This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/tm-0BywjpYQ_JdG102XSdl2PwkI.roa File: tm-0BywjpYQ_JdG102XSdl2PwkI.roa (raw, json) Hash identifier: DKW7dfG1+ENLwCJlJJ+O62vn9P7SrAjIIPIC1AGnTVc= Subject key identifier: B6:6F:B4:07:2C:23:A5:84:3F:25:D1:B5:D3:65:D2:76:5D:8F:C2:42 Certificate issuer: /CN=bbd351b274fc23a42728303638a0d62b606401b4 Certificate serial: 019B797EFF97F17931F4B47C6B53509FA1B3 Authority key identifier: BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/tm-0BywjpYQ_JdG102XSdl2PwkI.roa Signing time: Thu 01 Jan 2026 12:18:44 +0000 ROA not before: Thu 01 Jan 2026 12:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12657 IP address blocks: 212.72.64.0/19 maxlen: 19 212.102.160.0/19 maxlen: 19 213.131.192.0/19 maxlen: 19 2001:1578::/29 maxlen: 40 2001:1578::/32 maxlen: 40 2001:1578::/48 maxlen: 48 2001:1578:ff::/48 maxlen: 48 2001:1579::/32 maxlen: 48 2001:1579::/48 maxlen: 48 2001:1579:1::/48 maxlen: 48 2001:1579:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:ff:97:f1:79:31:f4:b4:7c:6b:53:50:9f:a1:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbd351b274fc23a42728303638a0d62b606401b4 Validity Not Before: Jan 1 12:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b66fb4072c23a5843f25d1b5d365d2765d8fc242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e5:34:0d:32:20:3d:55:08:dc:09:7e:19:50: c3:54:d4:c2:9d:d4:1f:07:03:8d:fc:47:9a:41:a6: fe:f1:28:3b:cc:f2:49:c1:86:6f:7c:f1:d1:f7:91: 0c:3e:35:2f:fe:c1:5e:dd:79:90:1a:1e:ed:8b:29: f4:a1:d8:2b:eb:fd:15:24:84:fc:94:08:22:2e:86: f3:0f:5f:33:d3:23:59:6f:98:04:67:b9:71:4d:44: 89:07:5e:56:73:fd:ba:3c:84:46:d3:85:0d:5c:34: 54:d8:53:2e:b3:2d:1b:11:c0:3d:3b:57:c2:9e:17: 2f:d4:67:9e:fb:21:14:09:7f:d0:52:aa:09:20:be: 59:88:d8:f6:c4:99:90:17:c8:3e:0a:0a:63:0d:d5: e8:83:99:5e:24:34:a6:c7:2f:b1:b0:a3:7c:c2:33: 46:75:ed:0a:e8:70:fd:1f:14:90:47:39:8a:ac:2f: 25:82:c2:8c:08:e9:58:45:3d:ef:0a:43:fe:0b:d0: f6:33:a0:96:d1:19:c8:43:e4:4b:18:74:98:18:d0: 89:97:8e:46:f6:d4:99:87:10:bb:fb:52:90:76:9b: f1:c1:be:44:4f:11:3b:33:2b:4a:c0:63:fe:f6:da: 5e:89:43:87:2f:ef:67:f0:f4:df:ad:70:7a:4f:fe: ba:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:6F:B4:07:2C:23:A5:84:3F:25:D1:B5:D3:65:D2:76:5D:8F:C2:42 X509v3 Authority Key Identifier: keyid:BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/tm-0BywjpYQ_JdG102XSdl2PwkI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.72.64.0/19 212.102.160.0/19 213.131.192.0/19 IPv6: 2001:1578::/29 Signature Algorithm: sha256WithRSAEncryption 