This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/TnEVtd_feb3wLnGx0zhpDVlsdLo.roa File: TnEVtd_feb3wLnGx0zhpDVlsdLo.roa (raw, json) Hash identifier: 12X/x/nT6odb0gI2KEmUSYfcKY0KPCIKcIJZCeogYHQ= Subject key identifier: 4E:71:15:B5:DF:DF:79:BD:F0:2E:71:B1:D3:38:69:0D:59:6C:74:BA Certificate issuer: /CN=4eaf14b67e051cfbd5e1b1d51693d44682392792 Certificate serial: 019BA9A88CF070043F3224F9AA1D904524D1 Authority key identifier: 4E:AF:14:B6:7E:05:1C:FB:D5:E1:B1:D5:16:93:D4:46:82:39:27:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/TnEVtd_feb3wLnGx0zhpDVlsdLo.roa Signing time: Sat 10 Jan 2026 20:45:54 +0000 ROA not before: Sat 10 Jan 2026 20:45:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212123 IP address blocks: 167.150.90.0/23 maxlen: 24 167.150.90.0/24 maxlen: 24 167.150.91.0/24 maxlen: 24 2001:678:110::/48 maxlen: 48 2001:67c:e70::/48 maxlen: 48 2001:67c:e78::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a9:a8:8c:f0:70:04:3f:32:24:f9:aa:1d:90:45:24:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eaf14b67e051cfbd5e1b1d51693d44682392792 Validity Not Before: Jan 10 20:45:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e7115b5dfdf79bdf02e71b1d338690d596c74ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:96:b0:86:63:32:a6:62:76:e4:1c:22:3b:7c: 9d:e3:78:b7:bd:fa:f6:03:74:14:a0:fb:5a:71:1e: 5d:38:8e:43:7a:9f:6c:6f:eb:89:26:67:99:9f:80: 2b:52:c6:95:91:08:11:4a:f0:12:5e:62:ef:eb:1a: 59:ff:a4:f2:9f:1b:87:ac:0b:05:75:ee:15:7d:a0: 43:10:09:35:28:c6:71:f7:d4:55:5e:16:c4:bf:bf: 19:a2:9d:e0:4f:13:9e:66:67:59:f7:24:58:f6:f2: 0b:95:c8:0d:e2:63:53:1f:12:48:39:75:2d:ed:d5: b4:88:39:ee:3e:1b:46:ac:d9:27:db:bd:eb:b5:d6: 85:88:63:a3:34:97:d8:cb:69:f6:fd:6b:8c:ca:e9: 7b:ce:2a:f5:1f:91:e7:23:47:2c:a9:7e:32:25:fc: 8a:28:41:67:77:03:aa:b6:35:27:b5:bf:55:02:4e: 40:2b:ae:7e:99:c3:94:90:4d:28:ba:99:e5:68:be: 50:61:32:91:1a:c4:f7:e9:bf:a2:47:b2:92:c1:0f: df:2a:02:3b:32:91:44:b9:2f:49:52:e8:a7:13:88: e3:fa:6e:04:bc:93:dd:3d:94:ec:c3:ab:7b:08:cf: e8:2f:5c:e1:90:76:09:95:9b:85:ec:0f:a7:3d:c4: 7b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:71:15:B5:DF:DF:79:BD:F0:2E:71:B1:D3:38:69:0D:59:6C:74:BA X509v3 Authority Key Identifier: keyid:4E:AF:14:B6:7E:05:1C:FB:D5:E1:B1:D5:16:93:D4:46:82:39:27:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/TnEVtd_feb3wLnGx0zhpDVlsdLo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.150.90.0/23 IPv6: 2001:678:110::/48 2001:67c:e70::/48 2001:67c:e78::/48 Signature Algorithm: sha256WithRSAEncryption 