This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/tauHtMalszupNYYuBs8Guj0KLFg.roa File: tauHtMalszupNYYuBs8Guj0KLFg.roa (raw, json) Hash identifier: gc2v8u+MqnwJxcknut+JafkulUVpld8Kb67/cVdhhLw= Subject key identifier: B5:AB:87:B4:C6:A5:B3:3B:A9:35:86:2E:06:CF:06:BA:3D:0A:2C:58 Certificate issuer: /CN=7f42d27c21da86c7e9fbf44ae0e56c98f3d2f80b Certificate serial: 019B7F835D3456544DE784CDF1C09234B993 Authority key identifier: 7F:42:D2:7C:21:DA:86:C7:E9:FB:F4:4A:E0:E5:6C:98:F3:D2:F8:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/tauHtMalszupNYYuBs8Guj0KLFg.roa Signing time: Fri 02 Jan 2026 16:21:14 +0000 ROA not before: Fri 02 Jan 2026 16:21:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198127 IP address blocks: 193.150.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:5d:34:56:54:4d:e7:84:cd:f1:c0:92:34:b9:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f42d27c21da86c7e9fbf44ae0e56c98f3d2f80b Validity Not Before: Jan 2 16:21:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5ab87b4c6a5b33ba935862e06cf06ba3d0a2c58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:30:77:5e:0a:dc:ff:09:f3:a5:44:8d:7a:94: 0f:13:ce:e3:f6:51:49:e0:f4:16:66:6b:0e:fc:66: d3:ec:66:87:d8:52:05:cd:85:67:a2:0c:b3:07:d5: 93:de:dc:6b:f8:64:07:1b:83:01:82:35:7c:5b:63: ca:76:df:d9:77:5a:01:8d:10:b6:b8:3d:eb:ac:f7: 7d:1c:a7:92:4e:1e:e6:e9:d0:cb:13:23:56:2b:e3: 23:c3:99:21:9b:cf:34:ba:d0:ba:72:fe:8e:84:b8: f5:55:b9:60:ce:a4:fb:81:da:6b:6b:6d:78:b0:30: 81:96:e6:b0:e9:46:8e:5a:de:27:21:bd:e4:df:4a: 12:31:c0:66:3f:17:04:fd:a1:72:58:f1:b3:c3:9f: 61:2b:dd:26:43:9c:f1:13:02:f0:fd:d2:68:1f:b4: d8:8e:1d:f6:c4:3e:80:b5:8b:20:99:67:0c:4a:95: d6:77:60:bc:86:19:54:f1:d6:19:b7:65:53:0d:a0: 31:ef:99:ca:d1:f0:ee:44:7d:10:a6:1e:50:0d:04: 8c:0c:9e:c8:2b:78:0b:c5:cc:90:7f:56:4c:68:a6: 30:ce:3b:9f:3a:4a:25:d3:d2:02:ba:3d:ec:ea:f2: 49:80:01:25:22:5c:b9:a5:bf:71:e9:5e:f8:96:44: c6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:AB:87:B4:C6:A5:B3:3B:A9:35:86:2E:06:CF:06:BA:3D:0A:2C:58 X509v3 Authority Key Identifier: keyid:7F:42:D2:7C:21:DA:86:C7:E9:FB:F4:4A:E0:E5:6C:98:F3:D2:F8:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/tauHtMalszupNYYuBs8Guj0KLFg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.150.67.0/24 Signature Algorithm: sha256WithRSAEncryption 44:8c:a2:f3:35:d2:a5:2c:c1:eb:ab:14:d7:92:40:d6:86:5b: 0b:9e:e2:ae:56:1d:c6:dc:58:f6:1a:3d:0d:d6:57:f1:af:13: