This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/tt8_4epx4fUU-t0TnlM9j9Sy8Gc.roa File: tt8_4epx4fUU-t0TnlM9j9Sy8Gc.roa (raw, json) Hash identifier: LFx80Ot89ti4/nAcgN280XkSiewCdAO+iihbkS/s85Y= Subject key identifier: B6:DF:3F:E1:EA:71:E1:F5:14:FA:DD:13:9E:53:3D:8F:D4:B2:F0:67 Certificate issuer: /CN=cfdb3d904b34440546b6241d7894d93300bcbd28 Certificate serial: 019B7DCA5631C555C9098380FD24AD89DA29 Authority key identifier: CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/tt8_4epx4fUU-t0TnlM9j9Sy8Gc.roa Signing time: Fri 02 Jan 2026 08:19:30 +0000 ROA not before: Fri 02 Jan 2026 08:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202789 IP address blocks: 185.154.112.0/22 maxlen: 24 2a07:8c80::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:56:31:c5:55:c9:09:83:80:fd:24:ad:89:da:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfdb3d904b34440546b6241d7894d93300bcbd28 Validity Not Before: Jan 2 08:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b6df3fe1ea71e1f514fadd139e533d8fd4b2f067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c3:33:43:30:ec:43:f4:36:b6:89:37:a3:d9: 2a:e6:c1:8c:b0:6f:89:b4:66:d5:a4:35:aa:be:4c: 51:dd:2e:c6:35:ee:6a:b5:ee:62:67:a5:44:a2:10: dd:70:73:2e:e6:01:e8:41:11:cc:cf:fd:c8:f6:e5: fb:02:7e:91:9a:08:9c:94:93:64:10:12:33:c6:05: 1b:cd:97:e8:d3:b9:06:02:bd:be:85:ca:29:fc:2c: 72:6b:66:f2:4d:5a:c8:d4:b0:41:58:2f:ff:1d:91: ea:8d:a4:4e:18:cf:da:b8:f3:27:3a:d3:06:fd:59: e6:5b:29:de:8d:d8:81:69:bc:cb:88:e3:8d:36:df: ff:2d:3d:ff:2c:53:fb:10:95:e7:d1:18:32:0a:1d: 79:11:f9:40:4e:02:f3:28:18:d6:80:d9:79:a7:31: 55:80:a0:53:d2:94:5a:17:7f:90:cf:18:23:44:3c: a2:b6:76:34:72:05:78:5d:81:0f:a7:91:d6:77:d9: 1c:97:e4:a1:73:25:42:7d:b8:64:e3:ad:f4:72:10: 51:98:6b:2d:a5:23:35:15:f1:12:23:44:47:44:8d: 9b:64:92:e5:82:88:31:32:e6:8b:98:19:8a:ff:25: 3b:11:7e:13:b2:6c:da:fd:f2:b0:b7:4b:68:af:df: dc:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:DF:3F:E1:EA:71:E1:F5:14:FA:DD:13:9E:53:3D:8F:D4:B2:F0:67 X509v3 Authority Key Identifier: keyid:CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/tt8_4epx4fUU-t0TnlM9j9Sy8Gc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.154.112.0/22 IPv6: 2a07:8c80::/29 Signature Algorithm: sha256WithRSAEncryption 87:65:0f:77:bd:9a:e1:10:ef:e5:5e:f7:bf:34:c3:2a:79:79: 36:a8:e4:25:3f:80:52:1d:db:47:53:a4:bd:90:35:1a:01:2d: 91:20:65:d5:f3:0a:a8:f2:ec:9e:c9:73:59:94:29:b0:af:4e: 