This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/Tp3MUlnyw8Mvjq4NF_A0s--TO-E.roa File: Tp3MUlnyw8Mvjq4NF_A0s--TO-E.roa (raw, json) Hash identifier: 1pyFxvIW7OcA2xgJemaGK0NKgGExv5PIDeasqhGcwTU= Subject key identifier: 4E:9D:CC:52:59:F2:C3:C3:2F:8E:AE:0D:17:F0:34:B3:EF:93:3B:E1 Certificate issuer: /CN=92b143d7db115957c5db9af895f4e7e15b7b6b17 Certificate serial: 019B7B367A2D738AED49D1363DFFC7B4DDBE Authority key identifier: 92:B1:43:D7:DB:11:59:57:C5:DB:9A:F8:95:F4:E7:E1:5B:7B:6B:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/Tp3MUlnyw8Mvjq4NF_A0s--TO-E.roa Signing time: Thu 01 Jan 2026 20:18:46 +0000 ROA not before: Thu 01 Jan 2026 20:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51824 IP address blocks: 91.221.84.0/23 maxlen: 23 91.221.84.0/24 maxlen: 24 91.221.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:7a:2d:73:8a:ed:49:d1:36:3d:ff:c7:b4:dd:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92b143d7db115957c5db9af895f4e7e15b7b6b17 Validity Not Before: Jan 1 20:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e9dcc5259f2c3c32f8eae0d17f034b3ef933be1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:11:2f:07:91:5c:a3:de:00:d3:e8:bf:bd:ea: c6:19:c5:a8:fd:b9:65:77:9f:09:8c:86:1e:1d:62: f3:2c:f7:d6:a7:83:fa:72:3f:52:76:cd:88:82:41: 19:0b:a8:03:fc:fe:78:0b:7f:66:f1:9a:92:c4:ea: 93:9a:21:5d:1b:29:68:69:96:ae:bb:53:6d:2f:68: 12:07:6a:5b:65:69:fd:b8:57:66:7b:74:f0:c8:3d: 15:69:f5:31:60:74:a1:0a:52:8a:42:b6:a7:fa:11: ae:3e:a3:64:13:24:3e:7f:54:d1:2f:ff:2c:de:aa: d2:1c:ff:62:b7:9a:50:11:5e:09:6a:cc:88:f2:90: 6f:79:a0:1a:09:11:9d:e9:65:53:df:25:7c:90:06: 11:fc:20:e4:c7:20:f1:9b:de:9f:5c:87:44:38:3a: 7d:cf:f4:01:42:39:b0:eb:85:8a:14:5c:45:89:2a: a7:09:62:34:50:ee:7c:12:1d:1a:2a:e8:ea:94:de: 3e:e0:40:0a:b9:a0:3b:6e:6d:4f:ba:3a:6c:2c:ae: 7e:33:c8:03:1d:34:3a:35:10:25:0b:7c:53:b4:2b: 54:55:9f:1d:11:35:76:25:09:e6:cc:ce:2a:ac:43: 10:00:7b:b0:7e:bd:cc:15:ad:65:64:2a:45:da:f1: 2b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:9D:CC:52:59:F2:C3:C3:2F:8E:AE:0D:17:F0:34:B3:EF:93:3B:E1 X509v3 Authority Key Identifier: keyid:92:B1:43:D7:DB:11:59:57:C5:DB:9A:F8:95:F4:E7:E1:5B:7B:6B:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/Tp3MUlnyw8Mvjq4NF_A0s--TO-E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.221.84.0/23 Signature Algorithm: sha256WithRSAEncryption 96:13:94:f2:72:44:71:98:5a:68:81:6d:bb:42:01:65:38:31: 