This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/ts_rPkgwn2Qi8z7EXS6_3ekjy1w.roa File: ts_rPkgwn2Qi8z7EXS6_3ekjy1w.roa (raw, json) Hash identifier: b1xV7zGywXEyfDZVm80O+ik6/u2GYUW3YmbjuDySQh8= Subject key identifier: B6:CF:EB:3E:48:30:9F:64:22:F3:3E:C4:5D:2E:BF:DD:E9:23:CB:5C Certificate issuer: /CN=f7742725862b90bda4510a02e804fef3ad1142dc Certificate serial: 019B791119FD7A7AA09B4443B62413500EB3 Authority key identifier: F7:74:27:25:86:2B:90:BD:A4:51:0A:02:E8:04:FE:F3:AD:11:42:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93QnJYYrkL2kUQoC6AT-860RQtw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/ts_rPkgwn2Qi8z7EXS6_3ekjy1w.roa Signing time: Thu 01 Jan 2026 10:18:42 +0000 ROA not before: Thu 01 Jan 2026 10:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15836 IP address blocks: 5.32.168.0/21 maxlen: 24 87.255.64.0/19 maxlen: 24 185.46.60.0/22 maxlen: 24 185.172.28.0/22 maxlen: 22 185.172.28.0/24 maxlen: 24 185.172.29.0/24 maxlen: 24 185.172.30.0/24 maxlen: 24 185.172.31.0/24 maxlen: 24 188.0.224.0/20 maxlen: 20 212.28.64.0/19 maxlen: 24 217.26.160.0/20 maxlen: 24 2a03:a80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/93QnJYYrkL2kUQoC6AT-860RQtw.crl rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/93QnJYYrkL2kUQoC6AT-860RQtw.mft rsync://rpki.ripe.net/repository/DEFAULT/93QnJYYrkL2kUQoC6AT-860RQtw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:19:fd:7a:7a:a0:9b:44:43:b6:24:13:50:0e:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7742725862b90bda4510a02e804fef3ad1142dc Validity Not Before: Jan 1 10:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b6cfeb3e48309f6422f33ec45d2ebfdde923cb5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:56:1d:e8:e5:39:67:3d:32:cc:f2:62:2f:d6: 11:99:e6:f4:0b:30:f7:32:49:96:e2:04:24:8c:34: 60:6d:4a:a9:f0:df:14:17:fe:76:46:25:dd:69:3a: ac:82:0c:32:ce:43:da:b6:32:e8:87:23:7e:34:54: 64:2c:e7:92:52:e3:67:91:34:43:3d:24:a7:c1:4e: 91:69:08:c4:a4:1c:bc:0e:84:32:77:72:98:af:13: 46:91:e5:7f:0a:b1:ea:7b:56:14:42:5b:7f:ff:36: c6:77:aa:9f:aa:89:72:07:e7:71:b4:6c:a1:91:a4: 15:38:56:50:68:0c:e6:53:0d:e1:b8:ef:08:a7:f3: c5:9b:4e:a7:c2:98:55:6a:13:7c:e6:c3:fb:18:1c: 51:16:75:d8:73:de:e1:c0:ff:60:b4:fb:ca:91:24: 69:61:d8:ae:b2:5e:96:49:df:ac:60:cb:67:9d:6c: 2c:fa:c8:44:f7:73:f5:ab:64:7f:53:98:f4:56:31: c3:35:7c:a7:c1:66:c6:88:e9:f7:d6:e9:cf:b2:d0: 37:f5:88:8a:36:ec:db:72:31:53:1a:c1:86:29:4c: ac:ac:e1:60:db:bc:c9:09:94:6b:44:26:d5:42:f5: 6c:db:f4:9b:9e:ea:c8:67:a4:af:e6:e3:89:46:d5: b1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:CF:EB:3E:48:30:9F:64:22:F3:3E:C4:5D:2E:BF:DD:E9:23:CB:5C X509v3 Authority Key Identifier: keyid:F7:74:27:25:86:2B:90:BD:A4:51:0A:02:E8:04:FE:F3:AD:11:42:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93QnJYYrkL2kUQoC6AT-860RQtw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/ts_rPkgwn2Qi8z7EXS6_3ekjy1w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/93QnJYYrkL2kUQoC6AT-860RQtw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.32.168.0/21 