This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/tnlT3WguTIaBPQyXQdyvdPZTqq0.roa File: tnlT3WguTIaBPQyXQdyvdPZTqq0.roa (raw, json) Hash identifier: OdNtfnb+ps4t4Tb3faIsE6ujGrvLv+3p6hrL7wNeeB4= Subject key identifier: B6:79:53:DD:68:2E:4C:86:81:3D:0C:97:41:DC:AF:74:F6:53:AA:AD Certificate issuer: /CN=cbd757e913aace434e6dd6d6d50a7edf72ce888c Certificate serial: 019B79102096CA2861BADD129AB1FE003CD1 Authority key identifier: CB:D7:57:E9:13:AA:CE:43:4E:6D:D6:D6:D5:0A:7E:DF:72:CE:88:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9dX6ROqzkNObdbW1Qp-33LOiIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/tnlT3WguTIaBPQyXQdyvdPZTqq0.roa Signing time: Thu 01 Jan 2026 10:17:38 +0000 ROA not before: Thu 01 Jan 2026 10:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205099 IP address blocks: 185.194.202.0/23 maxlen: 24 185.230.80.0/22 maxlen: 24 2a0c:900::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.crl rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.mft rsync://rpki.ripe.net/repository/DEFAULT/y9dX6ROqzkNObdbW1Qp-33LOiIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:20:96:ca:28:61:ba:dd:12:9a:b1:fe:00:3c:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbd757e913aace434e6dd6d6d50a7edf72ce888c Validity Not Before: Jan 1 10:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b67953dd682e4c86813d0c9741dcaf74f653aaad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bb:fa:34:84:13:f8:fb:39:55:40:5e:cc:15: 86:fb:70:a2:d4:33:52:07:90:78:69:f5:de:56:11: 52:c8:a8:49:27:8a:20:f6:ff:4e:4f:e2:53:af:94: c4:08:0f:92:5d:d9:0a:c3:da:74:3a:ca:69:b1:18: 54:67:c2:35:bc:5d:56:43:fe:aa:65:58:4a:46:89: 6d:75:6e:95:c7:44:12:1d:a0:ad:40:86:c0:89:ba: e1:16:6b:cb:cd:88:94:09:c9:ac:4f:1a:9e:de:49: 7c:71:cf:52:53:17:1d:fb:0f:45:90:0e:5d:6b:32: 3a:6e:7a:95:aa:13:31:8c:29:04:81:5c:ec:90:9d: 76:36:36:b3:3d:88:5b:08:a1:9c:53:27:a0:21:c9: 57:d5:d3:32:f1:88:1a:bc:9f:cc:ee:30:2f:8b:be: bc:82:da:75:d3:44:5b:3f:09:7d:6b:61:9c:9f:a9: e1:3e:d6:04:61:2b:52:f6:be:fa:63:6a:f6:23:6e: 75:63:c4:05:d1:02:2a:da:fb:13:75:11:ef:41:01: 2c:1c:a5:a0:0a:46:ef:39:a4:87:b3:94:94:2b:19: c6:89:35:65:3f:1c:e9:79:0a:33:be:90:df:18:9c: bc:50:8f:29:0d:1d:74:63:7e:58:07:84:7f:21:7e: 74:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:79:53:DD:68:2E:4C:86:81:3D:0C:97:41:DC:AF:74:F6:53:AA:AD X509v3 Authority Key Identifier: keyid:CB:D7:57:E9:13:AA:CE:43:4E:6D:D6:D6:D5:0A:7E:DF:72:CE:88:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9dX6ROqzkNObdbW1Qp-33LOiIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/tnlT3WguTIaBPQyXQdyvdPZTqq0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.194.202.0/23 