This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/tpEBF1Q8z5bSj6OcJb4FTf6df5I.roa File: tpEBF1Q8z5bSj6OcJb4FTf6df5I.roa (raw, json) Hash identifier: ReUABYJKJ1IomFhNfPbyfpUKq1xXrFx0mGae78sw4IU= Subject key identifier: B6:91:01:17:54:3C:CF:96:D2:8F:A3:9C:25:BE:05:4D:FE:9D:7F:92 Certificate issuer: /CN=ea1219292d86ca96397b8a8bd24e08b1a897c1a3 Certificate serial: 019B7F15AFBF1EDECC8284C173A57B206CF7 Authority key identifier: EA:12:19:29:2D:86:CA:96:39:7B:8A:8B:D2:4E:08:B1:A8:97:C1:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6hIZKS2GypY5e4qL0k4IsaiXwaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/tpEBF1Q8z5bSj6OcJb4FTf6df5I.roa Signing time: Fri 02 Jan 2026 14:21:26 +0000 ROA not before: Fri 02 Jan 2026 14:21:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15763 IP address blocks: 149.232.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.mft rsync://rpki.ripe.net/repository/DEFAULT/6hIZKS2GypY5e4qL0k4IsaiXwaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:af:bf:1e:de:cc:82:84:c1:73:a5:7b:20:6c:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea1219292d86ca96397b8a8bd24e08b1a897c1a3 Validity Not Before: Jan 2 14:21:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b6910117543ccf96d28fa39c25be054dfe9d7f92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:58:91:0f:8a:3a:6a:c1:8d:a9:b6:72:62:95: a6:d5:f4:a3:5a:e2:82:8b:bb:bc:e2:85:58:f2:fb: 52:f8:b8:c4:f8:20:69:b0:a4:3b:c9:6b:58:81:41: 7a:85:c9:be:9f:5c:56:f2:81:82:6d:41:b0:38:5e: ef:bd:ec:6c:00:65:44:51:bd:ba:cd:50:8a:47:fa: d8:77:3c:3d:cc:39:eb:cc:3b:94:37:94:25:72:2f: 25:79:b6:f7:cb:d4:17:80:9a:dd:ee:ff:48:be:69: 44:64:f0:22:ff:e9:f0:f1:85:27:07:4d:6c:18:9e: 61:9d:a8:74:69:13:01:e2:c6:0a:46:96:c7:a6:37: 60:d4:3b:35:03:4d:12:4e:23:53:e1:73:ad:a9:a5: eb:81:14:8e:12:49:ab:60:0a:41:b7:1c:2a:46:de: 5d:58:77:52:9e:27:4e:3c:0c:b9:08:eb:a3:32:48: 1e:c9:01:37:2d:44:12:63:f2:88:e4:f1:42:0d:44: d6:f1:fd:7b:88:76:67:2c:cf:b1:65:9b:bf:e7:2c: d1:c8:86:62:25:5d:b9:01:b6:aa:ae:24:5c:0f:57: ae:7e:39:aa:54:1c:0e:e0:74:71:d9:d9:fd:42:6d: 79:8d:ae:0b:7f:2e:7b:f0:9b:1d:8a:53:29:88:3f: 9d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:91:01:17:54:3C:CF:96:D2:8F:A3:9C:25:BE:05:4D:FE:9D:7F:92 X509v3 Authority Key Identifier: keyid:EA:12:19:29:2D:86:CA:96:39:7B:8A:8B:D2:4E:08:B1:A8:97:C1:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hIZKS2GypY5e4qL0k4IsaiXwaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/tpEBF1Q8z5bSj6OcJb4FTf6df5I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.232.0.0/18 