This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/tpWKu4eR85JDF7KBw26Iwlu6TT4.roa File: tpWKu4eR85JDF7KBw26Iwlu6TT4.roa (raw, json) Hash identifier: B1xUcL+NqVQqUGxQDr0OwK307/1nuKUDqaxBQpOKHPE= Subject key identifier: B6:95:8A:BB:87:91:F3:92:43:17:B2:81:C3:6E:88:C2:5B:BA:4D:3E Certificate issuer: /CN=99282d77c662e68bb87e83338b76ad6bead93185 Certificate serial: 019B7AC8951D12030DC3611B8FF89C22C8E2 Authority key identifier: 99:28:2D:77:C6:62:E6:8B:B8:7E:83:33:8B:76:AD:6B:EA:D9:31:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/tpWKu4eR85JDF7KBw26Iwlu6TT4.roa Signing time: Thu 01 Jan 2026 18:18:44 +0000 ROA not before: Thu 01 Jan 2026 18:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206784 IP address blocks: 185.176.136.0/22 maxlen: 32 2a0a:1780::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.crl rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:95:1d:12:03:0d:c3:61:1b:8f:f8:9c:22:c8:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99282d77c662e68bb87e83338b76ad6bead93185 Validity Not Before: Jan 1 18:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b6958abb8791f3924317b281c36e88c25bba4d3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:42:8f:fb:b4:01:29:a7:9c:22:cd:35:fb:63: c3:0f:ec:ef:36:14:a1:95:1e:69:89:9c:a5:de:b1: 45:43:b1:ec:6b:65:e9:3e:47:92:60:df:a6:be:04: ab:d1:64:1b:f2:26:3c:03:f3:f5:c1:57:cc:fc:f6: 01:b4:e9:2a:92:4c:45:53:9c:4a:6f:81:df:83:c1: ad:e2:d3:8c:fc:f8:22:4c:42:19:e9:b7:a4:6d:1d: 36:14:1b:5e:69:db:8a:7a:e9:bc:e5:0c:e6:8b:ff: 38:8e:de:4e:c3:63:66:c5:ee:ab:09:49:f8:a2:d2: cc:ae:6e:fb:a5:03:02:09:39:da:3c:af:03:50:15: 9e:16:bd:f8:21:98:94:f6:30:2a:78:d0:38:24:73: 33:89:8f:07:78:6c:d2:2d:dd:bf:fc:85:e5:2b:2c: 1f:a9:30:22:d9:d1:2d:11:87:12:aa:cd:f8:c2:81: a0:a0:03:eb:62:85:cd:0b:f4:8b:26:1e:57:71:dc: cf:5f:0c:dc:df:64:06:0b:9f:8f:9a:1e:25:cc:af: af:7f:45:cd:f8:d2:66:29:ce:56:a4:f1:bb:d3:48: ea:42:df:3d:b2:e3:b9:49:64:86:2a:2f:12:62:88: 06:0b:f3:76:05:12:01:8c:65:da:f8:bf:5e:98:16: 16:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:95:8A:BB:87:91:F3:92:43:17:B2:81:C3:6E:88:C2:5B:BA:4D:3E X509v3 Authority Key Identifier: keyid:99:28:2D:77:C6:62:E6:8B:B8:7E:83:33:8B:76:AD:6B:EA:D9:31:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/tpWKu4eR85JDF7KBw26Iwlu6TT4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.176.136.0/22 IPv6: 2a0a:1780::/29 Signature Algorithm: sha256WithRSAEncryption 57:54:e1:b8:90:b6:f8:7d:37:f0:78:ca:30:66:8a:73:80:81: 