185.230.80.0/22 IPv6: 2a0c:900::/29 Signature Algorithm: sha256WithRSAEncryption 8c:87:85:de:cc:83:ac:fb:c8:9a:7e:63:a6:b6:6d:dd:1b:44: 85:cf:78:c4:fa:77:75:f7:01:c3:9e:9d:a8:06:78:ff:e0:db: cc:ed:eb:31:2b:cd:b3:aa:c0:58:95:b2:75:53:df:61:d8:f0: 69:73:8c:39:7a:37:08:c4:80:71:54:3c:e8:eb:d6:6b:17:3b: 05:3b:db:e8:08:3d:44:b4:ed:3f:e3:ba:0d:2b:41:f1:f5:d0: 4a:88:8d:27:ab:c2:24:67:ca:a6:44:c3:53:00:f7:77:9b:4c: e0:ca:79:e5:de:6e:de:64:66:d7:09:5d:a4:74:43:99:61:c0: e2:f6:9d:7f:2c:02:65:43:a9:25:8a:e0:5c:c6:cd:50:fa:88: 64:b0:18:24:64:78:18:c7:c7:b6:f9:15:42:c3:7a:ed:71:cb: d0:a5:8b:26:49:86:e1:28:46:ca:ba:ca:fa:ac:a6:43:18:e3: 5f:d3:ad:87:71:cb:31:88:7d:20:9b:cc:ea:83:ff:00:3d:88: a1:30:b7:7d:1e:64:9e:19:8d:2b:c5:d2:5b:14:d5:39:1f:72: 1e:80:c3:7c:d8:7e:c0:de:b2:6a:5e:d3:21:ad:e1:4c:e0:86: 28:06:0b:b3:4d:b5:fd:0c:5b:2a:55:a2:d4:1d:ea:86:af:65: d3:9d:96:4e -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5ECCWyihhut0SmrH+ADzRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZDc1N2U5MTNhYWNlNDM0ZTZkZDZkNmQ1MGE3ZWRmNzJj ZTg4OGMwHhcNMjYwMTAxMTAxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjc5NTNkZDY4MmU0Yzg2ODEzZDBjOTc0MWRjYWY3NGY2NTNhYWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLv6NIQT+Ps5VUBezBWG+3Ci1DNS B5B4afXeVhFSyKhJJ4og9v9OT+JTr5TECA+SXdkKw9p0OsppsRhUZ8I1vF1WQ/6q ZVhKRoltdW6Vx0QSHaCtQIbAibrhFmvLzYiUCcmsTxqe3kl8cc9SUxcd+w9FkA5d azI6bnqVqhMxjCkEgVzskJ12NjazPYhbCKGcUyegIclX1dMy8YgavJ/M7jAvi768 gtp100RbPwl9a2Gcn6nhPtYEYStS9r76Y2r2I251Y8QF0QIq2vsTdRHvQQEsHKWg CkbvOaSHs5SUKxnGiTVlPxzpeQozvpDfGJy8UI8pDR10Y35YB4R/IX500QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFLZ5U91oLkyGgT0Ml0Hcr3T2U6qtMB8GA1UdIwQY MBaAFMvXV+kTqs5DTm3W1tUKft9yzoiMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTlkWDZST3F6a05PYmRiVzFRcC0zM0xPaUl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9iZGMwOWEtMmIyYS00Nzk3LWEyOTYt OWNmZGYzYzJiMzQ4LzEvdG5sVDNXZ3VUSWFCUFF5WFFkeXZkUFpUcXEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9iZGMwOWEtMmIyYS00Nzk3LWEyOTYtOWNmZGYzYzJiMzQ4 LzEveTlkWDZST3F6a05PYmRiVzFRcC0zM0xPaUl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBucLKAwQC ueZQMA0EAgACMAcDBQMqDAkAMA0GCSqGSIb3DQEBCwUAA4IBAQCMh4XezIOs+8ia fmOmtm3dG0SFz3jE+nd19wHDnp2oBnj/4NvM7esxK82zqsBYlbJ1U99h2PBpc4w5 ejcIxIBxVDzo69ZrFzsFO9voCD1EtO0/47oNK0Hx9dBKiI0nq8IkZ8qmRMNTAPd3 m0zgynnl3m7eZGbXCV2kdEOZYcDi9p1/LAJlQ6kliuBcxs1Q+ohksBgkZHgYx8e2 +RVCw3rtccvQpYsmSYbhKEbKusr6rKZDGONf062HccsxiH0gm8zqg/8APYihMLd9 HmSeGY0rxdJbFNU5H3IegMN82H7A3rJqXtMhreFM4IYoBguzTbX9DFsqVaLUHeqG r2XTnZZO -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:17 2026 by rpki-client