This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1e63a3-b306-413a-adf4-d3f265ad514f/1/TCoBlMxDiguWCq2X4av9S4gQXEQ.roa File: TCoBlMxDiguWCq2X4av9S4gQXEQ.roa (raw, json) Hash identifier: 6msXgBjxx6Yi7xW5PUuzbdt4jO41s2SyXCfLVxtofm0= Subject key identifier: 4C:2A:01:94:CC:43:8A:0B:96:0A:AD:97:E1:AB:FD:4B:88:10:5C:44 Certificate issuer: /CN=b6817762d9fc8f11b01cf5234b6e431cfbec1bcd Certificate serial: 019B7F80AEC074D15B10407469F745054B82 Authority key identifier: B6:81:77:62:D9:FC:8F:11:B0:1C:F5:23:4B:6E:43:1C:FB:EC:1B:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toF3Ytn8jxGwHPUjS25DHPvsG80.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1e63a3-b306-413a-adf4-d3f265ad514f/1/TCoBlMxDiguWCq2X4av9S4gQXEQ.roa Signing time: Fri 02 Jan 2026 16:18:18 +0000 ROA not before: Fri 02 Jan 2026 16:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29316 IP address blocks: 195.137.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1e63a3-b306-413a-adf4-d3f265ad514f/1/toF3Ytn8jxGwHPUjS25DHPvsG80.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/1e63a3-b306-413a-adf4-d3f265ad514f/1/toF3Ytn8jxGwHPUjS25DHPvsG80.mft rsync://rpki.ripe.net/repository/DEFAULT/toF3Ytn8jxGwHPUjS25DHPvsG80.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:ae:c0:74:d1:5b:10:40:74:69:f7:45:05:4b:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6817762d9fc8f11b01cf5234b6e431cfbec1bcd Validity Not Before: Jan 2 16:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c2a0194cc438a0b960aad97e1abfd4b88105c44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5e:26:5d:f4:50:18:ea:42:5b:ec:d4:61:c3: 7f:12:0e:f0:1a:48:3f:82:cf:d8:b9:a6:f7:30:23: e3:e1:18:bd:62:46:02:a0:66:1e:7c:f0:25:1b:59: 80:63:a5:dd:3f:c0:ec:74:66:94:0c:dc:cd:4e:15: ce:27:4d:42:b4:2b:b1:0c:0d:0d:82:f7:63:8d:d4: a3:55:ca:9a:ad:85:b6:c6:a5:f4:ca:f0:e0:cd:9c: 2e:23:0a:22:9d:41:08:8f:ac:b4:c0:a5:2b:83:12: f8:c8:b4:99:84:dc:fd:e2:92:29:df:46:0a:6e:90: 5c:f7:55:2f:a1:c4:d2:d6:3c:89:ab:03:f6:a5:12: 7a:21:08:0c:32:45:d2:b6:98:47:21:ca:54:9e:13: 07:08:b0:3e:68:19:f3:ab:be:18:b5:28:61:97:94: 36:5f:7d:20:e7:b0:6f:22:d9:b6:89:f5:86:2f:20: 6d:59:93:8e:4d:22:ab:8f:77:72:fb:c1:cf:44:2a: 5f:85:d4:27:44:03:f6:17:3a:a9:20:01:63:a6:77: 0f:55:2f:a1:9c:1f:9f:0d:47:90:89:43:07:d5:c9: bd:1d:f3:b7:80:bf:24:7b:45:ad:d6:cc:4a:c2:2c: 54:79:1c:a2:9c:9f:70:d2:5b:ec:0c:08:dd:d6:47: cc:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:2A:01:94:CC:43:8A:0B:96:0A:AD:97:E1:AB:FD:4B:88:10:5C:44 X509v3 Authority Key Identifier: keyid:B6:81:77:62:D9:FC:8F:11:B0:1C:F5:23:4B:6E:43:1C:FB:EC:1B:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toF3Ytn8jxGwHPUjS25DHPvsG80.