This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/TiOuXl2Q6wOQFGF7jg66qaSdky8.roa File: TiOuXl2Q6wOQFGF7jg66qaSdky8.roa (raw, json) Hash identifier: wT30EzG4ZVMuETn0p/EI2klu+YujqvMu+EM2q0pIlpI= Subject key identifier: 4E:23:AE:5E:5D:90:EB:03:90:14:61:7B:8E:0E:BA:A9:A4:9D:93:2F Certificate issuer: /CN=55b2059b748d6ddd5c5a0c1d35e975ef7ba88442 Certificate serial: 019B7DCB36EA1CE1CB08E4EBE0E6BE040301 Authority key identifier: 55:B2:05:9B:74:8D:6D:DD:5C:5A:0C:1D:35:E9:75:EF:7B:A8:84:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbIFm3SNbd1cWgwdNel173uohEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/TiOuXl2Q6wOQFGF7jg66qaSdky8.roa Signing time: Fri 02 Jan 2026 08:20:28 +0000 ROA not before: Fri 02 Jan 2026 08:20:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9145 IP address blocks: 193.30.76.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.mft rsync://rpki.ripe.net/repository/DEFAULT/VbIFm3SNbd1cWgwdNel173uohEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:36:ea:1c:e1:cb:08:e4:eb:e0:e6:be:04:03:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55b2059b748d6ddd5c5a0c1d35e975ef7ba88442 Validity Not Before: Jan 2 08:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e23ae5e5d90eb039014617b8e0ebaa9a49d932f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d3:3a:27:bc:9b:1f:b1:bd:0e:1d:fe:82:f2: b8:ea:f1:e7:39:9f:9d:5b:cf:32:1c:64:c1:aa:1e: fd:bb:2c:bf:e1:c7:bb:d3:cb:fc:34:7b:5a:ad:2e: 5d:b4:cb:bf:1a:72:03:c4:d7:c0:8f:24:ec:80:fc: 3c:60:e5:f8:51:77:8e:f0:c5:57:9a:54:1e:b0:0e: 70:2c:1f:b4:66:a2:b3:10:d7:38:58:f6:6e:a2:ee: 53:a8:cc:c6:07:2a:b9:7e:5a:a3:3e:9c:8c:56:59: fc:90:e0:63:bb:43:1f:90:f6:7d:bb:cc:de:4b:35: e0:3e:e1:29:37:8d:dc:b3:dc:85:37:f2:5b:c3:c3: f4:73:79:01:7b:33:67:60:c4:07:3e:38:85:2f:d2: 2e:3e:76:50:80:cf:96:54:bd:4e:fb:56:5f:79:31: ab:d1:d5:b8:62:59:1e:56:6d:7d:69:3d:1d:3e:7c: 99:03:d6:19:3c:ad:7a:36:18:93:89:eb:3d:bf:82: b0:50:85:a4:b5:3e:72:61:aa:dd:18:9b:31:f9:04: 5c:d7:15:ba:c6:0e:b3:a1:27:ff:46:01:2d:e5:57: b7:84:e6:60:29:ca:f5:70:c8:8d:70:83:52:b4:d3: 10:93:a8:79:40:64:63:7c:98:ad:9c:46:ee:a9:ad: f6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:23:AE:5E:5D:90:EB:03:90:14:61:7B:8E:0E:BA:A9:A4:9D:93:2F X509v3 Authority Key Identifier: keyid:55:B2:05:9B:74:8D:6D:DD:5C:5A:0C:1D:35:E9:75:EF:7B:A8:84:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbIFm3SNbd1cWgwdNel173uohEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/TiOuXl2Q6wOQFGF7jg66qaSdky8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.30.76.0/23 