This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/25651d-ee73-48ed-af68-29f420752d5e/1/c-FJOZlIKFN6CN9lwMQEj8i5-4A.roa File: c-FJOZlIKFN6CN9lwMQEj8i5-4A.roa (raw, json) Hash identifier: n9+iXHiynD+L9250sU27FEMenQGRsR/F4AyGQjkCYkk= Subject key identifier: 73:E1:49:39:99:48:28:53:7A:08:DF:65:C0:C4:04:8F:C8:B9:FB:80 Certificate issuer: /CN=b6b6af4ddf8316fbf101c93644e6594146570762 Certificate serial: 019B77587E98F07790A4CBEE30067AE391BB Authority key identifier: B6:B6:AF:4D:DF:83:16:FB:F1:01:C9:36:44:E6:59:41:46:57:07:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/travTd-DFvvxAck2ROZZQUZXB2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/25651d-ee73-48ed-af68-29f420752d5e/1/c-FJOZlIKFN6CN9lwMQEj8i5-4A.roa Signing time: Thu 01 Jan 2026 02:17:26 +0000 ROA not before: Thu 01 Jan 2026 02:17:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214406 IP address blocks: 194.39.246.0/24 maxlen: 24 212.125.136.0/23 maxlen: 24 2001:3f00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/25651d-ee73-48ed-af68-29f420752d5e/1/travTd-DFvvxAck2ROZZQUZXB2I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/25651d-ee73-48ed-af68-29f420752d5e/1/travTd-DFvvxAck2ROZZQUZXB2I.mft rsync://rpki.ripe.net/repository/DEFAULT/travTd-DFvvxAck2ROZZQUZXB2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:7e:98:f0:77:90:a4:cb:ee:30:06:7a:e3:91:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6b6af4ddf8316fbf101c93644e6594146570762 Validity Not Before: Jan 1 02:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=73e14939994828537a08df65c0c4048fc8b9fb80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1e:90:98:47:9f:ce:bf:66:99:73:c9:1d:6e: 9e:bf:5b:1f:8b:ef:8c:3d:42:0b:29:86:1e:5b:53: 53:5b:6a:5f:5b:db:e8:99:7a:7d:e6:5c:ac:35:41: 72:b0:f4:71:36:60:76:84:64:12:f7:13:37:3a:94: e1:83:5d:1f:0c:98:21:11:e1:5c:8e:d9:8c:74:79: 0b:aa:97:dc:98:5d:0d:26:a3:e5:1c:fb:9e:38:8b: 25:f2:2a:c1:81:be:03:59:81:a4:33:ad:04:0e:2b: 36:d7:1d:3d:a4:08:64:30:c8:26:f3:e4:a9:b9:a3: e0:08:1c:2b:09:65:7b:f7:27:93:85:f5:74:2e:ff: a9:c5:9f:fb:c7:11:05:d9:99:5d:a1:6f:86:97:e9: ae:69:32:89:f1:be:ef:82:0d:d0:3e:66:a4:69:13: c4:99:51:25:9c:d0:63:16:d0:b5:3b:1e:12:d1:c4: 1b:d2:52:51:4b:b1:45:60:31:61:c8:2f:9c:62:7a: 46:b9:22:88:74:68:65:7f:18:34:33:06:58:f0:d2: ba:90:db:6a:e7:5a:b7:16:72:b5:74:da:70:70:5f: 22:2c:24:0b:4e:73:e8:55:ae:7e:0a:c4:5e:26:be: b3:76:bc:e3:3d:b2:3d:75:54:bd:70:d6:6f:e9:1a: 6c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:E1:49:39:99:48:28:53:7A:08:DF:65:C0:C4:04:8F:C8:B9:FB:80 X509v3 Authority Key Identifier: keyid:B6:B6:AF:4D:DF:83:16:FB:F1:01:C9:36:44:E6:59:41:46:57:07:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/travTd-DFvvxAck2ROZZQUZXB2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/25651d-ee73-48ed-af68-29f420752d5e/1/c-FJOZlIKFN6CN9lwMQEj8i5-4A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/25651d-ee73-48ed-af68-29f420752d5e/1/travTd-DFvvxAck2ROZZQUZXB2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.39.246.0/24 