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1e63a3-b306-413a-adf4-d3f265ad514f/1/TCoBlMxDiguWCq2X4av9S4gQXEQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1e63a3-b306-413a-adf4-d3f265ad514f/1/toF3Ytn8jxGwHPUjS25DHPvsG80.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.137.198.0/23 Signature Algorithm: sha256WithRSAEncryption 5e:46:45:13:b0:b5:ed:6f:b5:b1:cc:85:0f:4b:10:6e:cd:27: 7f:bc:0c:77:1e:5d:34:66:3f:1d:18:83:b2:fc:de:e2:ad:ce: a0:ba:0b:84:dc:9a:b1:58:ad:8d:fd:9d:b2:0c:d5:ac:ca:27: a9:2e:2c:87:2e:1a:7d:7b:66:ef:47:50:4f:af:23:cc:d5:9a: c8:4c:63:cb:45:d7:13:d4:c3:71:b2:a9:fa:80:10:a2:a3:d8: 2f:9a:2a:a1:aa:07:46:8a:52:29:a2:f1:79:f6:e5:c7:73:e7: f9:5e:8a:47:a1:9b:66:3e:24:50:5f:b3:dc:dd:81:d4:75:cc: f4:f2:c8:cf:95:bf:7a:99:e6:a9:65:68:9d:ac:e5:f5:c4:f7: c0:e3:b1:30:d9:91:42:dd:6c:3d:c8:a0:26:be:de:d4:c0:ca: 0a:d2:2b:1c:b1:15:15:7e:34:7e:ea:b9:05:ea:8f:22:ec:b0: 53:1a:17:ec:7f:ea:ac:47:27:c5:08:c0:dc:b7:8a:ad:05:42: 7b:29:60:7e:2a:1f:6b:f4:9d:9a:1f:d0:a1:6d:62:dd:f4:3b: 62:22:28:8d:60:30:25:e6:3d:da:45:91:fe:00:24:e9:f1:cd: 5c:89:f8:5d:70:3d:68:e6:61:28:37:30:c6:0b:33:00:9b:f2: 21:61:96:0c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gK7AdNFbEEB0afdFBUuCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2ODE3NzYyZDlmYzhmMTFiMDFjZjUyMzRiNmU0MzFjZmJl YzFiY2QwHhcNMjYwMTAyMTYxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzJhMDE5NGNjNDM4YTBiOTYwYWFkOTdlMWFiZmQ0Yjg4MTA1YzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1F4mXfRQGOpCW+zUYcN/Eg7wGkg/ gs/Yuab3MCPj4Ri9YkYCoGYefPAlG1mAY6XdP8DsdGaUDNzNThXOJ01CtCuxDA0N gvdjjdSjVcqarYW2xqX0yvDgzZwuIwoinUEIj6y0wKUrgxL4yLSZhNz94pIp30YK bpBc91UvocTS1jyJqwP2pRJ6IQgMMkXStphHIcpUnhMHCLA+aBnzq74YtShhl5Q2 X30g57BvItm2ifWGLyBtWZOOTSKrj3dy+8HPRCpfhdQnRAP2FzqpIAFjpncPVS+h nB+fDUeQiUMH1cm9HfO3gL8ke0Wt1sxKwixUeRyinJ9w0lvsDAjd1kfMWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEwqAZTMQ4oLlgqtl+Gr/UuIEFxEMB8GA1UdIwQY MBaAFLaBd2LZ/I8RsBz1I0tuQxz77BvNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdG9GM1l0bjhqeEd3SFBValMyNURIUHZzRzgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xZTYzYTMtYjMwNi00MTNhLWFkZjQt ZDNmMjY1YWQ1MTRmLzEvVENvQmxNeERpZ3VXQ3EyWDRhdjlTNGdRWEVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8xZTYzYTMtYjMwNi00MTNhLWFkZjQtZDNmMjY1YWQ1MTRm LzEvdG9GM1l0bjhqeEd3SFBValMyNURIUHZzRzgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw4nGMA0G CSqGSIb3DQEBCwUAA4IBAQBeRkUTsLXtb7WxzIUPSxBuzSd/vAx3Hl00Zj8dGIOy /N7irc6guguE3JqxWK2N/Z2yDNWsyiepLiyHLhp9e2bvR1BPryPM1ZrITGPLRdcT 1MNxsqn6gBCio9gvmiqhqgdGilIpovF59uXHc+f5XopHoZtmPiRQX7Pc3YHUdcz0 8sjPlb96meapZWidrOX1xPfA47Ew2ZFC3Ww9yKAmvt7UwMoK0iscsRUVfjR+6rkF 6o8i7LBTGhfsf+qsRyfFCMDct4qtBUJ7KWB+Kh9r9J2aH9ChbWLd9DtiIiiNYDAl 5j3aRZH+ACTp8c1cifhdcD1o5mEoNzDGCzMAm/IhYZYM -----END CERTIFICATE-----Generated at Mon Jan 12 12:55:47 2026 by rpki-client