This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/TK8zghqg8mRUl2FKqWZ3fkqCPjo.roa File: TK8zghqg8mRUl2FKqWZ3fkqCPjo.roa (raw, json) Hash identifier: gdusYks5Qp51cXZtG8mOxw07u8NyV/fdE9i7uOexEq8= Subject key identifier: 4C:AF:33:82:1A:A0:F2:64:54:97:61:4A:A9:66:77:7E:4A:82:3E:3A Certificate issuer: /CN=61b195d13050ff3c468a149778710b53582251d9 Certificate serial: 019B7758CCEB93AD160230573C8FC811F03D Authority key identifier: 61:B1:95:D1:30:50:FF:3C:46:8A:14:97:78:71:0B:53:58:22:51:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbGV0TBQ_zxGihSXeHELU1giUdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/TK8zghqg8mRUl2FKqWZ3fkqCPjo.roa Signing time: Thu 01 Jan 2026 02:17:46 +0000 ROA not before: Thu 01 Jan 2026 02:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15925 IP address blocks: 87.253.248.0/21 maxlen: 21 213.135.192.0/19 maxlen: 19 2a01:7f8::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.crl rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.mft rsync://rpki.ripe.net/repository/DEFAULT/YbGV0TBQ_zxGihSXeHELU1giUdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:cc:eb:93:ad:16:02:30:57:3c:8f:c8:11:f0:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b195d13050ff3c468a149778710b53582251d9 Validity Not Before: Jan 1 02:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4caf33821aa0f2645497614aa966777e4a823e3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f9:a0:6f:73:99:7f:23:7c:c7:b0:6d:c1:a1: 78:21:df:6f:e9:1f:a1:d9:6d:5e:1d:53:65:5a:09: 98:20:d3:a1:fc:1d:cc:95:66:51:c8:e9:70:7d:f9: 98:c8:7a:2e:3b:34:22:87:5b:af:8b:96:f1:43:3a: 65:cd:e5:45:aa:03:7f:3b:fb:c2:e4:40:4f:7a:43: 14:3d:ca:03:49:1e:f3:81:37:78:99:f6:86:59:37: f2:5f:8c:34:8e:cc:86:3a:8d:a9:19:eb:6e:0d:5e: 04:46:32:37:94:b7:11:cf:2c:33:23:a6:af:f3:a6: d2:11:ba:8b:d0:2f:4e:62:a8:89:c6:a9:e8:c8:05: 83:4f:b2:b3:78:96:27:7f:7f:da:d3:c9:98:9f:73: e5:60:2b:3a:71:01:3f:51:67:df:da:24:49:c0:24: 4a:a6:3c:04:df:02:ea:c6:99:3e:d8:04:89:80:3e: 82:30:9b:d8:95:29:40:c9:23:c6:88:b3:68:40:44: 02:76:77:c8:29:56:01:ef:be:67:2a:46:43:36:c9: ce:dc:4a:42:56:2a:2a:cd:56:13:eb:63:a5:a7:6a: fa:07:af:24:29:b9:9f:7f:bd:e1:8c:96:c9:35:80: 74:bf:03:7b:0f:b3:33:88:53:29:9d:b1:47:2d:17: 85:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:AF:33:82:1A:A0:F2:64:54:97:61:4A:A9:66:77:7E:4A:82:3E:3A X509v3 Authority Key Identifier: keyid:61:B1:95:D1:30:50:FF:3C:46:8A:14:97:78:71:0B:53:58:22:51:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbGV0TBQ_zxGihSXeHELU1giUdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/TK8zghqg8mRUl2FKqWZ3fkqCPjo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.253.248.0/21 