31:d4:97:68:c1:ef:8d:b0:52:1b:c4:65:4b:9d:89:1d:47:e9: 82:80:c1:c9:ec:49:e7:b7:26:77:dc:6c:25:6d:fc:15:7e:00: 19:a5:f6:7d:de:31:37:27:25:d5:66:e5:d9:ac:16:3e:15:b3: 36:65:00:d1:69:83:e8:56:13:15:bd:36:b8:6e:62:fc:a9:f9: ce:83:b8:b8:08:d3:00:63:a3:ec:b4:f5:b6:31:8a:9b:83:78: f4:39:94:54:19:bd:dd:98:ea:e4:62:b7:48:fb:4a:8d:1f:cd: 00:44:60:1e:e3:06:b8:47:8f:cf:9e:9d:93:94:9d:fe:53:78: f2:e0:9d:16:7c:6b:c3:80:4e:ed:48:32:de:9d:70:c5:93:f1: b5:6f:6b:53:db:d6:b6:ab:6c:01:e6:25:46:b9:f8:45:6d:46: 1e:5f:c1:62:2b:5c:8c:82:b6:83:56:96:52:5a:30:94:d2:7b: 76:da:96:9e:19:39:ef:0c:36:09:44:1d:ce:2c:70:ac:6d:1b: a6:12:51:e1:56:14:8b:7a:4e:2f:1f:e4:93:1f:07:88:95:2e: 06:3c:c0:61:f9:40:7a:ef:06:5b:4d:7e:c0:bd:13:54:6a:1b: 61:bb:95:db -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nnotc4rtSdE2Pf/HtN2+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYjE0M2Q3ZGIxMTU5NTdjNWRiOWFmODk1ZjRlN2UxNWI3 YjZiMTcwHhcNMjYwMTAxMjAxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTlkY2M1MjU5ZjJjM2MzMmY4ZWFlMGQxN2YwMzRiM2VmOTMzYmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArREvB5Fco94A0+i/verGGcWo/bll d58JjIYeHWLzLPfWp4P6cj9Sds2IgkEZC6gD/P54C39m8ZqSxOqTmiFdGyloaZau u1NtL2gSB2pbZWn9uFdme3TwyD0VafUxYHShClKKQran+hGuPqNkEyQ+f1TRL/8s 3qrSHP9it5pQEV4JasyI8pBveaAaCRGd6WVT3yV8kAYR/CDkxyDxm96fXIdEODp9 z/QBQjmw64WKFFxFiSqnCWI0UO58Eh0aKujqlN4+4EAKuaA7bm1PujpsLK5+M8gD HTQ6NRAlC3xTtCtUVZ8dETV2JQnmzM4qrEMQAHuwfr3MFa1lZCpF2vEr0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE6dzFJZ8sPDL46uDRfwNLPvkzvhMB8GA1UdIwQY MBaAFJKxQ9fbEVlXxdua+JX05+Fbe2sXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3JGRDE5c1JXVmZGMjVyNGxmVG40VnQ3YXhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kMTE0NDMtMTM3Mi00Y2ZjLThkNTct NmQzYTg4MTUzNzY3LzEvVHAzTVVsbnl3OE12anE0TkZfQTBzLS1UTy1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9kMTE0NDMtMTM3Mi00Y2ZjLThkNTctNmQzYTg4MTUzNzY3 LzEva3JGRDE5c1JXVmZGMjVyNGxmVG40VnQ3YXhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW91UMA0G CSqGSIb3DQEBCwUAA4IBAQCWE5TyckRxmFpogW27QgFlODEx1Jdowe+NsFIbxGVL nYkdR+mCgMHJ7EnntyZ33GwlbfwVfgAZpfZ93jE3JyXVZuXZrBY+FbM2ZQDRaYPo VhMVvTa4bmL8qfnOg7i4CNMAY6PstPW2MYqbg3j0OZRUGb3dmOrkYrdI+0qNH80A RGAe4wa4R4/Pnp2TlJ3+U3jy4J0WfGvDgE7tSDLenXDFk/G1b2tT29a2q2wB5iVG ufhFbUYeX8FiK1yMgraDVpZSWjCU0nt22paeGTnvDDYJRB3OLHCsbRumElHhVhSL ek4vH+STHweIlS4GPMBh+UB67wZbTX7AvRNUahthu5Xb -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:04 2026 by rpki-client