This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/tgE8jzInH6PxL3alL4l8_zSBewY.roa File: tgE8jzInH6PxL3alL4l8_zSBewY.roa (raw, json) Hash identifier: COcQ1Fg1VxBHECABZQ1rgFDAfEXNKxzy+WFSvFCA68k= Subject key identifier: B6:01:3C:8F:32:27:1F:A3:F1:2F:76:A5:2F:89:7C:FF:34:81:7B:06 Certificate issuer: /CN=4ee1713e16b4fd8f3301887de6a111980449b29e Certificate serial: 019B7C1247D063046D2ADD35F30419658C7A Authority key identifier: 4E:E1:71:3E:16:B4:FD:8F:33:01:88:7D:E6:A1:11:98:04:49:B2:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuFxPha0_Y8zAYh95qERmARJsp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/tgE8jzInH6PxL3alL4l8_zSBewY.roa Signing time: Fri 02 Jan 2026 00:18:51 +0000 ROA not before: Fri 02 Jan 2026 00:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196903 IP address blocks: 109.207.48.0/20 maxlen: 20 109.207.48.0/24 maxlen: 24 109.207.49.0/24 maxlen: 24 109.207.50.0/24 maxlen: 24 109.207.51.0/24 maxlen: 24 109.207.52.0/24 maxlen: 24 109.207.53.0/24 maxlen: 24 109.207.54.0/24 maxlen: 24 109.207.55.0/24 maxlen: 24 109.207.56.0/24 maxlen: 24 109.207.57.0/24 maxlen: 24 109.207.58.0/24 maxlen: 24 109.207.59.0/24 maxlen: 24 109.207.60.0/24 maxlen: 24 109.207.61.0/24 maxlen: 24 109.207.62.0/24 maxlen: 24 109.207.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft rsync://rpki.ripe.net/repository/DEFAULT/TuFxPha0_Y8zAYh95qERmARJsp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:47:d0:63:04:6d:2a:dd:35:f3:04:19:65:8c:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ee1713e16b4fd8f3301887de6a111980449b29e Validity Not Before: Jan 2 00:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b6013c8f32271fa3f12f76a52f897cff34817b06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:01:49:a4:f5:04:c8:bc:a7:63:39:86:7b:6e: ee:f7:c5:5f:24:fc:3d:69:c9:a9:54:6d:d9:a8:ef: ba:52:da:f6:0b:53:f6:cc:38:b7:fd:69:59:9f:19: b3:cb:59:f4:e7:b7:92:ab:55:88:2d:4e:aa:2d:2d: 2c:6e:40:5a:8d:2c:8a:d5:f9:2c:e7:75:c9:65:ca: d3:14:f2:76:53:36:63:06:12:5a:30:45:05:08:64: ef:09:24:f2:fa:e5:9b:17:ad:8c:6b:82:f0:97:71: 28:48:67:99:09:8f:8a:c9:b9:d8:17:d4:61:c2:2b: f6:92:d2:30:9e:8b:d2:21:ca:2b:d0:fd:df:26:cd: 86:f2:19:54:47:76:51:3c:15:8d:69:32:b4:d4:3c: 11:17:54:ef:87:f9:ff:f7:ff:f2:6e:48:d2:0d:b9: 57:ad:32:69:a6:26:94:7d:fb:8d:0c:b4:c2:d6:53: 29:d6:52:ef:98:29:02:91:43:12:4d:59:4a:9e:e5: 32:83:51:b0:59:76:13:6f:94:2b:cb:cd:ef:e8:27: 7f:63:10:ee:5c:8b:96:5e:e4:74:6c:2c:d6:3e:42: ba:01:4a:de:69:21:c1:f1:be:69:ef:2f:87:f3:aa: 7b:75:60:a1:ff:46:0e:a5:65:6d:87:6b:db:e0:f7: 96:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:01:3C:8F:32:27:1F:A3:F1:2F:76:A5:2F:89:7C:FF:34:81:7B:06 X509v3 Authority Key Identifier: