This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/tg82jIBHH5LcgWYYM7zJbYrlVt0.roa File: tg82jIBHH5LcgWYYM7zJbYrlVt0.roa (raw, json) Hash identifier: n6rCSA1xOIDb4YmG15TQjoYexybekFDUsJodZaNLnM4= Subject key identifier: B6:0F:36:8C:80:47:1F:92:DC:81:66:18:33:BC:C9:6D:8A:E5:56:DD Certificate issuer: /CN=271d84369c155055ad9bd5b471558d3fa7b109d2 Certificate serial: 019B7DCAD6516FBEB807357F78C362D22DDA Authority key identifier: 27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/tg82jIBHH5LcgWYYM7zJbYrlVt0.roa Signing time: Fri 02 Jan 2026 08:20:03 +0000 ROA not before: Fri 02 Jan 2026 08:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198785 IP address blocks: 185.155.216.0/24 maxlen: 24 185.155.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:d6:51:6f:be:b8:07:35:7f:78:c3:62:d2:2d:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=271d84369c155055ad9bd5b471558d3fa7b109d2 Validity Not Before: Jan 2 08:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b60f368c80471f92dc81661833bcc96d8ae556dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e0:26:dc:8d:e4:c6:1c:f2:77:4a:e6:a4:eb: ed:c6:3b:b9:d3:fe:5b:5d:d0:75:6e:6e:cf:37:47: 78:9a:0f:2a:da:88:72:bc:14:4f:a2:ec:64:48:db: f8:8d:04:18:6b:17:4c:97:e7:56:e6:8b:25:ee:ce: ff:7c:af:59:61:75:d3:4f:b5:1c:c9:ed:10:f9:a8: 29:7c:cd:07:1c:30:14:bd:cc:a8:ef:76:97:13:65: 95:2e:d2:64:ae:91:8e:25:d9:41:c3:d2:4d:3a:74: 87:51:41:d0:62:94:ae:52:5a:21:32:c6:b7:7a:87: 2a:14:16:28:07:43:c5:35:de:1f:5b:82:c9:4b:50: 0e:1f:26:54:60:de:19:8d:e5:95:d4:eb:d1:79:8c: 14:c1:9f:82:a2:62:56:2a:5f:af:7c:4f:1c:f3:4f: 10:f8:80:01:ab:24:f3:2f:90:9e:51:0c:de:a5:8f: 71:83:86:a8:1a:1a:71:2f:4a:51:4f:c5:55:c5:1a: a1:e7:1f:87:64:1d:10:7c:fc:42:95:07:79:03:db: c5:02:c0:90:a3:40:2f:1c:51:d1:49:34:3c:17:a5: fa:1c:f7:2f:85:22:8a:6b:32:83:f5:10:d7:5d:3f: 5b:59:39:b9:87:fd:90:d1:d7:03:c5:e2:58:4d:56: 09:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:0F:36:8C:80:47:1F:92:DC:81:66:18:33:BC:C9:6D:8A:E5:56:DD X509v3 Authority Key Identifier: keyid:27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/tg82jIBHH5LcgWYYM7zJbYrlVt0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.155.216.0/23 Signature Algorithm: sha256WithRSAEncryption 3c:e6:cf:80:3a:cc:d0:7e:63:6e:95:9c:08:ec:ee:6b:c5:40: 82:15:29:42:f9:e0:37:a5:78:8a:a4:ed:1a:df:64:73:17:60: c4:3d:65:3e:0e:0d:ef:16:49:d0:87:98:77:ac:3a:59:14:af: 3d:be:5b:bd:89:5b:70:d7:8a:78:53:72:4c:28:18:0a:54:1a: 34:8b:c9:68:a5:1d:1c:ee:8a:27:88:59:1d:b3:2b:9b:75:f8: 9a:39:b6:23:14:85:a8:ee:4a:ec:ae:6c:ec:41:eb:3d:3b:b7: f1:b2:86:be:1e:8e:a9:ff:af:86:53:85:43:de:db:d2:38:2f: 31:0c:2d:af:f9:d0:75:3b:0a:4a:77:27:d7:18:1c:5c:79:bc: 27:a0:e5:4b:9d:2a:6d:35:c5:45:bd:23:7b:f0:90:86:6a:b6: 6c:83:14:b6:aa:6b:17:51:9a:13:67:53:a0:75:ed:ff:a3:79: ee:9a:27:2f:24:e3:26:61:c9:d0:a0:fc:ec:db:ec:c7:03:f5: 40:d0:7b:e1:29:6e:18:0e:6b:0d:6c:eb:9c:e0:91:90:75:d2: 36:d4:bc:ca:49:83:ed:52:45:fe:66:fd:a2:72:fa:70:44:8a: 97:d6:62:0b:8c:5c:e6:50:44:87:a6:a0:f1:65:d8:26:0b:b4: 98:52:41:f0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ytZRb764BzV/eMNi0i3aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MWQ4NDM2OWMxNTUwNTVhZDliZDViNDcxNTU4ZDNmYTdi MTA5ZDIwHhcNMjYwMTAyMDgyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjBmMzY4YzgwNDcxZjkyZGM4MTY2MTgzM2JjYzk2ZDhhZTU1NmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuAm3I3kxhzyd0rmpOvtxju50/5b XdB1bm7PN0d4mg8q2ohyvBRPouxkSNv4jQQYaxdMl+dW5osl7s7/fK9ZYXXTT7Uc ye0Q+agpfM0HHDAUvcyo73aXE2WVLtJkrpGOJdlBw9JNOnSHUUHQYpSuUlohMsa3 eocqFBYoB0PFNd4fW4LJS1AOHyZUYN4ZjeWV1OvReYwUwZ+ComJWKl+vfE8c808Q +IABqyTzL5CeUQzepY9xg4aoGhpxL0pRT8VVxRqh5x+HZB0QfPxClQd5A9vFAsCQ o0AvHFHRSTQ8F6X6HPcvhSKKazKD9RDXXT9bWTm5h/2Q0dcDxeJYTVYJ0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLYPNoyARx+S3IFmGDO8yW2K5VbdMB8GA1UdIwQY MBaAFCcdhDacFVBVrZvVtHFVjT+nsQnSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSngyRU5wd1ZVRld0bTlXMGNWV05QNmV4Q2RJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9hMzJhYmEtZTljNy00MGVhLTgxNjIt OTE0OTRhYzNiNmQ1LzEvdGc4MmpJQkhINUxjZ1dZWU03ekpiWXJsVnQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9hMzJhYmEtZTljNy00MGVhLTgxNjItOTE0OTRhYzNiNmQ1 LzEvSngyRU5wd1ZVRld0bTlXMGNWV05QNmV4Q2RJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuZvYMA0G CSqGSIb3DQEBCwUAA4IBAQA85s+AOszQfmNulZwI7O5rxUCCFSlC+eA3pXiKpO0a 32RzF2DEPWU+Dg3vFknQh5h3rDpZFK89vlu9iVtw14p4U3JMKBgKVBo0i8lopR0c 7ooniFkdsyubdfiaObYjFIWo7krsrmzsQes9O7fxsoa+Ho6p/6+GU4VD3tvSOC8x DC2v+dB1OwpKdyfXGBxcebwnoOVLnSptNcVFvSN78JCGarZsgxS2qmsXUZoTZ1Og de3/o3numicvJOMmYcnQoPzs2+zHA/VA0HvhKW4YDmsNbOuc4JGQddI21LzKSYPt UkX+Zv2icvpwRIqX1mILjFzmUESHpqDxZdgmC7SYUkHw -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:40 2026 by rpki-client