:29:19:61:fc:cf:02:46:75:05:a0: 80:bc:ad:1b:7c:6c:94:cd:4c:2e:21:4b:92:f2:cf: 4c:5b:7a:4d:01:4e:2e:cd:e1:aa:82:30:61:8e:a5: 95:8d:7e:c7:75:c7:c1:30:ca:86:5e:c5:5e:5b:31: 44:ce:35:4c:27:d5:cb:79:6a:0e:3b:41:96:ee:09: 6c:f9:d7:00:a0:b4:8c:f7:af:75:bd:28:c4:a2:88: ee:3c:ae:58:48:c8:56:34:de:fa:57:60:5a:64:f3: c6:7e:68:9d:56:8b:5b:af:d0:f4:0d:da:6a:81:86: 95:f2:58:52:f2:ca:ec:db:e9:b6:2d:8a:4f:ac:c0: 6f:b2:68:26:c2:89:8f:37:97:5e:28:a9:39:41:0b: fd:38:26:ba:b6:4d:85:04:74:62:4b:d9:d1:ad:d4: e8:68:d0:2c:df:d9:46:92:e2:f8:38:47:68:34:05: 82:f3:d6:fe:f3:2a:7a:56:d1:45:11:f6:a2:ee:cc: f6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F2:DC:1E:8A:87:B9:1E:18:0A:77:C7:9D:4B:E2:2B:7E:FD:AE:70 X509v3 Authority Key Identifier: keyid:78:16:7D:D9:60:3B:9F:B7:AF:50:15:59:CB:37:37:D4:7A:2D:54:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBZ92WA7n7evUBVZyzc31HotVDc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/30f69c-410e-46d4-b6db-ff8658e1356c/1/TPLcHoqHuR4YCnfHnUviK379rnA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/30f69c-410e-46d4-b6db-ff8658e1356c/1/eBZ92WA7n7evUBVZyzc31HotVDc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.126.0/24 IPv6: 2a01:bf00::/32 Signature Algorithm: sha256WithRSAEncryption 2f:3d:f3:fe:19:1a:7d:f5:ed:fd:60:6f:2a:af:61:9a:01:da: d2:ca:c2:db:d2:3f:5c:fd:9e:0e:5a:12:10:d4:96:81:88:fd: f8:12:20:82:a8:dd:3d:ed:6d:9b:9d:29:1b:c6:9d:1b:fc:a9: 1e:da:b0:ed:9f:70:92:55:9b:5e:f6:45:50:5f:30:8a:a7:1e: ef:dc:f3:f2:a8:5c:81:ff:72:9c:13:e6:6d:a8:13:c7:3e:bf: 45:de:b1:29:c1:ee:37:57:40:b8:c1:11:15:0e:71:03:f6:21: 5c:dc:ee:a2:5a:19:ea:3a:6a:d2:6e:05:19:0e:74:28:e0:2c: b2:20:8b:e6:5b:07:1f:c4:4c:5e:a2:87:a6:90:7d:04:55:17: 05:9b:98:f0:38:36:88:5d:82:2c:14:f9:c7:1e:6b:52:18:2e: 8e:13:5e:f8:6a:35:f0:9e:f1:b3:a8:26:79:d5:f0:12:62:35: 24:99:09:fb:dd:2b:55:9a:37:d0:91:63:7b:82:60:4e:73:b3: 57:82:80:c7:a1:d4:00:9c:e5:89:f9:4d:a6:f1:3d:6a:9f:35: 2b:8c:30:fa:08:8c:4d:3f:d5:83:92:d5:6d:80:78:01:57:0c: 9d:7d:0a:37:fa:ac:ca:55:cd:30:fe:9a:71:74:43:71:66:43: ce:db:19:18 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/g04ohDqZI3mzvlZ+36btMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4MTY3ZGQ5NjAzYjlmYjdhZjUwMTU1OWNiMzczN2Q0N2Ey ZDU0MzcwHhcNMjYwMTAyMTYyMTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Y2YyZGMxZThhODdiOTFlMTgwYTc3Yzc5ZDRiZTIyYjdlZmRhZTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymubeUgZY8Uz25Y/OXYi7PH4sNgs ducxGyPoB2HzGOrsBmYUgIaHEtMztRqYG7zHm9efFaC9agXgQ0C0QM+xsCkZYfzP AkZ1BaCAvK0bfGyUzUwuIUuS8s9MW3pNAU4uzeGqgjBhjqWVjX7HdcfBMMqGXsVe WzFEzjVMJ9XLeWoOO0GW7gls+dcAoLSM9691vSjEoojuPK5YSMhWNN76V2BaZPPG fmidVotbr9D0DdpqgYaV8lhS8srs2+m2LYpPrMBvsmgmwomPN5deKKk5QQv9OCa6 tk2FBHRiS9nRrdToaNAs39lGkuL4OEdoNAWC89b+8yp6VtFFEfai7sz2dwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEzy3B6Kh7keGAp3x51L4it+/a5wMB8GA1UdIwQY MBaAFHgWfdlgO5+3r1AVWcs3N9R6LVQ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUJaOTJXQTduN2V2VUJWWnl6YzMxSG90VkRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zMGY2OWMtNDEwZS00NmQ0LWI2ZGIt ZmY4NjU4ZTEzNTZjLzEvVFBMY0hvcUh1UjRZQ25mSG5VdmlLMzc5cm5BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8zMGY2OWMtNDEwZS00NmQ0LWI2ZGItZmY4NjU4ZTEzNTZj LzEvZUJaOTJXQTduN2V2VUJWWnl6YzMxSG90VkRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW8d+MA0E AgACMAcDBQAqAb8AMA0GCSqGSIb3DQEBCwUAA4IBAQAvPfP+GRp99e39YG8qr2Ga AdrSysLb0j9c/Z4OWhIQ1JaBiP34EiCCqN097W2bnSkbxp0b/Kke2rDtn3CSVZte 9kVQXzCKpx7v3PPyqFyB/3KcE+ZtqBPHPr9F3rEpwe43V0C4wREVDnED9iFc3O6i WhnqOmrSbgUZDnQo4CyyIIvmWwcfxExeooemkH0EVRcFm5jwODaIXYIsFPnHHmtS GC6OE174ajXwnvGzqCZ51fASYjUkmQn73StVmjfQkWN7gmBOc7NXgoDHodQAnOWJ +U2m8T1qnzUrjDD6CIxNP9WDktVtgHgBVwydfQo3+qzKVc0w/ppxdENxZkPO2xkY -----END CERTIFICATE-----Generated at Mon Jan 26 16:23:27 2026 by rpki-client