keyid:4E:E1:71:3E:16:B4:FD:8F:33:01:88:7D:E6:A1:11:98:04:49:B2:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuFxPha0_Y8zAYh95qERmARJsp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/tgE8jzInH6PxL3alL4l8_zSBewY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.207.48.0/20 Signature Algorithm: sha256WithRSAEncryption 9b:b3:28:c7:b5:8c:63:a8:8c:5a:59:ad:cd:73:25:4f:56:5e: 56:51:c5:39:33:0c:d8:ec:75:d8:1f:19:75:16:68:44:7d:5d: 09:31:f0:43:a1:31:77:9b:c1:8a:ca:f9:97:eb:14:7c:ce:d4: ee:44:d4:a8:ce:97:cb:14:f6:67:d7:42:ab:97:04:a1:71:95: 30:c5:ec:3f:5c:ae:04:65:af:5f:e3:ac:db:23:26:1b:02:c7: 15:c6:f2:31:c6:38:1c:4e:e1:52:91:bb:0d:be:d9:08:b1:5f: 33:4f:6c:e6:2d:89:67:18:fc:cf:6c:1c:e6:8d:cf:a6:d3:d1: 97:90:50:4d:36:9f:67:6c:c8:f0:a6:ec:8c:3b:dd:28:57:09: 1f:97:37:f0:d0:32:9f:b9:da:4e:e9:45:76:ae:07:2f:00:9c: 7d:5a:5d:3b:7c:e0:ad:b3:8c:2d:39:02:f2:5e:94:b1:c8:8d: 0c:8f:a8:6c:30:1d:1a:23:19:b1:d9:74:c0:b4:6b:70:72:14: ab:6b:9f:d4:d7:90:4b:29:c3:6c:cf:af:bd:fb:ad:5d:2e:be: 62:a6:19:5b:b4:9d:6a:31:23:2d:55:c7:2d:e8:72:3e:94:00: 3b:ae:ff:f9:f3:da:55:18:c6:fe:80:49:b7:cf:89:d9:5b:e8: ce:62:50:f7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EkfQYwRtKt018wQZZYx6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZTE3MTNlMTZiNGZkOGYzMzAxODg3ZGU2YTExMTk4MDQ0 OWIyOWUwHhcNMjYwMTAyMDAxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjAxM2M4ZjMyMjcxZmEzZjEyZjc2YTUyZjg5N2NmZjM0ODE3YjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgFJpPUEyLynYzmGe27u98VfJPw9 acmpVG3ZqO+6Utr2C1P2zDi3/WlZnxmzy1n057eSq1WILU6qLS0sbkBajSyK1fks 53XJZcrTFPJ2UzZjBhJaMEUFCGTvCSTy+uWbF62Ma4Lwl3EoSGeZCY+KybnYF9Rh wiv2ktIwnovSIcor0P3fJs2G8hlUR3ZRPBWNaTK01DwRF1Tvh/n/9//ybkjSDblX rTJppiaUffuNDLTC1lMp1lLvmCkCkUMSTVlKnuUyg1GwWXYTb5Qry83v6Cd/YxDu XIuWXuR0bCzWPkK6AUreaSHB8b5p7y+H86p7dWCh/0YOpWVth2vb4PeWxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLYBPI8yJx+j8S92pS+JfP80gXsGMB8GA1UdIwQY MBaAFE7hcT4WtP2PMwGIfeahEZgESbKeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHVGeFBoYTBfWTh6QVloOTVxRVJtQVJKc3A0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC80OGM5ZjYtNWI1Zi00MWQ0LThlNTYt MDhlNGI3OTM4N2MwLzEvdGdFOGp6SW5INlB4TDNhbEw0bDhfelNCZXdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC80OGM5ZjYtNWI1Zi00MWQ0LThlNTYtMDhlNGI3OTM4N2Mw LzEvVHVGeFBoYTBfWTh6QVloOTVxRVJtQVJKc3A0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEbc8wMA0G CSqGSIb3DQEBCwUAA4IBAQCbsyjHtYxjqIxaWa3NcyVPVl5WUcU5MwzY7HXYHxl1 FmhEfV0JMfBDoTF3m8GKyvmX6xR8ztTuRNSozpfLFPZn10KrlwShcZUwxew/XK4E Za9f46zbIyYbAscVxvIxxjgcTuFSkbsNvtkIsV8zT2zmLYlnGPzPbBzmjc+m09GX kFBNNp9nbMjwpuyMO90oVwkflzfw0DKfudpO6UV2rgcvAJx9Wl07fOCts4wtOQLy XpSxyI0Mj6hsMB0aIxmx2XTAtGtwchSra5/U15BLKcNsz6+9+61dLr5iphlbtJ1q MSMtVcct6HI+lAA7rv/589pVGMb+gEm3z4nZW+jOYlD3 -----END CERTIFICATE-----Generated at Mon Jan 26 11:05:59 2026 by rpki-client