213.135.192.0/19 IPv6: 2a01:7f8::/29 Signature Algorithm: sha256WithRSAEncryption 52:29:73:d9:5f:b5:8d:f0:1c:5b:3e:40:c3:86:f4:70:b2:80: f4:ed:85:06:04:64:a7:27:f8:a1:bb:89:92:93:6e:fb:18:36: 36:10:8d:9c:73:f8:cc:08:74:2d:49:c1:b0:b6:67:5b:2f:9d: 93:c5:f5:43:2e:19:05:76:ab:8e:49:8e:d5:a9:97:ac:b2:52: e5:54:31:04:f4:4d:68:c7:98:92:0e:0a:ce:0d:4c:ad:9f:bf: 80:96:63:9f:c8:29:50:8b:fc:35:fc:96:c8:f3:25:c7:dc:a0: 4a:d4:ff:c6:14:82:01:66:0b:f6:25:77:d4:d5:21:23:fa:c9: 73:eb:8b:99:41:89:b1:c9:f6:81:63:80:a3:70:02:e2:b7:bd: e6:58:f3:14:71:bf:8d:ab:ef:15:d8:ab:4c:07:8a:65:f7:34: dc:31:70:88:76:1f:64:37:7f:7b:fa:f2:d0:a1:17:78:e0:83: 8b:43:6e:84:41:25:74:b6:13:7a:6a:56:aa:cc:98:7b:6a:30: 33:8e:61:64:be:1b:d7:0d:09:c2:75:3d:2f:6b:74:34:ae:75: 4d:c5:26:9a:6c:dc:97:6f:dc:66:cb:7e:78:62:5f:13:c9:b7: 61:99:da:23:3e:a4:41:c1:52:c8:f1:f8:0c:74:9c:7a:23:e4: 2b:2b:04:e3 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt3WMzrk60WAjBXPI/IEfA9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxYjE5NWQxMzA1MGZmM2M0NjhhMTQ5Nzc4NzEwYjUzNTgy MjUxZDkwHhcNMjYwMTAxMDIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Y2FmMzM4MjFhYTBmMjY0NTQ5NzYxNGFhOTY2Nzc3ZTRhODIzZTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPmgb3OZfyN8x7BtwaF4Id9v6R+h 2W1eHVNlWgmYINOh/B3MlWZRyOlwffmYyHouOzQih1uvi5bxQzplzeVFqgN/O/vC 5EBPekMUPcoDSR7zgTd4mfaGWTfyX4w0jsyGOo2pGetuDV4ERjI3lLcRzywzI6av 86bSEbqL0C9OYqiJxqnoyAWDT7KzeJYnf3/a08mYn3PlYCs6cQE/UWff2iRJwCRK pjwE3wLqxpk+2ASJgD6CMJvYlSlAySPGiLNoQEQCdnfIKVYB775nKkZDNsnO3EpC VioqzVYT62Olp2r6B68kKbmff73hjJbJNYB0vwN7D7MziFMpnbFHLReFywIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFEyvM4IaoPJkVJdhSqlmd35Kgj46MB8GA1UdIwQY MBaAFGGxldEwUP88RooUl3hxC1NYIlHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWJHVjBUQlFfenhHaWhTWGVIRUxVMWdpVWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8yZjNjMTktNTZkNS00OTI0LThiY2It YmFjNDcyYWI3YjZhLzEvVEs4emdocWc4bVJVbDJGS3FXWjNma3FDUGpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8yZjNjMTktNTZkNS00OTI0LThiY2ItYmFjNDcyYWI3YjZh LzEvWWJHVjBUQlFfenhHaWhTWGVIRUxVMWdpVWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDV/34AwQF 1YfAMA0EAgACMAcDBQMqAQf4MA0GCSqGSIb3DQEBCwUAA4IBAQBSKXPZX7WN8Bxb PkDDhvRwsoD07YUGBGSnJ/ihu4mSk277GDY2EI2cc/jMCHQtScGwtmdbL52TxfVD LhkFdquOSY7VqZesslLlVDEE9E1ox5iSDgrODUytn7+AlmOfyClQi/w1/JbI8yXH 3KBK1P/GFIIBZgv2JXfU1SEj+slz64uZQYmxyfaBY4CjcALit73mWPMUcb+Nq+8V 2KtMB4pl9zTcMXCIdh9kN397+vLQoRd44IOLQ26EQSV0thN6alaqzJh7ajAzjmFk vhvXDQnCdT0va3Q0rnVNxSaabNyXb9xmy354Yl8TybdhmdojPqRBwVLI8fgMdJx6 I+QrKwTj -----END CERTIFICATE-----Generated at Mon Feb 9 23:47:17 2026 by rpki-client