This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/TruqXXhyrBV8Cwe5yzCBt7QLsCE.roa File: TruqXXhyrBV8Cwe5yzCBt7QLsCE.roa (raw, json) Hash identifier: Ab+jWWB0kPKqVoiUmBfNBgr0bDHAA/s+gzbI3fKh/Jo= Subject key identifier: 4E:BB:AA:5D:78:72:AC:15:7C:0B:07:B9:CB:30:81:B7:B4:0B:B0:21 Certificate issuer: /CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83 Certificate serial: 019B7EA55AA49F7801437DD320A32AFA05C5 Authority key identifier: 22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/TruqXXhyrBV8Cwe5yzCBt7QLsCE.roa Signing time: Fri 02 Jan 2026 12:18:44 +0000 ROA not before: Fri 02 Jan 2026 12:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57169 IP address blocks: 195.254.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:5a:a4:9f:78:01:43:7d:d3:20:a3:2a:fa:05:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83 Validity Not Before: Jan 2 12:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ebbaa5d7872ac157c0b07b9cb3081b7b40bb021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:be:b6:3c:a2:a9:18:08:8d:58:6a:b8:fe:d3: a4:74:08:15:0d:e3:8e:4b:8a:ea:45:b9:e9:7e:78: 4e:c0:32:47:03:9b:74:21:f6:3c:b8:ec:7d:d3:9c: 24:6a:0e:e5:06:2e:ec:d8:60:de:76:ef:0e:75:6f: 1b:f2:60:51:70:c8:3c:7b:aa:a6:46:23:38:f2:fc: cd:09:a8:aa:c8:ab:0d:a9:9f:ff:31:ba:7e:6b:74: cf:e3:73:9b:d4:cd:a0:1f:34:ab:1d:cc:d8:53:44: 25:bf:da:4e:4b:18:71:92:c8:c5:15:99:1f:02:e5: 58:db:5d:b0:c6:05:bb:3e:6c:6a:57:5f:a9:23:b0: 73:2e:60:2f:c8:ec:17:e0:75:60:ff:59:60:2d:ce: 04:27:cd:c7:4b:2a:ea:4e:13:5f:e8:10:ff:ec:bc: 23:c2:4a:af:10:42:20:f7:f2:25:08:b6:e6:eb:29: 9a:ef:f1:74:ee:62:6b:fd:f2:a6:a9:6d:46:43:78: b0:a7:30:c1:4e:3f:d7:c0:0e:16:bf:f8:4d:d3:d4: 0d:18:ef:39:c8:f9:45:6e:20:e6:f4:d4:86:dc:88: f1:c0:6d:4f:48:7e:18:37:da:d4:25:33:88:77:94: 4a:af:39:e9:f7:da:63:d3:78:e3:bb:d3:d8:99:35: 9a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:BB:AA:5D:78:72:AC:15:7C:0B:07:B9:CB:30:81:B7:B4:0B:B0:21 X509v3 Authority Key Identifier: keyid:22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/TruqXXhyrBV8Cwe5yzCBt7QLsCE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.254.132.0/24 Signature Algorithm: sha256WithRSAEncryption b5:ec:d6:fa:ad:9b:02:d7:70:34:0c:3c:3f:d0:2e:f8:12:c7: 74:9b:58:4e:7f:1e:f9:7e:36:bf:a9:b7:0e:15:1f:5f:eb:64: 42:04:23:20:18:72:bb:9e:0a:5b:f6:3d:4f:86:f6:0b:f2:ca: c5:6c:74:a2:a1:7e:04:ba:90:94:b7:dc:45:ff:c8:24:02:cd: 08:68:5b:7b:39:09:35:7b:fe:32:69:18:b2:91:ab:08:e7:97: 0b:15:5e:c2:96:bd:1f:b2:0c:ff:fc:72:75:a2:5e:be:5e:8b: be:32:30:ef:7e:f4:3f:e0:35:3e:d3:d0:70:e0:ec:a5:df:d1: 4f:b2:29:87:16:ff:fb:f7:ed:15:46:d7:30:d8:99:dd:aa:60: b5:f4:78:d9:46:cd:62:0f:ea:28:33:7c:47:f2:1b:d0:cc:93: 5c:4a:59:b8:8e:0a:e5:63:5f:dc:97:8a:03:34:b5:2c:72:f0: bf:f1:b1:40:3b:e5:f3:02:de:26:24:4d:60:90:da:a4:f5:29: d8:27:3e:34:cf:33:74:5c:a4:07:8c:90:6c:36:f1:41:34:14: c5:e5:a2:7e:dd:32:3f:f7:d6:7e:e8:4d:e3:a0:d4:67:2c:35: 86:65:96:0f:5a:67:fd:b5:70:27:c8:7f:7c:eb:f2:d4:38:47: 18:18:e4:50 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pVqkn3gBQ33TIKMq+gXFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMmM0NTg1YmQ4OGZiMjdjYWRmMjllZTViYjk1ZDY1NzVm Y2VmODMwHhcNMjYwMTAyMTIxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZWJiYWE1ZDc4NzJhYzE1N2MwYjA3YjljYjMwODFiN2I0MGJiMDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs762PKKpGAiNWGq4/tOkdAgVDeOO S4rqRbnpfnhOwDJHA5t0IfY8uOx905wkag7lBi7s2GDedu8OdW8b8mBRcMg8e6qm RiM48vzNCaiqyKsNqZ//Mbp+a3TP43Ob1M2gHzSrHczYU0Qlv9pOSxhxksjFFZkf AuVY212wxgW7PmxqV1+pI7BzLmAvyOwX4HVg/1lgLc4EJ83HSyrqThNf6BD/7Lwj wkqvEEIg9/IlCLbm6yma7/F07mJr/fKmqW1GQ3iwpzDBTj/XwA4Wv/hN09QNGO85 yPlFbiDm9NSG3IjxwG1PSH4YN9rUJTOId5RKrznp99pj03jju9PYmTWaQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE67ql14cqwVfAsHucswgbe0C7AhMB8GA1UdIwQY MBaAFCIsRYW9iPsnyt8p7lu5XWV1/O+DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWl4RmhiMkkteWZLM3ludVc3bGRaWFg4NzRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC82ZWIzNjUtODAzYS00YzJmLWI3YWUt YzY0N2E4YzFkZGZhLzEvVHJ1cVhYaHlyQlY4Q3dlNXl6Q0J0N1FMc0NFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC82ZWIzNjUtODAzYS00YzJmLWI3YWUtYzY0N2E4YzFkZGZh LzEvSWl4RmhiMkkteWZLM3ludVc3bGRaWFg4NzRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw/6EMA0G CSqGSIb3DQEBCwUAA4IBAQC17Nb6rZsC13A0DDw/0C74Esd0m1hOfx75fja/qbcO FR9f62RCBCMgGHK7ngpb9j1PhvYL8srFbHSioX4EupCUt9xF/8gkAs0IaFt7OQk1 e/4yaRiykasI55cLFV7Clr0fsgz//HJ1ol6+Xou+MjDvfvQ/4DU+09Bw4Oyl39FP simHFv/79+0VRtcw2JndqmC19HjZRs1iD+ooM3xH8hvQzJNcSlm4jgrlY1/cl4oD NLUscvC/8bFAO+XzAt4mJE1gkNqk9SnYJz40zzN0XKQHjJBsNvFBNBTF5aJ+3TI/ 99Z+6E3joNRnLDWGZZYPWmf9tXAnyH986/LUOEcYGORQ -----END CERTIFICATE-----Generated at Sun Jan 25 23:03:41 2026 by rpki-client