This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/207167-d551-41ba-86a8-2f50ea27213c/1/tp0SOw0ReetfWj-1nSTTgqHkwxM.roa File: tp0SOw0ReetfWj-1nSTTgqHkwxM.roa (raw, json) Hash identifier: XzLhvr/WPwVDdpz3jGaEEAicJMQsJQFmkLSa5mS4sUM= Subject key identifier: B6:9D:12:3B:0D:11:79:EB:5F:5A:3F:B5:9D:24:D3:82:A1:E4:C3:13 Certificate issuer: /CN=68038d4cacbd41919952eb3709c16533838900e3 Certificate serial: 019B7F151FA84D99708713C07447F2206311 Authority key identifier: 68:03:8D:4C:AC:BD:41:91:99:52:EB:37:09:C1:65:33:83:89:00:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aAONTKy9QZGZUus3CcFlM4OJAOM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/207167-d551-41ba-86a8-2f50ea27213c/1/tp0SOw0ReetfWj-1nSTTgqHkwxM.roa Signing time: Fri 02 Jan 2026 14:20:49 +0000 ROA not before: Fri 02 Jan 2026 14:20:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60672 IP address blocks: 185.182.68.0/23 maxlen: 24 185.182.68.0/24 maxlen: 24 185.182.69.0/24 maxlen: 24 185.182.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/207167-d551-41ba-86a8-2f50ea27213c/1/aAONTKy9QZGZUus3CcFlM4OJAOM.crl rsync://rpki.ripe.net/repository/DEFAULT/81/207167-d551-41ba-86a8-2f50ea27213c/1/aAONTKy9QZGZUus3CcFlM4OJAOM.mft rsync://rpki.ripe.net/repository/DEFAULT/aAONTKy9QZGZUus3CcFlM4OJAOM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:1f:a8:4d:99:70:87:13:c0:74:47:f2:20:63:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68038d4cacbd41919952eb3709c16533838900e3 Validity Not Before: Jan 2 14:20:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b69d123b0d1179eb5f5a3fb59d24d382a1e4c313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0a:d3:64:3e:47:80:49:f5:90:47:7e:d2:c4: 4f:ce:80:d5:27:a8:e0:0b:73:fa:0f:ae:fb:6c:5a: 93:52:e2:b8:2c:28:78:8f:5f:6d:28:8c:19:92:9a: 5d:93:88:10:ea:e6:ed:c8:01:cb:2c:8a:ab:8c:1d: 0b:53:cf:48:78:d6:d6:90:a0:57:4e:49:db:3e:85: c3:86:1b:a7:c0:3e:b0:1b:60:3d:99:ec:c1:99:56: 2b:53:33:73:44:12:73:6d:05:29:37:b2:65:3a:8e: bd:13:cc:c1:16:30:d3:9a:51:54:52:09:69:0b:97: 1e:4b:aa:b9:3a:b8:fd:19:f5:ac:60:5e:7e:5f:55: b2:d9:9e:ef:49:0b:74:b6:af:22:94:08:05:17:0c: 5a:a6:3f:f8:be:37:76:b0:f3:e1:99:07:48:31:ae: f4:e4:a5:0a:8e:54:ef:5d:b5:e7:3b:f0:8a:cf:34: 6c:5b:ec:a2:c4:56:79:33:0f:64:4a:09:99:49:71: be:d4:1e:ff:e3:a4:5f:e1:b4:b2:ec:68:38:dd:5c: 80:88:92:f6:77:de:7b:a6:b2:07:b7:84:e4:5f:cb: 1f:4a:9c:b5:bd:be:67:7c:70:c9:41:27:a3:28:14: 88:e3:6f:09:45:bc:6d:a7:e0:d0:6f:68:b3:21:13: cd:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:9D:12:3B:0D:11:79:EB:5F:5A:3F:B5:9D:24:D3:82:A1:E4:C3:13 X509v3 Authority Key Identifier: