This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/TWpdkEiEwPnnmy1gI4S2ecWAtfw.roa File: TWpdkEiEwPnnmy1gI4S2ecWAtfw.roa (raw, json) Hash identifier: keC4DPfND+6pSZeqKWzc/4DTNiqlY2LM6I7p5oKMnSA= Subject key identifier: 4D:6A:5D:90:48:84:C0:F9:E7:9B:2D:60:23:84:B6:79:C5:80:B5:FC Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6 Certificate serial: 019C198D3462B3554B769825CEE5F2B2FED9 Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/TWpdkEiEwPnnmy1gI4S2ecWAtfw.roa Signing time: Sun 01 Feb 2026 14:13:30 +0000 ROA not before: Sun 01 Feb 2026 14:13:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 103.17.96.0/24 maxlen: 24 109.111.34.0/23 maxlen: 24 109.111.48.0/20 maxlen: 20 109.111.50.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 10:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:19:8d:34:62:b3:55:4b:76:98:25:ce:e5:f2:b2:fe:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6 Validity Not Before: Feb 1 14:13:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d6a5d904884c0f9e79b2d602384b679c580b5fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:9e:ec:56:24:69:60:e2:48:29:21:e5:89:e1: 16:8f:6e:4a:d7:1d:4f:a5:1e:a4:ad:69:2b:3e:bc: b0:fe:c1:37:d4:02:7e:95:72:e0:36:a6:68:b0:a2: 09:37:19:07:15:9d:70:6d:59:b2:e8:6b:d7:2a:e9: fb:1d:81:9d:b7:a0:3c:17:44:6d:ed:c6:50:3f:ed: b6:24:d5:29:c9:a0:f8:5d:ca:dc:26:bf:d3:f1:9e: 7c:50:b8:31:a6:43:6e:ec:d5:ba:bd:65:ff:6c:8c: 99:de:c7:fc:32:0c:c8:7a:4e:ae:81:ac:b8:bb:9f: 29:75:23:db:44:98:e8:cb:4b:e3:bf:1a:71:eb:fb: 4c:6d:95:35:82:e7:0e:ca:9c:a4:99:2e:6b:53:9c: 78:18:3c:c0:5b:b7:68:a4:c0:f4:f3:6a:e1:91:a3: 34:7d:9d:f0:7c:55:00:f9:21:0c:13:3e:76:ea:86: b4:38:16:79:e6:ff:7c:4b:f4:5d:c9:32:ed:5c:c0: 12:6a:15:5b:e0:65:6d:c1:66:07:ce:29:ca:fb:cf: b0:c3:01:1e:3f:3d:a9:43:db:9d:cf:82:56:6e:0f: 8a:5f:8f:a4:c5:98:40:cc:3b:44:fe:06:5c:e8:0e: ce:c8:de:80:04:44:d7:a6:97:6e:7a:c4:0f:31:48: ac:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:6A:5D:90:48:84:C0:F9:E7:9B:2D:60:23:84:B6:79:C5:80:B5:FC X509v3 Authority Key Identifier: keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/TWpdkEiEwPnnmy1gI4S2ecWAtfw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.17.96.0/24 109.111.34.0/23 109.111.48.0/20 Signature Algorithm: sha256WithRSAEncryption 00:ce:0e:e3:f5:4a:23:ab:eb:84:4e:fe:2a:ab:0b:44:85:c9: 19:5e:29:82:5d:a9:11:2c:8d:58:bd:9a:5f:f7:6e:a5:c7:c6: 34:4c:93:1b:8a:7f:34:21:e6:82:cd:d8:55:9e:4a:6a:98:e5: dc:11:93:a0:f5:e0:e5:76:13:ff:00:98:97:c1:47:56:a8:ca: 8d:5c:ea:22:d1:01:07:a9:12:b0:73:4f:d8:dc:67:68:2d:ec: 02:8e:df:24:07:98:58:74:0c:03:bb:74:5e:b4:60:5e:fb:91: 42:fb:1a:27:b2:05:3e:17:b6:3e:06:3f:fe:a8:b2:96:76:83: ec:90:ac:4b:5f:99:2e:aa:70:f6:95:ea:15:ca:4e:58:af:ba: 1c:e8:4b:17:0f:0c:98:0b:3c:24:8f:a4:eb:aa:d0:e3:e8:cc: 02:a0:e9:5c:17:67:6f:b6:06:8f:e5:57:c5:7f:cc:94:49:f4: 3b:a0:c5:9c:8a:57:8a:2a:72:fa:fa:b6:36:9b:8b:59:12:a6: 7e:24:70:3b:4e:79:57:a3:2f:64:5e:f6:6f:cd:b4:44:1d:c2: bc:ce:a9:43:a2:27:87:d6:16:5d:29:9e:56:c3:0c:50:de:1f: ec:d4:7b:23:f5:15:3e:b2:ec:63:8e:c0:36:c0:b1:88:ec:15: 32:37:75:08 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZwZjTRis1VLdpglzuXysv7ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNzVlNGU5NGI1Y2I3NDUxN2I3YjAxNTY4MDE1ZGE5ZTZl ZWNkYjYwHhcNMjYwMjAxMTQxMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDZhNWQ5MDQ4ODRjMGY5ZTc5YjJkNjAyMzg0YjY3OWM1ODBiNWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Z7sViRpYOJIKSHlieEWj25K1x1P pR6krWkrPryw/sE31AJ+lXLgNqZosKIJNxkHFZ1wbVmy6GvXKun7HYGdt6A8F0Rt 7cZQP+22JNUpyaD4XcrcJr/T8Z58ULgxpkNu7NW6vWX/bIyZ3sf8MgzIek6ugay4 u58pdSPbRJjoy0vjvxpx6/tMbZU1gucOypykmS5rU5x4GDzAW7dopMD082rhkaM0 fZ3wfFUA+SEMEz526oa0OBZ55v98S/RdyTLtXMASahVb4GVtwWYHzinK+8+wwwEe Pz2pQ9udz4JWbg+KX4+kxZhAzDtE/gZc6A7OyN6ABETXppduesQPMUisHQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFE1qXZBIhMD555stYCOEtnnFgLX8MB8GA1UdIwQY MBaAFG915OlLXLdFF7ewFWgBXanm7s22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzIt NjY0NTc3MjRjMmQzLzEvVFdwZGtFaUV3UG5ubXkxZ0k0UzJlY1dBdGZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzItNjY0NTc3MjRjMmQz LzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAZxFgAwQB bW8iAwQEbW8wMA0GCSqGSIb3DQEBCwUAA4IBAQAAzg7j9Uojq+uETv4qqwtEhckZ XimCXakRLI1YvZpf926lx8Y0TJMbin80IeaCzdhVnkpqmOXcEZOg9eDldhP/AJiX wUdWqMqNXOoi0QEHqRKwc0/Y3GdoLewCjt8kB5hYdAwDu3RetGBe+5FC+xonsgU+ F7Y+Bj/+qLKWdoPskKxLX5kuqnD2leoVyk5Yr7oc6EsXDwyYCzwkj6TrqtDj6MwC oOlcF2dvtgaP5VfFf8yUSfQ7oMWcileKKnL6+rY2m4tZEqZ+JHA7TnlXoy9kXvZv zbREHcK8zqlDoieH1hZdKZ5WwwxQ3h/s1Hsj9RU+suxjjsA2wLGI7BUyN3UI -----END CERTIFICATE-----Generated at Sat Feb 14 17:24:13 2026 by rpki-client