Signature Algorithm: sha256WithRSAEncryption 7b:e7:fd:5c:72:b7:ed:be:a6:ca:4c:2c:e7:92:6d:41:cf:29: bf:03:36:28:1c:97:8e:62:25:3d:80:35:6c:08:35:e5:f3:ff: 3f:0b:ce:4f:c4:18:e0:84:72:3d:11:c0:2f:07:de:10:c0:ab: fb:10:9b:30:7d:dc:2f:0d:6c:89:68:a2:df:33:a0:1a:14:42: 64:bd:68:4c:4a:14:0c:c6:38:ab:f7:18:bf:25:7f:36:6f:af: 74:7e:37:f2:b5:15:04:1d:db:a7:4b:fd:90:2f:7c:96:40:62: 2e:46:2b:fc:da:f1:46:75:c2:1c:2c:04:a4:4b:f0:6e:20:88: 27:1f:d7:0e:82:08:68:ad:d6:41:ca:35:2f:3e:6c:27:7e:be: e9:a2:b9:14:01:01:8a:87:e9:a9:ef:2a:22:95:75:ea:6e:f8: 7c:f8:3d:f7:3a:6f:10:be:08:2c:ae:6d:a4:be:e5:8a:60:3a: 49:dc:a8:7e:3f:8c:3b:86:78:db:6b:13:65:93:71:57:50:17: d6:83:97:8a:20:8a:a9:98:53:4f:96:cb:48:98:9b:95:5c:e5: 44:b9:c3:d3:51:29:b7:ae:a4:32:16:4c:6b:4e:e4:b9:b8:9a: af:78:18:b8:d0:a0:ba:2c:99:b0:60:8e:c1:68:4b:f2:13:aa: 0c:63:bd:82 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/Fa+/Ht7MgoTBc6V7IGz3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMTIxOTI5MmQ4NmNhOTYzOTdiOGE4YmQyNGUwOGIxYTg5 N2MxYTMwHhcNMjYwMTAyMTQyMTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjkxMDExNzU0M2NjZjk2ZDI4ZmEzOWMyNWJlMDU0ZGZlOWQ3ZjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFiRD4o6asGNqbZyYpWm1fSjWuKC i7u84oVY8vtS+LjE+CBpsKQ7yWtYgUF6hcm+n1xW8oGCbUGwOF7vvexsAGVEUb26 zVCKR/rYdzw9zDnrzDuUN5Qlci8lebb3y9QXgJrd7v9IvmlEZPAi/+nw8YUnB01s GJ5hnah0aRMB4sYKRpbHpjdg1Ds1A00STiNT4XOtqaXrgRSOEkmrYApBtxwqRt5d WHdSnidOPAy5COujMkgeyQE3LUQSY/KI5PFCDUTW8f17iHZnLM+xZZu/5yzRyIZi JV25AbaqriRcD1eufjmqVBwO4HRx2dn9Qm15ja4Lfy578JsdilMpiD+dpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLaRARdUPM+W0o+jnCW+BU3+nX+SMB8GA1UdIwQY MBaAFOoSGSkthsqWOXuKi9JOCLGol8GjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmhJWktTMkd5cFk1ZTRxTDBrNElzYWlYd2FNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9jYmIyZTQtODhjMy00Y2MwLTk2NzUt Yzk4YTFiZGU2NDc2LzEvdHBFQkYxUTh6NWJTajZPY0piNEZUZjZkZjVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9jYmIyZTQtODhjMy00Y2MwLTk2NzUtYzk4YTFiZGU2NDc2 LzEvNmhJWktTMkd5cFk1ZTRxTDBrNElzYWlYd2FNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGlegAMA0G CSqGSIb3DQEBCwUAA4IBAQB75/1ccrftvqbKTCznkm1Bzym/AzYoHJeOYiU9gDVs CDXl8/8/C85PxBjghHI9EcAvB94QwKv7EJswfdwvDWyJaKLfM6AaFEJkvWhMShQM xjir9xi/JX82b690fjfytRUEHdunS/2QL3yWQGIuRiv82vFGdcIcLASkS/BuIIgn H9cOgghordZByjUvPmwnfr7porkUAQGKh+mp7yoilXXqbvh8+D33Om8Qvggsrm2k vuWKYDpJ3Kh+P4w7hnjbaxNlk3FXUBfWg5eKIIqpmFNPlstImJuVXOVEucPTUSm3 rqQyFkxrTuS5uJqveBi40KC6LJmwYI7BaEvyE6oMY72C -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:16 2026 by rpki-client