This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/TXBfEq-bhV4ePw8hLBP6UCEQEtg.roa File: TXBfEq-bhV4ePw8hLBP6UCEQEtg.roa (raw, json) Hash identifier: gEbc+tVQGYMxTiSiJNGO8DDQrrsZOyqWJhw0Dv/aKqE= Subject key identifier: 4D:70:5F:12:AF:9B:85:5E:1E:3F:0F:21:2C:13:FA:50:21:10:12:D8 Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143 Certificate serial: 019B7B3672133B8F55B53E75914817B5EA6F Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/TXBfEq-bhV4ePw8hLBP6UCEQEtg.roa Signing time: Thu 01 Jan 2026 20:18:44 +0000 ROA not before: Thu 01 Jan 2026 20:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7155 IP address blocks: 185.4.88.0/22 maxlen: 24 193.92.8.0/22 maxlen: 24 194.219.218.0/23 maxlen: 24 213.16.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:72:13:3b:8f:55:b5:3e:75:91:48:17:b5:ea:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143 Validity Not Before: Jan 1 20:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d705f12af9b855e1e3f0f212c13fa50211012d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6e:f4:77:dd:70:8d:54:b1:84:5e:e3:78:d6: 04:71:42:9f:a6:e6:ee:91:49:1f:4e:2d:ea:df:fe: f1:8d:79:91:25:90:d9:7e:7c:7e:fd:10:b8:d3:9c: 67:f3:01:9b:1a:36:3c:24:32:d2:bc:87:66:e7:e0: 4f:14:98:fc:06:3f:b9:73:f9:c8:a8:e8:d8:aa:07: 58:a3:1d:34:5c:9f:85:23:99:e7:b8:35:df:76:47: 63:84:90:f6:55:60:12:f6:7e:06:d9:56:93:b5:48: 4c:05:31:f2:27:e2:0a:e4:34:c0:2c:ab:30:1a:e8: 7d:39:ae:5e:e9:b9:d4:21:54:4c:da:a4:7c:47:81: 70:37:df:36:87:6f:6c:c2:83:d6:5d:eb:8a:81:28: 66:17:30:30:d7:4c:de:8a:4e:63:84:9b:f3:a7:3c: 23:e2:1e:a1:d5:79:20:bc:91:77:b3:8d:e7:cc:78: 77:e7:87:1a:f5:4d:c9:c2:64:f7:e3:3d:0c:f3:44: 62:e3:ef:01:25:6c:36:34:5a:ae:ea:7e:90:47:02: f8:df:c2:0e:c1:55:ee:1a:a6:e4:17:a9:e8:ea:e7: a9:6a:3a:43:d1:6e:21:97:4c:1c:c6:be:16:ef:6a: d9:3f:5d:ef:ec:da:e6:1a:2a:e4:81:a2:e9:64:d5: 2f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:70:5F:12:AF:9B:85:5E:1E:3F:0F:21:2C:13:FA:50:21:10:12:D8 X509v3 Authority Key Identifier: keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/TXBfEq-bhV4ePw8hLBP6UCEQEtg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.4.88.0/22 193.92.8.0/22 194.219.218.0/23 213.16.192.0/20 Signature Algorithm: sha256WithRSAEncryption aa:37:5b:42:2c:5d:85:9f:88:72:9f:9d:e4:1f:08:79:4e:90: d0:4a:93:75:a6:d8:d0:8f:74:4a:40:be:ee:30:1d:0b:cd:92: 59:b9:02:41:92:a8:27:7e:48:f7:cc:a4:de:8a:25:52:0d:d4: 76:ab:d5:97:16:29:72:46:6a:b5:d4:f2:d6:54:22:96:90:b6: 88:5f:2b:7b:0a:2a:39:44:0a:3d:3d:e4:02:56:5f:8e:e5:c4: 42:4d:b5:eb:b9:83:f5:e6:20:75:cd:e2:c4:9e:c4:e2:2a:b6: d8:9a:03:95:b4:51:29:b9:12:2c:ef:0d:8c:bc:96:8b:3e:4f: a0:38:ac:50:70:c0:f1:8c:ad:4e:03:f1:56:51:a9:d0:7c:2e: 11:cc:d3:e6:6f:5d:8d:24:bf:85:eb:ab:9e:99:b6:41:5b:24: 33:d0:52:5f:2f:d6:26:93:32:0c:85:e4:95:9b:29:cd:a2:60: e4:17:fe:1c:d3:78:53:af:3e:98:9a:9c:f5:db:96:0a:f6:f6: 5f:8f:70:6b:10:dc:c0:e5:fe:c5:1b:d2:dd:e1:31:b1:19:c8: 54:9c:5c:5a:fa:18:86:08:29:83:1f:be:44:a8:8c:62:ea:0b: da:4c:3b:18:85:bb:d6:6a:ba:84:b1:b8:e8:6a:bd:51:c9:25: 86:a3:cd:32 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt7NnITO49VtT51kUgXtepvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZmYyYzYyMjlhZjc2M2E5OWY1MzQ5YTMyNTEwZGY0YTQ1 MjYxNDMwHhcNMjYwMTAxMjAxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDcwNWYxMmFmOWI4NTVlMWUzZjBmMjEyYzEzZmE1MDIxMTAxMmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyW70d91wjVSxhF7jeNYEcUKfpubu kUkfTi3q3/7xjXmRJZDZfnx+/RC405xn8wGbGjY8JDLSvIdm5+BPFJj8Bj+5c/nI qOjYqgdYox00XJ+FI5nnuDXfdkdjhJD2VWAS9n4G2VaTtUhMBTHyJ+IK5DTALKsw Guh9Oa5e6bnUIVRM2qR8R4FwN982h29swoPWXeuKgShmFzAw10zeik5jhJvzpzwj 4h6h1XkgvJF3s43nzHh354ca9U3JwmT34z0M80Ri4+8BJWw2NFqu6n6QRwL438IO wVXuGqbkF6no6uepajpD0W4hl0wcxr4W72rZP13v7NrmGirkgaLpZNUvZQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFE1wXxKvm4VeHj8PISwT+lAhEBLYMB8GA1UdIwQY MBaAFPD/LGIpr3Y6mfU0mjJRDfSkUmFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYt ZTY5ZjdhNWQyZDkwLzEvVFhCZkVxLWJoVjRlUHc4aExCUDZVQ0VRRXRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYtZTY5ZjdhNWQyZDkw LzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCuQRYAwQC wVwIAwQBwtvaAwQE1RDAMA0GCSqGSIb3DQEBCwUAA4IBAQCqN1tCLF2Fn4hyn53k Hwh5TpDQSpN1ptjQj3RKQL7uMB0LzZJZuQJBkqgnfkj3zKTeiiVSDdR2q9WXFily Rmq11PLWVCKWkLaIXyt7Cio5RAo9PeQCVl+O5cRCTbXruYP15iB1zeLEnsTiKrbY mgOVtFEpuRIs7w2MvJaLPk+gOKxQcMDxjK1OA/FWUanQfC4RzNPmb12NJL+F66ue mbZBWyQz0FJfL9YmkzIMheSVmynNomDkF/4c03hTrz6Ympz125YK9vZfj3BrENzA 5f7FG9Ld4TGxGchUnFxa+hiGCCmDH75EqIxi6gvaTDsYhbvWarqEsbjoar1RySWG o80y -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:23 2026 by rpki-client