This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/ttShEhSFippZW2mlI_cMFuA1CNg.roa File: ttShEhSFippZW2mlI_cMFuA1CNg.roa (raw, json) Hash identifier: bXpk4WtzIL7RNvoOYrs7EBMG1GjbpYOMFtRXm7SQom8= Subject key identifier: B6:D4:A1:12:14:85:8A:9A:59:5B:69:A5:23:F7:0C:16:E0:35:08:D8 Certificate issuer: /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e Certificate serial: 019B7BA319EA2C7D64B2F567B9D8CFBB7785 Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/ttShEhSFippZW2mlI_cMFuA1CNg.roa Signing time: Thu 01 Jan 2026 22:17:25 +0000 ROA not before: Thu 01 Jan 2026 22:17:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25124 IP address blocks: 81.91.128.0/20 maxlen: 20 81.91.128.0/21 maxlen: 21 81.91.128.0/22 maxlen: 22 81.91.128.0/23 maxlen: 23 81.91.130.0/23 maxlen: 23 81.91.130.0/24 maxlen: 24 81.91.132.0/22 maxlen: 22 81.91.132.0/23 maxlen: 23 81.91.134.0/23 maxlen: 23 81.91.136.0/22 maxlen: 22 81.91.136.0/23 maxlen: 23 81.91.138.0/23 maxlen: 23 81.91.138.0/24 maxlen: 24 81.91.138.40/29 maxlen: 29 81.91.138.48/28 maxlen: 28 81.91.138.80/28 maxlen: 28 81.91.138.112/28 maxlen: 28 81.91.139.0/24 maxlen: 24 81.91.140.0/22 maxlen: 22 81.91.140.0/23 maxlen: 23 81.91.142.0/23 maxlen: 23 91.184.80.0/20 maxlen: 20 109.162.128.0/20 maxlen: 20 109.162.131.0/24 maxlen: 24 109.162.144.0/20 maxlen: 20 109.162.144.0/21 maxlen: 21 109.162.160.0/20 maxlen: 20 109.162.176.0/20 maxlen: 20 109.162.176.0/24 maxlen: 24 109.162.192.0/20 maxlen: 20 109.162.208.0/20 maxlen: 20 109.162.224.0/20 maxlen: 20 213.207.208.0/20 maxlen: 20 213.207.224.0/20 maxlen: 20 213.207.232.0/21 maxlen: 21 213.207.240.0/20 maxlen: 20 2a01:3c8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:19:ea:2c:7d:64:b2:f5:67:b9:d8:cf:bb:77:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e Validity Not Before: Jan 1 22:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b6d4a11214858a9a595b69a523f70c16e03508d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:16:c4:26:0b:8c:12:ca:2d:d0:fd:54:e8:11: ac:53:30:09:5b:dd:a2:53:34:52:d5:20:ae:4f:a4: bd:ee:ea:e8:bf:72:1c:ea:b6:04:9a:61:ea:00:8e: 96:94:af:c8:05:98:62:81:72:7c:e3:2f:61:2d:4d: 80:24:d4:ce:e7:f3:ee:ab:cd:f2:05:5e:c7:f1:34: 42:de:ff:55:4e:fb:d5:83:66:dd:00:68:2f:fc:e2: df:b8:46:08:2b:4a:12:cc:a1:e0:7e:69:aa:79:86: 8d:a5:90:41:ba:64:5b:4a:a6:eb:f9:9f:25:f6:71: 67:13:d1:63:8d:96:55:1a:cb:54:1c:b0:00:ec:3e: f6:2e:2f:32:62:6f:4e:65:0b:ae:88:0d:1d:fa:8f: 8f:33:4f:6e:bd:18:1d:72:bf:0b:cb:6e:84:a2:c9: e7:d9:fb:18:ed:48:f5:a1:ff:34:e5:92:66:f0:fa: a9:2b:54:53:9a:8b:0e:bd:89:69:0f:3f:7e:cc:96: fb:5a:af:9c:a5:97:9a:a8:5b:03:30:0a:12:d7:49: 2d:a3:dc:b7:59:92:a6:a4:4f:41:7b:0f:f4:80:46: 2f:b1:7f:18:64:6e:71:33:09:e8:e6:a8:cd:8c:75: 28:81:5e:9b:d5:26:04:b7:82:d4:bb:76:bd:6c:cf: 7a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:D4:A1:12:14:85:8A:9A:59:5B:69:A5:23:F7:0C:16:E0:35:08:D8 