This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/TbO3p9BaQ_X9-4f96XiNGxzkuFw.roa File: TbO3p9BaQ_X9-4f96XiNGxzkuFw.roa (raw, json) Hash identifier: v3vwX/rnfU0pht1yHzZosZwM8qWsFePSYoMrkrYm3gU= Subject key identifier: 4D:B3:B7:A7:D0:5A:43:F5:FD:FB:87:FD:E9:78:8D:1B:1C:E4:B8:5C Certificate issuer: /CN=706b7fea8ad35111ca687a9cd00a49f9a4f0459b Certificate serial: 019B7F1486F9CFDEB6DC18C6CDDA48AA8341 Authority key identifier: 70:6B:7F:EA:8A:D3:51:11:CA:68:7A:9C:D0:0A:49:F9:A4:F0:45:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGt_6orTURHKaHqc0ApJ-aTwRZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/TbO3p9BaQ_X9-4f96XiNGxzkuFw.roa Signing time: Fri 02 Jan 2026 14:20:10 +0000 ROA not before: Fri 02 Jan 2026 14:20:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212001 IP address blocks: 185.87.168.0/24 maxlen: 24 185.87.169.0/24 maxlen: 24 185.87.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.crl rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.mft rsync://rpki.ripe.net/repository/DEFAULT/cGt_6orTURHKaHqc0ApJ-aTwRZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:86:f9:cf:de:b6:dc:18:c6:cd:da:48:aa:83:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706b7fea8ad35111ca687a9cd00a49f9a4f0459b Validity Not Before: Jan 2 14:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4db3b7a7d05a43f5fdfb87fde9788d1b1ce4b85c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:15:59:81:31:0a:af:07:2e:c1:10:d7:30:04: 3e:07:ce:72:f6:dd:93:6d:ed:92:47:81:48:b3:5a: 7a:bf:00:9a:da:54:61:85:67:82:4c:55:24:bd:81: a2:c5:64:2e:ce:bb:e5:58:fd:88:f2:e5:ee:af:4e: a5:62:d4:b8:de:36:46:cf:1b:85:cb:8f:ca:f7:68: 54:47:55:8e:93:a5:0e:b9:c7:c0:65:d0:43:55:96: 39:62:10:89:7b:df:8c:eb:0d:fb:86:9e:c6:50:8d: eb:3e:c7:06:3a:8f:49:8e:a7:ed:e9:c7:4d:4e:a5: c9:ed:03:04:bc:94:c7:f4:ea:70:3a:88:95:a0:8c: 9b:6a:cd:76:79:f5:9e:6f:71:98:46:12:2e:40:aa: 86:79:08:19:8b:b6:20:6c:bb:0a:a8:a1:e8:f9:9f: a5:a9:fb:65:a5:37:c7:c7:3a:01:51:00:49:2a:08: f6:a9:7e:7d:a9:f9:81:bc:be:f9:50:78:16:3e:13: 3a:e0:21:0b:ae:a0:32:a4:5d:51:e0:aa:84:01:19: ed:f4:5f:fa:43:6c:af:d4:f6:55:ac:3c:73:7b:f1: 3a:69:43:46:ea:b4:69:38:5a:9f:a1:43:34:24:10: 6f:d9:7f:6a:c6:04:69:ba:85:8e:29:7a:05:e4:c6: 70:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:B3:B7:A7:D0:5A:43:F5:FD:FB:87:FD:E9:78:8D:1B:1C:E4:B8:5C X509v3 Authority Key Identifier: keyid:70:6B:7F:EA:8A:D3:51:11:CA:68:7A:9C:D0:0A:49:F9:A4:F0:45:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGt_6orTURHKaHqc0ApJ-aTwRZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/TbO3p9BaQ_X9-4f96XiNGxzkuFw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.87.168.0-185.87.170.255 