This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/TKnfOm4ncEvg1o32_XggY8G_M1w.roa File: TKnfOm4ncEvg1o32_XggY8G_M1w.roa (raw, json) Hash identifier: 0iZMIhG/WHr4eSkp/IKOXtdgHPLNekvLpZ/qpsVoNRs= Subject key identifier: 4C:A9:DF:3A:6E:27:70:4B:E0:D6:8D:F6:FD:78:20:63:C1:BF:33:5C Certificate issuer: /CN=1bfe6b9a0e6898a7a2e9d84d3dbf6327b453e662 Certificate serial: 019B7D5D2046E661F414BA9D16E62AFDFBDB Authority key identifier: 1B:FE:6B:9A:0E:68:98:A7:A2:E9:D8:4D:3D:BF:63:27:B4:53:E6:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/TKnfOm4ncEvg1o32_XggY8G_M1w.roa Signing time: Fri 02 Jan 2026 06:20:13 +0000 ROA not before: Fri 02 Jan 2026 06:20:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202753 IP address blocks: 185.133.25.0/24 maxlen: 24 185.133.26.0/23 maxlen: 23 2a00:6700::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:20:46:e6:61:f4:14:ba:9d:16:e6:2a:fd:fb:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bfe6b9a0e6898a7a2e9d84d3dbf6327b453e662 Validity Not Before: Jan 2 06:20:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ca9df3a6e27704be0d68df6fd782063c1bf335c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2f:19:fb:44:5e:a1:19:84:12:11:84:78:37: 71:5d:be:ff:6b:6f:47:50:21:6d:23:a8:06:2d:3a: f1:e2:f4:7a:05:f5:f5:fe:43:01:24:57:ad:6d:0b: c8:d4:b9:f1:cc:9b:30:8b:e8:42:da:fe:43:c7:5f: 25:4d:66:0d:7e:0f:98:3c:ff:3d:2e:81:94:a7:7a: b4:db:02:7c:fc:c7:8d:8e:d2:64:7f:c3:52:3f:3a: e4:4f:da:d5:db:7a:6e:cd:d8:8d:62:2f:c2:47:e1: 97:08:a4:3b:69:66:13:ac:bf:81:c6:c1:df:e3:48: 58:ac:f1:eb:51:0e:db:ad:28:8f:8f:c8:38:73:4f: 1e:b1:c3:47:fb:2d:e3:7b:c4:8a:be:7b:7c:b2:35: 45:1a:cb:04:64:59:e4:32:35:3e:ae:64:ee:3d:32: fe:87:50:b3:af:1d:18:a1:ce:89:cd:bf:30:a1:e4: 99:b9:a2:5b:1e:5a:67:9b:19:03:2b:1f:81:e2:af: 1f:cc:d3:6d:ac:09:ac:0f:91:1c:3d:b1:d6:c1:40: 19:bb:c0:3b:82:b7:29:de:8e:4c:60:77:8b:3c:69: cd:43:6f:87:84:c1:13:0c:21:0b:ee:ff:33:67:f3: 98:fd:2d:75:58:aa:51:02:27:0c:ad:bf:9c:65:ef: f2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:A9:DF:3A:6E:27:70:4B:E0:D6:8D:F6:FD:78:20:63:C1:BF:33:5C X509v3 Authority Key Identifier: keyid:1B:FE:6B:9A:0E:68:98:A7:A2:E9:D8:4D:3D:BF:63:27:B4:53:E6:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/TKnfOm4ncEvg1o32_XggY8G_M1w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.133.25.0-185.133.27.255 IPv6: 2a00:6700::/48 Signature Algorithm: sha256WithRSAEncryption c6:9b:34:85:8e:69:8b:85:09:7b:49:47:a1:ff:26:d9:cf:01: 