This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/TJgG5JgLQBCuHjTc6SCRX0Gwecs.roa File: TJgG5JgLQBCuHjTc6SCRX0Gwecs.roa (raw, json) Hash identifier: sbP+Ctp1kLffFP2dFlRcWQm0kZSgtgHBUAs9I18M36w= Subject key identifier: 4C:98:06:E4:98:0B:40:10:AE:1E:34:DC:E9:20:91:5F:41:B0:79:CB Certificate issuer: /CN=d19317d27239dc7b0d54133be1aa65c9dc01f434 Certificate serial: 019B7A5B521FE5FD75E90E1ABD7CA50CA815 Authority key identifier: D1:93:17:D2:72:39:DC:7B:0D:54:13:3B:E1:AA:65:C9:DC:01:F4:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/TJgG5JgLQBCuHjTc6SCRX0Gwecs.roa Signing time: Thu 01 Jan 2026 16:19:23 +0000 ROA not before: Thu 01 Jan 2026 16:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48642 IP address blocks: 91.197.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:52:1f:e5:fd:75:e9:0e:1a:bd:7c:a5:0c:a8:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d19317d27239dc7b0d54133be1aa65c9dc01f434 Validity Not Before: Jan 1 16:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c9806e4980b4010ae1e34dce920915f41b079cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:70:66:fe:82:4f:1a:64:92:33:ff:b2:55:7d: fa:1f:28:5d:69:2b:1b:76:03:23:a6:11:c1:0f:c4: d1:da:c2:3a:0c:43:f4:1d:cf:1f:40:b9:62:2e:49: 58:f8:0b:9c:1a:e9:2e:c4:28:57:91:65:c1:0a:0c: 0b:0d:fb:f1:82:d7:74:24:25:3c:44:72:0e:f6:dc: 80:47:08:f7:01:4d:66:09:87:be:e0:4f:19:76:00: 62:82:40:4a:1f:3b:92:9b:16:e9:e1:b0:1d:3b:48: fd:30:7c:fe:ef:a4:af:0b:73:6d:99:f6:07:93:0f: 5e:7f:92:2a:d9:aa:68:be:b0:61:3c:e3:71:27:c9: 5b:b4:da:70:78:be:b3:0f:74:50:15:a7:3f:65:06: be:31:73:79:cb:20:97:71:9f:ca:e3:62:c7:89:75: f4:64:8d:2c:d2:c3:6b:92:16:78:67:95:85:ab:9b: 59:db:78:7b:fc:a6:1c:c0:87:0a:7a:89:07:fb:52: 44:46:da:ce:14:bc:80:f2:69:00:68:50:0e:a5:cf: 1a:52:56:8e:ae:3a:a1:bf:f7:7f:90:8a:64:3b:77: 61:d8:17:0f:e1:e0:27:b3:26:46:7f:14:1f:42:10: 45:7f:47:ba:41:24:16:cf:45:26:e3:52:65:7e:e2: 91:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:98:06:E4:98:0B:40:10:AE:1E:34:DC:E9:20:91:5F:41:B0:79:CB X509v3 Authority Key Identifier: keyid:D1:93:17:D2:72:39:DC:7B:0D:54:13:3B:E1:AA:65:C9:DC:01:F4:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/TJgG5JgLQBCuHjTc6SCRX0Gwecs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.197.204.0/22 Signature Algorithm: sha256WithRSAEncryption 08:0d:60:93:36:49:a8:83:06:3d:3b:e6:be:81:14:5d:cb:78: cc:f0:30:b4:a4:05:75:6e:67:87:4f:7b:e2:d0:9f:8c:b4:ed: 