212.125.136.0/23 IPv6: 2001:3f00::/32 Signature Algorithm: sha256WithRSAEncryption 56:be:da:38:a6:c7:2d:26:cb:f1:d6:05:a6:ec:25:42:15:a6: 78:62:b5:91:8d:d3:e5:6e:c3:c0:57:7e:86:02:23:72:bd:3f: bc:94:79:5c:e6:2c:00:71:06:c9:7a:d6:3e:2e:2a:2c:81:21: ba:b8:51:e7:22:3d:82:ed:6c:e2:22:e1:a7:84:00:e8:f9:4f: 38:8d:16:c5:b9:c2:09:97:14:f5:b9:07:a1:75:44:cf:f0:1b: 65:4d:c8:99:4d:d0:70:c0:3a:fc:1a:dd:d2:ff:9b:74:0f:ec: 5b:a3:53:b4:3b:d5:08:c8:4f:57:e2:a7:14:bd:7d:d5:e0:d3: c0:a5:57:20:00:82:8d:2e:ee:44:6a:19:07:3f:8a:a2:b1:7d: dd:f1:43:2f:70:54:5a:a8:4c:01:9a:37:9b:b7:d0:ec:33:86: f4:43:7a:aa:f9:80:ee:72:b1:b6:72:23:7d:97:90:a5:92:03: ad:75:b1:c7:32:ff:ea:f1:6a:f4:d1:c0:56:66:9c:28:d8:ff: 0a:4b:f4:d9:1f:99:d0:6f:58:7e:82:6f:d1:d6:52:f1:67:51: 17:b4:33:d0:7b:29:9e:5a:55:87:b9:61:3c:0c:cc:5a:21:ec: 39:3d:99:62:32:d8:d3:39:bb:e8:24:db:e6:d6:62:0c:bc:3e: 0b:38:96:28 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt3WH6Y8HeQpMvuMAZ645G7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2YjZhZjRkZGY4MzE2ZmJmMTAxYzkzNjQ0ZTY1OTQxNDY1 NzA3NjIwHhcNMjYwMTAxMDIxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3M2UxNDkzOTk5NDgyODUzN2EwOGRmNjVjMGM0MDQ4ZmM4YjlmYjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqR6QmEefzr9mmXPJHW6ev1sfi++M PUILKYYeW1NTW2pfW9vomXp95lysNUFysPRxNmB2hGQS9xM3OpThg10fDJghEeFc jtmMdHkLqpfcmF0NJqPlHPueOIsl8irBgb4DWYGkM60EDis21x09pAhkMMgm8+Sp uaPgCBwrCWV79yeThfV0Lv+pxZ/7xxEF2ZldoW+Gl+muaTKJ8b7vgg3QPmakaRPE mVElnNBjFtC1Ox4S0cQb0lJRS7FFYDFhyC+cYnpGuSKIdGhlfxg0MwZY8NK6kNtq 51q3FnK1dNpwcF8iLCQLTnPoVa5+CsReJr6zdrzjPbI9dVS9cNZv6Rps3QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFHPhSTmZSChTegjfZcDEBI/IufuAMB8GA1UdIwQY MBaAFLa2r03fgxb78QHJNkTmWUFGVwdiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHJhdlRkLURGdnZ4QWNrMlJPWlpRVVpYQjJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8yNTY1MWQtZWU3My00OGVkLWFmNjgt MjlmNDIwNzUyZDVlLzEvYy1GSk9abElLRk42Q045bHdNUUVqOGk1LTRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8yNTY1MWQtZWU3My00OGVkLWFmNjgtMjlmNDIwNzUyZDVl LzEvdHJhdlRkLURGdnZ4QWNrMlJPWlpRVVpYQjJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAwif2AwQB 1H2IMA0EAgACMAcDBQAgAT8AMA0GCSqGSIb3DQEBCwUAA4IBAQBWvto4psctJsvx 1gWm7CVCFaZ4YrWRjdPlbsPAV36GAiNyvT+8lHlc5iwAcQbJetY+LiosgSG6uFHn Ij2C7WziIuGnhADo+U84jRbFucIJlxT1uQehdUTP8BtlTciZTdBwwDr8Gt3S/5t0 D+xbo1O0O9UIyE9X4qcUvX3V4NPApVcgAIKNLu5EahkHP4qisX3d8UMvcFRaqEwB mjebt9DsM4b0Q3qq+YDucrG2ciN9l5ClkgOtdbHHMv/q8Wr00cBWZpwo2P8KS/TZ H5nQb1h+gm/R1lLxZ1EXtDPQeymeWlWHuWE8DMxaIew5PZliMtjTObvoJNvm1mIM vD4LOJYo -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:07 2026 by rpki-client