This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/tgcSQjToKsm4-YGSiDfcWYZhpbU.roa File: tgcSQjToKsm4-YGSiDfcWYZhpbU.roa (raw, json) Hash identifier: jQsd//3nMw1gFGp/WUoLZhQMWtbF0WEPkEozSmNp65o= Subject key identifier: B6:07:12:42:34:E8:2A:C9:B8:F9:81:92:88:37:DC:59:86:61:A5:B5 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78345792A0D33BA94F5044832BC23083 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/tgcSQjToKsm4-YGSiDfcWYZhpbU.roa Signing time: Thu 01 Jan 2026 06:17:34 +0000 ROA not before: Thu 01 Jan 2026 06:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39651 IP address blocks: 193.180.247.0/24 maxlen: 24 193.234.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:57:92:a0:d3:3b:a9:4f:50:44:83:2b:c2:30:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b607124234e82ac9b8f981928837dc598661a5b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3e:ed:7a:85:83:f1:85:22:7b:e1:a1:19:08: c8:a0:0a:b8:b1:f4:ab:f7:57:5f:ae:26:f5:b5:41: ad:75:ec:07:3f:fb:da:72:5a:e7:a4:d9:a8:b0:2c: 84:b3:f2:ef:61:50:e2:be:9e:35:0f:ba:44:75:8d: e6:fc:7a:9c:46:20:a3:73:47:5b:17:a5:f9:2d:c6: 36:9c:84:d6:21:eb:75:75:a1:c8:0b:f7:25:1f:9d: c3:85:1b:3a:f5:c2:e7:e6:07:ca:7c:a7:84:dc:62: aa:54:c5:78:8c:f2:51:e6:3e:c9:98:62:0d:2f:e2: 52:40:9a:7a:5d:28:7f:ee:ce:e0:3e:ea:4f:d3:cf: 8a:81:33:15:85:81:0a:2a:0c:0f:99:3d:53:19:37: e6:c0:7b:3f:be:1a:56:f7:97:d8:21:e7:15:49:e0: 3c:ba:29:e1:96:69:50:d1:d9:be:f9:01:dd:ac:ff: fa:7f:78:78:36:87:12:21:f0:1f:d3:be:60:64:a2: 27:59:7d:23:41:cd:b1:ed:67:45:83:c7:39:0c:63: b8:b5:ee:0c:7d:40:f4:4f:ed:84:3b:c2:90:0b:0a: b2:49:2b:d8:9d:dc:03:69:a1:55:a4:12:4c:0e:d9: 12:22:d1:53:82:72:b6:9f:5a:83:0d:10:6b:c2:73: 47:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:07:12:42:34:E8:2A:C9:B8:F9:81:92:88:37:DC:59:86:61:A5:B5 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/tgcSQjToKsm4-YGSiDfcWYZhpbU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.180.247.0/24 193.234.87.0/24 Signature Algorithm: sha256WithRSAEncryption 04:0c:b0:61:44:63:c0:91:68:8c:a3:06:40:28:8b:90:46:17: 24:b6:67:7a:37:54:59:c6:97:1c:4c:dd:55:f8:32:89:e4:12: 3a:7f:25:16:21:6b:7c:5c:ee:ca:1e:79:30:a6:10:0e:e4:99: 45:b7:ae:cd:be:98:11:e3:ae:2e:79:d5:ce:1b:c9:73:06:92: 3c:f3:dc:9a:3c:33:77:ae:1a:16:29:97:7a:29:ea:e9:a2:52: 9d:00:b5:ac:f1:1c:c8:18:34:3a:24:16:db:68:36:b2:3d:8e: ab:c0:05:c8:c2:e7:0c:90:ff:b5:23:01:2a:e5:aa:0a:13:35: 80:9c:8e:ad:e1:96:9a:2c:57:3d:74:d7:5f:57:5c:ab:da:eb: 0f:5c:0f:30:8f:dc:1b:fe:a4:60:eb:52:49:05:2e:2c:aa:8c: 06:56:ba:45:33:ca:56:4c:73:24:3c:06:05:46:7d:47:8e:e3: 27:e6:9d:66:6f:cc:1c:6c:32:92:30:39:40:3b:47:7a:77:22: 52:b8:fe:ab:1e:c4:6d:6d:9f:1b:46:a6:4f:17:70:0e:89:50: d4:fd:b0:fe:11:f8:0c:9c:6a:23:70:17:02:d0:b4:bb:93:83: e2:0a:21:cf:b6:c1:a7:bb:75:43:f9:12:5a:b4:b4:47:b7:05: 82:b4:ad:fe -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NFeSoNM7qU9QRIMrwjCDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjA3MTI0MjM0ZTgyYWM5YjhmOTgxOTI4ODM3ZGM1OTg2NjFhNWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxT7teoWD8YUie+GhGQjIoAq4sfSr 91dfrib1tUGtdewHP/vaclrnpNmosCyEs/LvYVDivp41D7pEdY3m/HqcRiCjc0db F6X5LcY2nITWIet1daHIC/clH53DhRs69cLn5gfKfKeE3GKqVMV4jPJR5j7JmGIN L+JSQJp6XSh/7s7gPupP08+KgTMVhYEKKgwPmT1TGTfmwHs/vhpW95fYIecVSeA8 uinhlmlQ0dm++QHdrP/6f3h4NocSIfAf075gZKInWX0jQc2x7WdFg8c5DGO4te4M fUD0T+2EO8KQCwqySSvYndwDaaFVpBJMDtkSItFTgnK2n1qDDRBrwnNH4QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLYHEkI06CrJuPmBkog33FmGYaW1MB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvdGdjU1FqVG9Lc200LVlHU2lEZmNXWVpocGJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwbT3AwQA wepXMA0GCSqGSIb3DQEBCwUAA4IBAQAEDLBhRGPAkWiMowZAKIuQRhcktmd6N1RZ xpccTN1V+DKJ5BI6fyUWIWt8XO7KHnkwphAO5JlFt67NvpgR464uedXOG8lzBpI8 89yaPDN3rhoWKZd6KerpolKdALWs8RzIGDQ6JBbbaDayPY6rwAXIwucMkP+1IwEq 5aoKEzWAnI6t4ZaaLFc9dNdfV1yr2usPXA8wj9wb/qRg61JJBS4sqowGVrpFM8pW THMkPAYFRn1HjuMn5p1mb8wcbDKSMDlAO0d6dyJSuP6rHsRtbZ8bRqZPF3AOiVDU /bD+EfgMnGojcBcC0LS7k4PiCiHPtsGnu3VD+RJatLRHtwWCtK3+ -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:25 2026 by rpki-client