This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/TtaP6JfXDKbAy87VtT56iEAP4y0.roa File: TtaP6JfXDKbAy87VtT56iEAP4y0.roa (raw, json) Hash identifier: WTyZjg5Ogn+1j9tDQoiFgmcnNDHHyAoH2gmIFizZkZg= Subject key identifier: 4E:D6:8F:E8:97:D7:0C:A6:C0:CB:CE:D5:B5:3E:7A:88:40:0F:E3:2D Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21 Certificate serial: 019B7F15059BFE30B127099DA091E1FCC8E7 Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/TtaP6JfXDKbAy87VtT56iEAP4y0.roa Signing time: Fri 02 Jan 2026 14:20:42 +0000 ROA not before: Fri 02 Jan 2026 14:20:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204834 IP address blocks: 81.12.92.0/23 maxlen: 23 81.12.92.0/24 maxlen: 24 81.12.93.0/24 maxlen: 24 87.107.94.0/23 maxlen: 23 87.107.94.0/24 maxlen: 24 87.107.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:05:9b:fe:30:b1:27:09:9d:a0:91:e1:fc:c8:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21 Validity Not Before: Jan 2 14:20:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ed68fe897d70ca6c0cbced5b53e7a88400fe32d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c8:ec:fa:42:6f:a1:92:47:93:a7:64:39:48: f7:70:4f:78:3a:ec:21:69:67:ae:3f:b9:05:cd:1a: 9c:f8:2b:83:03:99:72:0a:00:15:e3:cf:06:b6:46: 7f:67:1f:66:58:04:75:94:4b:20:7d:85:d3:48:df: 00:39:8a:cb:d1:8f:c5:72:7a:d8:cc:79:9a:14:bd: fb:9e:66:e7:b9:4a:37:78:99:78:e1:bf:dd:5e:28: f6:22:56:9a:e4:5e:12:80:fe:50:1a:53:fd:bc:59: 69:1d:1f:b1:f0:94:c1:5a:ea:62:42:c3:75:b7:9f: be:01:8e:2a:da:8d:24:53:8b:cc:90:71:07:56:c9: 8b:bc:80:b6:eb:9b:0a:50:5b:95:b4:d8:0c:b7:bb: cf:85:a9:31:1b:11:d2:09:7c:4e:d1:06:86:1a:f0: ae:67:c0:0c:0b:7b:64:2c:d4:e3:4b:0a:55:6f:02: 6a:db:20:4f:94:0c:a2:50:0c:b3:46:5c:be:21:68: e5:14:e6:fc:c5:0a:d3:b5:53:04:18:5c:49:52:26: 1c:a6:81:10:a8:c7:f0:0c:e9:89:c5:51:29:02:91: 40:3a:f2:2a:c9:75:7e:1c:e7:89:3d:4c:f2:ff:60: 9c:4b:a8:13:d0:88:42:15:ed:96:2a:e9:4c:fa:17: 64:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:D6:8F:E8:97:D7:0C:A6:C0:CB:CE:D5:B5:3E:7A:88:40:0F:E3:2D X509v3 Authority Key Identifier: keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/TtaP6JfXDKbAy87VtT56iEAP4y0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.12.92.0/23 87.107.94.0/23 Signature Algorithm: sha256WithRSAEncryption 5c:e6:94:f0:0f:57:31:16:d9:77:4f:d2:a9:bc:f8:28:49:d8: da:e4:79:ea:2b:78:d6:87:18:06:0c:6e:59:4a:51:d3:31:b3: e0:a1:24:f3:85:d2:c1:49:59:ce:a6:65:dd:ae:06:c7:54:50: 38:ae:45:db:a4:ce:7d:9c:2c:7b:65:99:cf:81:60:e5:1e:12: 3e:df:95:51:ed:b8:e8:4f:03:84:38:69:af:5d:a9:f1:85:b4: 02:35:d7:b6:dc:f7:b1:bf:27:36:f9:d6:6d:df:c0:b8:51:1a: 4c:6d:66:6b:49:19:b4:96:5b:2c:b6:6c:f1:ea:4f:a8:90:ae: af:ad:1b:ed:4d:37:52:86:43:b8:31:6f:2b:e1:ca:d2:d5:d3: fb:ec:5b:10:49:c5:6e:dc:f0:32:29:dc:4b:2b:36:11:03:25: cf:e9:e1:2f:31:f1:ac:1e:dd:9e:ed:de:31:c3:6e:b4:a5:ab: 21:85:e2:8f:1f:b8:5f:e1:c5:46:5b:66:c0:a2:ca:1d:d4:c2: ca:04:b6:1b:ff:a9:15:48:76:03:74:68:b8:54:d3:3b:eb:be: 81:bd:74:62:5c:71:20:25:68:ff:7c:ea:09:e2:9c:f4:bf:b7: 0d:2f:fc:76:a8:a9:42:7c:f7:d8:95:ed:7d:d1:1f:08:e4:99: 65:34:6d:e5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FQWb/jCxJwmdoJHh/MjnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk ZDVjMjEwHhcNMjYwMTAyMTQyMDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZWQ2OGZlODk3ZDcwY2E2YzBjYmNlZDViNTNlN2E4ODQwMGZlMzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cjs+kJvoZJHk6dkOUj3cE94Ouwh aWeuP7kFzRqc+CuDA5lyCgAV488GtkZ/Zx9mWAR1lEsgfYXTSN8AOYrL0Y/FcnrY zHmaFL37nmbnuUo3eJl44b/dXij2Ilaa5F4SgP5QGlP9vFlpHR+x8JTBWupiQsN1 t5++AY4q2o0kU4vMkHEHVsmLvIC265sKUFuVtNgMt7vPhakxGxHSCXxO0QaGGvCu Z8AMC3tkLNTjSwpVbwJq2yBPlAyiUAyzRly+IWjlFOb8xQrTtVMEGFxJUiYcpoEQ qMfwDOmJxVEpApFAOvIqyXV+HOeJPUzy/2CcS6gT0IhCFe2WKulM+hdkZQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFE7Wj+iX1wymwMvO1bU+eohAD+MtMB8GA1UdIwQY MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt NzZiMzNlNGNlODIxLzEvVHRhUDZKZlhES2JBeTg3VnRUNTZpRUFQNHkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBUQxcAwQB V2teMA0GCSqGSIb3DQEBCwUAA4IBAQBc5pTwD1cxFtl3T9KpvPgoSdja5HnqK3jW hxgGDG5ZSlHTMbPgoSTzhdLBSVnOpmXdrgbHVFA4rkXbpM59nCx7ZZnPgWDlHhI+ 35VR7bjoTwOEOGmvXanxhbQCNde23Pexvyc2+dZt38C4URpMbWZrSRm0llsstmzx 6k+okK6vrRvtTTdShkO4MW8r4crS1dP77FsQScVu3PAyKdxLKzYRAyXP6eEvMfGs Ht2e7d4xw260pashheKPH7hf4cVGW2bAosod1MLKBLYb/6kVSHYDdGi4VNM7676B vXRiXHEgJWj/fOoJ4pz0v7cNL/x2qKlCfPfYle190R8I5JllNG3l -----END CERTIFICATE-----Generated at Mon Jan 26 01:00:31 2026 by rpki-client