c3:0d:62:7c:fb:04:17:32:b3:64:dc:d8:16:b8:7a:29:18:33: fd:16:1d:6b:88:eb:b1:bd:5e:83:30:f7:7c:67:2c:07:7c:8a: 03:7c:5e:25:20:2d:b6:bc:a6:58:2e:99:8b:af:ef:36:01:63: 3f:06:1d:13:58:8a:57:da:b0:e4:60:c5:9b:4a:9d:25:cc:e6: 53:2e:b4:51:0d:d4:1f:a1:3f:01:83:35:12:d9:65:d2:70:1a: 95:75:3c:5b:5d:ca:1a:15:17:b9:52:23:46:e3:a9:8f:0b:39: 77:b6:7d:d5:9f:97:ce:dc:5c:19:0e:b3:29:9f:b7:ca:af:61: ed:43:da:bc:e3:1e:8d:f6:7c:5e:d3:56:43:b9:84:06:74:ba: f6:75:87:ee:09:e4:6e:37:b1:a8:8b:26:e3:03:5c:26:3a:c1: 49:ed:3f:d6:ba:08:6d:52:e1:c8:27:e6:a7:af:8f:28:33:8a: ec:eb:65:c8:fa:80:90:a1:c8:fb:6e:0b:e5:21:c3:64:28:d4: 66:73:c3:7e:99:1b:db:a6:d6:91:d4:b3:2e:7a:86:bc:4a:2d: f4:8e:9b:c7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g100VlRN54TN8cCSNLmTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNDJkMjdjMjFkYTg2YzdlOWZiZjQ0YWUwZTU2Yzk4ZjNk MmY4MGIwHhcNMjYwMTAyMTYyMTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNWFiODdiNGM2YTViMzNiYTkzNTg2MmUwNmNmMDZiYTNkMGEyYzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zB3Xgrc/wnzpUSNepQPE87j9lFJ 4PQWZmsO/GbT7GaH2FIFzYVnogyzB9WT3txr+GQHG4MBgjV8W2PKdt/Zd1oBjRC2 uD3rrPd9HKeSTh7m6dDLEyNWK+Mjw5khm880utC6cv6OhLj1VblgzqT7gdpra214 sDCBluaw6UaOWt4nIb3k30oSMcBmPxcE/aFyWPGzw59hK90mQ5zxEwLw/dJoH7TY jh32xD6AtYsgmWcMSpXWd2C8hhlU8dYZt2VTDaAx75nK0fDuRH0Qph5QDQSMDJ7I K3gLxcyQf1ZMaKYwzjufOkol09ICuj3s6vJJgAElIly5pb9x6V74lkTGOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLWrh7TGpbM7qTWGLgbPBro9CixYMB8GA1UdIwQY MBaAFH9C0nwh2obH6fv0SuDlbJjz0vgLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjBMU2ZDSGFoc2ZwLV9SSzRPVnNtUFBTLUFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS85OGIwMjQtOWQ4Zi00ODY5LWEyYTkt MGFmYjdjM2ZiZjMwLzEvdGF1SHRNYWxzenVwTllZdUJzOEd1ajBLTEZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS85OGIwMjQtOWQ4Zi00ODY5LWEyYTktMGFmYjdjM2ZiZjMw LzEvZjBMU2ZDSGFoc2ZwLV9SSzRPVnNtUFBTLUFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwZZDMA0G CSqGSIb3DQEBCwUAA4IBAQBEjKLzNdKlLMHrqxTXkkDWhlsLnuKuVh3G3Fj2Gj0N 1lfxrxPDDWJ8+wQXMrNk3NgWuHopGDP9Fh1riOuxvV6DMPd8ZywHfIoDfF4lIC22 vKZYLpmLr+82AWM/Bh0TWIpX2rDkYMWbSp0lzOZTLrRRDdQfoT8BgzUS2WXScBqV dTxbXcoaFRe5UiNG46mPCzl3tn3Vn5fO3FwZDrMpn7fKr2HtQ9q84x6N9nxe01ZD uYQGdLr2dYfuCeRuN7GoiybjA1wmOsFJ7T/WughtUuHIJ+anr48oM4rs62XI+oCQ ocj7bgvlIcNkKNRmc8N+mRvbptaR1LMueoa8Si30jpvH -----END CERTIFICATE-----Generated at Sun Jan 25 18:07:54 2026 by rpki-client