This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/tVC2csu9UGG1-01gEwc1t4LJEVg.roa File: tVC2csu9UGG1-01gEwc1t4LJEVg.roa (raw, json) Hash identifier: F7t5gXl+oY8MHELP0QCMp2iMpD0P8eAkfXVgIusmD4c= Subject key identifier: B5:50:B6:72:CB:BD:50:61:B5:FB:4D:60:13:07:35:B7:82:C9:11:58 Certificate issuer: /CN=21bfa77b3cd782933e5f255445d428adfbdca0e1 Certificate serial: 019B791030A333AD869FB29FCF4BC6A3E8F4 Authority key identifier: 21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/tVC2csu9UGG1-01gEwc1t4LJEVg.roa Signing time: Thu 01 Jan 2026 10:17:42 +0000 ROA not before: Thu 01 Jan 2026 10:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13302 IP address blocks: 185.166.16.0/22 maxlen: 24 185.166.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:30:a3:33:ad:86:9f:b2:9f:cf:4b:c6:a3:e8:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21bfa77b3cd782933e5f255445d428adfbdca0e1 Validity Not Before: Jan 1 10:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b550b672cbbd5061b5fb4d60130735b782c91158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e3:19:7a:d4:0a:63:02:2b:6c:03:67:ac:62: df:79:10:64:ad:f9:44:c7:af:1e:ff:33:51:c8:50: 2c:cd:4a:50:38:04:4c:b2:07:b8:7a:20:57:17:38: cc:87:2c:be:5e:9a:fd:e8:4b:5f:85:4c:04:d9:e9: de:4e:0a:72:8a:84:21:e5:3d:1c:6d:5c:86:10:5a: 9e:f5:d7:1c:76:fa:f3:1c:dd:b2:c0:9b:5e:4d:c0: d8:f6:6c:79:d1:58:90:ad:8e:93:a2:7e:b4:5b:a8: aa:bc:8f:e3:34:b3:ff:c8:c6:4a:d7:c3:fe:c4:3b: d6:af:02:1f:57:7e:57:e5:92:58:92:b5:2d:ed:6e: c4:30:62:a3:85:a1:17:08:75:76:69:56:c3:61:ff: b5:b7:bc:4e:7e:43:ab:e6:e1:49:75:61:d6:b9:79: 70:52:46:81:a9:6a:f1:64:dc:b9:05:7e:8a:f3:6c: 9d:f0:1e:31:ea:ce:a7:3b:96:81:0f:4b:2b:1a:af: 40:d5:27:f7:16:f3:08:4a:c7:a0:a0:06:84:58:4d: 7c:4c:df:fb:1c:54:00:82:bf:15:c8:0e:69:b8:98: fb:81:96:7d:ef:ac:d7:de:e1:33:3a:0e:e2:51:84: da:20:40:b5:08:ca:04:43:62:40:72:10:c6:51:67: ac:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:50:B6:72:CB:BD:50:61:B5:FB:4D:60:13:07:35:B7:82:C9:11:58 X509v3 Authority Key Identifier: keyid:21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/tVC2csu9UGG1-01gEwc1t4LJEVg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.166.16.0/22 Signature Algorithm: sha256WithRSAEncryption 8a:e6:53:48:e4:be:31:38:a0:98:be:0b:47:76:5c:a6:bb:f1: 36:6e:b6:59:64:d1:77:06:dc:44:1a:5b:db:b4:af:1e:35:fe: d5:27:43:de:fa:2a:2c:78:b9:05:ee:3d:97:b8:8e:a9:6a:bf: 33:41:c8:9d:01:e1:8b:9b:fb:64:01:ff:cf:cc:bf:aa:44:41: 39:27:8b:02:28:f2:69:45:5c:7d:eb:fb:8d:ef:9b:de:3d:8b: 37:e8:7b:58:47:79:19:61:db:b2:d7:25:13:00:1c:50:33:ef: c3:b7:7e:07:be:93:4e:ad:25:68:42:7b:3e:20:24:b1:2b:06: de:0a:bd:48:b6:5a:44:8b:d3:8e:70:94:30:0d:2d:a6:2f:76: 96:05:74:4a:d0:b0:bb:8e:51:54:65:d1:68:50:60:90:6c:d9: 72:8a:74:46:e5:d0:8f:1c:95:79:7c:f5:90:36:69:d2:79:e0: 4c:8e:e7:28:c5:8b:cc:e7:a4:cd:3d:15:55:b7:36:c4:c8:30: 1d:d1:e4:1a:7f:b1:6a:2a:9c:f0:c8:63:08:dd:ea:bd:6f:79: a7:31:4d:2a:23:a9:9d:a9:13:e5:33:47:e5:c1:77:ec:20:48: a8:b5:14:55:3f:ce:68:84:40:a0:57:ee:9a:40:07:f9:df:21: ea:cd:43:25 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EDCjM62Gn7Kfz0vGo+j0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYmZhNzdiM2NkNzgyOTMzZTVmMjU1NDQ1ZDQyOGFkZmJk Y2EwZTEwHhcNMjYwMTAxMTAxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTUwYjY3MmNiYmQ1MDYxYjVmYjRkNjAxMzA3MzViNzgyYzkxMTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreMZetQKYwIrbANnrGLfeRBkrflE x68e/zNRyFAszUpQOARMsge4eiBXFzjMhyy+Xpr96EtfhUwE2eneTgpyioQh5T0c bVyGEFqe9dccdvrzHN2ywJteTcDY9mx50ViQrY6Ton60W6iqvI/jNLP/yMZK18P+ xDvWrwIfV35X5ZJYkrUt7W7EMGKjhaEXCHV2aVbDYf+1t7xOfkOr5uFJdWHWuXlw UkaBqWrxZNy5BX6K82yd8B4x6s6nO5aBD0srGq9A1Sf3FvMISsegoAaEWE18TN/7 HFQAgr8VyA5puJj7gZZ976zX3uEzOg7iUYTaIEC1CMoEQ2JAchDGUWesbQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLVQtnLLvVBhtftNYBMHNbeCyRFYMB8GA1UdIwQY MBaAFCG/p3s814KTPl8lVEXUKK373KDhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWItbmV6elhncE0tWHlWVVJkUW9yZnZjb09FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC85YzdhZmYtZDgzZS00ZjUxLTliOTYt NTQ4NGMzOWIyZDRlLzEvdFZDMmNzdTlVR0cxLTAxZ0V3YzF0NExKRVZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC85YzdhZmYtZDgzZS00ZjUxLTliOTYtNTQ4NGMzOWIyZDRl LzEvSWItbmV6elhncE0tWHlWVVJkUW9yZnZjb09FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaYQMA0G CSqGSIb3DQEBCwUAA4IBAQCK5lNI5L4xOKCYvgtHdlymu/E2brZZZNF3BtxEGlvb tK8eNf7VJ0Pe+ioseLkF7j2XuI6par8zQcidAeGLm/tkAf/PzL+qREE5J4sCKPJp RVx96/uN75vePYs36HtYR3kZYduy1yUTABxQM+/Dt34HvpNOrSVoQns+ICSxKwbe Cr1ItlpEi9OOcJQwDS2mL3aWBXRK0LC7jlFUZdFoUGCQbNlyinRG5dCPHJV5fPWQ NmnSeeBMjucoxYvM56TNPRVVtzbEyDAd0eQaf7FqKpzwyGMI3eq9b3mnMU0qI6md qRPlM0flwXfsIEiotRRVP85ohECgV+6aQAf53yHqzUMl -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:34 2026 by rpki-client