Signature Algorithm: sha256WithRSAEncryption 85:76:a3:e9:96:6a:b7:61:96:07:e4:9e:5c:05:4c:c8:de:48: e8:ae:0d:74:7f:2e:81:37:b9:00:57:a8:3d:87:f5:59:bf:8e: 61:72:69:3d:f7:4a:4e:ed:27:a9:8d:33:87:73:2b:c0:1e:65: df:54:69:60:68:fb:8b:8c:f3:98:bf:7e:3e:05:9b:83:20:84: 65:19:98:54:15:76:49:d9:6f:62:fd:b8:ad:c8:93:c8:8d:46: 7a:0e:ef:df:eb:19:cd:0f:20:26:33:1b:a0:ec:f7:23:2f:12: 10:c7:2d:1a:18:d6:56:72:89:e7:cd:ce:3b:f7:f6:cf:9c:78: 7a:32:05:02:83:67:b6:c7:e9:92:5b:b1:8a:8a:ef:87:49:0f: 45:7d:ae:07:46:64:d8:0d:7e:0f:59:ae:64:89:51:22:d5:31: 06:e2:d6:30:49:bc:5c:2e:0d:85:25:aa:11:fe:04:2f:79:9e: b6:51:f0:da:33:e7:e2:de:1a:25:74:91:c1:ac:c8:8a:fb:6d: ef:3e:b8:0c:34:ec:9b:9d:ec:0e:bf:e3:76:1e:de:6f:11:68: d4:e4:91:85:95:c6:e7:75:1f:4f:19:5b:91:a1:cf:50:44:2a: 05:a9:84:0d:cb:e8:a5:2d:f4:46:ae:a4:39:da:ed:83:d0:76: 14:d3:0f:17 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yzbqHOHLCOTr4Oa+BAMBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YjIwNTliNzQ4ZDZkZGQ1YzVhMGMxZDM1ZTk3NWVmN2Jh ODg0NDIwHhcNMjYwMTAyMDgyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTIzYWU1ZTVkOTBlYjAzOTAxNDYxN2I4ZTBlYmFhOWE0OWQ5MzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9M6J7ybH7G9Dh3+gvK46vHnOZ+d W88yHGTBqh79uyy/4ce708v8NHtarS5dtMu/GnIDxNfAjyTsgPw8YOX4UXeO8MVX mlQesA5wLB+0ZqKzENc4WPZuou5TqMzGByq5flqjPpyMVln8kOBju0MfkPZ9u8ze SzXgPuEpN43cs9yFN/Jbw8P0c3kBezNnYMQHPjiFL9IuPnZQgM+WVL1O+1ZfeTGr 0dW4YlkeVm19aT0dPnyZA9YZPK16NhiTies9v4KwUIWktT5yYardGJsx+QRc1xW6 xg6zoSf/RgEt5Ve3hOZgKcr1cMiNcINStNMQk6h5QGRjfJitnEbuqa32jwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE4jrl5dkOsDkBRhe44OuqmknZMvMB8GA1UdIwQY MBaAFFWyBZt0jW3dXFoMHTXpde97qIRCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmJJRm0zU05iZDFjV2d3ZE5lbDE3M3VvaEVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mOGU2N2YtOGRkMS00ZjJjLThkZTkt MjMwNjRlMjFkMTRkLzEvVGlPdVhsMlE2d09RRkdGN2pnNjZxYVNka3k4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9mOGU2N2YtOGRkMS00ZjJjLThkZTktMjMwNjRlMjFkMTRk LzEvVmJJRm0zU05iZDFjV2d3ZE5lbDE3M3VvaEVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwR5MMA0G CSqGSIb3DQEBCwUAA4IBAQCFdqPplmq3YZYH5J5cBUzI3kjorg10fy6BN7kAV6g9 h/VZv45hcmk990pO7SepjTOHcyvAHmXfVGlgaPuLjPOYv34+BZuDIIRlGZhUFXZJ 2W9i/bityJPIjUZ6Du/f6xnNDyAmMxug7PcjLxIQxy0aGNZWconnzc479/bPnHh6 MgUCg2e2x+mSW7GKiu+HSQ9Ffa4HRmTYDX4PWa5kiVEi1TEG4tYwSbxcLg2FJaoR /gQveZ62UfDaM+fi3holdJHBrMiK+23vPrgMNOybnewOv+N2Ht5vEWjU5JGFlcbn dR9PGVuRoc9QRCoFqYQNy+ilLfRGrqQ52u2D0HYU0w8X -----END CERTIFICATE-----Generated at Mon Feb 9 23:42:02 2026 by rpki-client