This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/tl9JmYqZuc8rnWm5B3tF-CPUxEg.roa File: tl9JmYqZuc8rnWm5B3tF-CPUxEg.roa (raw, json) Hash identifier: ti/VYS4hognsUWtb/PVfBo1Uhz2rYc5vy7DleprVf/Y= Subject key identifier: B6:5F:49:99:8A:99:B9:CF:2B:9D:69:B9:07:7B:45:F8:23:D4:C4:48 Certificate issuer: /CN=880d8ab6aa2c72f079755f76cf0120aa5dddc7df Certificate serial: 019B7F825BECEF593C07F857D1CEF4C22DF4 Authority key identifier: 88:0D:8A:B6:AA:2C:72:F0:79:75:5F:76:CF:01:20:AA:5D:DD:C7:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iA2KtqoscvB5dV92zwEgql3dx98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/tl9JmYqZuc8rnWm5B3tF-CPUxEg.roa Signing time: Fri 02 Jan 2026 16:20:08 +0000 ROA not before: Fri 02 Jan 2026 16:20:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35319 IP address blocks: 91.222.36.0/22 maxlen: 22 91.226.44.0/23 maxlen: 23 185.137.216.0/23 maxlen: 23 185.137.218.0/23 maxlen: 23 185.181.16.0/22 maxlen: 22 185.252.92.0/22 maxlen: 22 195.140.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.mft rsync://rpki.ripe.net/repository/DEFAULT/iA2KtqoscvB5dV92zwEgql3dx98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:5b:ec:ef:59:3c:07:f8:57:d1:ce:f4:c2:2d:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=880d8ab6aa2c72f079755f76cf0120aa5dddc7df Validity Not Before: Jan 2 16:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b65f49998a99b9cf2b9d69b9077b45f823d4c448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:09:23:ac:19:d0:1c:3d:f1:a4:71:2f:13:a2: d3:f4:70:eb:5f:0e:7c:a9:98:99:1e:b8:61:48:58: c5:5f:91:0a:71:c8:e2:62:e5:ec:23:4c:f5:6f:fd: 7e:c2:16:1f:8c:ad:57:25:7c:5a:18:fe:87:c1:9f: 5f:a9:0c:d5:8b:00:01:6f:5e:11:e7:f4:3d:e5:56: ba:08:ec:41:46:99:df:61:eb:39:d6:72:37:00:21: ba:bb:77:f9:8f:f7:3c:50:23:1c:b4:45:f0:18:74: 5c:45:59:43:e3:b4:6f:d7:2a:4e:a7:42:6c:d4:c8: d4:36:d2:4b:95:ca:ee:34:cc:99:59:f4:99:ad:36: 03:76:d7:3c:f8:9e:3c:9f:0f:7f:f0:94:fe:a1:59: dd:b6:ab:d5:5b:13:bf:c5:33:2c:4d:4d:3e:e2:4d: e7:e6:5d:e6:c9:6d:ca:58:6c:e2:d5:99:51:f5:69: 06:08:12:5b:dc:2b:4c:97:61:49:fd:80:f5:21:75: cb:70:2c:1a:f6:a0:c6:ff:79:1b:03:73:00:c6:07: 2c:0d:6c:58:99:66:d7:e4:53:de:c1:60:8f:c8:4e: 39:c5:2e:05:ed:ba:4c:27:98:db:fb:46:37:46:70: 20:ef:2a:12:27:77:96:e8:7c:63:69:f0:b2:7c:b6: 92:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:5F:49:99:8A:99:B9:CF:2B:9D:69:B9:07:7B:45:F8:23:D4:C4:48 X509v3 Authority Key Identifier: keyid:88:0D:8A:B6:AA:2C:72:F0:79:75:5F:76:CF:01:20:AA:5D:DD:C7:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iA2KtqoscvB5dV92zwEgql3dx98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/tl9JmYqZuc8rnWm5B3tF-CPUxEg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.222.36.0/22 