This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/TTH6UtQ8yQrkLhyYLnJC4Q9gZrI.roa File: TTH6UtQ8yQrkLhyYLnJC4Q9gZrI.roa (raw, json) Hash identifier: g99ly73z8HYSZzhyuTFjlRitLy+it8mKyo3av65p3QU= Subject key identifier: 4D:31:FA:52:D4:3C:C9:0A:E4:2E:1C:98:2E:72:42:E1:0F:60:66:B2 Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019B797F2CF87E1849DBBF546795BC1459B6 Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/TTH6UtQ8yQrkLhyYLnJC4Q9gZrI.roa Signing time: Thu 01 Jan 2026 12:18:56 +0000 ROA not before: Thu 01 Jan 2026 12:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58061 IP address blocks: 138.249.0.0/24 maxlen: 24 138.249.1.0/24 maxlen: 24 170.168.4.0/24 maxlen: 24 170.168.5.0/24 maxlen: 24 170.168.26.0/24 maxlen: 24 170.168.27.0/24 maxlen: 24 170.168.32.0/24 maxlen: 24 170.168.41.0/24 maxlen: 24 170.168.43.0/24 maxlen: 24 170.168.48.0/24 maxlen: 24 170.168.49.0/24 maxlen: 24 170.168.50.0/24 maxlen: 24 170.168.51.0/24 maxlen: 24 170.168.112.0/24 maxlen: 24 170.168.113.0/24 maxlen: 24 170.168.114.0/24 maxlen: 24 170.168.118.0/24 maxlen: 24 170.168.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 16:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:2c:f8:7e:18:49:db:bf:54:67:95:bc:14:59:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Jan 1 12:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d31fa52d43cc90ae42e1c982e7242e10f6066b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:35:d7:30:b0:9b:09:ac:06:26:30:78:1e:f3: d3:f7:6b:e1:eb:6c:fc:10:9c:ea:75:9e:1c:fb:a1: 8b:4c:72:6b:f7:5c:1c:cc:2c:cc:91:a3:54:e4:6d: 9a:61:ce:2f:8c:53:c0:06:a0:69:44:8e:ff:8d:41: bd:c6:4c:60:76:e1:e3:0d:81:dd:8b:81:96:96:c6: 56:45:3d:a9:24:21:63:0b:6d:6b:87:2c:36:87:f2: e5:d6:e4:e1:49:7e:ef:ff:00:b7:a0:56:d8:90:90: 50:c7:75:17:48:12:dc:79:3a:3d:ed:1b:31:f0:01: 8f:61:cc:65:7b:d5:e4:67:03:a9:41:38:4c:aa:91: 47:24:87:0d:38:bb:29:e4:e0:ed:7d:37:76:11:b5: 66:50:53:3f:a4:76:7a:69:10:f4:87:e6:ca:7d:3b: 52:6b:79:aa:d7:38:c3:cb:1b:fb:63:96:8e:e2:c6: 1a:14:8c:d4:33:0e:23:2d:f3:18:6b:ee:17:a7:94: 7a:ad:8f:b0:84:dc:c3:d4:fe:9a:3d:46:18:26:08: 5a:f0:17:56:30:b5:82:41:d3:3d:05:c7:af:ca:08: 38:5d:9a:bb:d7:06:95:0e:6f:3f:6a:2b:2d:be:7e: 6a:66:b8:06:ac:8c:4f:55:5f:ad:c9:c5:e1:a4:04: e8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:31:FA:52:D4:3C:C9:0A:E4:2E:1C:98:2E:72:42:E1:0F:60:66:B2 X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/TTH6UtQ8yQrkLhyYLnJC4Q9gZrI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.249.0.0/23 