This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/tbvYOvb5SVTVJR3EbU70Kzk3qVo.roa File: tbvYOvb5SVTVJR3EbU70Kzk3qVo.roa (raw, json) Hash identifier: 4N/4Cs97VSolZG2uH4kNH6VCwjqzoA3qCO8vzH4tvd0= Subject key identifier: B5:BB:D8:3A:F6:F9:49:54:D5:25:1D:C4:6D:4E:F4:2B:39:37:A9:5A Certificate issuer: /CN=08d5eb6a96864dfa2c51b2e256c5180ab92229cd Certificate serial: 019B7F15EAF985C05AEE84A8F887529D935B Authority key identifier: 08:D5:EB:6A:96:86:4D:FA:2C:51:B2:E2:56:C5:18:0A:B9:22:29:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/tbvYOvb5SVTVJR3EbU70Kzk3qVo.roa Signing time: Fri 02 Jan 2026 14:21:41 +0000 ROA not before: Fri 02 Jan 2026 14:21:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30722 IP address blocks: 194.55.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ea:f9:85:c0:5a:ee:84:a8:f8:87:52:9d:93:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08d5eb6a96864dfa2c51b2e256c5180ab92229cd Validity Not Before: Jan 2 14:21:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5bbd83af6f94954d5251dc46d4ef42b3937a95a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:07:64:c1:60:6a:c9:c6:0b:e9:6e:17:94:88: 85:4c:ed:70:10:a2:e6:c3:a6:57:ea:f5:4f:fc:6b: 57:ac:6c:62:03:69:c3:f9:35:a4:90:49:ef:e7:2c: a2:e6:ad:89:b3:f2:8a:85:b5:8c:58:8a:48:64:08: 60:08:d7:74:a2:7b:75:d8:ee:d5:82:6c:e9:24:36: 56:11:14:85:74:3c:b3:9c:21:ad:77:00:48:7d:ff: e4:24:64:7a:03:80:89:7e:7a:7d:af:fc:b2:7b:cf: 0a:4c:40:4f:ce:72:b4:df:b0:12:58:59:cd:60:5a: 6a:4f:e9:9b:6c:0e:8d:f7:b0:33:0e:3f:f8:f0:ab: b7:7a:ec:73:95:65:b2:6b:19:ef:11:41:b2:9f:41: 22:7d:3d:f5:75:09:45:e2:67:58:39:a6:60:79:63: 09:f3:a3:52:1e:ad:8a:d2:66:5e:7b:f0:9f:f0:b7: a1:e4:2a:90:28:88:c7:0a:db:2e:78:e3:db:67:92: 6d:b0:c2:e5:77:67:68:c2:a8:f7:ba:37:d0:78:c3: 00:8e:df:ca:36:6f:40:eb:3e:b8:6c:60:39:f6:21: 44:5a:35:13:57:ce:9f:9a:56:e9:2a:eb:61:be:20: 14:b9:fc:3f:5b:b5:89:67:e5:23:4e:8a:1a:72:94: 56:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:BB:D8:3A:F6:F9:49:54:D5:25:1D:C4:6D:4E:F4:2B:39:37:A9:5A X509v3 Authority Key Identifier: keyid:08:D5:EB:6A:96:86:4D:FA:2C:51:B2:E2:56:C5:18:0A:B9:22:29:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/tbvYOvb5SVTVJR3EbU70Kzk3qVo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.55.44.0/22 Signature Algorithm: sha256WithRSAEncryption 27:34:0f:c8:e2:61:9f:bb:db:54:c2:38:fd:b0:c3:6c:3b:39: a0:1e:17:ff:db:7f:56:03:89:5b:92:17:2e:d4:a5:39:eb:51: 