This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/tgbG7zzhd0TpX7VXUJAj4569L48.roa File: tgbG7zzhd0TpX7VXUJAj4569L48.roa (raw, json) Hash identifier: XrlNtaTTKiEVZlZoi4ceAdhJeiK4Z6r68mciWuydsEY= Subject key identifier: B6:06:C6:EF:3C:E1:77:44:E9:5F:B5:57:50:90:23:E3:9E:BD:2F:8F Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2 Certificate serial: 019B7F13A12FAE74637DD050C1F7ECC3F2A9 Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/tgbG7zzhd0TpX7VXUJAj4569L48.roa Signing time: Fri 02 Jan 2026 14:19:11 +0000 ROA not before: Fri 02 Jan 2026 14:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205993 IP address blocks: 85.255.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:a1:2f:ae:74:63:7d:d0:50:c1:f7:ec:c3:f2:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2 Validity Not Before: Jan 2 14:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b606c6ef3ce17744e95fb557509023e39ebd2f8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ea:d5:0f:22:c1:d1:44:28:46:23:7d:1b:b7: 2b:20:e3:f2:6c:b3:20:f3:38:68:74:6f:4e:3c:14: ea:2e:e2:84:c2:1d:9e:ae:65:9f:33:93:6e:d1:c6: 0a:03:50:9e:02:d9:40:63:6d:0c:c2:3a:96:f3:37: e9:d1:43:e5:ba:82:68:85:b4:0b:7e:2a:60:2c:a2: b8:f8:a5:38:7f:04:04:b6:4c:75:af:3e:e3:21:c0: 81:b6:e1:70:2b:61:b7:17:7c:67:d4:a3:31:6e:05: 39:3a:bb:7a:3d:a8:ca:30:47:a5:74:88:e4:02:60: 03:6e:7f:46:4d:ba:40:a7:04:09:47:c0:ea:0a:3d: 59:02:d6:7f:21:bb:18:22:45:ee:ff:e6:7e:34:8a: 99:c0:a7:57:fb:98:e6:c8:74:5c:aa:df:b0:a3:e3: 48:61:da:fc:8d:5b:1b:78:4b:74:4e:c5:95:79:d6: f3:73:b5:71:c2:a2:ab:52:98:9e:ec:5d:7e:95:01: d5:36:01:d6:f4:58:5f:54:c1:0d:9b:6b:f1:30:f6: ca:83:b7:3e:71:f7:71:fa:4b:f0:17:8e:44:dc:13: 53:8b:00:5e:01:b3:64:e4:ec:db:d3:4b:ff:81:72: 2e:7d:13:f1:71:66:96:71:62:dc:6c:43:a9:03:02: 21:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:06:C6:EF:3C:E1:77:44:E9:5F:B5:57:50:90:23:E3:9E:BD:2F:8F X509v3 Authority Key Identifier: keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/tgbG7zzhd0TpX7VXUJAj4569L48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.255.120.0/21 Signature Algorithm: sha256WithRSAEncryption 61:ed:e4:ae:b7:15:e0:92:e0:71:f5:c0:bf:00:c3:e0:26:0f: b0:93:b0:aa:0c:18:8d:b2:d4:31:fe:fc:ff:e7:f4:9f:dc:5a: 6a:fa:d2:86:f5:7c:7b:8c:e1:fc:48:1f:46:59:26:f6:70:1f: 92:dc:7d:21:cc:45:74:17:3a:5e:3e:54:24:1d:6a:d6:14:f6: 48:e4:59:a4:9f:57:2c:5a:86:a5:8a:b8:1b:02:5c:5a:63:ca: ca:ad:bf:c6:0e:8f:c1:65:6b:04:b4:55:7d:0c:3a:aa:c2:a1: ba:f1:cb:7d:dc:9f:0c:fa:59:31:ab:32:7b:62:0a:87:49:7d: 32:cb:81:41:d1:7f:b3:67:50:9d:e4:23:71:3f:94:29:41:29: 5a:82:52:bf:97:f9:d9:a7:8b:c7:3a:75:4f:12:e3:1b:94:78: 40:b9:21:c5:e1:cb:83:0f:3f:b8:4c:84:27:86:f4:b8:c4:31: 47:c5:26:54:e3:98:9f:19:9b:8c:2b:44:e7:a3:da:73:99:40: 78:e1:e5:84:34:c3:84:59:e6:dd:6a:56:b1:0e:a9:26:3a:c9: 37:a0:68:d2:86:d3:34:33:4d:2f:2b:46:e3:98:8e:d6:ca:10: 99:75:3d:d6:92:b6:bc:34:52:5e:4a:9f:b6:62:01:44:40:0d: ee:f3:1f:b4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E6EvrnRjfdBQwffsw/KpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjJjMmU3YmMxZGE1NGQ5MTljYTViNTk0MWQzNzg4OTJi MmNjYjIwHhcNMjYwMTAyMTQxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjA2YzZlZjNjZTE3NzQ0ZTk1ZmI1NTc1MDkwMjNlMzllYmQyZjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAperVDyLB0UQoRiN9G7crIOPybLMg 8zhodG9OPBTqLuKEwh2ermWfM5Nu0cYKA1CeAtlAY20MwjqW8zfp0UPluoJohbQL fipgLKK4+KU4fwQEtkx1rz7jIcCBtuFwK2G3F3xn1KMxbgU5Ort6PajKMEeldIjk AmADbn9GTbpApwQJR8DqCj1ZAtZ/IbsYIkXu/+Z+NIqZwKdX+5jmyHRcqt+wo+NI Ydr8jVsbeEt0TsWVedbzc7VxwqKrUpie7F1+lQHVNgHW9FhfVMENm2vxMPbKg7c+ cfdx+kvwF45E3BNTiwBeAbNk5Ozb00v/gXIufRPxcWaWcWLcbEOpAwIhkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLYGxu884XdE6V+1V1CQI+OevS+PMB8GA1UdIwQY MBaAFCLywue8HaVNkZyltZQdN4iSssyyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUt MDJkZWY2ZTg0YzkxLzEvdGdiRzd6emhkMFRwWDdWWFVKQWo0NTY5TDQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUtMDJkZWY2ZTg0Yzkx LzEvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDVf94MA0G CSqGSIb3DQEBCwUAA4IBAQBh7eSutxXgkuBx9cC/AMPgJg+wk7CqDBiNstQx/vz/ 5/Sf3Fpq+tKG9Xx7jOH8SB9GWSb2cB+S3H0hzEV0FzpePlQkHWrWFPZI5Fmkn1cs WoalirgbAlxaY8rKrb/GDo/BZWsEtFV9DDqqwqG68ct93J8M+lkxqzJ7YgqHSX0y y4FB0X+zZ1Cd5CNxP5QpQSlaglK/l/nZp4vHOnVPEuMblHhAuSHF4cuDDz+4TIQn hvS4xDFHxSZU45ifGZuMK0Tno9pzmUB44eWENMOEWebdalaxDqkmOsk3oGjShtM0 M00vK0bjmI7WyhCZdT3Wkra8NFJeSp+2YgFEQA3u8x+0 -----END CERTIFICATE-----Generated at Sun Jan 25 16:14:36 2026 by rpki-client