This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/TgCNYCVBJe7DHibK2wEIBWCuz98.roa File: TgCNYCVBJe7DHibK2wEIBWCuz98.roa (raw, json) Hash identifier: QIFBXUnI5cHb70d+ToykREH9LNgrc+X3rqWxt+px7zk= Subject key identifier: 4E:00:8D:60:25:41:25:EE:C3:1E:26:CA:DB:01:08:05:60:AE:CF:DF Certificate issuer: /CN=1ae9db29aa9308e1751b03d0d6999bb868805886 Certificate serial: 019B775922735280EA0FD57022ED841E3039 Authority key identifier: 1A:E9:DB:29:AA:93:08:E1:75:1B:03:D0:D6:99:9B:B8:68:80:58:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/TgCNYCVBJe7DHibK2wEIBWCuz98.roa Signing time: Thu 01 Jan 2026 02:18:08 +0000 ROA not before: Thu 01 Jan 2026 02:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210091 IP address blocks: 89.19.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:22:73:52:80:ea:0f:d5:70:22:ed:84:1e:30:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ae9db29aa9308e1751b03d0d6999bb868805886 Validity Not Before: Jan 1 02:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e008d60254125eec31e26cadb01080560aecfdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c5:4e:4c:a9:dc:c6:af:7f:72:e0:97:1d:94: fc:63:60:a5:c6:15:22:1c:1c:ed:e6:12:44:3a:c1: 5c:1c:92:c0:23:20:11:39:e6:2e:51:3d:06:e0:0b: 30:a0:cc:0e:46:0a:e9:8d:e5:60:e6:c1:9d:25:53: c7:8d:6f:9b:ba:98:0f:cb:6b:29:ea:f2:e3:be:96: e9:2d:d8:51:a0:ea:47:52:ce:e0:ad:df:ce:14:14: 7a:8e:08:d6:d0:f8:03:10:e3:3d:93:75:a6:c6:83: 3b:92:a8:34:3e:ac:8f:77:f2:0b:56:d5:e3:2e:9a: 69:89:85:db:25:16:79:ff:83:f2:fd:6b:c4:8f:03: ad:6e:4a:10:a3:59:76:2e:8c:b9:38:82:7a:67:5f: a6:b2:ca:be:a8:72:bd:99:9a:c5:01:70:3e:ef:9f: 59:58:01:c3:77:a8:ff:69:c5:42:14:e8:07:db:30: 6d:07:b6:8a:7c:c8:d8:2d:66:59:71:76:3c:bb:71: 4f:9e:35:06:82:20:7c:63:22:68:9c:3a:cf:2c:5b: d8:6d:46:3e:97:b0:94:26:e4:37:55:89:ad:ee:cd: 76:e5:fc:86:cd:03:02:e6:ea:0f:8c:4c:72:7f:3f: 9f:cc:4a:23:c4:b2:d0:5b:c3:7b:fe:c5:ec:09:37: e0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:00:8D:60:25:41:25:EE:C3:1E:26:CA:DB:01:08:05:60:AE:CF:DF X509v3 Authority Key Identifier: keyid:1A:E9:DB:29:AA:93:08:E1:75:1B:03:D0:D6:99:9B:B8:68:80:58:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/TgCNYCVBJe7DHibK2wEIBWCuz98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.19.60.0/22 Signature Algorithm: sha256WithRSAEncryption 7e:aa:15:6e:68:da:f0:38:75:f7:f3:04:58:7b:82:51:64:bc: f6:62:da:13:7a:ec:11:22:4b:82:0a:29:e5:cd:e6:e3:66:86: 