1d:fe:fe:41:dc:68:74:db:59:bf:b0:80:ec:4f:09:f8:81:cd: ef:d2:79:7f:40:ed:de:c3:3e:d9:d6:b1:aa:c9:a4:00:fe:08: eb:f7:b0:28:60:cb:ec:71:df:0c:4f:a0:06:51:d6:4b:f7:6b: 7a:ee:0a:43:38:21:2c:d7:bc:6f:31:94:7a:0d:d0:ba:ab:68: 35:66:d5:cb:10:5a:79:c1:5e:45:86:65:32:0c:3a:d0:3d:6b: 41:ef:ff:7a:0d:b9:27:c2:20:74:39:d6:c3:8c:06:a3:e7:59: a2:3c:1a:68:fb:01:9e:29:87:6c:25:a8:de:21:c6:e1:09:e5: 2c:1f:bc:07:62:ed:76:71:54:9c:05:5a:7e:c3:61:fe:55:b1: c6:cc:8d:14:10:10:6c:60:1b:c6:2a:31:35:d7:0b:82:c6:fd: c0:64:45:9e:b1:98:2c:93:74:0c:4b:63:d6:58:c9:c8:52:80: 86:68:c6:40:e5:09:34:63:88:a5:78:e4:1a:fd:6c:60:ba:40: 3c:ca:18:7a:46:63:8f:b3:c4:b1:e5:8c:92:c6:4b:a9:d9:df: 14:c6:a4:81 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/Fer5hcBa7oSo+IdSnZNbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZDVlYjZhOTY4NjRkZmEyYzUxYjJlMjU2YzUxODBhYjky MjI5Y2QwHhcNMjYwMTAyMTQyMTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNWJiZDgzYWY2Zjk0OTU0ZDUyNTFkYzQ2ZDRlZjQyYjM5MzdhOTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowdkwWBqycYL6W4XlIiFTO1wEKLm w6ZX6vVP/GtXrGxiA2nD+TWkkEnv5yyi5q2Js/KKhbWMWIpIZAhgCNd0ont12O7V gmzpJDZWERSFdDyznCGtdwBIff/kJGR6A4CJfnp9r/yye88KTEBPznK037ASWFnN YFpqT+mbbA6N97AzDj/48Ku3euxzlWWyaxnvEUGyn0EifT31dQlF4mdYOaZgeWMJ 86NSHq2K0mZee/Cf8Leh5CqQKIjHCtsueOPbZ5JtsMLld2dowqj3ujfQeMMAjt/K Nm9A6z64bGA59iFEWjUTV86fmlbpKuthviAUufw/W7WJZ+UjTooacpRWNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLW72Dr2+UlU1SUdxG1O9Cs5N6laMB8GA1UdIwQY MBaAFAjV62qWhk36LFGy4lbFGAq5IinNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ05YcmFwYUdUZm9zVWJMaVZzVVlDcmtpS2MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi80YTU4YmMtMjQwMy00MTQ0LWJiNWUt YmI2ODI5MzYwY2VlLzEvdGJ2WU92YjVTVlRWSlIzRWJVNzBLemszcVZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi80YTU4YmMtMjQwMy00MTQ0LWJiNWUtYmI2ODI5MzYwY2Vl LzEvQ05YcmFwYUdUZm9zVWJMaVZzVVlDcmtpS2MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwjcsMA0G CSqGSIb3DQEBCwUAA4IBAQAnNA/I4mGfu9tUwjj9sMNsOzmgHhf/239WA4lbkhcu 1KU561Ed/v5B3Gh021m/sIDsTwn4gc3v0nl/QO3ewz7Z1rGqyaQA/gjr97AoYMvs cd8MT6AGUdZL92t67gpDOCEs17xvMZR6DdC6q2g1ZtXLEFp5wV5FhmUyDDrQPWtB 7/96DbknwiB0OdbDjAaj51miPBpo+wGeKYdsJajeIcbhCeUsH7wHYu12cVScBVp+ w2H+VbHGzI0UEBBsYBvGKjE11wuCxv3AZEWesZgsk3QMS2PWWMnIUoCGaMZA5Qk0 Y4ileOQa/WxgukA8yhh6RmOPs8Sx5YySxkup2d8UxqSB -----END CERTIFICATE-----Generated at Sun Jan 25 16:39:04 2026 by rpki-client