This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/TxCuEKO4UFBws6tMJ89yfNDgvSA.roa File: TxCuEKO4UFBws6tMJ89yfNDgvSA.roa (raw, json) Hash identifier: ye0le9kc8j89F6B3VF5KOiTRqH3PrXwEdQjOQuRJ7Js= Subject key identifier: 4F:10:AE:10:A3:B8:50:50:70:B3:AB:4C:27:CF:72:7C:D0:E0:BD:20 Certificate issuer: /CN=687b91eda16b6f1b1fa0175d67c7994f691d8e97 Certificate serial: 019B7D5B9BAADC2ABF6B746D3F4741DD9B97 Authority key identifier: 68:7B:91:ED:A1:6B:6F:1B:1F:A0:17:5D:67:C7:99:4F:69:1D:8E:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aHuR7aFrbxsfoBddZ8eZT2kdjpc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/TxCuEKO4UFBws6tMJ89yfNDgvSA.roa Signing time: Fri 02 Jan 2026 06:18:34 +0000 ROA not before: Fri 02 Jan 2026 06:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3170 IP address blocks: 91.103.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft rsync://rpki.ripe.net/repository/DEFAULT/aHuR7aFrbxsfoBddZ8eZT2kdjpc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:9b:aa:dc:2a:bf:6b:74:6d:3f:47:41:dd:9b:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=687b91eda16b6f1b1fa0175d67c7994f691d8e97 Validity Not Before: Jan 2 06:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f10ae10a3b8505070b3ab4c27cf727cd0e0bd20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ca:d0:40:f7:85:1b:84:b6:28:71:03:c4:03: 48:cc:33:0d:dc:13:19:1d:12:e1:b1:f8:d9:ee:96: 52:30:72:fa:d3:6e:7c:53:d8:8a:1e:ef:f4:35:c4: 0b:02:7a:8f:f7:d5:15:b8:a2:6a:65:91:34:90:de: e2:98:7d:de:53:46:e9:d7:ba:e0:0c:8f:e2:d3:5d: 5e:c5:14:fd:df:13:45:8d:b5:57:e5:76:5e:36:9e: 67:ea:32:77:00:8b:c6:22:98:ff:97:ef:dc:f6:fa: ad:54:ab:6a:a4:f2:3c:d5:71:18:a8:f8:a3:3d:6a: 57:14:b6:02:71:7a:37:4e:15:45:4f:05:3b:6a:62: 70:1e:bf:4b:86:6f:85:8b:6c:54:68:24:17:db:87: fd:49:48:19:83:f2:71:44:61:49:84:9d:3c:a8:be: 28:a9:9c:e3:90:be:3c:c2:ac:33:a9:18:39:08:a8: 8a:ea:53:c5:e7:53:30:b5:64:e3:b2:59:05:81:d5: 5a:26:83:2f:93:b8:54:45:9c:a5:4f:e2:40:72:59: e5:ea:e6:78:9b:86:2e:dc:35:68:e1:ca:f8:d8:a5: 30:b3:98:a2:dc:2b:1b:e5:aa:bf:6d:14:a9:92:1f: 95:09:15:79:24:5e:da:2d:77:14:e3:f2:86:a2:00: 2c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:10:AE:10:A3:B8:50:50:70:B3:AB:4C:27:CF:72:7C:D0:E0:BD:20 X509v3 Authority Key Identifier: keyid:68:7B:91:ED:A1:6B:6F:1B:1F:A0:17:5D:67:C7:99:4F:69:1D:8E:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHuR7aFrbxsfoBddZ8eZT2kdjpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/TxCuEKO4UFBws6tMJ89yfNDgvSA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.103.143.