91.226.44.0/23 185.137.216.0/22 185.181.16.0/22 185.252.92.0/22 195.140.160.0/22 Signature Algorithm: sha256WithRSAEncryption 44:ce:a3:f3:a6:0f:82:82:74:f1:09:1a:59:6e:64:3d:de:f9: 50:1e:84:65:c7:56:36:6e:d2:29:90:a1:da:76:b8:d3:53:ad: a8:f6:b6:01:0d:76:6c:8e:b7:04:ce:7f:72:4c:cf:d2:14:9f: d4:25:b4:da:39:36:cb:5c:b3:92:1b:0e:90:b6:51:46:cc:78: ee:90:42:66:ea:9e:41:40:44:67:3f:11:a2:02:af:9c:83:18: 87:1a:c8:91:fb:cf:30:e5:f8:d3:30:b1:4d:b7:24:39:bb:fa: a9:25:ed:ee:70:68:2d:ea:9d:40:d2:24:73:38:da:23:b6:dd: 85:77:bf:16:42:fe:07:a9:5a:f2:c7:5c:7e:1b:e5:4b:1c:ae: 74:d9:e5:04:e5:d4:ae:ed:eb:9c:38:98:a1:44:5a:83:7a:47: 2a:a2:5c:85:49:be:ac:a5:d8:29:0e:18:45:9b:32:cc:c1:3d: b7:0c:37:e4:b9:cb:31:08:2c:1f:ba:7b:1a:9c:93:ac:f8:07: f9:f8:0c:4a:2e:b9:ed:b2:8a:cd:79:f1:d6:66:1d:e8:89:34: e3:2d:c1:44:bd:65:6d:56:47:84:98:6b:ac:63:c3:95:aa:53: a7:97:bf:39:a9:4b:48:ca:1d:de:34:ed:86:cf:8d:bc:4f:58: 3a:70:b9:62 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt/glvs71k8B/hX0c70wi30MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MGQ4YWI2YWEyYzcyZjA3OTc1NWY3NmNmMDEyMGFhNWRk ZGM3ZGYwHhcNMjYwMTAyMTYyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjVmNDk5OThhOTliOWNmMmI5ZDY5YjkwNzdiNDVmODIzZDRjNDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAkjrBnQHD3xpHEvE6LT9HDrXw58 qZiZHrhhSFjFX5EKccjiYuXsI0z1b/1+whYfjK1XJXxaGP6HwZ9fqQzViwABb14R 5/Q95Va6COxBRpnfYes51nI3ACG6u3f5j/c8UCMctEXwGHRcRVlD47Rv1ypOp0Js 1MjUNtJLlcruNMyZWfSZrTYDdtc8+J48nw9/8JT+oVndtqvVWxO/xTMsTU0+4k3n 5l3myW3KWGzi1ZlR9WkGCBJb3CtMl2FJ/YD1IXXLcCwa9qDG/3kbA3MAxgcsDWxY mWbX5FPewWCPyE45xS4F7bpMJ5jb+0Y3RnAg7yoSJ3eW6HxjafCyfLaS7QIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFLZfSZmKmbnPK51puQd7Rfgj1MRIMB8GA1UdIwQY MBaAFIgNiraqLHLweXVfds8BIKpd3cffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUEyS3Rxb3NjdkI1ZFY5Mnp3RWdxbDNkeDk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9jODRjZDMtNjcyYi00NGIyLThjZTAt NDAyODk0NzlhYzA1LzEvdGw5Sm1ZcVp1YzhybldtNUIzdEYtQ1BVeEVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9jODRjZDMtNjcyYi00NGIyLThjZTAtNDAyODk0NzlhYzA1 LzEvaUEyS3Rxb3NjdkI1ZFY5Mnp3RWdxbDNkeDk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCW94kAwQB W+IsAwQCuYnYAwQCubUQAwQCufxcAwQCw4ygMA0GCSqGSIb3DQEBCwUAA4IBAQBE zqPzpg+CgnTxCRpZbmQ93vlQHoRlx1Y2btIpkKHadrjTU62o9rYBDXZsjrcEzn9y TM/SFJ/UJbTaOTbLXLOSGw6QtlFGzHjukEJm6p5BQERnPxGiAq+cgxiHGsiR+88w 5fjTMLFNtyQ5u/qpJe3ucGgt6p1A0iRzONojtt2Fd78WQv4HqVryx1x+G+VLHK50 2eUE5dSu7eucOJihRFqDekcqolyFSb6spdgpDhhFmzLMwT23DDfkucsxCCwfunsa nJOs+Af5+AxKLrntsorNefHWZh3oiTTjLcFEvWVtVkeEmGusY8OVqlOnl785qUtI yh3eNO2Gz428T1g6cLli -----END CERTIFICATE-----Generated at Mon Jan 26 06:33:19 2026 by rpki-client