This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/TpnpN44Bjwn-KM0mOzvPS6-zdOY.roa File: TpnpN44Bjwn-KM0mOzvPS6-zdOY.roa (raw, json) Hash identifier: hWRJEjJqT6dnr6XOVn4Lz5LpaCYeo/xiRnTEsF4dKwk= Subject key identifier: 4E:99:E9:37:8E:01:8F:09:FE:28:CD:26:3B:3B:CF:4B:AF:B3:74:E6 Certificate issuer: /CN=c167c591cc1b96a1ca4f910fe101ef904da1e218 Certificate serial: 019B7758B2693C251868FF404A238F348340 Authority key identifier: C1:67:C5:91:CC:1B:96:A1:CA:4F:91:0F:E1:01:EF:90:4D:A1:E2:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wWfFkcwblqHKT5EP4QHvkE2h4hg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/TpnpN44Bjwn-KM0mOzvPS6-zdOY.roa Signing time: Thu 01 Jan 2026 02:17:40 +0000 ROA not before: Thu 01 Jan 2026 02:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6738 IP address blocks: 46.18.192.0/21 maxlen: 24 185.86.176.0/22 maxlen: 24 195.114.26.0/23 maxlen: 24 2a03:3280::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.mft rsync://rpki.ripe.net/repository/DEFAULT/wWfFkcwblqHKT5EP4QHvkE2h4hg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:b2:69:3c:25:18:68:ff:40:4a:23:8f:34:83:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c167c591cc1b96a1ca4f910fe101ef904da1e218 Validity Not Before: Jan 1 02:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e99e9378e018f09fe28cd263b3bcf4bafb374e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:02:e4:dc:ec:7e:8d:ca:06:8e:31:6d:5e:e2: f6:5d:1b:72:33:30:4c:6b:67:a0:d2:eb:f2:46:6f: dd:7b:1f:35:c5:5e:db:5e:3d:1f:fd:ce:4e:ba:79: 20:cd:e6:95:c0:ff:3a:ee:34:f8:11:7c:a7:1f:ae: 52:4c:44:f8:a0:3a:ee:7e:43:bd:85:73:ad:f7:28: 9c:06:05:68:bf:a8:73:42:03:9e:2c:a0:6d:a8:4c: 53:d3:7f:7f:1a:28:d0:9a:81:de:03:f2:7b:d0:01: 9d:5c:fa:52:85:0b:43:f5:e8:c4:75:5c:41:c8:13: 57:04:07:4b:ea:7e:d4:f4:5f:3b:ac:65:64:5f:f2: b5:91:69:01:5b:65:67:62:ca:ef:25:02:11:53:0f: 16:34:3f:78:03:8e:36:b7:99:0d:87:72:4c:ad:9d: 2b:67:fa:af:7f:ca:ae:14:8c:d5:e8:83:36:72:e0: 2b:1a:7e:ff:b4:2f:0c:c8:d8:9f:a6:b8:c6:09:41: 57:96:46:41:a0:d3:19:90:50:46:00:5f:b9:26:86: 42:56:9c:5c:1f:c4:c9:3f:f8:94:82:ac:08:6c:5f: ab:4b:f1:01:f0:2c:93:3d:35:04:86:0d:b7:60:50: 1c:37:fd:f7:2a:f6:f4:3b:ef:8c:77:a5:66:9a:48: 8a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:99:E9:37:8E:01:8F:09:FE:28:CD:26:3B:3B:CF:4B:AF:B3:74:E6 X509v3 Authority Key Identifier: keyid:C1:67:C5:91:CC:1B:96:A1:CA:4F:91:0F:E1:01:EF:90:4D:A1:E2:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWfFkcwblqHKT5EP4QHvkE2h4hg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/TpnpN44Bjwn-KM0mOzvPS6-zdOY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.18.192.0/21 