This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/tgcnf14aynpCDHSaD58uVjKIxEc.roa File: tgcnf14aynpCDHSaD58uVjKIxEc.roa (raw, json) Hash identifier: DCplR2F0sZ78zHn6+9bhiFCaCAnd3KIcfPI0d7dZVY0= Subject key identifier: B6:07:27:7F:5E:1A:CA:7A:42:0C:74:9A:0F:9F:2E:56:32:88:C4:47 Certificate issuer: /CN=6e3ec972f9760b855f1d4390bc375b3fa3d411b6 Certificate serial: 019B7B36EE8AEB9DE943FD80618B601A868C Authority key identifier: 6E:3E:C9:72:F9:76:0B:85:5F:1D:43:90:BC:37:5B:3F:A3:D4:11:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/tgcnf14aynpCDHSaD58uVjKIxEc.roa Signing time: Thu 01 Jan 2026 20:19:16 +0000 ROA not before: Thu 01 Jan 2026 20:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201367 IP address blocks: 185.76.56.0/24 maxlen: 24 185.76.57.0/24 maxlen: 24 185.76.58.0/24 maxlen: 24 185.76.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.crl rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft rsync://rpki.ripe.net/repository/DEFAULT/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:ee:8a:eb:9d:e9:43:fd:80:61:8b:60:1a:86:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e3ec972f9760b855f1d4390bc375b3fa3d411b6 Validity Not Before: Jan 1 20:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b607277f5e1aca7a420c749a0f9f2e563288c447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c8:4a:78:cf:82:08:cd:97:b9:87:b7:95:7a: 3e:b0:87:65:f1:20:b2:02:98:e3:1c:f2:e8:3f:8a: bb:a5:a5:4e:90:1d:6a:9f:03:00:89:63:bf:01:7b: ff:39:e5:10:62:ec:d1:2c:a6:a3:28:b9:a6:df:58: 11:19:4d:3e:8b:d1:13:a9:b0:d6:24:4c:12:b7:5a: 3a:6d:cb:0a:da:2e:76:a5:69:63:df:06:fa:f1:0a: 79:ed:78:95:4d:bd:fd:71:3a:28:e5:56:f7:96:c7: 99:a7:91:06:17:33:18:51:59:6f:24:88:d2:7d:bf: 94:12:6b:e3:98:62:04:4c:f6:9c:19:cd:49:d6:d1: b1:a0:0b:bb:1a:0a:cb:34:f7:bc:9b:91:97:15:24: 82:49:8a:b3:f5:36:d3:93:86:12:82:76:1c:54:20: 55:8a:d7:90:08:da:5f:e3:56:b6:3b:3a:14:c4:e0: 0d:fc:d0:1c:03:36:15:5e:a5:ed:fe:2c:98:54:d5: 28:0d:04:0b:37:54:8c:bd:aa:b1:a1:96:19:59:42: ae:82:ab:91:51:92:2f:5b:e5:b7:16:dc:64:be:ad: a5:a3:b8:10:72:7d:d1:6a:ce:18:2d:5e:e8:3d:05: f5:d6:00:d8:3d:9d:cb:87:39:e1:ef:49:1f:cf:98: af:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:07:27:7F:5E:1A:CA:7A:42:0C:74:9A:0F:9F:2E:56:32:88:C4:47 X509v3 Authority Key Identifier: keyid:6E:3E:C9:72:F9:76:0B:85:5F:1D:43:90:BC:37:5B:3F:A3:D4:11:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/tgcnf14aynpCDHSaD58uVjKIxEc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.76.56.0/22 Signature Algorithm: