This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/tlQuieYreVj3_gDq6M-5ic7hd2g.roa File: tlQuieYreVj3_gDq6M-5ic7hd2g.roa (raw, json) Hash identifier: qC3uGzqeAOsxTCH/391q/r0lsBSsBvvNrLSi+GwlwHE= Subject key identifier: B6:54:2E:89:E6:2B:79:58:F7:FE:00:EA:E8:CF:B9:89:CE:E1:77:68 Certificate issuer: /CN=0f47dc7ff485b8413be38f5bee80917330b31738 Certificate serial: 019B7C1349E7A6EA67CD1DCDDAB3346A7B8A Authority key identifier: 0F:47:DC:7F:F4:85:B8:41:3B:E3:8F:5B:EE:80:91:73:30:B3:17:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/tlQuieYreVj3_gDq6M-5ic7hd2g.roa Signing time: Fri 02 Jan 2026 00:19:57 +0000 ROA not before: Fri 02 Jan 2026 00:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44858 IP address blocks: 93.95.0.0/21 maxlen: 21 93.95.0.0/24 maxlen: 24 93.95.1.0/24 maxlen: 24 93.95.2.0/24 maxlen: 24 93.95.3.0/24 maxlen: 24 93.95.4.0/24 maxlen: 24 93.95.5.0/24 maxlen: 24 93.95.6.0/24 maxlen: 24 93.95.7.0/24 maxlen: 24 2a03:5d80::/32 maxlen: 32 2a03:5d80::/36 maxlen: 36 2a03:5d80:1000::/36 maxlen: 36 2a03:5d80:2000::/36 maxlen: 36 2a03:5d80:3000::/36 maxlen: 36 2a03:5d80:4000::/36 maxlen: 36 2a03:5d80:5000::/36 maxlen: 36 2a03:5d80:6000::/36 maxlen: 36 2a03:5d80:7000::/36 maxlen: 36 2a03:5d80:8000::/36 maxlen: 36 2a03:5d80:9000::/36 maxlen: 36 2a03:5d80:a000::/36 maxlen: 36 2a03:5d80:b000::/36 maxlen: 36 2a03:5d80:c000::/36 maxlen: 36 2a03:5d80:d000::/36 maxlen: 36 2a03:5d80:e000::/36 maxlen: 36 2a03:5d80:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:49:e7:a6:ea:67:cd:1d:cd:da:b3:34:6a:7b:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f47dc7ff485b8413be38f5bee80917330b31738 Validity Not Before: Jan 2 00:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b6542e89e62b7958f7fe00eae8cfb989cee17768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5d:f5:26:f4:68:94:be:24:3b:64:38:b3:8c: 2d:6d:f2:0d:fd:fb:ec:c4:de:4f:f4:e4:00:19:bf: 96:ec:7b:06:63:ea:3b:fd:c9:9c:a3:6d:6f:58:ef: 75:0a:f7:b3:75:d5:bf:67:cd:30:92:51:77:2a:c7: 4b:ae:00:c0:9d:79:f0:4b:56:a9:80:44:65:c0:d2: 1e:a2:16:a4:e0:d1:b8:ad:92:8e:5c:91:dc:05:89: 47:bf:38:f8:04:a9:76:93:b4:dc:87:fd:e3:7c:fb: 79:04:97:b6:db:df:df:7e:11:6e:2c:e0:d5:72:1e: 96:19:77:fa:46:d6:a3:27:4d:62:a6:b4:1f:b5:c2: d7:d5:da:ed:13:95:19:3f:dd:57:18:70:94:b2:cf: 8f:ae:be:54:8b:7e:e6:19:ca:55:a6:fe:51:33:15: 0c:74:dd:8d:3b:69:03:cc:5f:e9:d9:9c:67:20:4e: 1f:7b:5c:c7:75:96:61:ff:a2:68:85:4f:56:64:f5: d5:8c:af:0d:bb:e9:bc:36:65:d9:27:ca:a9:d6:94: 4b:a4:cf:d2:53:15:0a:ba:fc:45:7b:2a:92:69:f7: 42:ba:3d:a8:e2:76:ad:4c:36:70:6d:96:54:48:35: ec:6c:e0:7e:f5:94:ac:29:93:2d:d1:2a:a4:5d:a0: e9:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:54:2E:89:E6:2B:79:58:F7:FE:00:EA:E8:CF:B9:89:CE:E1:77:68 X509v3 Authority Key Identifier: keyid:0F:47:DC:7F:F4:85:B8:41:3B:E3:8F:5B:EE:80:91:73:30:B3:17:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/tlQuieYreVj3_gDq6M-5ic7hd2g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.95.0.0/21 IPv6: 2a03:5d80::/32 Signature Algorithm: sha256WithRSAEncryption 46:4f:ce:a5:ff:e7:c2:ba:35:25:60:ad:36:ff:3d:dd:a1:c2: db:db:3b:65:16:e3:b1:a3:80:aa:0d:87:5b:6a:4c:3b:d1:b6: df:ad:ea:ce:6f:ef:54:d6:40:4a:98:d6:c1:a0:d9:65:6a:00: bb:62:36:8b:65:be:b7:b7:6f:57:25:d8:ef:fb:a4:2c:93:c9: 39:12:1e:20:f5:18:23:28:3a:0a:69:a9:f2:c3:89:15:ba:f5: d3:07:53:f0:59:fb:5e:ea:d1:56:31:64:79:23:a8:25:66:19: 73:a6:4b:39:ec:98:b1:98:eb:5a:07:75:f3:58:23:62:9c:38: 6a:fa:bb:80:ee:d9:41:68:2f:c4:c6:9c:12:a8:a6:d0:35:1c: 7a:03:15:3e:f2:7a:f2:de:72:2a:74:67:04:67:76:9e:88:67: f7:b7:87:76:1c:b4:17:27:28:c5:1f:1c:03:b3:42:88:8b:1f: 27:b3:aa:5b:73:4f:d7:c1:43:74:c6:34:a6:27:27:4c:f8:b2: 96:4e:89:88:6f:a2:f4:b4:6c:ab:2f:8d:80:b1:06:00:52:8a: 2d:d7:45:ac:e8:4f:25:0a:5a:80:82:42:24:b3:e7:a8:a7:b5: 5f:67:48:ab:f8:b5:5a:ec:a8:a4:0b:5e:d9:6f:dc:d9:3e:02: 14:4f:43:0b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8E0nnpupnzR3N2rM0anuKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNDdkYzdmZjQ4NWI4NDEzYmUzOGY1YmVlODA5MTczMzBi MzE3MzgwHhcNMjYwMTAyMDAxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjU0MmU4OWU2MmI3OTU4ZjdmZTAwZWFlOGNmYjk4OWNlZTE3NzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnF31JvRolL4kO2Q4s4wtbfIN/fvs xN5P9OQAGb+W7HsGY+o7/cmco21vWO91CvezddW/Z80wklF3KsdLrgDAnXnwS1ap gERlwNIeohak4NG4rZKOXJHcBYlHvzj4BKl2k7Tch/3jfPt5BJe229/ffhFuLODV ch6WGXf6RtajJ01iprQftcLX1drtE5UZP91XGHCUss+Prr5Ui37mGcpVpv5RMxUM dN2NO2kDzF/p2ZxnIE4fe1zHdZZh/6JohU9WZPXVjK8Nu+m8NmXZJ8qp1pRLpM/S UxUKuvxFeyqSafdCuj2o4natTDZwbZZUSDXsbOB+9ZSsKZMt0SqkXaDpOQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLZULonmK3lY9/4A6ujPuYnO4XdoMB8GA1UdIwQY MBaAFA9H3H/0hbhBO+OPW+6AkXMwsxc4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDBmY2ZfU0Z1RUU3NDQ5YjdvQ1JjekN6RnpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9hZjUwNzgtMjI0My00ZmRiLWFiMmIt MmQ4NDdhM2Y3ZDJmLzEvdGxRdWllWXJlVmozX2dEcTZNLTVpYzdoZDJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9hZjUwNzgtMjI0My00ZmRiLWFiMmItMmQ4NDdhM2Y3ZDJm LzEvRDBmY2ZfU0Z1RUU3NDQ5YjdvQ1JjekN6RnpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDXV8AMA0E AgACMAcDBQAqA12AMA0GCSqGSIb3DQEBCwUAA4IBAQBGT86l/+fCujUlYK02/z3d ocLb2ztlFuOxo4CqDYdbakw70bbfrerOb+9U1kBKmNbBoNllagC7YjaLZb63t29X Jdjv+6Qsk8k5Eh4g9RgjKDoKaanyw4kVuvXTB1PwWfte6tFWMWR5I6glZhlzpks5 7JixmOtaB3XzWCNinDhq+ruA7tlBaC/ExpwSqKbQNRx6AxU+8nry3nIqdGcEZ3ae iGf3t4d2HLQXJyjFHxwDs0KIix8ns6pbc0/XwUN0xjSmJydM+LKWTomIb6L0tGyr L42AsQYAUoot10Ws6E8lClqAgkIks+eop7VfZ0ir+LVa7KikC17Zb9zZPgIUT0ML -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:57 2026 by rpki-client