87.255.64.0/19 185.46.60.0/22 185.172.28.0/22 188.0.224.0/20 212.28.64.0/19 217.26.160.0/20 IPv6: 2a03:a80::/32 Signature Algorithm: sha256WithRSAEncryption 0c:e5:1e:21:7e:cc:0c:58:bf:b4:ff:5f:ef:1a:fb:0e:c0:80: 54:65:15:e2:c8:91:ef:0f:35:37:af:4e:63:14:2b:a0:18:72: df:87:2d:4f:03:e8:36:6b:d0:bf:98:c3:26:b6:ae:bc:96:43: b5:f9:cc:d9:75:f2:6c:82:81:b5:f1:30:76:15:e0:d7:7e:64: 9d:16:c3:22:cd:2a:49:64:e6:d3:32:0b:52:d5:32:cf:d9:ba: 08:a8:a1:5b:9b:3f:a7:b1:b1:e1:0e:bd:d6:b7:e6:c3:8c:d8: 85:f0:3f:f3:fc:d9:11:9e:c4:d2:bd:20:31:47:5f:07:ba:d7: d0:20:31:cf:a1:e6:84:99:8d:92:07:c9:04:8f:3c:f0:54:16: c8:af:a5:e5:44:19:19:54:c8:ef:53:e8:b7:a7:59:e7:eb:9f: b2:dd:73:d2:40:fd:57:22:f7:5a:93:38:98:44:e1:35:c8:cc: e0:62:c8:d9:6f:aa:bc:95:bc:6b:3b:62:14:cd:0a:5f:47:51: b8:2c:93:48:45:e5:cd:10:c4:a6:9c:5e:b3:15:f4:de:bb:6e: 45:a6:3b:34:01:bc:64:9f:8e:5c:0c:a9:53:96:3f:39:8c:b3: 2b:21:d4:4f:eb:59:61:1a:d0:4e:81:33:e1:97:49:3c:1b:52: 0a:63:19:7e -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISAZt5ERn9enqgm0RDtiQTUA6zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3NzQyNzI1ODYyYjkwYmRhNDUxMGEwMmU4MDRmZWYzYWQx MTQyZGMwHhcNMjYwMTAxMTAxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNmNmZWIzZTQ4MzA5ZjY0MjJmMzNlYzQ1ZDJlYmZkZGU5MjNjYjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslYd6OU5Zz0yzPJiL9YRmeb0CzD3 MkmW4gQkjDRgbUqp8N8UF/52RiXdaTqsggwyzkPatjLohyN+NFRkLOeSUuNnkTRD PSSnwU6RaQjEpBy8DoQyd3KYrxNGkeV/CrHqe1YUQlt//zbGd6qfqolyB+dxtGyh kaQVOFZQaAzmUw3huO8Ip/PFm06nwphVahN85sP7GBxRFnXYc97hwP9gtPvKkSRp Ydiusl6WSd+sYMtnnWws+shE93P1q2R/U5j0VjHDNXynwWbGiOn31unPstA39YiK NuzbcjFTGsGGKUysrOFg27zJCZRrRCbVQvVs2/SbnurIZ6Sv5uOJRtWx/wIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFLbP6z5IMJ9kIvM+xF0uv93pI8tcMB8GA1UdIwQY MBaAFPd0JyWGK5C9pFEKAugE/vOtEULcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTNRbkpZWXJrTDJrVVFvQzZBVC04NjBSUXR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni84ZTdlMzAtYzJiOC00NTkxLThjZmUt N2I4ZTlkMzM1Y2E4LzEvdHNfclBrZ3duMlFpOHo3RVhTNl8zZWtqeTF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni84ZTdlMzAtYzJiOC00NTkxLThjZmUtN2I4ZTlkMzM1Y2E4 LzEvOTNRbkpZWXJrTDJrVVFvQzZBVC04NjBSUXR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQDBSCoAwQF V/9AAwQCuS48AwQCuawcAwQEvADgAwQF1BxAAwQE2RqgMA0EAgACMAcDBQAqAwqA MA0GCSqGSIb3DQEBCwUAA4IBAQAM5R4hfswMWL+0/1/vGvsOwIBUZRXiyJHvDzU3 r05jFCugGHLfhy1PA+g2a9C/mMMmtq68lkO1+czZdfJsgoG18TB2FeDXfmSdFsMi zSpJZObTMgtS1TLP2boIqKFbmz+nsbHhDr3Wt+bDjNiF8D/z/NkRnsTSvSAxR18H utfQIDHPoeaEmY2SB8kEjzzwVBbIr6XlRBkZVMjvU+i3p1nn65+y3XPSQP1XIvda kziYROE1yMzgYsjZb6q8lbxrO2IUzQpfR1G4LJNIReXNEMSmnF6zFfTeu25Fpjs0 Abxkn45cDKlTlj85jLMrIdRP61lhGtBOgTPhl0k8G1IKYxl+ -----END CERTIFICATE-----Generated at Mon Jan 26 03:06:12 2026 by rpki-client