82:06:13:d5:0e:db:5f:33:42:20:73:4c:48:e9:c6:18:ab:41: fb:e4:19:1d:c3:ab:bf:b9:3b:0f:06:a1:85:eb:96:ac:21:82: 1f:9b:ca:33:4a:53:42:c3:70:01:fe:20:6e:f4:b7:f1:da:4d: 9c:bf:d9:07:82:1b:07:37:33:51:fe:ba:52:94:2f:4c:a7:8d: 13:1b:33:09:8a:50:c2:85:2a:02:d4:c9:4f:32:d4:ef:df:81: 3d:e9:a7:6a:6e:e6:74:ef:7f:34:c7:7b:7a:1d:c5:f3:ec:cd: c6:bd:d1:5b:4d:5a:b5:96:ae:62:6c:d3:32:f1:6e:57:74:1d: 4b:2e:06:62:c1:dd:bc:df:b7:bb:d9:c2:06:06:c5:7c:69:89: 78:e9:ad:ea:a7:5a:46:c6:7d:ef:56:28:4f:ba:cd:fa:bc:96: 5b:16:6d:b8:e2:34:01:17:44:93:20:3d:70:3f:70:f8:c2:71: 4e:24:9e:7d:ef:df:d2:38:86:ce:cf:d4:d6:51:32:fc:35:45: 75:94:c9:db:df:70:de:7a:c8:f7:e2:2d:3f:1d:a9:8e:f4:e7: 5d:19:8e:b9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W1If5f116Q4avXylDKgVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxOTMxN2QyNzIzOWRjN2IwZDU0MTMzYmUxYWE2NWM5ZGMw MWY0MzQwHhcNMjYwMTAxMTYxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Yzk4MDZlNDk4MGI0MDEwYWUxZTM0ZGNlOTIwOTE1ZjQxYjA3OWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnBm/oJPGmSSM/+yVX36HyhdaSsb dgMjphHBD8TR2sI6DEP0Hc8fQLliLklY+AucGukuxChXkWXBCgwLDfvxgtd0JCU8 RHIO9tyARwj3AU1mCYe+4E8ZdgBigkBKHzuSmxbp4bAdO0j9MHz+76SvC3NtmfYH kw9ef5Iq2apovrBhPONxJ8lbtNpweL6zD3RQFac/ZQa+MXN5yyCXcZ/K42LHiXX0 ZI0s0sNrkhZ4Z5WFq5tZ23h7/KYcwIcKeokH+1JERtrOFLyA8mkAaFAOpc8aUlaO rjqhv/d/kIpkO3dh2BcP4eAnsyZGfxQfQhBFf0e6QSQWz0Um41JlfuKR4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEyYBuSYC0AQrh403OkgkV9BsHnLMB8GA1UdIwQY MBaAFNGTF9JyOdx7DVQTO+GqZcncAfQ0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFpNWDBuSTUzSHNOVkJNNzRhcGx5ZHdCOURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lNzFlMmUtOTU0Mi00ODljLTliZmYt ZTZkOTU4OGNlN2U3LzEvVEpnRzVKZ0xRQkN1SGpUYzZTQ1JYMEd3ZWNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9lNzFlMmUtOTU0Mi00ODljLTliZmYtZTZkOTU4OGNlN2U3 LzEvMFpNWDBuSTUzSHNOVkJNNzRhcGx5ZHdCOURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW8XMMA0G CSqGSIb3DQEBCwUAA4IBAQAIDWCTNkmogwY9O+a+gRRdy3jM8DC0pAV1bmeHT3vi 0J+MtO2CBhPVDttfM0Igc0xI6cYYq0H75Bkdw6u/uTsPBqGF65asIYIfm8ozSlNC w3AB/iBu9Lfx2k2cv9kHghsHNzNR/rpSlC9Mp40TGzMJilDChSoC1MlPMtTv34E9 6adqbuZ07380x3t6HcXz7M3GvdFbTVq1lq5ibNMy8W5XdB1LLgZiwd2837e72cIG BsV8aYl46a3qp1pGxn3vVihPus36vJZbFm244jQBF0STID1wP3D4wnFOJJ5979/S OIbOz9TWUTL8NUV1lMnb33Deesj34i0/HamO9OddGY65 -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:11 2026 by rpki-client