86:1a:67:87:20:63:f2:87:96:ea:ae:75:e4:ba:46:f7:64:10: 3e:a7:d6:ee:6a:47:46:a3:95:e8:e4:77:9a:44:e8:4d:cd:f9: 8e:56:32:4f:a3:d1:46:8e:41:c3:02:18:24:01:fc:18:32:9f: 32:35:83:86:f2:a0:01:62:35:c4:68:a6:84:5b:5f:e4:2c:68: 90:39:dd:56:87:a0:2e:1c:52:63:f4:2f:40:7c:8e:29:7c:0d: 1c:98:34:8a:c2:eb:ab:b3:1f:cc:11:28:63:3a:93:39:5c:82: 8f:93:ed:81:f7:ac:48:8a:71:22:17:2e:f7:56:64:fc:81:a1: a9:ae:6d:1f:2d:66:c6:68:86:d2:cf:bf:98:db:c1:fd:80:5b: 16:e5:3c:a9:0f:6f:d1:bd:8e:22:95:d6:73:0f:aa:86:10:57: 09:52:de:a3:b7:e6:e6:54:68:ac:09:96:71:94:72:ec:91:98: 0a:a1:a6:2b:76:7d:33:7a:8b:a3:f2:24:29:85:03:23:74:09: ea:58:af:44:e6:ee:42:b6:4a:17:94:76:2e:6b:01:80:c5:9f: 18:a5:c7:27 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WSJzUoDqD9VwIu2EHjA5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhZTlkYjI5YWE5MzA4ZTE3NTFiMDNkMGQ2OTk5YmI4Njg4 MDU4ODYwHhcNMjYwMTAxMDIxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTAwOGQ2MDI1NDEyNWVlYzMxZTI2Y2FkYjAxMDgwNTYwYWVjZmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8VOTKncxq9/cuCXHZT8Y2ClxhUi HBzt5hJEOsFcHJLAIyAROeYuUT0G4AswoMwORgrpjeVg5sGdJVPHjW+bupgPy2sp 6vLjvpbpLdhRoOpHUs7grd/OFBR6jgjW0PgDEOM9k3WmxoM7kqg0PqyPd/ILVtXj LpppiYXbJRZ5/4Py/WvEjwOtbkoQo1l2Loy5OIJ6Z1+mssq+qHK9mZrFAXA+759Z WAHDd6j/acVCFOgH2zBtB7aKfMjYLWZZcXY8u3FPnjUGgiB8YyJonDrPLFvYbUY+ l7CUJuQ3VYmt7s125fyGzQMC5uoPjExyfz+fzEojxLLQW8N7/sXsCTfgrQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE4AjWAlQSXuwx4mytsBCAVgrs/fMB8GA1UdIwQY MBaAFBrp2ymqkwjhdRsD0NaZm7hogFiGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3VuYkthcVRDT0YxR3dQUTFwbWJ1R2lBV0lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lYjc4MzUtZDM2NC00ZTI4LTlhODIt ZWQ5MjMxZmJhZWQxLzEvVGdDTllDVkJKZTdESGliSzJ3RUlCV0N1ejk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9lYjc4MzUtZDM2NC00ZTI4LTlhODItZWQ5MjMxZmJhZWQx LzEvR3VuYkthcVRDT0YxR3dQUTFwbWJ1R2lBV0lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWRM8MA0G CSqGSIb3DQEBCwUAA4IBAQB+qhVuaNrwOHX38wRYe4JRZLz2YtoTeuwRIkuCCinl zebjZoaGGmeHIGPyh5bqrnXkukb3ZBA+p9buakdGo5Xo5HeaROhNzfmOVjJPo9FG jkHDAhgkAfwYMp8yNYOG8qABYjXEaKaEW1/kLGiQOd1Wh6AuHFJj9C9AfI4pfA0c mDSKwuursx/MEShjOpM5XIKPk+2B96xIinEiFy73VmT8gaGprm0fLWbGaIbSz7+Y 28H9gFsW5TypD2/RvY4ildZzD6qGEFcJUt6jt+bmVGisCZZxlHLskZgKoaYrdn0z eouj8iQphQMjdAnqWK9E5u5CtkoXlHYuawGAxZ8Ypccn -----END CERTIFICATE-----Generated at Mon Feb 9 23:42:44 2026 by rpki-client