7a:70:03:38:ec:14:bf:96:3f:b0:7d:33:eb:34:21:00:5b:0f: 6c:68:be:ec:b6:ec:6a:26:de:42:a9:a8:26:78:f1:87:b0:29: 5d:ce:d5:d2:fd:b3:9b:c3:6d:94:bc:00:e6:6b:89:02:a0:60: 9d:46:09:22:b0:28:59:02:37:04:62:44:17:da:8e:54:34:80: 93:84:be:10:ad:2e:1f:fa:a1:bd:25:a6:1e:61:b6:af:9b:c6: 12:2a:2e:58:a3:1a:a9:2f:1d:2a:e0:60:79:e7:af:08:4e:23: 02:ab:01:7c:09:67:78:41:9a:c2:f9:20:9a:4f:46:fd:d8:a1: 48:cd:40:79:65:db:ee:29:70:03:ef:af:1a:81:71:8a:21:76: 20:07:88:cf:14:d5:e2:57:20:b0:87:81:bb:44:12:4b:76:a9: ae:88:68:3f:a1:dc:9a:63:f8:e2:05:59:ba:cf:f0:14:d9:6b: fd:e3:21:92:1b:be:d1:c3:ab:0f:bf:ea:69:cb:0d:1a:fd:8e: fd:6d:56:61:43:47:da:5a:41:5f:e1:d4:09:f5:8d:07:63:a6: f0:b7:4d:eb:12:6a:15:f5:ac:2e:c2:ec:7c:b8:9a:9e:d0:a1: b4:98:02:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt9XSBG5mH0FLqdFuYq/fvbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiZmU2YjlhMGU2ODk4YTdhMmU5ZDg0ZDNkYmY2MzI3YjQ1 M2U2NjIwHhcNMjYwMTAyMDYyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Y2E5ZGYzYTZlMjc3MDRiZTBkNjhkZjZmZDc4MjA2M2MxYmYzMzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqi8Z+0ReoRmEEhGEeDdxXb7/a29H UCFtI6gGLTrx4vR6BfX1/kMBJFetbQvI1LnxzJswi+hC2v5Dx18lTWYNfg+YPP89 LoGUp3q02wJ8/MeNjtJkf8NSPzrkT9rV23puzdiNYi/CR+GXCKQ7aWYTrL+BxsHf 40hYrPHrUQ7brSiPj8g4c08escNH+y3je8SKvnt8sjVFGssEZFnkMjU+rmTuPTL+ h1Czrx0Yoc6Jzb8woeSZuaJbHlpnmxkDKx+B4q8fzNNtrAmsD5EcPbHWwUAZu8A7 grcp3o5MYHeLPGnNQ2+HhMETDCEL7v8zZ/OY/S11WKpRAicMrb+cZe/y+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEyp3zpuJ3BL4NaN9v14IGPBvzNcMB8GA1UdIwQY MBaAFBv+a5oOaJinounYTT2/Yye0U+ZiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR181cm1nNW9tS2VpNmRoTlBiOWpKN1JUNW1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hNTY3MjMtZDM3Yy00MTdiLWE4YTEt NmUyMmJmNDM2MzA0LzEvVEtuZk9tNG5jRXZnMW8zMl9YZ2dZOEdfTTF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hNTY3MjMtZDM3Yy00MTdiLWE4YTEtNmUyMmJmNDM2MzA0 LzEvR181cm1nNW9tS2VpNmRoTlBiOWpKN1JUNW1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAUBAIAATAOMAwDBAC5hRkD BAK5hRgwDwQCAAIwCQMHACoAZwAAADANBgkqhkiG9w0BAQsFAAOCAQEAxps0hY5p i4UJe0lHof8m2c8BenADOOwUv5Y/sH0z6zQhAFsPbGi+7LbsaibeQqmoJnjxh7Ap Xc7V0v2zm8NtlLwA5muJAqBgnUYJIrAoWQI3BGJEF9qOVDSAk4S+EK0uH/qhvSWm HmG2r5vGEiouWKMaqS8dKuBgeeevCE4jAqsBfAlneEGawvkgmk9G/dihSM1AeWXb 7ilwA++vGoFxiiF2IAeIzxTV4lcgsIeBu0QSS3aprohoP6HcmmP44gVZus/wFNlr /eMhkhu+0cOrD7/qacsNGv2O/W1WYUNH2lpBX+HUCfWNB2Om8LdN6xJqFfWsLsLs fLiantChtJgCRA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:10 2026 by rpki-client