2d:fd:43:e3:99:55:a2:60:f7:dc:2a:97:7a:9b:da:8f:e9:6b: ab:36:63:8c:ab:ee:06:18:16:af:c5:55:f6:48:65:c6:7a:37: 51:01:9b:fe:ef:f0:5f:f0:e7:79:c0:97:63:b3:f5:d4:0e:34: 6f:78:76:00:d1:1b:a8:a3:da:33:93:41:f4:da:f7:7a:fe:0b: c6:f0:38:0f:ea:5a:c4:bc:bf:1b:28:c4:98:9b:73:07:2c:dc: a0:4f:93:1b:2b:40:2d:1a:a4:62:51:a7:e8:b6:b6:91:86:37: 20:d4:b5:2a:62:5a:cc:6c:9f:4a:8b:10:7d:b5:36:ea:04:03: ff:ee:b7:a8:d5:f1:92:62:a9:76:ba:57:c1:1d:d6:10:01:16: 50:83:d7:ce:21:79:76:1e:88:3f:aa:a2:44:92:1a:28:91:d6: 91:4d:24:4c:75:bd:0a:bf:1c:02:22:7a:83:8c:4f:a5:e2:80: 1c:53:e7:94:48:84:c5:e0:71:e1:ff:63:a1:c6:c8:4a:c4:76: 5f:63:b7:9e:97:4c:4a:be:51:34:60:c4:15:95:12:6b:5b:60: 96:f2:c9:78:ad:1c:ab:b6:83:42:33:e3:f2:57:1d:c9:ec:2e: b2:1e:ca:f5:8d:17:08:0e:d9:20:5f:d8:ec:45:bf:d9:81:c2: be:1a:77:22 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZupqIzwcAQ/MiT5qh2QRSTRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlYWYxNGI2N2UwNTFjZmJkNWUxYjFkNTE2OTNkNDQ2ODIz OTI3OTIwHhcNMjYwMTEwMjA0NTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTcxMTViNWRmZGY3OWJkZjAyZTcxYjFkMzM4NjkwZDU5NmM3NGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppawhmMypmJ25BwiO3yd43i3vfr2 A3QUoPtacR5dOI5Dep9sb+uJJmeZn4ArUsaVkQgRSvASXmLv6xpZ/6TynxuHrAsF de4VfaBDEAk1KMZx99RVXhbEv78Zop3gTxOeZmdZ9yRY9vILlcgN4mNTHxJIOXUt 7dW0iDnuPhtGrNkn273rtdaFiGOjNJfYy2n2/WuMyul7zir1H5HnI0csqX4yJfyK KEFndwOqtjUntb9VAk5AK65+mcOUkE0oupnlaL5QYTKRGsT36b+iR7KSwQ/fKgI7 MpFEuS9JUuinE4jj+m4EvJPdPZTsw6t7CM/oL1zhkHYJlZuF7A+nPcR79QIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFE5xFbXf33m98C5xsdM4aQ1ZbHS6MB8GA1UdIwQY MBaAFE6vFLZ+BRz71eGx1RaT1EaCOSeSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHE4VXRuNEZIUHZWNGJIVkZwUFVSb0k1SjVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS84Y2Y1MWMtNTRkNy00YzNhLTkwYzQt YmQ1MTJlZDU4Zjc4LzEvVG5FVnRkX2ZlYjN3TG5HeDB6aHBEVmxzZExvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS84Y2Y1MWMtNTRkNy00YzNhLTkwYzQtYmQ1MTJlZDU4Zjc4 LzEvVHE4VXRuNEZIUHZWNGJIVkZwUFVSb0k1SjVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAMBAIAATAGAwQBp5ZaMCEE AgACMBsDBwAgAQZ4ARADBwAgAQZ8DnADBwAgAQZ8DngwDQYJKoZIhvcNAQELBQAD ggEBAC39Q+OZVaJg99wql3qb2o/pa6s2Y4yr7gYYFq/FVfZIZcZ6N1EBm/7v8F/w 53nAl2Oz9dQONG94dgDRG6ij2jOTQfTa93r+C8bwOA/qWsS8vxsoxJibcwcs3KBP kxsrQC0apGJRp+i2tpGGNyDUtSpiWsxsn0qLEH21NuoEA//ut6jV8ZJiqXa6V8Ed 1hABFlCD184heXYeiD+qokSSGiiR1pFNJEx1vQq/HAIieoOMT6XigBxT55RIhMXg ceH/Y6HGyErEdl9jt56XTEq+UTRgxBWVEmtbYJbyyXitHKu2g0Iz4/JXHcnsLrIe yvWNFwgO2SBf2OxFv9mBwr4adyI= -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:10 2026 by rpki-client