59:64:20:b5:5b:5a:7c:ae:75:30:cf:3f:b0:1c:1c:a5:58:ae: ea:3a:f4:ee:54:1e:7f:db:2b:15:a6:a2:4f:28:ec:7b:7f:11: 15:f0:57:e8:9a:31:f8:ad:ae:ec:3a:9b:02:0e:6c:e9:a8:21: fe:89:cb:dd:4a:19:ac:87:38:10:03:2b:96:b2:f4:80:88:2a: 38:e5:5d:be:a5:cc:89:95:02:b8:03:87:2e:cd:cf:80:32:c3: 0e:f6:61:03:6a:53:01:d8:c1:b3:48:94:9c:c9:9e:1c:14:0e: 94:9a:3f:31:da:93:f1:f6:62:61:4e:30:7c:bb:30:b9:5e:97: c2:e3:23:b7:0b:85:65:a8:4b:de:73:47:61:74:11:b2:cb:21: a6:45:a2:3c:95:c8:40:82:e7:0f:f8:a1:3d:4a:d4:70:c2:34: a9:ae:f8:df:a5:2e:5b:08:3f:b8:2f:96:77:88:63:a0:c6:e9: eb:f0:8a:3c:c9:da:e8:dc:3d:dd:6e:97:3d:df:33:5d:03:cd: 3d:55:fd:51 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9ylYxxVXJCYOA/SStidopMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmZGIzZDkwNGIzNDQ0MDU0NmI2MjQxZDc4OTRkOTMzMDBi Y2JkMjgwHhcNMjYwMTAyMDgxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNmRmM2ZlMWVhNzFlMWY1MTRmYWRkMTM5ZTUzM2Q4ZmQ0YjJmMDY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcMzQzDsQ/Q2tok3o9kq5sGMsG+J tGbVpDWqvkxR3S7GNe5qte5iZ6VEohDdcHMu5gHoQRHMz/3I9uX7An6RmgiclJNk EBIzxgUbzZfo07kGAr2+hcop/Cxya2byTVrI1LBBWC//HZHqjaROGM/auPMnOtMG /VnmWynejdiBabzLiOONNt//LT3/LFP7EJXn0RgyCh15EflATgLzKBjWgNl5pzFV gKBT0pRaF3+QzxgjRDyitnY0cgV4XYEPp5HWd9kcl+ShcyVCfbhk4630chBRmGst pSM1FfESI0RHRI2bZJLlgogxMuaLmBmK/yU7EX4Tsmza/fKwt0tor9/ctwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLbfP+HqceH1FPrdE55TPY/UsvBnMB8GA1UdIwQY MBaAFM/bPZBLNEQFRrYkHXiU2TMAvL0oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejlzOWtFczBSQVZHdGlRZGVKVFpNd0M4dlNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS85MjVhYjktMjFmZS00YmJmLWFjMGUt NmU3NTYxNTM1YmJkLzEvdHQ4XzRlcHg0ZlVVLXQwVG5sTTlqOVN5OEdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS85MjVhYjktMjFmZS00YmJmLWFjMGUtNmU3NTYxNTM1YmJk LzEvejlzOWtFczBSQVZHdGlRZGVKVFpNd0M4dlNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZpwMA0E AgACMAcDBQMqB4yAMA0GCSqGSIb3DQEBCwUAA4IBAQCHZQ93vZrhEO/lXve/NMMq eXk2qOQlP4BSHdtHU6S9kDUaAS2RIGXV8wqo8uyeyXNZlCmwr05ZZCC1W1p8rnUw zz+wHBylWK7qOvTuVB5/2ysVpqJPKOx7fxEV8FfomjH4ra7sOpsCDmzpqCH+icvd ShmshzgQAyuWsvSAiCo45V2+pcyJlQK4A4cuzc+AMsMO9mEDalMB2MGzSJScyZ4c FA6Umj8x2pPx9mJhTjB8uzC5XpfC4yO3C4VlqEvec0dhdBGyyyGmRaI8lchAgucP +KE9StRwwjSprvjfpS5bCD+4L5Z3iGOgxunr8Io8ydro3D3dbpc93zNdA809Vf1R -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:01 2026 by rpki-client