Signature Algorithm: sha256WithRSAEncryption 17:85:67:b3:01:65:3b:81:cb:35:38:07:5f:67:49:f4:f8:ce: 08:76:83:cc:b0:17:19:15:1e:fe:05:2e:40:f7:04:7d:6b:25: 32:5b:16:65:6c:16:90:3b:12:47:70:3c:81:89:7b:20:4f:35: 1d:dd:16:91:89:a3:74:6c:e9:88:93:cc:8f:2b:96:18:65:50: 4a:a9:e4:8e:ff:a3:e3:d6:32:fa:4e:36:f6:24:53:94:ac:5a: 2c:49:18:37:24:a2:d5:fc:d8:06:d8:03:a1:8a:bb:af:dd:db: 38:77:83:9c:4e:d3:2d:26:53:7c:e3:d6:f3:88:27:6f:53:bb: 82:a3:02:ed:2a:5a:5e:24:ea:9b:40:71:8b:99:c2:58:45:ae: 57:5f:d2:1a:f0:ee:f9:d4:4e:14:0c:d4:4f:c2:e4:5b:f1:c4: ab:b0:4a:12:d6:9d:05:17:fb:7d:92:5d:a1:27:78:73:f8:ad: 79:a1:59:2d:97:e5:81:00:6e:3d:68:10:a8:45:31:c2:39:8d: 9c:b0:e9:f0:ab:49:a5:61:72:09:f2:cb:6d:2e:9a:be:75:ae: 5f:f4:41:c8:0c:38:1a:c5:9a:3d:9d:1e:8e:63:3f:7a:93:c1: 4a:e8:e3:d8:9e:6c:55:cc:3c:18:01:e5:bd:c7:0a:c8:b7:4a: 3b:2f:79:64 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt/FIb5z9623BjGzdpIqoNBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNmI3ZmVhOGFkMzUxMTFjYTY4N2E5Y2QwMGE0OWY5YTRm MDQ1OWIwHhcNMjYwMTAyMTQyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZGIzYjdhN2QwNWE0M2Y1ZmRmYjg3ZmRlOTc4OGQxYjFjZTRiODVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhVZgTEKrwcuwRDXMAQ+B85y9t2T be2SR4FIs1p6vwCa2lRhhWeCTFUkvYGixWQuzrvlWP2I8uXur06lYtS43jZGzxuF y4/K92hUR1WOk6UOucfAZdBDVZY5YhCJe9+M6w37hp7GUI3rPscGOo9Jjqft6cdN TqXJ7QMEvJTH9OpwOoiVoIybas12efWeb3GYRhIuQKqGeQgZi7YgbLsKqKHo+Z+l qftlpTfHxzoBUQBJKgj2qX59qfmBvL75UHgWPhM64CELrqAypF1R4KqEARnt9F/6 Q2yv1PZVrDxze/E6aUNG6rRpOFqfoUM0JBBv2X9qxgRpuoWOKXoF5MZwWQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFE2zt6fQWkP1/fuH/el4jRsc5LhcMB8GA1UdIwQY MBaAFHBrf+qK01ERymh6nNAKSfmk8EWbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0d0XzZvclRVUkhLYUhxYzBBcEotYVR3UlpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9kMjk3NGYtN2VmYS00NjExLTg4Mjct MjYwYzM3N2EzMTRhLzEvVGJPM3A5QmFRX1g5LTRmOTZYaU5HeHprdUZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9kMjk3NGYtN2VmYS00NjExLTg4MjctMjYwYzM3N2EzMTRh LzEvY0d0XzZvclRVUkhLYUhxYzBBcEotYVR3UlpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAO5V6gD BAC5V6owDQYJKoZIhvcNAQELBQADggEBABeFZ7MBZTuByzU4B19nSfT4zgh2g8yw FxkVHv4FLkD3BH1rJTJbFmVsFpA7EkdwPIGJeyBPNR3dFpGJo3Rs6YiTzI8rlhhl UEqp5I7/o+PWMvpONvYkU5SsWixJGDckotX82AbYA6GKu6/d2zh3g5xO0y0mU3zj 1vOIJ29Tu4KjAu0qWl4k6ptAcYuZwlhFrldf0hrw7vnUThQM1E/C5FvxxKuwShLW nQUX+32SXaEneHP4rXmhWS2X5YEAbj1oEKhFMcI5jZyw6fCrSaVhcgnyy20umr51 rl/0QcgMOBrFmj2dHo5jP3qTwUro49iebFXMPBgB5b3HCsi3SjsveWQ= -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:49 2026 by rpki-client