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:3c:e2:49:42:2d:05:7e:ea:5d:f7:e6:cb:b0:7c:f1:55:59: 52:68:a4:50:07:82:67:0b:02:9d:99:cc:de:a9:4c:45:c0:bf: 49:a4:ce:02:29:92:c2:27:6f:4e:20:52:3b:63:f2:da:c4:9d: d9:38:25:26:b1:dc:8f:09:7a:68:b2:75:5f:4c:de:d7:16:62: 69:82:c5:8c:2e:2b:7f:66:9f:5d:e0:24:51:22:05:8d:dc:e3: 82:96:e7:39:04:fc:b8:80:8e:0d:be:4b:c7:11:46:fd:cb:27: 37:95:c6:8b:3e:28:d1:d4:54:19:f8:58:2e:20:8a:4a:1f:c8: 0c:37:10:2c:21:8c:ad:1b:88:08:68:9b:c3:40:cd:03:63:3c: 4a:6b:95:b6:57:1b:c0:fb:34:b8:d3:41:90:c5:36:6e:9c:01: 1a:22:9c:11:d0:e5:08:ae:5a:ee:7c:7d:b1:70:a4:fa:14:19: b4:a3:b8:0d:ee:96:ef:c2:4a:79:75:e0:0f:e0:9f:42:24:e3: d3:4d:33:69:6c:62:72:0d:07:97:3d:87:91:97:7d:57:40:15: 9f:a3:57:53:01:c2:38:55:0b:55:0b:d0:ed:ad:71:5e:11:cd: a8:65:b8:4c:0c:5c:a9:0f:59:73:49:09:ab:85:d4:4e:bc:9c: 3a:01:b1:53 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W5uq3Cq/a3RtP0dB3ZuXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4N2I5MWVkYTE2YjZmMWIxZmEwMTc1ZDY3Yzc5OTRmNjkx ZDhlOTcwHhcNMjYwMTAyMDYxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjEwYWUxMGEzYjg1MDUwNzBiM2FiNGMyN2NmNzI3Y2QwZTBiZDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8rQQPeFG4S2KHEDxANIzDMN3BMZ HRLhsfjZ7pZSMHL60258U9iKHu/0NcQLAnqP99UVuKJqZZE0kN7imH3eU0bp17rg DI/i011exRT93xNFjbVX5XZeNp5n6jJ3AIvGIpj/l+/c9vqtVKtqpPI81XEYqPij PWpXFLYCcXo3ThVFTwU7amJwHr9Lhm+Fi2xUaCQX24f9SUgZg/JxRGFJhJ08qL4o qZzjkL48wqwzqRg5CKiK6lPF51MwtWTjslkFgdVaJoMvk7hURZylT+JAclnl6uZ4 m4Yu3DVo4cr42KUws5ii3Csb5aq/bRSpkh+VCRV5JF7aLXcU4/KGogAszQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE8QrhCjuFBQcLOrTCfPcnzQ4L0gMB8GA1UdIwQY MBaAFGh7ke2ha28bH6AXXWfHmU9pHY6XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUh1UjdhRnJieHNmb0JkZFo4ZVpUMmtkanBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8yZmI4ZGYtMGU0OC00NjY1LWE5OWIt ZGZmZTU5MDIzZTg5LzEvVHhDdUVLTzRVRkJ3czZ0TUo4OXlmTkRndlNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8yZmI4ZGYtMGU0OC00NjY1LWE5OWItZGZmZTU5MDIzZTg5 LzEvYUh1UjdhRnJieHNmb0JkZFo4ZVpUMmtkanBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW2ePMA0G CSqGSIb3DQEBCwUAA4IBAQCdPOJJQi0Ffupd9+bLsHzxVVlSaKRQB4JnCwKdmcze qUxFwL9JpM4CKZLCJ29OIFI7Y/LaxJ3ZOCUmsdyPCXposnVfTN7XFmJpgsWMLit/ Zp9d4CRRIgWN3OOCluc5BPy4gI4NvkvHEUb9yyc3lcaLPijR1FQZ+FguIIpKH8gM NxAsIYytG4gIaJvDQM0DYzxKa5W2VxvA+zS400GQxTZunAEaIpwR0OUIrlrufH2x cKT6FBm0o7gN7pbvwkp5deAP4J9CJOPTTTNpbGJyDQeXPYeRl31XQBWfo1dTAcI4 VQtVC9DtrXFeEc2oZbhMDFypD1lzSQmrhdROvJw6AbFT -----END CERTIFICATE-----Generated at Sun Jan 25 11:41:58 2026 by rpki-client