This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/tWqZy2tTqFqt9D4rCvazUAWDWPA.roa File: tWqZy2tTqFqt9D4rCvazUAWDWPA.roa (raw, json) Hash identifier: Ccuo+A6uM9l1WuitzfylA9prnTUAjYnop5Ot1I+Ef6c= Subject key identifier: B5:6A:99:CB:6B:53:A8:5A:AD:F4:3E:2B:0A:F6:B3:50:05:83:58:F0 Certificate issuer: /CN=afa929be73491acd99d590372a52b815fa1f23f5 Certificate serial: 019B7DCA60015A349B8BB044B7FB36F31A63 Authority key identifier: AF:A9:29:BE:73:49:1A:CD:99:D5:90:37:2A:52:B8:15:FA:1F:23:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/tWqZy2tTqFqt9D4rCvazUAWDWPA.roa Signing time: Fri 02 Jan 2026 08:19:33 +0000 ROA not before: Fri 02 Jan 2026 08:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57774 IP address blocks: 176.107.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.crl rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:60:01:5a:34:9b:8b:b0:44:b7:fb:36:f3:1a:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afa929be73491acd99d590372a52b815fa1f23f5 Validity Not Before: Jan 2 08:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b56a99cb6b53a85aadf43e2b0af6b350058358f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:3e:41:5a:76:e5:38:85:2a:a6:63:29:ee:a6: 8d:87:18:a9:d7:61:7a:d0:b3:17:ea:cd:ec:5f:79: bd:05:70:ec:33:f0:56:fc:5a:db:45:ff:63:22:2e: d6:f5:f5:5d:8c:f4:3d:04:0d:08:41:50:26:46:03: 42:6a:d4:e6:0d:48:94:b6:d2:2e:0f:69:f9:ab:4e: b6:08:ed:91:17:55:35:73:6a:a3:1a:ee:1d:d8:82: 88:56:95:b9:af:1a:63:b4:5b:4e:c3:95:98:ec:c6: 7d:36:7a:b0:8e:49:b2:dd:a5:c0:95:19:33:40:26: 10:0d:4d:0c:18:90:85:6b:0f:ec:4b:ba:e5:b0:1a: a9:54:f1:97:72:ba:c0:5e:c4:02:14:70:50:45:e2: b5:15:8e:a8:a5:07:df:34:be:fb:6a:fa:47:51:75: 6d:89:ed:e8:d9:80:89:6f:97:5e:c2:7c:f7:d2:5c: 90:08:ef:57:8e:e3:aa:5e:f4:c8:49:63:e1:12:09: b4:ca:f8:2e:90:eb:97:bb:c4:27:bb:1d:41:7e:b6: 26:de:c4:5e:8a:33:3a:3c:73:aa:f6:bb:89:ef:0b: a6:75:7e:4f:40:2f:f7:d9:eb:e1:8b:53:80:16:06: 46:0e:f6:b2:de:0e:53:19:69:25:76:c2:67:8c:3c: 18:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:6A:99:CB:6B:53:A8:5A:AD:F4:3E:2B:0A:F6:B3:50:05:83:58:F0 X509v3 Authority Key Identifier: keyid:AF:A9:29:BE:73:49:1A:CD:99:D5:90:37:2A:52:B8:15:FA:1F:23:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/tWqZy2tTqFqt9D4rCvazUAWDWPA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.107.192.0/21 Signature Algorithm: sha256WithRSAEncryption 6f:01:c0:59:35:7f:05:b4:58:d5:8a:24:a0:06:db:67:80:b9: 