This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/TTJb2RAURlKPWvYkNwaWkyT09qY.roa File: TTJb2RAURlKPWvYkNwaWkyT09qY.roa (raw, json) Hash identifier: lOE8Ruv9RewYP7cpvq3aqRSVFYYOIUiYC9/cShdcpDM= Subject key identifier: 4D:32:5B:D9:10:14:46:52:8F:5A:F6:24:37:06:96:93:24:F4:F6:A6 Certificate issuer: /CN=c853fb7988a42f39838b1c7f9f0400692e9295d7 Certificate serial: 019B76EB8FDB0BF3779B83F6ED0CED97E3E1 Authority key identifier: C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/TTJb2RAURlKPWvYkNwaWkyT09qY.roa Signing time: Thu 01 Jan 2026 00:18:27 +0000 ROA not before: Thu 01 Jan 2026 00:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49427 IP address blocks: 91.214.108.0/23 maxlen: 23 91.214.110.0/24 maxlen: 24 91.214.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.crl rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:8f:db:0b:f3:77:9b:83:f6:ed:0c:ed:97:e3:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c853fb7988a42f39838b1c7f9f0400692e9295d7 Validity Not Before: Jan 1 00:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d325bd9101446528f5af6243706969324f4f6a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:de:06:f4:91:29:d3:dc:04:80:29:aa:0c:f6: bb:ff:ee:f7:a3:1b:65:cf:c1:f4:aa:e1:a1:6a:bd: 59:11:a2:d3:92:9a:21:f3:27:47:f0:d9:d9:f3:79: 3c:c6:e9:ed:87:a0:a0:66:f7:40:aa:81:24:33:c6: 19:1b:aa:40:f1:20:1d:05:4b:c9:eb:a3:7e:a6:8b: 6d:05:a5:fb:b5:03:9d:ce:29:2a:04:9b:33:2a:5d: 56:99:dd:44:f2:58:fc:5e:f6:03:38:84:34:32:4d: 8e:62:da:4f:58:bf:44:93:5a:fc:b4:6e:3f:78:24: 2a:e8:d4:30:03:01:ca:ce:25:e4:b3:3c:1d:76:71: e3:eb:1e:f9:c0:9e:cb:a3:72:10:07:9c:82:f5:b1: dd:48:a7:3b:44:a7:33:de:25:6a:8b:0e:9a:3e:c8: b6:cd:24:57:07:4b:87:b0:39:db:41:78:bc:db:07: ad:4e:45:6b:cd:93:fc:b2:5c:a8:9b:5d:80:68:5f: b8:d5:b3:00:4e:d7:4c:7c:ea:35:89:d1:45:91:87: 95:f6:e2:42:a4:3b:e7:a1:13:39:24:00:81:83:eb: 49:e5:34:d0:98:43:93:e7:34:a9:18:33:fb:53:50: f0:c6:3c:c1:a7:a0:bb:1f:5b:4b:0e:36:a1:51:ba: 9a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:32:5B:D9:10:14:46:52:8F:5A:F6:24:37:06:96:93:24:F4:F6:A6 X509v3 Authority Key Identifier: keyid:C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/TTJb2RAURlKPWvYkNwaWkyT09qY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.214.108.0/22 Signature Algorithm: sha256WithRSAEncryption 1b:a5:17:04:70:50:d2:b6:9a:cf:82:0f:e6:6d:d7:31:e6:4f: 7c:cc:3e:32:7e:18:b6:34:2e:8e:39:c5:74:6c:58:ec:13:53: 