This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/tt6jpkDuqE0CT-_FmJx73h6zRuI.roa File: tt6jpkDuqE0CT-_FmJx73h6zRuI.roa (raw, json) Hash identifier: YjG/I9+R+aYdPBq5tPHljKWlpfWn8OqsHy3BqigHS4I= Subject key identifier: B6:DE:A3:A6:40:EE:A8:4D:02:4F:EF:C5:98:9C:7B:DE:1E:B3:46:E2 Certificate issuer: /CN=34859d8a26c8e888777f4e801b20b785dee654cf Certificate serial: 019B77C71719D80E6FE7C9D658A494187FC2 Authority key identifier: 34:85:9D:8A:26:C8:E8:88:77:7F:4E:80:1B:20:B7:85:DE:E6:54:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIWdiibI6Ih3f06AGyC3hd7mVM8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/tt6jpkDuqE0CT-_FmJx73h6zRuI.roa Signing time: Thu 01 Jan 2026 04:18:14 +0000 ROA not before: Thu 01 Jan 2026 04:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48178 IP address blocks: 193.202.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.crl rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.mft rsync://rpki.ripe.net/repository/DEFAULT/NIWdiibI6Ih3f06AGyC3hd7mVM8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:17:19:d8:0e:6f:e7:c9:d6:58:a4:94:18:7f:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34859d8a26c8e888777f4e801b20b785dee654cf Validity Not Before: Jan 1 04:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b6dea3a640eea84d024fefc5989c7bde1eb346e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:91:dc:f6:f4:8b:9a:76:10:e2:5a:7c:ad:36: 2f:73:1f:d4:cf:99:68:76:4f:49:50:b8:80:9e:70: 99:ae:c4:2f:e5:70:2a:1c:9b:31:e1:b0:1a:ca:98: b8:dd:9b:b0:e8:7b:67:6c:b0:bc:11:23:ae:5c:f6: 20:3a:0c:92:66:b6:88:f8:ff:bb:2f:dc:d1:43:ea: a0:59:66:88:bc:c6:8c:3d:ed:af:05:3d:e0:09:e8: 13:26:f4:86:fc:0b:7c:d6:a1:7f:17:6c:6e:20:84: 3b:7d:36:65:7c:21:dd:ca:94:9e:f1:a7:15:7a:17: 7d:34:e7:0b:3f:2e:7d:f2:14:db:84:d8:e9:56:40: 1a:c3:ac:39:9c:62:ef:98:db:50:96:9e:4c:67:59: 45:42:0f:0d:f0:64:ef:f6:53:4b:a4:df:6a:78:2c: bd:cb:10:08:4e:01:e1:84:3a:6d:ce:12:2e:a0:ae: 3d:56:28:bd:bb:37:4d:44:0b:38:a7:20:86:a8:18: fe:bb:23:ab:33:60:ff:5d:79:cd:75:41:38:c7:2f: b7:d3:4a:8f:01:0c:54:1c:44:3c:31:1b:7d:da:8f: d0:a6:fa:60:34:48:17:a2:f2:b5:56:ce:a4:8a:c4: a4:f6:89:c2:0c:c2:2f:b6:2d:d0:01:b8:b2:aa:14: ff:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:DE:A3:A6:40:EE:A8:4D:02:4F:EF:C5:98:9C:7B:DE:1E:B3:46:E2 X509v3 Authority Key Identifier: keyid:34:85:9D:8A:26:C8:E8:88:77:7F:4E:80:1B:20:B7:85:DE:E6:54:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIWdiibI6Ih3f06AGyC3hd7mVM8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/tt6jpkDuqE0CT-_FmJx73h6zRuI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.202.21.0/24 