This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/TMmlgOVU9TiGj06HsEktGMz914c.roa File: TMmlgOVU9TiGj06HsEktGMz914c.roa (raw, json) Hash identifier: z1JSo6omW1twhvoFIM8EdbTB0WIr9N/99g/a6rPQQBI= Subject key identifier: 4C:C9:A5:80:E5:54:F5:38:86:8F:4E:87:B0:49:2D:18:CC:FD:D7:87 Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B797E106AF723ED517C44DBC4F3A05C8C Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/TMmlgOVU9TiGj06HsEktGMz914c.roa Signing time: Thu 01 Jan 2026 12:17:43 +0000 ROA not before: Thu 01 Jan 2026 12:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400304 IP address blocks: 86.107.101.0/24 maxlen: 24 208.123.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:10:6a:f7:23:ed:51:7c:44:db:c4:f3:a0:5c:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Jan 1 12:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4cc9a580e554f538868f4e87b0492d18ccfdd787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e6:ca:45:cb:4a:6b:7e:6a:8b:c4:f6:bd:f9: 3e:a9:ce:36:0b:2d:b3:83:a0:68:ea:cb:5c:db:1d: 90:13:de:76:78:17:e4:f2:b6:3f:64:79:24:7f:5e: ab:9a:eb:8c:ae:b2:2c:fb:37:13:30:d9:df:8f:51: c0:3c:d3:48:73:b6:f5:ac:ba:0d:0a:ee:53:b8:dd: c2:cb:7e:ac:42:d9:f1:42:99:8d:f5:d8:5f:4c:89: 6b:cd:46:ab:6c:26:b2:19:da:bc:99:b4:82:a3:1a: 26:0d:82:6d:1b:e5:11:98:37:59:fb:30:a7:e7:80: 3a:e5:ea:6b:16:cb:94:30:e5:e9:be:35:39:cc:68: 54:b1:02:9c:c4:5e:e7:40:56:a7:1d:6c:2f:03:98: 5b:20:a0:19:ba:52:3d:dc:93:ea:e8:72:b0:2e:b8: dc:9c:fe:10:ae:56:2f:5b:73:0b:b2:bb:f0:da:9f: c7:ca:ba:5b:dd:d2:66:39:6f:3a:46:95:e8:24:bb: ef:e5:3d:ad:ee:ae:98:95:d3:55:1a:d7:c8:c3:a4: b4:dc:2d:d7:5d:89:2b:e5:aa:18:d1:8f:1a:86:a2: 3d:0e:9a:68:05:08:a6:dd:08:86:b0:65:b4:4a:99: df:82:2a:cd:4b:29:e7:6c:2c:e4:d2:6b:88:f2:41: 60:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:C9:A5:80:E5:54:F5:38:86:8F:4E:87:B0:49:2D:18:CC:FD:D7:87 X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/TMmlgOVU9TiGj06HsEktGMz914c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.107.101.0/24 208.123.187.0/24 Signature Algorithm: sha256WithRSAEncryption 90:d4:c4:9c:57:9d:19:30:6c:3c:48:00:76:42:ec:21:98:ec: 73:b0:60:cd:86:b9:2b:c6:0d:ff:cb:15:14:54:15:ec:f3:cb: 0f:f0:8b:0c:e2:f8:6e:60:27:94:ca:9a:b1:de:97:8e:7c:e3: 60:8a:33:9d:7d:20:8f:e8:14:fd:f9:ec:7e:0a:91:52:bf:db: 03:3f:b4:75:44:f8:1c:34:27:c6:72:42:4b:62:0c:86:05:fa: 0f:3c:f8:40:a3:78:74:c9:9b:f8:d9:c2:12:d1:e4:5d:a8:23: 1d:96:dc:70:3d:62:19:2b:b5:f9:bb:b7:5b:6d:6e:7e:90:62: da:c3:f9:4b:62:b6:b6:42:a3:8f:3e:90:3c:5b:33:3c:b7:6b: c3:c3:bf:05:1a:62:60:db:2d:9c:03:f1:59:e0:33:24:bf:61: 0c:cb:a2:00:26:d0:30:80:13:b4:70:1e:ab:49:a5:cf:9b:ac: 76:10:61:c7:96:75:b6:d7:66:29:2f:44:82:35:3b:97:a1:ca: 0d:f3:46:5d:1d:ce:0f:58:68:01:05:65:d6:0c:55:8a:9f:5d: 13:49:37:06:56:4e:ef:17:3f:c5:5e:e6:13:de:c2:38:51:64: f3:c7:33:b4:fd:b8:0c:af:4b:94:39:31:52:d9:27:9c:d7:36: 42:e6:eb:a1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fhBq9yPtUXxE28TzoFyMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjYwMTAxMTIxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Y2M5YTU4MGU1NTRmNTM4ODY4ZjRlODdiMDQ5MmQxOGNjZmRkNzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxubKRctKa35qi8T2vfk+qc42Cy2z g6Bo6stc2x2QE952eBfk8rY/ZHkkf16rmuuMrrIs+zcTMNnfj1HAPNNIc7b1rLoN Cu5TuN3Cy36sQtnxQpmN9dhfTIlrzUarbCayGdq8mbSCoxomDYJtG+URmDdZ+zCn 54A65eprFsuUMOXpvjU5zGhUsQKcxF7nQFanHWwvA5hbIKAZulI93JPq6HKwLrjc nP4QrlYvW3MLsrvw2p/Hyrpb3dJmOW86RpXoJLvv5T2t7q6YldNVGtfIw6S03C3X XYkr5aoY0Y8ahqI9DppoBQim3QiGsGW0SpnfgirNSynnbCzk0muI8kFgpQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEzJpYDlVPU4ho9Oh7BJLRjM/deHMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvVE1tbGdPVlU5VGlHajA2SHNFa3RHTXo5MTRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVmtlAwQA 0Hu7MA0GCSqGSIb3DQEBCwUAA4IBAQCQ1MScV50ZMGw8SAB2QuwhmOxzsGDNhrkr xg3/yxUUVBXs88sP8IsM4vhuYCeUypqx3peOfONgijOdfSCP6BT9+ex+CpFSv9sD P7R1RPgcNCfGckJLYgyGBfoPPPhAo3h0yZv42cIS0eRdqCMdltxwPWIZK7X5u7db bW5+kGLaw/lLYra2QqOPPpA8WzM8t2vDw78FGmJg2y2cA/FZ4DMkv2EMy6IAJtAw gBO0cB6rSaXPm6x2EGHHlnW212YpL0SCNTuXocoN80ZdHc4PWGgBBWXWDFWKn10T STcGVk7vFz/FXuYT3sI4UWTzxzO0/bgMr0uUOTFS2Sec1zZC5uuh -----END CERTIFICATE-----Generated at Mon Jan 19 14:38:36 2026 by rpki-client