This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/tfAGjWfUNTI_2vsVZy9j5qZ-AuM.roa File: tfAGjWfUNTI_2vsVZy9j5qZ-AuM.roa (raw, json) Hash identifier: njzm6lCAV+EE4DxRZf3PtyDknOGT9/aOviQx8BhHPt4= Subject key identifier: B5:F0:06:8D:67:D4:35:32:3F:DA:FB:15:67:2F:63:E6:A6:7E:02:E3 Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8 Certificate serial: 019B7D5A9E74B265D824B324D351F44E7196 Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/tfAGjWfUNTI_2vsVZy9j5qZ-AuM.roa Signing time: Fri 02 Jan 2026 06:17:29 +0000 ROA not before: Fri 02 Jan 2026 06:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206065 IP address blocks: 213.176.20.0/22 maxlen: 24 213.176.24.0/22 maxlen: 24 213.176.68.0/22 maxlen: 24 213.176.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:9e:74:b2:65:d8:24:b3:24:d3:51:f4:4e:71:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8 Validity Not Before: Jan 2 06:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5f0068d67d435323fdafb15672f63e6a67e02e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a9:5c:cc:93:d2:43:12:6b:26:7f:33:db:73: 1e:58:b3:ee:25:9b:c8:d9:dc:73:82:e6:49:51:42: ea:fa:08:9e:2b:64:d5:6d:06:75:de:31:79:5b:c6: b6:8a:9f:82:dd:d6:43:f9:bc:8f:6f:f5:96:9d:78: f7:e4:4d:45:03:ed:90:f3:80:0e:df:30:07:81:a3: fe:79:58:11:41:8b:01:e5:a9:66:db:24:80:ac:e3: a2:3a:6b:e7:2b:5b:4b:ad:9f:c2:b6:45:c7:1c:3b: 5f:f5:96:ed:be:01:2e:a2:61:cf:c4:43:f3:51:1c: 1e:77:a9:a2:0f:f3:46:83:3b:8f:ac:9c:58:17:b8: 65:72:cf:5e:78:a4:87:15:f2:40:53:11:4e:b3:82: 1f:58:53:40:90:e7:8e:e0:8c:a8:4d:48:82:d1:35: d5:1c:c3:db:68:eb:b8:c3:84:09:82:4f:6a:d6:a9: 2a:de:d0:85:1f:0e:8a:35:b2:33:92:f0:b6:16:84: 1c:c4:86:f6:db:a8:5f:04:3c:40:45:66:e5:1f:57: b0:94:97:ba:eb:7f:04:93:2e:4e:be:6e:7b:dc:0e: 62:69:36:a8:3c:74:de:44:50:04:84:f5:0f:98:a3: 1d:b4:ad:98:da:fd:9b:6c:ac:74:11:cc:e4:25:3a: d1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F0:06:8D:67:D4:35:32:3F:DA:FB:15:67:2F:63:E6:A6:7E:02:E3 X509v3 Authority Key Identifier: keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/tfAGjWfUNTI_2vsVZy9j5qZ-AuM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.176.20.0-213.176.27.255 213.176.68.0/22 213.176.88.0/22 Signature Algorithm: sha256WithRSAEncryption 4a:7b:37:e6:65:73:e2:c6:99:0b:69:70:9d:bc:a0:3e:24:d8: d9:47:cc:97:4c:1a:c5:1b:d9:ec:2a:f3:62:bc:24:f4:06:d4: f7:07:fe:0b:63:8d:06:73:f2:fd:ed:4a:50:77:f4:3a:99:8d: 5b:e8:3c:dd:d6:43:84:13:40:33:82:2f:a6:90:2f:e5:02:47: e0:cc:a2:17:df:ee:a9:41:6c:80:2f:07:50:4d:d2:79:98:59: 3a:f4:0a:16:d1:b5:a6:10:15:09:c1:0f:66:74:9d:e2:ac:11: 72:e4:68:f7:e0:a8:87:d6:4f:77:8d:d6:5f:3d:9c:c8:ec:a6: 69:14:a0:0c:c1:3e:81:e4:af:9e:21:c3:aa:d3:9e:da:a2:0f: 93:1e:a0:ab:f7:10:b9:b0:ce:95:33:87:bb:27:89:f4:61:db: d3:22:e5:29:41:56:e2:7e:3d:57:ca:b2:b5:c5:f8:ea:d6:f0: 2e:00:dd:e3:60:0d:24:d3:55:d3:77:3b:f6:49:84:1e:08:5c: d5:31:e6:0d:e7:72:b0:5e:e5:3f:f6:54:5c:58:a0:64:bd:f5: 8e:f5:b1:79:af:da:eb:33:80:9f:28:4b:03:a9:15:df:9f:e1: 6d:f2:3f:53:ae:a9:0f:d9:d4:8b:4a:f8:07:aa:9a:fe:16:b3: 7d:b2:0a:0c -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt9Wp50smXYJLMk01H0TnGWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl OGRhZjgwHhcNMjYwMTAyMDYxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNWYwMDY4ZDY3ZDQzNTMyM2ZkYWZiMTU2NzJmNjNlNmE2N2UwMmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqlczJPSQxJrJn8z23MeWLPuJZvI 2dxzguZJUULq+gieK2TVbQZ13jF5W8a2ip+C3dZD+byPb/WWnXj35E1FA+2Q84AO 3zAHgaP+eVgRQYsB5alm2ySArOOiOmvnK1tLrZ/CtkXHHDtf9ZbtvgEuomHPxEPz URwed6miD/NGgzuPrJxYF7hlcs9eeKSHFfJAUxFOs4IfWFNAkOeO4IyoTUiC0TXV HMPbaOu4w4QJgk9q1qkq3tCFHw6KNbIzkvC2FoQcxIb226hfBDxARWblH1ewlJe6 638Eky5Ovm573A5iaTaoPHTeRFAEhPUPmKMdtK2Y2v2bbKx0EczkJTrRbQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFLXwBo1n1DUyP9r7FWcvY+amfgLjMB8GA1UdIwQY MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt MGNiYTMzZWZjNWJiLzEvdGZBR2pXZlVOVElfMnZzVlp5OWo1cVotQXVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBALVsBQD BALVsBgDBALVsEQDBALVsFgwDQYJKoZIhvcNAQELBQADggEBAEp7N+Zlc+LGmQtp cJ28oD4k2NlHzJdMGsUb2ewq82K8JPQG1PcH/gtjjQZz8v3tSlB39DqZjVvoPN3W Q4QTQDOCL6aQL+UCR+DMohff7qlBbIAvB1BN0nmYWTr0ChbRtaYQFQnBD2Z0neKs EXLkaPfgqIfWT3eN1l89nMjspmkUoAzBPoHkr54hw6rTntqiD5MeoKv3ELmwzpUz h7snifRh29Mi5SlBVuJ+PVfKsrXF+OrW8C4A3eNgDSTTVdN3O/ZJhB4IXNUx5g3n crBe5T/2VFxYoGS99Y71sXmv2uszgJ8oSwOpFd+f4W3yP1OuqQ/Z1ItK+Aeqmv4W s32yCgw= -----END CERTIFICATE-----Generated at Wed Jan 21 10:49:29 2026 by rpki-client