Signature Algorithm: sha256WithRSAEncryption e1:77:2e:8c:c4:78:e4:9f:82:27:13:d4:47:d0:59:52:e4:86: 62:04:f6:52:e4:9a:4c:65:81:a1:a2:62:a6:72:98:35:4a:20: 16:d3:62:73:98:ff:3a:2d:3e:af:e0:26:92:e9:04:e9:c2:6d: ac:ef:70:00:cb:28:e6:47:3a:05:36:b9:62:56:ab:2a:5d:f8: c6:7a:7e:1c:16:03:e5:f8:21:f9:7d:b1:55:2d:e5:b2:8e:0a: e9:60:52:c2:15:f1:5e:ae:e9:84:d6:e0:09:77:09:21:b5:93: f1:ec:ef:68:86:9b:d4:a6:e6:e6:3c:1d:cd:cd:fc:8b:3a:9c: 6e:e7:31:a8:3c:9f:e8:3a:8f:df:a8:9b:11:81:b9:09:f4:1a: a9:c2:89:fc:20:bc:9b:e9:1e:5f:dd:0a:28:ef:4c:26:2c:4c: ed:2e:08:56:ca:78:80:1c:b8:5e:e3:84:38:ca:bf:89:c8:b0: 02:25:44:10:9d:11:8a:f4:df:91:05:b8:8e:8b:49:c9:ec:03: 22:71:7b:ee:81:df:5f:2e:8a:f6:3e:5e:f9:1a:20:79:b4:1f: 1b:7f:59:40:fb:75:74:19:8d:b6:1f:c6:67:c4:e1:4a:ae:b4: d0:6b:1d:15:a9:17:62:1c:82:20:9e:e8:87:6e:14:a6:ed:60: f3:4a:7e:5d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xxcZ2A5v58nWWKSUGH/CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ODU5ZDhhMjZjOGU4ODg3NzdmNGU4MDFiMjBiNzg1ZGVl NjU0Y2YwHhcNMjYwMTAxMDQxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNmRlYTNhNjQwZWVhODRkMDI0ZmVmYzU5ODljN2JkZTFlYjM0NmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpHc9vSLmnYQ4lp8rTYvcx/Uz5lo dk9JULiAnnCZrsQv5XAqHJsx4bAaypi43Zuw6HtnbLC8ESOuXPYgOgySZraI+P+7 L9zRQ+qgWWaIvMaMPe2vBT3gCegTJvSG/At81qF/F2xuIIQ7fTZlfCHdypSe8acV ehd9NOcLPy598hTbhNjpVkAaw6w5nGLvmNtQlp5MZ1lFQg8N8GTv9lNLpN9qeCy9 yxAITgHhhDptzhIuoK49Vii9uzdNRAs4pyCGqBj+uyOrM2D/XXnNdUE4xy+300qP AQxUHEQ8MRt92o/QpvpgNEgXovK1Vs6kisSk9onCDMIvti3QAbiyqhT/SQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLbeo6ZA7qhNAk/vxZice94es0biMB8GA1UdIwQY MBaAFDSFnYomyOiId39OgBsgt4Xe5lTPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTklXZGlpYkk2SWgzZjA2QUd5QzNoZDdtVk04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83OGZlZmMtZTljNS00YzZiLTllY2Qt MTg3MjNjODQxMTIxLzEvdHQ2anBrRHVxRTBDVC1fRm1KeDczaDZ6UnVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy83OGZlZmMtZTljNS00YzZiLTllY2QtMTg3MjNjODQxMTIx LzEvTklXZGlpYkk2SWgzZjA2QUd5QzNoZDdtVk04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcoVMA0G CSqGSIb3DQEBCwUAA4IBAQDhdy6MxHjkn4InE9RH0FlS5IZiBPZS5JpMZYGhomKm cpg1SiAW02JzmP86LT6v4CaS6QTpwm2s73AAyyjmRzoFNrliVqsqXfjGen4cFgPl +CH5fbFVLeWyjgrpYFLCFfFerumE1uAJdwkhtZPx7O9ohpvUpubmPB3NzfyLOpxu 5zGoPJ/oOo/fqJsRgbkJ9Bqpwon8ILyb6R5f3Qoo70wmLEztLghWyniAHLhe44Q4 yr+JyLACJUQQnRGK9N+RBbiOi0nJ7AMicXvugd9fLor2Pl75GiB5tB8bf1lA+3V0 GY22H8ZnxOFKrrTQax0VqRdiHIIgnuiHbhSm7WDzSn5d -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:30 2026 by rpki-client