sha256WithRSAEncryption c4:50:f0:f5:0a:4d:a7:c3:db:5c:b2:b5:f5:2e:ae:b2:7f:4e: ad:f3:5f:79:e8:41:66:8d:30:88:a0:82:3b:5c:f3:b3:f6:61: 59:8c:c1:f2:0b:e6:d5:7b:ca:ab:81:e8:9d:27:72:6d:1d:f6: 4b:02:b7:3a:61:bb:1f:3b:32:bd:2a:97:87:bc:15:4e:6e:e6: e1:5b:f9:d4:28:62:29:9c:17:b6:7c:d0:6e:a8:4a:3e:ca:3e: a3:23:f2:7f:d7:c1:f9:55:cc:7b:76:ca:55:a6:de:7d:a0:f3: 9f:20:6d:b6:b5:a5:23:f9:5f:67:a6:87:73:b5:53:2a:fc:1b: 0c:30:88:6e:7c:4d:08:ec:bb:22:f9:eb:af:ac:ae:5a:7e:66: ff:53:d7:45:28:f9:b4:4b:70:1a:09:57:f0:12:a3:7e:fb:cc: 90:aa:52:0d:6e:ae:35:c4:93:56:74:14:1a:f4:5c:02:6e:a4: df:5e:24:66:58:c8:aa:80:1e:98:fd:9d:26:52:b1:24:2d:6e: a9:04:4e:cf:19:25:6d:73:fc:b7:48:bf:24:af:4c:7e:be:89: b6:b7:dc:9f:3c:d1:9d:22:e0:d2:47:17:e7:b2:d4:75:63:8c: 51:a4:e7:8e:e9:3a:cf:97:3c:e3:30:7c:75:10:00:72:9d:9d: 8b:84:dd:5b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nu6K653pQ/2AYYtgGoaMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlM2VjOTcyZjk3NjBiODU1ZjFkNDM5MGJjMzc1YjNmYTNk NDExYjYwHhcNMjYwMTAxMjAxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjA3Mjc3ZjVlMWFjYTdhNDIwYzc0OWEwZjlmMmU1NjMyODhjNDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2shKeM+CCM2XuYe3lXo+sIdl8SCy ApjjHPLoP4q7paVOkB1qnwMAiWO/AXv/OeUQYuzRLKajKLmm31gRGU0+i9ETqbDW JEwSt1o6bcsK2i52pWlj3wb68Qp57XiVTb39cToo5Vb3lseZp5EGFzMYUVlvJIjS fb+UEmvjmGIETPacGc1J1tGxoAu7GgrLNPe8m5GXFSSCSYqz9TbTk4YSgnYcVCBV iteQCNpf41a2OzoUxOAN/NAcAzYVXqXt/iyYVNUoDQQLN1SMvaqxoZYZWUKugquR UZIvW+W3Ftxkvq2lo7gQcn3Ras4YLV7oPQX11gDYPZ3Lhznh70kfz5iv+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLYHJ39eGsp6Qgx0mg+fLlYyiMRHMB8GA1UdIwQY MBaAFG4+yXL5dguFXx1DkLw3Wz+j1BG2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmo3SmN2bDJDNFZmSFVPUXZEZGJQNlBVRWJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85ZGFjOWMtODVjNi00NTcyLWFkNjAt MTQ1MTJlN2U1OWVmLzEvdGdjbmYxNGF5bnBDREhTYUQ1OHVWaktJeEVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS85ZGFjOWMtODVjNi00NTcyLWFkNjAtMTQ1MTJlN2U1OWVm LzEvYmo3SmN2bDJDNFZmSFVPUXZEZGJQNlBVRWJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUw4MA0G CSqGSIb3DQEBCwUAA4IBAQDEUPD1Ck2nw9tcsrX1Lq6yf06t81956EFmjTCIoII7 XPOz9mFZjMHyC+bVe8qrgeidJ3JtHfZLArc6YbsfOzK9KpeHvBVObubhW/nUKGIp nBe2fNBuqEo+yj6jI/J/18H5Vcx7dspVpt59oPOfIG22taUj+V9npodztVMq/BsM MIhufE0I7Lsi+euvrK5afmb/U9dFKPm0S3AaCVfwEqN++8yQqlINbq41xJNWdBQa 9FwCbqTfXiRmWMiqgB6Y/Z0mUrEkLW6pBE7PGSVtc/y3SL8kr0x+vom2t9yfPNGd IuDSRxfnstR1Y4xRpOeO6TrPlzzjMHx1EABynZ2LhN1b -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:47 2026 by rpki-client