86:d9:5d:8f:81:7f:82:b8:41:29:d7:ea:a4:da:dc:f9:da:09: 21:7d:79:9c:e4:4d:54:87:a8:9f:cf:e3:76:1e:74:a2:4c:60: c0:38:8d:ab:fe:d7:e0:1e:fa:4a:26:4e:de:71:89:0b:83:c4: 0e:c7:45:fb:55:ca:93:31:68:37:15:ae:72:e1:56:5a:ab:a9: 27:d1:3a:14:00:a8:04:c7:06:e0:8c:3f:74:0a:0b:62:68:5e: bf:95:53:84:e4:da:86:05:2e:82:d9:e3:fc:cf:f5:f8:da:d5: 57:26:ce:2b:f3:da:54:6a:b4:ad:37:0d:45:2b:96:8d:9e:52: 62:58:f4:44:06:5e:7d:0d:b6:a5:26:07:af:21:75:4c:8c:d4: bf:8a:fc:ad:c4:9e:b4:69:89:a9:c5:62:cc:ab:7c:51:4d:7f: a9:56:ff:97:e4:8b:d6:6b:eb:b9:44:e7:20:28:1e:4e:60:d3: 08:a2:aa:b5:6e:b6:ec:cb:df:88:76:5f:9a:cc:14:ac:9a:49: 6b:37:53:c1:38:6c:1a:41:65:60:7c:98:3b:1e:bf:01:4c:27: 26:4a:da:6e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt264/bC/N3m4P27Qztl+PhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NTNmYjc5ODhhNDJmMzk4MzhiMWM3ZjlmMDQwMDY5MmU5 Mjk1ZDcwHhcNMjYwMTAxMDAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDMyNWJkOTEwMTQ0NjUyOGY1YWY2MjQzNzA2OTY5MzI0ZjRmNmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw94G9JEp09wEgCmqDPa7/+73oxtl z8H0quGhar1ZEaLTkpoh8ydH8NnZ83k8xunth6CgZvdAqoEkM8YZG6pA8SAdBUvJ 66N+pottBaX7tQOdzikqBJszKl1Wmd1E8lj8XvYDOIQ0Mk2OYtpPWL9Ek1r8tG4/ eCQq6NQwAwHKziXkszwddnHj6x75wJ7Lo3IQB5yC9bHdSKc7RKcz3iVqiw6aPsi2 zSRXB0uHsDnbQXi82wetTkVrzZP8slyom12AaF+41bMATtdMfOo1idFFkYeV9uJC pDvnoRM5JACBg+tJ5TTQmEOT5zSpGDP7U1DwxjzBp6C7H1tLDjahUbqafwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE0yW9kQFEZSj1r2JDcGlpMk9PamMB8GA1UdIwQY MBaAFMhT+3mIpC85g4scf58EAGkukpXXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUZQN2VZaWtMem1EaXh4X253UUFhUzZTbGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wYzYxYTYtZTBmYS00MDE3LTk1ODIt MWU3YmRiN2YzMGY2LzEvVFRKYjJSQVVSbEtQV3ZZa053YVdreVQwOXFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8wYzYxYTYtZTBmYS00MDE3LTk1ODItMWU3YmRiN2YzMGY2 LzEveUZQN2VZaWtMem1EaXh4X253UUFhUzZTbGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW9ZsMA0G CSqGSIb3DQEBCwUAA4IBAQAbpRcEcFDStprPgg/mbdcx5k98zD4yfhi2NC6OOcV0 bFjsE1OG2V2PgX+CuEEp1+qk2tz52gkhfXmc5E1Uh6ifz+N2HnSiTGDAOI2r/tfg HvpKJk7ecYkLg8QOx0X7VcqTMWg3Fa5y4VZaq6kn0ToUAKgExwbgjD90CgtiaF6/ lVOE5NqGBS6C2eP8z/X42tVXJs4r89pUarStNw1FK5aNnlJiWPREBl59DbalJgev IXVMjNS/ivytxJ60aYmpxWLMq3xRTX+pVv+X5IvWa+u5ROcgKB5OYNMIoqq1brbs y9+Idl+azBSsmklrN1PBOGwaQWVgfJg7Hr8BTCcmStpu -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:39 2026 by rpki-client