10:26:fd:c7:ff:ce:86:8f:3e:c2:71:96:12:d4:67:ea:49:7c: f0:06:d6:c5:e7:66:19:ba:4d:1d:fd:4d:1a:e4:34:88:40:5b: a0:fd:55:48:6d:a3:16:e0:19:5f:9d:1e:59:ec:73:33:c1:28: 3b:49:ef:59:f8:8e:97:4a:d6:30:47:22:67:ea:67:10:c7:13: 37:76:f1:0a:f7:b8:a7:55:21:0f:35:8a:2b:68:68:b2:d6:89: ca:7a:b3:54:a8:47:13:32:f7:a2:6c:35:1c:10:92:32:66:c9: 2a:51:56:bb:0e:1c:e2:33:5b:d4:f4:b5:38:25:78:69:6b:05: a8:c4:83:c6:e9:3a:c5:2c:32:0b:68:8e:df:5e:d0:1c:ed:8c: fe:f3:ee:20:b2:5a:9e:b3:fa:23:0f:81:6f:52:5e:b8:13:ba: 98:b9:c7:42:a9:cf:06:32:1f:07:e7:8a:2c:51:2b:a7:87:5c: 63:b2:0d:62:ba:78:e9:53:2a:1e:79:0e:f1:65:9b:37:04:6d: 13:ad:f4:7f:c7:57:77:1c:16:2e:78:f9:01:bc:dd:be:c9:cd: e9:03:d9:db:ed:a8:2f:ab:55:37:71:d7:59:fb:07:61:14:8f: e8:6b:83:59 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ymABWjSbi7BEt/s28xpjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmYTkyOWJlNzM0OTFhY2Q5OWQ1OTAzNzJhNTJiODE1ZmEx ZjIzZjUwHhcNMjYwMTAyMDgxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTZhOTljYjZiNTNhODVhYWRmNDNlMmIwYWY2YjM1MDA1ODM1OGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4D5BWnblOIUqpmMp7qaNhxip12F6 0LMX6s3sX3m9BXDsM/BW/FrbRf9jIi7W9fVdjPQ9BA0IQVAmRgNCatTmDUiUttIu D2n5q062CO2RF1U1c2qjGu4d2IKIVpW5rxpjtFtOw5WY7MZ9Nnqwjkmy3aXAlRkz QCYQDU0MGJCFaw/sS7rlsBqpVPGXcrrAXsQCFHBQReK1FY6opQffNL77avpHUXVt ie3o2YCJb5dewnz30lyQCO9XjuOqXvTISWPhEgm0yvgukOuXu8Qnux1BfrYm3sRe ijM6PHOq9ruJ7wumdX5PQC/32evhi1OAFgZGDvay3g5TGWkldsJnjDwYlwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLVqmctrU6harfQ+Kwr2s1AFg1jwMB8GA1UdIwQY MBaAFK+pKb5zSRrNmdWQNypSuBX6HyP1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjZrcHZuTkpHczJaMVpBM0tsSzRGZm9mSV9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8yNjk0ZjgtZmExZi00YzgxLTgzMTIt M2I2ZjFiZGY0MTJhLzEvdFdxWnkydFRxRnF0OUQ0ckN2YXpVQVdEV1BBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS8yNjk0ZjgtZmExZi00YzgxLTgzMTItM2I2ZjFiZGY0MTJh LzEvcjZrcHZuTkpHczJaMVpBM0tsSzRGZm9mSV9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDsGvAMA0G CSqGSIb3DQEBCwUAA4IBAQBvAcBZNX8FtFjViiSgBttngLkQJv3H/86Gjz7CcZYS 1GfqSXzwBtbF52YZuk0d/U0a5DSIQFug/VVIbaMW4BlfnR5Z7HMzwSg7Se9Z+I6X StYwRyJn6mcQxxM3dvEK97inVSEPNYoraGiy1onKerNUqEcTMveibDUcEJIyZskq UVa7DhziM1vU9LU4JXhpawWoxIPG6TrFLDILaI7fXtAc7Yz+8+4gslqes/ojD4Fv Ul64E7qYucdCqc8GMh8H54osUSunh1xjsg1iunjpUyoeeQ7xZZs3BG0TrfR/x1d3 HBYuePkBvN2+yc3pA9nb7agvq1U3cddZ+wdhFI/oa4NZ -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:34 2026 by rpki-client