X509v3 Authority Key Identifier: keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/ttShEhSFippZW2mlI_cMFuA1CNg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.91.128.0/20 91.184.80.0/20 109.162.128.0-109.162.239.255 213.207.208.0-213.207.255.255 IPv6: 2a01:3c8::/32 Signature Algorithm: sha256WithRSAEncryption 23:6c:7f:8c:84:ec:e1:77:27:3a:c1:5b:ca:a9:15:f5:0e:ea: f8:b7:df:d7:ef:41:a9:de:52:81:b3:da:dc:aa:e4:d1:53:ab: f0:85:83:23:64:4c:59:df:61:29:d7:f6:53:4e:5d:9d:e4:18: c2:e7:67:2f:40:b2:e9:af:c3:6f:e2:95:71:98:bc:51:63:b8: 1c:9b:7a:7a:f3:54:f9:13:77:23:73:d1:0b:63:a8:b1:dd:a5: 66:4c:b2:4b:0c:34:f1:03:e0:b9:8c:23:80:77:7f:b5:52:82: 33:f6:96:e8:bb:2e:09:b0:fb:5d:68:cd:89:2b:05:fc:49:99: c1:fd:7e:d6:50:46:ee:b3:b2:74:6d:b2:23:01:c6:2d:6d:f4: eb:f0:34:30:09:69:04:e1:8c:ee:14:3f:32:bf:fb:fb:96:ca: 92:84:92:37:8f:12:79:df:93:f0:20:89:b7:72:81:9a:92:f6: f2:9d:09:a5:fe:29:f8:0e:c7:9d:24:8d:ef:e2:0c:7e:1c:d7: 83:f9:4f:aa:16:5f:55:d3:87:c9:5d:98:f2:b9:db:bf:ee:93: 16:38:1f:29:11:ff:28:e9:f9:b6:c8:b5:b8:3d:df:3e:67:c8: cc:18:75:73:7b:a4:e9:bf:15:65:fd:68:bb:de:c6:f0:bb:80: 69:da:da:dd -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt7oxnqLH1ksvVnudjPu3eFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDc0ZmJiYmFlNThkZDA4NzZkOTllODBlYzgyYTExYTQ0 NzdmN2UwHhcNMjYwMTAxMjIxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNmQ0YTExMjE0ODU4YTlhNTk1YjY5YTUyM2Y3MGMxNmUwMzUwOGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxbEJguMEsot0P1U6BGsUzAJW92i UzRS1SCuT6S97urov3Ic6rYEmmHqAI6WlK/IBZhigXJ84y9hLU2AJNTO5/Puq83y BV7H8TRC3v9VTvvVg2bdAGgv/OLfuEYIK0oSzKHgfmmqeYaNpZBBumRbSqbr+Z8l 9nFnE9FjjZZVGstUHLAA7D72Li8yYm9OZQuuiA0d+o+PM09uvRgdcr8Ly26Eosnn 2fsY7Uj1of805ZJm8PqpK1RTmosOvYlpDz9+zJb7Wq+cpZeaqFsDMAoS10kto9y3 WZKmpE9Bew/0gEYvsX8YZG5xMwno5qjNjHUogV6b1SYEt4LUu3a9bM960wIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFLbUoRIUhYqaWVtppSP3DBbgNQjYMB8GA1UdIwQY MBaAFE3XT7u65Y3Qh22Z6A7IKhGkR39+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZjVmNTctZTgyOC00YmNmLThkMmIt OGVhYjdmNGZlNzdlLzEvdHRTaEVoU0ZpcHBaVzJtbElfY01GdUExQ05nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85ZjVmNTctZTgyOC00YmNmLThkMmItOGVhYjdmNGZlNzdl LzEvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjAtBAIAATAnAwQEUVuAAwQE W7hQMAwDBAdtooADBARtouAwCwMEBNXP0AMDBNXAMA0EAgACMAcDBQAqAQPIMA0G CSqGSIb3DQEBCwUAA4IBAQAjbH+MhOzhdyc6wVvKqRX1Dur4t9/X70Gp3lKBs9rc quTRU6vwhYMjZExZ32Ep1/ZTTl2d5BjC52cvQLLpr8Nv4pVxmLxRY7gcm3p681T5 E3cjc9ELY6ix3aVmTLJLDDTxA+C5jCOAd3+1UoIz9pbouy4JsPtdaM2JKwX8SZnB /X7WUEbus7J0bbIjAcYtbfTr8DQwCWkE4YzuFD8yv/v7lsqShJI3jxJ535PwIIm3 coGakvbynQml/in4DsedJI3v4gx+HNeD+U+qFl9V04fJXZjyudu/7pMWOB8pEf8o 6fm2yLW4Pd8+Z8jMGHVze6TpvxVl/Wi73sbwu4Bp2trd -----END CERTIFICATE-----Generated at Mon Jan 26 10:23:14 2026 by rpki-client