170.168.4.0/23 170.168.26.0/23 170.168.32.0/24 170.168.41.0/24 170.168.43.0/24 170.168.48.0/22 170.168.112.0-170.168.114.255 170.168.118.0/23 Signature Algorithm: sha256WithRSAEncryption 4b:22:01:85:1c:24:01:d3:32:85:9e:b9:68:fb:9c:b1:77:55: c9:ae:70:f2:7e:96:99:ba:2a:aa:77:50:0a:5a:14:bf:68:19: 74:24:2c:93:08:8e:d2:20:ee:14:d1:52:e7:60:fd:b8:3e:e8: 48:25:43:05:56:ce:eb:ad:43:56:64:90:c4:09:5f:73:f9:9f: 14:e9:41:6c:9e:3b:80:a6:a9:5b:f0:9a:e3:d7:f8:01:25:a3: b0:f0:1c:6d:7f:57:26:bd:e1:4c:b0:81:39:c3:3c:31:2e:31: 0b:30:b4:97:c7:1a:86:17:47:bb:59:94:52:4b:0a:88:c7:f1: b9:cc:db:9e:44:7d:c9:1c:39:22:b8:60:d1:e7:05:f6:6d:e1: 0f:4d:f3:05:ef:8b:4a:8d:38:67:cb:99:c2:22:bf:0f:ba:83: ab:a7:9b:77:67:a6:9f:b9:f1:0e:3e:8e:59:b2:58:fe:d7:7e: b0:11:1d:ea:92:32:66:94:c4:e2:2e:13:da:37:c1:cf:92:5b: 73:c0:30:04:b0:1b:99:fb:44:35:88:1b:75:e5:fa:5e:41:cc: 7a:1e:10:97:a9:ef:46:60:04:9e:a7:cc:5b:cf:7b:d9:31:5a: dc:fa:4f:44:ad:bf:47:6f:79:0e:d6:f2:ce:fa:c0:b8:12:70: 24:89:3e:61 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgISAZt5fyz4fhhJ279UZ5W8FFm2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjYwMTAxMTIxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDMxZmE1MmQ0M2NjOTBhZTQyZTFjOTgyZTcyNDJlMTBmNjA2NmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDXXMLCbCawGJjB4HvPT92vh62z8 EJzqdZ4c+6GLTHJr91wczCzMkaNU5G2aYc4vjFPABqBpRI7/jUG9xkxgduHjDYHd i4GWlsZWRT2pJCFjC21rhyw2h/Ll1uThSX7v/wC3oFbYkJBQx3UXSBLceTo97Rsx 8AGPYcxle9XkZwOpQThMqpFHJIcNOLsp5ODtfTd2EbVmUFM/pHZ6aRD0h+bKfTtS a3mq1zjDyxv7Y5aO4sYaFIzUMw4jLfMYa+4Xp5R6rY+whNzD1P6aPUYYJgha8BdW MLWCQdM9Bcevygg4XZq71waVDm8/aistvn5qZrgGrIxPVV+tycXhpATo7QIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFE0x+lLUPMkK5C4cmC5yQuEPYGayMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvVFRINlV0UTh5UXJrTGh5WUxuSkM0UTlnWnJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQBivkAAwQB qqgEAwQBqqgaAwQAqqggAwQAqqgpAwQAqqgrAwQCqqgwMAwDBASqqHADBACqqHID BAGqqHYwDQYJKoZIhvcNAQELBQADggEBAEsiAYUcJAHTMoWeuWj7nLF3VcmucPJ+ lpm6Kqp3UApaFL9oGXQkLJMIjtIg7hTRUudg/bg+6EglQwVWzuutQ1ZkkMQJX3P5 nxTpQWyeO4CmqVvwmuPX+AElo7DwHG1/Vya94UywgTnDPDEuMQswtJfHGoYXR7tZ lFJLCojH8bnM255EfckcOSK4YNHnBfZt4Q9N8wXvi0qNOGfLmcIivw+6g6unm3dn pp+58Q4+jlmyWP7XfrARHeqSMmaUxOIuE9o3wc+SW3PAMASwG5n7RDWIG3Xl+l5B zHoeEJep70ZgBJ6nzFvPe9kxWtz6T0Stv0dveQ7W8s76wLgScCSJPmE= -----END CERTIFICATE-----Generated at Thu Jan 22 21:36:42 2026 by rpki-client