This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/tuFkTNJE_tBOl8Y3cfhgACMfdGc.roa File: tuFkTNJE_tBOl8Y3cfhgACMfdGc.roa (raw, json) Hash identifier: grzTKArYAdOSgmos9//SbHJIPnfkY/no3vmzcEeOUos= Subject key identifier: B6:E1:64:4C:D2:44:FE:D0:4E:97:C6:37:71:F8:60:00:23:1F:74:67 Certificate issuer: /CN=899241a00348315c02c0e2a9150b863087d1c857 Certificate serial: 019B7EA719E56CF1E7F8B0FE65FBE98813FA Authority key identifier: 89:92:41:A0:03:48:31:5C:02:C0:E2:A9:15:0B:86:30:87:D1:C8:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/tuFkTNJE_tBOl8Y3cfhgACMfdGc.roa Signing time: Fri 02 Jan 2026 12:20:38 +0000 ROA not before: Fri 02 Jan 2026 12:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21267 IP address blocks: 5.45.16.0/23 maxlen: 23 5.45.18.0/24 maxlen: 24 2a01:6c8:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.mft rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:19:e5:6c:f1:e7:f8:b0:fe:65:fb:e9:88:13:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=899241a00348315c02c0e2a9150b863087d1c857 Validity Not Before: Jan 2 12:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b6e1644cd244fed04e97c63771f86000231f7467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:70:a1:1a:d6:61:79:2a:12:71:2a:fe:cf:59: 20:ac:ea:aa:fd:db:f9:c1:7c:13:2a:68:ee:c9:4c: bb:ce:9c:3b:a4:c5:1b:e8:29:f6:ce:8b:ef:64:96: f7:d1:5d:1c:a0:91:3c:78:f8:50:33:7b:ea:81:67: 33:3b:eb:2b:a9:d3:e8:46:d9:64:a1:6c:a4:ff:88: 44:8e:e7:1f:39:c8:ac:72:35:10:1a:e4:dc:86:78: 37:ce:5a:d8:f2:2f:4b:08:31:08:39:b5:20:bc:b9: 70:da:91:6b:d1:f3:97:16:a5:1d:ca:41:f3:ac:12: 63:29:d1:34:6c:a5:c3:dd:98:2e:fa:3e:0f:ad:5b: 08:a2:94:f4:e7:e4:93:16:75:df:05:98:d2:35:e9: 05:ba:42:f5:b3:65:11:28:c6:b0:53:c9:05:6f:6a: 8f:18:8f:ff:65:7b:8a:f3:2e:57:de:20:e0:c1:dc: 1b:32:2c:4d:31:df:cf:1b:c2:d1:fb:5d:a1:44:0c: 12:be:bd:cf:d0:a3:ee:d0:0a:bf:7b:8c:39:82:e7: ad:47:83:0e:dc:bc:07:ad:d4:89:12:8c:f4:94:33: 2c:92:e4:49:cb:51:58:57:c7:e2:a4:3b:0e:db:a9: ce:c2:ad:45:c5:14:8a:12:ef:67:e8:a9:5d:6c:78: e3:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:E1:64:4C:D2:44:FE:D0:4E:97:C6:37:71:F8:60:00:23:1F:74:67 X509v3 Authority Key Identifier: keyid:89:92:41:A0:03:48:31:5C:02:C0:E2:A9:15:0B:86:30:87:D1:C8:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/tuFkTNJE_tBOl8Y3cfhgACMfdGc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.45.16.0-5.45.18.255 IPv6: 2a01:6c8:2000::/36 Signature Algorithm: sha256WithRSAEncryption 0f:47:d0:a3:70:62:80:10:7b:c2:83:9e:cf:86:e4:48:78:aa: bb:ca:db:ea:b4:9d:b9:e1:64:f4:4e:87:94:7e:ac:38:a6:a9: 7a:68:2a:fc:4f:4b:5c:0c:4f:d3:9c:f4:99:f6:48:9e:9e:29: c0:42:b4:42:66:04:6b:cd:52:24:38:ca:21:88:a4:db:bd:24: ed:9a:3a:fc:18:fe:32:69:9e:cd:d1:04:58:13:cd:d4:5f:53: dc:b2:11:f1:5a:f3:60:d6:ee:5e:8f:37:cd:5c:48:6b:f5:65: 99:d6:25:a9:46:e2:00:c6:7f:dc:2e:71:23:c3:39:1b:a1:09: 17:ea:71:63:ec:7c:97:12:1a:04:4c:2f:ce:75:9c:6d:d9:7c: 79:9c:28:fa:3a:58:04:dd:56:f9:3c:d5:5e:52:7f:16:4b:78: bf:82:a0:e6:6e:af:70:b8:78:50:09:d9:55:36:1c:43:e0:0b: d1:1d:02:07:f3:75:92:f5:82:a3:b8:02:81:60:37:cc:4f:ab: e8:3f:73:5e:71:74:2f:ff:66:cf:43:b8:98:1b:4f:39:92:17: 61:cd:a0:d4:36:20:bb:da:f8:df:a9:e1:e6:31:15:b2:3a:02: d3:bc:58:d4:15:60:c2:58:86:77:62:61:fe:f3:15:d8:0a:59: bb:88:73:10 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt+pxnlbPHn+LD+ZfvpiBP6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5OTI0MWEwMDM0ODMxNWMwMmMwZTJhOTE1MGI4NjMwODdk MWM4NTcwHhcNMjYwMTAyMTIyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNmUxNjQ0Y2QyNDRmZWQwNGU5N2M2Mzc3MWY4NjAwMDIzMWY3NDY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63ChGtZheSoScSr+z1kgrOqq/dv5 wXwTKmjuyUy7zpw7pMUb6Cn2zovvZJb30V0coJE8ePhQM3vqgWczO+srqdPoRtlk oWyk/4hEjucfOciscjUQGuTchng3zlrY8i9LCDEIObUgvLlw2pFr0fOXFqUdykHz rBJjKdE0bKXD3Zgu+j4PrVsIopT05+STFnXfBZjSNekFukL1s2URKMawU8kFb2qP GI//ZXuK8y5X3iDgwdwbMixNMd/PG8LR+12hRAwSvr3P0KPu0Aq/e4w5guetR4MO 3LwHrdSJEoz0lDMskuRJy1FYV8fipDsO26nOwq1FxRSKEu9n6KldbHjj+QIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFLbhZEzSRP7QTpfGN3H4YAAjH3RnMB8GA1UdIwQY MBaAFImSQaADSDFcAsDiqRULhjCH0chXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVpKQm9BTklNVndDd09LcEZRdUdNSWZSeUZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9lNzliODctZDUxYi00ZjE1LThhMzIt OTllNzgwYmYzYjk4LzEvdHVGa1ROSkVfdEJPbDhZM2NmaGdBQ01mZEdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9lNzliODctZDUxYi00ZjE1LThhMzItOTllNzgwYmYzYjk4 LzEvaVpKQm9BTklNVndDd09LcEZRdUdNSWZSeUZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAUBAIAATAOMAwDBAQFLRAD BAAFLRIwDgQCAAIwCAMGBCoBBsggMA0GCSqGSIb3DQEBCwUAA4IBAQAPR9CjcGKA EHvCg57PhuRIeKq7ytvqtJ254WT0ToeUfqw4pql6aCr8T0tcDE/TnPSZ9kieninA QrRCZgRrzVIkOMohiKTbvSTtmjr8GP4yaZ7N0QRYE83UX1PcshHxWvNg1u5ejzfN XEhr9WWZ1iWpRuIAxn/cLnEjwzkboQkX6nFj7HyXEhoETC/OdZxt2Xx5nCj6OlgE 3Vb5PNVeUn8WS3i/gqDmbq9wuHhQCdlVNhxD4AvRHQIH83WS9YKjuAKBYDfMT6vo P3NecXQv/2bPQ7iYG085khdhzaDUNiC72vjfqeHmMRWyOgLTvFjUFWDCWIZ3YmH+ 8xXYClm7iHMQ -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:33 2026 by rpki-client