17:55:ca:bd:31:7f:bd:c0:c8:00:42:20:30:8b:2c:39:50:06: 76:a3:8e:88:b1:07:57:73:ef:82:d3:67:fb:1c:9e:d3:a5:71: 80:14:2c:3e:21:e8:51:9f:6f:88:52:d7:40:28:36:9d:0b:e3: e7:1a:4c:f4:e9:d9:b3:9e:f0:ad:a3:7a:dd:53:0f:f1:32:87: f4:67:cb:f7:dc:c2:59:fa:a7:36:e1:4d:fe:3c:22:98:44:e6: 1c:ab:78:77:d2:88:05:55:fe:77:80:0c:45:49:c2:66:99:78: d5:4f:63:d3:70:bd:05:63:5a:2d:2d:cd:9c:29:a7:58:e9:ea: bb:3b:db:5c:6c:48:c4:cb:d6:46:ea:e6:04:ae:b7:ac:b3:5c: 3b:87:ab:83:26:f7:bc:1f:2f:d4:5b:e2:34:f7:c6:82:1d:04: b0:fc:a9:23:07:d4:5d:1c:61:22:9b:7d:78:27:8a:72:ba:35: 4b:2a:83:3e:04:18:11:28:b9:9a:ed:25:16:9c:8f:1c:13:be: a9:5d:30:4c:46:9c:d7:6d:05:1a:f0:85:92:19:9d:12:19:c0: 80:c1:ba:2b:26:c8:71:1c:4c:88:79:55:dc:78:c6:3d:7d:55: 58:f3:84:ad -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6yJUdEgMNw2Ebj/icIsjiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MjgyZDc3YzY2MmU2OGJiODdlODMzMzhiNzZhZDZiZWFk OTMxODUwHhcNMjYwMTAxMTgxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjk1OGFiYjg3OTFmMzkyNDMxN2IyODFjMzZlODhjMjViYmE0ZDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0KP+7QBKaecIs01+2PDD+zvNhSh lR5piZyl3rFFQ7Hsa2XpPkeSYN+mvgSr0WQb8iY8A/P1wVfM/PYBtOkqkkxFU5xK b4Hfg8Gt4tOM/PgiTEIZ6bekbR02FBteaduKeum85Qzmi/84jt5Ow2Nmxe6rCUn4 otLMrm77pQMCCTnaPK8DUBWeFr34IZiU9jAqeNA4JHMziY8HeGzSLd2//IXlKywf qTAi2dEtEYcSqs34woGgoAPrYoXNC/SLJh5XcdzPXwzc32QGC5+Pmh4lzK+vf0XN +NJmKc5WpPG700jqQt89suO5SWSGKi8SYogGC/N2BRIBjGXa+L9emBYWXQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLaViruHkfOSQxeygcNuiMJbuk0+MB8GA1UdIwQY MBaAFJkoLXfGYuaLuH6DM4t2rWvq2TGFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVNndGQ4Wmk1b3U0Zm9NemkzYXRhLXJaTVlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS82MWM2MWQtNWVkOC00NzY2LTliNGIt MDU2YjljMjMxZjM0LzEvdHBXS3U0ZVI4NUpERjdLQncyNkl3bHU2VFQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS82MWM2MWQtNWVkOC00NzY2LTliNGItMDU2YjljMjMxZjM0 LzEvbVNndGQ4Wmk1b3U0Zm9NemkzYXRhLXJaTVlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCubCIMA0E AgACMAcDBQMqCheAMA0GCSqGSIb3DQEBCwUAA4IBAQBXVOG4kLb4fTfweMowZopz gIEXVcq9MX+9wMgAQiAwiyw5UAZ2o46IsQdXc++C02f7HJ7TpXGAFCw+IehRn2+I UtdAKDadC+PnGkz06dmznvCto3rdUw/xMof0Z8v33MJZ+qc24U3+PCKYROYcq3h3 0ogFVf53gAxFScJmmXjVT2PTcL0FY1otLc2cKadY6eq7O9tcbEjEy9ZG6uYErres s1w7h6uDJve8Hy/UW+I098aCHQSw/KkjB9RdHGEim314J4pyujVLKoM+BBgRKLma 7SUWnI8cE76pXTBMRpzXbQUa8IWSGZ0SGcCAwborJshxHEyIeVXceMY9fVVY84St -----END CERTIFICATE-----Generated at Sat Jan 3 06:49:10 2026 by rpki-client