1f:e3:7a:38:f3:a0:4d:86:ea:0b:10:2b:b5:24:ad:d5:37:c3: c9:1a:cb:74:fe:34:8e:15:44:70:fa:22:f0:f2:6a:db:5d:c7: 53:3f:15:4c:e3:8e:67:6c:15:4b:4c:96:87:12:f2:96:21:99: 4f:b5:eb:24:7f:b4:91:e9:7b:0e:d5:2e:0a:2e:b8:d9:03:52: 39:db:e6:4e:5f:d2:1d:39:40:1d:77:18:64:58:b7:28:8f:e7: eb:32:cd:cc:d0:18:b8:90:4a:69:2c:fa:7e:2b:2d:d9:34:91: a2:66:02:4e:28:dd:26:fa:09:9e:ff:90:ed:02:19:0d:9e:5e: de:cc:5e:e7:cd:20:f1:d8:eb:bb:a8:a6:04:74:0a:f8:22:63: c5:f1:8e:03:cb:a4:86:24:2e:63:34:7b:e6:76:f5:61:4b:14: 19:4f:1b:17:49:87:6a:33:f9:98:7b:cb:75:9c:03:bb:4e:9e: 74:86:cb:6e:fc:0f:e3:01:06:71:33:69:44:f3:bb:5f:8b:cc: ae:5d:74:17:4f:27:3f:42:10:07:3b:93:3f:7b:d8:d6:89:03: c2:a8:be:a2:68:82:ac:15:57:ad:bc:df:7c:12:8b:42:85:d7: 3b:83:df:b5:5a:de:5f:9e:6a:92:07:59:e8:e9:a6:c5:87:d4: fa:2f:5b:7b -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt5fv+X8Xkx9LR8a1NQn6GzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZDM1MWIyNzRmYzIzYTQyNzI4MzAzNjM4YTBkNjJiNjA2 NDAxYjQwHhcNMjYwMTAxMTIxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjZmYjQwNzJjMjNhNTg0M2YyNWQxYjVkMzY1ZDI3NjVkOGZjMjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+U0DTIgPVUI3Al+GVDDVNTCndQf BwON/EeaQab+8Sg7zPJJwYZvfPHR95EMPjUv/sFe3XmQGh7tiyn0odgr6/0VJIT8 lAgiLobzD18z0yNZb5gEZ7lxTUSJB15Wc/26PIRG04UNXDRU2FMusy0bEcA9O1fC nhcv1Gee+yEUCX/QUqoJIL5ZiNj2xJmQF8g+CgpjDdXog5leJDSmxy+xsKN8wjNG de0K6HD9HxSQRzmKrC8lgsKMCOlYRT3vCkP+C9D2M6CW0RnIQ+RLGHSYGNCJl45G 9tSZhxC7+1KQdpvxwb5ETxE7MytKwGP+9tpeiUOHL+9n8PTfrXB6T/66TwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFLZvtAcsI6WEPyXRtdNl0nZdj8JCMB8GA1UdIwQY MBaAFLvTUbJ0/COkJygwNjig1itgZAG0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTlOUnNuVDhJNlFuS0RBMk9LRFdLMkJrQWJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jMWY5MGEtMmJhZC00MWI0LWIxYTYt NDZiMzAyOGEwM2IwLzEvdG0tMEJ5d2pwWVFfSmRHMTAyWFNkbDJQd2tJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9jMWY5MGEtMmJhZC00MWI0LWIxYTYtNDZiMzAyOGEwM2Iw LzEvdTlOUnNuVDhJNlFuS0RBMk9LRFdLMkJrQWJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQF1EhAAwQF 1GagAwQF1YPAMA0EAgACMAcDBQMgARV4MA0GCSqGSIb3DQEBCwUAA4IBAQAf43o4 86BNhuoLECu1JK3VN8PJGst0/jSOFURw+iLw8mrbXcdTPxVM445nbBVLTJaHEvKW IZlPteskf7SR6XsO1S4KLrjZA1I52+ZOX9IdOUAddxhkWLcoj+frMs3M0Bi4kEpp LPp+Ky3ZNJGiZgJOKN0m+gme/5DtAhkNnl7ezF7nzSDx2Ou7qKYEdAr4ImPF8Y4D y6SGJC5jNHvmdvVhSxQZTxsXSYdqM/mYe8t1nAO7Tp50hstu/A/jAQZxM2lE87tf i8yuXXQXTyc/QhAHO5M/e9jWiQPCqL6iaIKsFVetvN98EotChdc7g9+1Wt5fnmqS B1no6abFh9T6L1t7 -----END CERTIFICATE-----Generated at Mon Jan 26 21:18:50 2026 by rpki-client