keyid:68:03:8D:4C:AC:BD:41:91:99:52:EB:37:09:C1:65:33:83:89:00:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aAONTKy9QZGZUus3CcFlM4OJAOM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/207167-d551-41ba-86a8-2f50ea27213c/1/tp0SOw0ReetfWj-1nSTTgqHkwxM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/207167-d551-41ba-86a8-2f50ea27213c/1/aAONTKy9QZGZUus3CcFlM4OJAOM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.182.68.0-185.182.70.255 Signature Algorithm: sha256WithRSAEncryption 1e:c5:ef:8a:6d:14:45:5e:d6:b5:11:26:14:7e:9c:58:5d:34: 6d:31:de:a9:da:09:b8:4d:dd:77:75:51:4f:a7:e9:9f:4c:e8: 8a:55:f2:ff:c9:4f:87:ec:e4:8b:10:fa:12:4f:39:ba:70:4f: 84:49:ba:c9:f3:33:dd:cb:ca:fb:1b:f9:c3:cc:6d:f0:bb:3c: 4f:d0:da:70:84:dc:3b:21:11:f4:94:8b:53:24:36:0e:5c:97: e2:8f:dc:5d:6a:ac:3a:ae:18:a0:76:ba:25:40:3d:90:79:14: f6:ab:42:a2:98:4c:63:9a:d0:04:bf:6e:b9:b7:31:04:9e:d1: 61:8c:c6:4a:70:19:43:9a:20:13:bd:36:b4:a5:c0:d9:db:11: 27:f7:9c:e9:08:79:f6:a7:a8:01:00:b0:9d:f3:45:55:71:59: d0:f5:47:81:0b:c4:5c:79:a4:3a:ac:a4:ba:c5:96:7d:9e:46: b7:6b:65:8e:25:2f:02:9a:99:29:96:71:24:57:f8:45:51:4b: 96:1e:73:26:27:f8:e1:94:53:3d:5b:ab:77:0e:fd:65:c3:87: b8:0f:24:e4:13:c9:e1:51:29:20:db:86:c9:7c:95:7f:5a:05: b2:4e:27:21:0b:09:11:e6:bf:07:5f:30:59:81:ec:1d:41:33: e5:20:23:41 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt/FR+oTZlwhxPAdEfyIGMRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4MDM4ZDRjYWNiZDQxOTE5OTUyZWIzNzA5YzE2NTMzODM4 OTAwZTMwHhcNMjYwMTAyMTQyMDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjlkMTIzYjBkMTE3OWViNWY1YTNmYjU5ZDI0ZDM4MmExZTRjMzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyArTZD5HgEn1kEd+0sRPzoDVJ6jg C3P6D677bFqTUuK4LCh4j19tKIwZkppdk4gQ6ubtyAHLLIqrjB0LU89IeNbWkKBX TknbPoXDhhunwD6wG2A9mezBmVYrUzNzRBJzbQUpN7JlOo69E8zBFjDTmlFUUglp C5ceS6q5Orj9GfWsYF5+X1Wy2Z7vSQt0tq8ilAgFFwxapj/4vjd2sPPhmQdIMa70 5KUKjlTvXbXnO/CKzzRsW+yixFZ5Mw9kSgmZSXG+1B7/46Rf4bSy7Gg43VyAiJL2 d957prIHt4TkX8sfSpy1vb5nfHDJQSejKBSI428JRbxtp+DQb2izIRPNWQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFLadEjsNEXnrX1o/tZ0k04Kh5MMTMB8GA1UdIwQY MBaAFGgDjUysvUGRmVLrNwnBZTODiQDjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUFPTlRLeTlRWkdaVXVzM0NjRmxNNE9KQU9NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMDcxNjctZDU1MS00MWJhLTg2YTgt MmY1MGVhMjcyMTNjLzEvdHAwU093MFJlZXRmV2otMW5TVFRncUhrd3hNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8yMDcxNjctZDU1MS00MWJhLTg2YTgtMmY1MGVhMjcyMTNj LzEvYUFPTlRLeTlRWkdaVXVzM0NjRmxNNE9KQU9NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAK5tkQD BAC5tkYwDQYJKoZIhvcNAQELBQADggEBAB7F74ptFEVe1rURJhR+nFhdNG0x3qna CbhN3Xd1UU+n6Z9M6IpV8v/JT4fs5IsQ+hJPObpwT4RJusnzM93Lyvsb+cPMbfC7 PE/Q2nCE3DshEfSUi1MkNg5cl+KP3F1qrDquGKB2uiVAPZB5FParQqKYTGOa0AS/ brm3MQSe0WGMxkpwGUOaIBO9NrSlwNnbESf3nOkIefanqAEAsJ3zRVVxWdD1R4EL xFx5pDqspLrFln2eRrdrZY4lLwKamSmWcSRX+EVRS5YecyYn+OGUUz1bq3cO/WXD h7gPJOQTyeFRKSDbhsl8lX9aBbJOJyELCRHmvwdfMFmB7B1BM+UgI0E= -----END CERTIFICATE-----Generated at Sun Jan 25 16:38:54 2026 by rpki-client