This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/Txh89yPjR6ydaZe76t-4uzulsaE.roa File: Txh89yPjR6ydaZe76t-4uzulsaE.roa (raw, json) Hash identifier: wsaPFra5sogbcbp0OAAr/F2nwvL7a15+JUCBMqiVROI= Subject key identifier: 4F:18:7C:F7:23:E3:47:AC:9D:69:97:BB:EA:DF:B8:BB:3B:A5:B1:A1 Certificate issuer: /CN=68cef722dabe5975ca4f9ba8616388ec6c656a20 Certificate serial: 019B7DC9B7138C4434A999ADD8741ADD0212 Authority key identifier: 68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/Txh89yPjR6ydaZe76t-4uzulsaE.roa Signing time: Fri 02 Jan 2026 08:18:50 +0000 ROA not before: Fri 02 Jan 2026 08:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203259 IP address blocks: 91.240.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:b7:13:8c:44:34:a9:99:ad:d8:74:1a:dd:02:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68cef722dabe5975ca4f9ba8616388ec6c656a20 Validity Not Before: Jan 2 08:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f187cf723e347ac9d6997bbeadfb8bb3ba5b1a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:74:59:31:d4:8a:7a:53:7a:93:b5:74:31:83: 6a:50:b2:4f:bc:fa:61:e4:19:c3:af:33:51:74:7c: c0:f1:07:9e:43:e3:44:2d:7e:df:37:0e:91:e6:f6: 80:75:26:6a:92:12:4c:e8:bd:3d:3f:8c:5c:56:20: 99:cd:45:2d:ff:96:7c:37:e8:66:d3:b7:0b:e4:77: 9e:7d:ff:66:9f:d2:e4:c2:19:cd:79:7b:1b:44:61: 0c:01:de:98:3a:a6:7f:26:40:86:3f:0f:a7:11:e2: 5c:f5:3c:61:ff:12:3c:5f:ff:29:da:f5:56:6e:33: 15:c7:6a:25:c6:46:36:71:c4:66:d8:e7:d9:26:dc: ed:e2:db:21:ed:45:45:42:c7:6a:a6:44:0d:c0:00: 67:4b:15:2e:17:6d:69:a5:26:81:29:95:68:db:17: 53:bb:2c:da:b9:ad:b7:5f:cb:73:ab:d0:5b:b3:1b: 27:b8:3c:58:4d:cd:41:6c:c8:8c:2e:89:b1:88:7d: b7:24:6e:25:01:94:fc:ac:fb:a3:b9:05:16:41:9d: 44:17:03:c3:25:bd:63:6a:27:1e:cf:66:15:91:3e: eb:9c:9b:8c:c6:49:af:91:4c:98:bc:ab:12:26:52: 81:c3:53:a7:9b:77:78:93:22:72:c3:82:63:25:6d: 02:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:18:7C:F7:23:E3:47:AC:9D:69:97:BB:EA:DF:B8:BB:3B:A5:B1:A1 X509v3 Authority Key Identifier: keyid:68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/Txh89yPjR6ydaZe76t-4uzulsaE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.240.232.0/24 Signature Algorithm: sha256WithRSAEncryption 46:82:cf:9e:14:ee:a9:40:3e:5e:34:1d:00:7a:f8:81:5f:91: 5b:e5:f5:02:83:81:6c:bb:20:cf:19:a4:d1:ab:d1:08:76:c3: 81:4b:94:9b:c3:87:3f:75:54:68:57:59:4a:63:9e:a9:0b:71: 61:91:83:99:ba:df:4f:3a:62:85:b9:55:9d:1f:e0:87:a6:4c: 4e:84:b8:0b:af:7d:cc:c0:13:ad:07:9c:45:1f:23:d4:6c:9a: 0e:80:bf:b2:4b:1c:72:0f:83:fc:16:02:8d:8e:fa:49:4d:66: d3:46:11:37:ca:79:83:86:e6:de:6d:20:8d:cd:ea:a8:33:94: ef:9f:7d:19:7d:8d:26:9c:09:6c:06:d2:6e:6d:74:73:98:8d: 0f:41:11:b5:77:9d:fb:46:b1:2a:d7:08:df:ab:cf:d8:18:eb: 36:77:b3:c9:fd:82:db:24:7c:d9:92:c7:b6:c1:3a:2b:e6:ab: 8b:8a:c3:72:20:79:69:bd:06:67:30:cf:65:63:ce:70:d2:13: 5c:8a:72:08:04:2b:6f:86:43:08:8a:a7:3e:04:0f:3d:50:36: 41:9e:be:da:f6:b9:38:c6:b1:b5:19:e4:3e:41:43:88:dd:95: 1b:7c:06:50:fa:b5:fd:9a:78:3a:5d:22:5a:74:90:9d:ff:e5: 2d:d7:04:12 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ybcTjEQ0qZmt2HQa3QISMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4Y2VmNzIyZGFiZTU5NzVjYTRmOWJhODYxNjM4OGVjNmM2 NTZhMjAwHhcNMjYwMTAyMDgxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjE4N2NmNzIzZTM0N2FjOWQ2OTk3YmJlYWRmYjhiYjNiYTViMWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXRZMdSKelN6k7V0MYNqULJPvPph 5BnDrzNRdHzA8QeeQ+NELX7fNw6R5vaAdSZqkhJM6L09P4xcViCZzUUt/5Z8N+hm 07cL5Heeff9mn9LkwhnNeXsbRGEMAd6YOqZ/JkCGPw+nEeJc9Txh/xI8X/8p2vVW bjMVx2olxkY2ccRm2OfZJtzt4tsh7UVFQsdqpkQNwABnSxUuF21ppSaBKZVo2xdT uyzaua23X8tzq9BbsxsnuDxYTc1BbMiMLomxiH23JG4lAZT8rPujuQUWQZ1EFwPD Jb1jaicez2YVkT7rnJuMxkmvkUyYvKsSJlKBw1Onm3d4kyJyw4JjJW0CUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE8YfPcj40esnWmXu+rfuLs7pbGhMB8GA1UdIwQY MBaAFGjO9yLavll1yk+bqGFjiOxsZWogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU03M0l0cS1XWFhLVDV1b1lXT0k3R3hsYWlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi83OTBjMTUtMjA1OC00YzM5LTkwY2It Y2Q2NzdhYjQzMWFhLzEvVHhoODl5UGpSNnlkYVplNzZ0LTR1enVsc2FFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi83OTBjMTUtMjA1OC00YzM5LTkwY2ItY2Q2NzdhYjQzMWFh LzEvYU03M0l0cS1XWFhLVDV1b1lXT0k3R3hsYWlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/DoMA0G CSqGSIb3DQEBCwUAA4IBAQBGgs+eFO6pQD5eNB0AeviBX5Fb5fUCg4FsuyDPGaTR q9EIdsOBS5Sbw4c/dVRoV1lKY56pC3FhkYOZut9POmKFuVWdH+CHpkxOhLgLr33M wBOtB5xFHyPUbJoOgL+ySxxyD4P8FgKNjvpJTWbTRhE3ynmDhubebSCNzeqoM5Tv n30ZfY0mnAlsBtJubXRzmI0PQRG1d537RrEq1wjfq8/YGOs2d7PJ/YLbJHzZkse2 wTor5quLisNyIHlpvQZnMM9lY85w0hNcinIIBCtvhkMIiqc+BA89UDZBnr7a9rk4 xrG1GeQ+QUOI3ZUbfAZQ+rX9mng6XSJadJCd/+Ut1wQS -----END CERTIFICATE-----Generated at Mon Jan 26 08:40:01 2026 by rpki-client