185.86.176.0/22 195.114.26.0/23 IPv6: 2a03:3280::/32 Signature Algorithm: sha256WithRSAEncryption b5:cd:62:86:75:09:6b:12:b9:18:b2:40:80:d0:11:a0:6c:36: 80:04:ea:5c:aa:18:93:37:de:c8:8b:92:9e:10:f2:3b:7e:8d: 19:8e:e5:d5:66:2b:97:9a:8f:92:72:89:da:37:91:cd:69:db: 6d:b6:c1:35:ef:62:2a:2d:29:44:fd:b6:7e:92:91:02:69:0f: f4:f5:12:02:ce:1b:aa:de:db:1d:4d:1f:e9:56:ea:c0:4b:ea: 72:ef:7f:6c:12:d8:d1:a2:2a:24:f9:b3:a8:62:97:a8:fc:b7: 75:ae:80:0c:2e:14:1e:0f:ec:a3:de:a8:25:64:62:97:69:e9: f4:ca:43:46:6f:93:96:f8:03:16:d8:07:f5:5b:c8:db:80:0f: 58:20:c2:c6:5d:c6:85:32:c1:9b:89:5f:28:e8:99:7e:c1:e3: de:f2:7e:57:38:d3:e6:fc:fd:58:8f:0c:0c:7d:f0:66:eb:f9: fa:36:64:49:5c:51:97:44:2d:96:04:f8:0e:0e:8e:87:b3:a4: 25:8e:95:50:5d:be:3d:0e:09:14:dd:b3:e5:59:10:d1:0c:9d: 99:7d:6e:26:c2:08:8a:88:dc:38:c9:4e:e7:33:6b:47:c4:d5: 2c:7f:f0:f5:c1:74:bc:3e:66:78:fa:e9:e8:91:f4:ae:1d:13: 6a:3c:8d:64 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt3WLJpPCUYaP9ASiOPNINAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxNjdjNTkxY2MxYjk2YTFjYTRmOTEwZmUxMDFlZjkwNGRh MWUyMTgwHhcNMjYwMTAxMDIxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTk5ZTkzNzhlMDE4ZjA5ZmUyOGNkMjYzYjNiY2Y0YmFmYjM3NGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQLk3Ox+jcoGjjFtXuL2XRtyMzBM a2eg0uvyRm/dex81xV7bXj0f/c5OunkgzeaVwP867jT4EXynH65STET4oDrufkO9 hXOt9yicBgVov6hzQgOeLKBtqExT039/GijQmoHeA/J70AGdXPpShQtD9ejEdVxB yBNXBAdL6n7U9F87rGVkX/K1kWkBW2VnYsrvJQIRUw8WND94A442t5kNh3JMrZ0r Z/qvf8quFIzV6IM2cuArGn7/tC8MyNifprjGCUFXlkZBoNMZkFBGAF+5JoZCVpxc H8TJP/iUgqwIbF+rS/EB8CyTPTUEhg23YFAcN/33Kvb0O++Md6VmmkiKeQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFE6Z6TeOAY8J/ijNJjs7z0uvs3TmMB8GA1UdIwQY MBaAFMFnxZHMG5ahyk+RD+EB75BNoeIYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1dmRmtjd2JscUhLVDVFUDRRSHZrRTJoNGhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81NDUzZGItYmU4Zi00MGNiLWJkMDkt OWNhMzBmMTkxOTM0LzEvVHBucE40NEJqd24tS00wbU96dlBTNi16ZE9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy81NDUzZGItYmU4Zi00MGNiLWJkMDktOWNhMzBmMTkxOTM0 LzEvd1dmRmtjd2JscUhLVDVFUDRRSHZrRTJoNGhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDLhLAAwQC uVawAwQBw3IaMA0EAgACMAcDBQAqAzKAMA0GCSqGSIb3DQEBCwUAA4IBAQC1zWKG dQlrErkYskCA0BGgbDaABOpcqhiTN97Ii5KeEPI7fo0ZjuXVZiuXmo+SconaN5HN adtttsE172IqLSlE/bZ+kpECaQ/09RICzhuq3tsdTR/pVurAS+py739sEtjRoiok +bOoYpeo/Ld1roAMLhQeD+yj3qglZGKXaen0ykNGb5OW+AMW2Af1W8jbgA9YIMLG XcaFMsGbiV8o6Jl+wePe8n5XONPm/P1YjwwMffBm6/n6NmRJXFGXRC2WBPgODo6H s6QljpVQXb49DgkU3bPlWRDRDJ2ZfW4mwgiKiNw4yU7nM2tHxNUsf/D1wXS8PmZ4 +unokfSuHRNqPI1k -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:16 2026 by rpki-client