This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/TgwXo42orCf9sT1fT8jrPa56jeU.roa File: TgwXo42orCf9sT1fT8jrPa56jeU.roa (raw, json) Hash identifier: GfcY69aJuiib4Ntp1/VS83/ai4i4eQHgc9DzBgB534U= Subject key identifier: 4E:0C:17:A3:8D:A8:AC:27:FD:B1:3D:5F:4F:C8:EB:3D:AE:7A:8D:E5 Certificate issuer: /CN=f5a500f397623ab1d56004835467fccf3d0a3b0f Certificate serial: 019B76EB2DBF597DCE9CD00EA97C39C58F27 Authority key identifier: F5:A5:00:F3:97:62:3A:B1:D5:60:04:83:54:67:FC:CF:3D:0A:3B:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aUA85diOrHVYASDVGf8zz0KOw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/TgwXo42orCf9sT1fT8jrPa56jeU.roa Signing time: Thu 01 Jan 2026 00:18:02 +0000 ROA not before: Thu 01 Jan 2026 00:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209040 IP address blocks: 46.167.40.0/21 maxlen: 24 178.19.80.0/20 maxlen: 24 185.54.116.0/22 maxlen: 24 216.31.64.0/18 maxlen: 24 2a00:f420::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.crl rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft rsync://rpki.ripe.net/repository/DEFAULT/9aUA85diOrHVYASDVGf8zz0KOw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:2d:bf:59:7d:ce:9c:d0:0e:a9:7c:39:c5:8f:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5a500f397623ab1d56004835467fccf3d0a3b0f Validity Not Before: Jan 1 00:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e0c17a38da8ac27fdb13d5f4fc8eb3dae7a8de5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b7:db:67:f4:49:eb:05:d5:24:82:f0:56:ef: 38:79:7e:4d:93:df:c8:2c:a5:15:f1:b6:9c:f3:46: 72:a8:30:f5:c8:dc:d5:74:7d:90:2e:f2:54:66:10: 53:4d:1d:a3:f8:67:62:64:69:a1:7b:4b:24:08:ef: cc:55:75:2a:7a:ef:18:a2:3f:eb:f5:ae:e3:22:57: 05:50:66:21:96:76:67:77:14:88:e6:e2:51:91:79: 4e:f6:96:05:5f:1b:90:d6:f3:b8:b1:48:67:be:74: 3c:ca:9e:6f:d6:55:86:21:33:73:37:b3:09:6b:98: 02:19:ee:16:fa:41:cd:02:3c:a6:ea:df:2f:a8:53: e5:cf:2b:47:8a:7a:2d:ef:2e:81:33:db:1f:93:98: 0c:27:ee:02:d7:8e:0c:fd:61:39:f9:c5:4d:b3:88: 01:57:80:d2:a7:b5:64:02:9a:a8:8d:ba:f8:9b:08: 4d:d6:12:d4:fc:73:c9:89:60:89:8e:81:5c:99:04: 7c:73:25:ce:f3:7e:0a:37:63:d6:d3:ef:f5:be:90: fc:4e:52:6f:b5:bf:7a:30:e3:55:e0:8c:fb:8c:77: d6:21:d8:7d:41:aa:ca:0f:c4:91:cd:5e:ad:f9:c1: e4:f1:27:85:4b:14:d8:72:e4:6c:60:2b:ce:5f:40: c1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:0C:17:A3:8D:A8:AC:27:FD:B1:3D:5F:4F:C8:EB:3D:AE:7A:8D:E5 X509v3 Authority Key Identifier: keyid:F5:A5:00:F3:97:62:3A:B1:D5:60:04:83:54:67:FC:CF:3D:0A:3B:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aUA85diOrHVYASDVGf8zz0KOw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/TgwXo42orCf9sT1fT8jrPa56jeU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.167.40.0/21 178.19.80.0/20 185.54.116.0/22 216.31.64.0/18 IPv6: 2a00:f420::/32 Signature Algorithm: sha256WithRSAEncryption 61:84:83:fc:71:83:cc:ad:1d:7b:6a:e0:57:87:38:79:34:50: 24:98:34:77:90:8f:ee:1b:98:aa:4b:f7:a5:23:b4:63:5a:7f: 9e:4b:3d:1f:4a:3a:93:80:da:a4:2a:21:10:d9:91:fc:28:31: 98:3c:b3:21:6e:91:e6:ef:0f:d5:66:4e:5e:38:68:fd:75:2a: 90:da:4a:ea:94:09:80:b6:cc:6a:06:e3:26:2a:df:60:13:cc: 4d:1d:e6:a2:e0:50:d2:e6:8a:b9:cd:94:1c:9f:5f:f3:c2:5a: 66:8d:fc:9a:10:4c:cb:59:72:a3:dc:2c:43:88:5c:36:c6:37: dd:3c:80:2f:68:88:d0:29:86:bf:34:43:f5:dc:dc:e6:be:3b: bd:a3:0a:d0:e6:7d:d4:79:ed:0e:3c:23:67:91:63:1a:b6:a1: 6d:18:78:3c:b5:d4:35:18:8f:4a:6a:b0:0b:49:27:d4:2a:09: 3e:13:e4:54:f4:86:6c:67:c6:4c:ec:64:84:52:d4:79:7e:0b: de:8c:e5:82:85:8d:90:ca:d7:48:08:26:b1:f1:6a:c9:91:ec: 6b:b2:d0:4b:e3:ab:a4:0b:6f:a7:de:88:53:d8:34:95:6a:1a: 8e:6d:59:df:fd:a7:12:ae:55:99:b2:69:fc:c9:20:18:aa:e9: c6:1c:1e:be -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt26y2/WX3OnNAOqXw5xY8nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1YTUwMGYzOTc2MjNhYjFkNTYwMDQ4MzU0NjdmY2NmM2Qw YTNiMGYwHhcNMjYwMTAxMDAxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTBjMTdhMzhkYThhYzI3ZmRiMTNkNWY0ZmM4ZWIzZGFlN2E4ZGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrfbZ/RJ6wXVJILwVu84eX5Nk9/I LKUV8bac80ZyqDD1yNzVdH2QLvJUZhBTTR2j+GdiZGmhe0skCO/MVXUqeu8Yoj/r 9a7jIlcFUGYhlnZndxSI5uJRkXlO9pYFXxuQ1vO4sUhnvnQ8yp5v1lWGITNzN7MJ a5gCGe4W+kHNAjym6t8vqFPlzytHinot7y6BM9sfk5gMJ+4C144M/WE5+cVNs4gB V4DSp7VkApqojbr4mwhN1hLU/HPJiWCJjoFcmQR8cyXO834KN2PW0+/1vpD8TlJv tb96MONV4Iz7jHfWIdh9QarKD8SRzV6t+cHk8SeFSxTYcuRsYCvOX0DBEwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFE4MF6ONqKwn/bE9X0/I6z2ueo3lMB8GA1UdIwQY MBaAFPWlAPOXYjqx1WAEg1Rn/M89CjsPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWFVQTg1ZGlPckhWWUFTRFZHZjh6ejBLT3c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9hNzYwZjMtMDA2Mi00Mzc0LTgyOTAt ZTc2ZmQ5YzlkYzhjLzEvVGd3WG80Mm9yQ2Y5c1QxZlQ4anJQYTU2amVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9hNzYwZjMtMDA2Mi00Mzc0LTgyOTAtZTc2ZmQ5YzlkYzhj LzEvOWFVQTg1ZGlPckhWWUFTRFZHZjh6ejBLT3c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDLqcoAwQE shNQAwQCuTZ0AwQG2B9AMA0EAgACMAcDBQAqAPQgMA0GCSqGSIb3DQEBCwUAA4IB AQBhhIP8cYPMrR17auBXhzh5NFAkmDR3kI/uG5iqS/elI7RjWn+eSz0fSjqTgNqk KiEQ2ZH8KDGYPLMhbpHm7w/VZk5eOGj9dSqQ2krqlAmAtsxqBuMmKt9gE8xNHeai 4FDS5oq5zZQcn1/zwlpmjfyaEEzLWXKj3CxDiFw2xjfdPIAvaIjQKYa/NEP13Nzm vju9owrQ5n3Uee0OPCNnkWMatqFtGHg8tdQ1GI9KarALSSfUKgk+E+RU9IZsZ8ZM 7GSEUtR5fgvejOWChY2QytdICCax8WrJkexrstBL46ukC2+n3ohT2DSVahqObVnf /acSrlWZsmn8ySAYqunGHB6+ -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:38 2026 by rpki-client