This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/tUMFPd4wBw-QPbXVj1ZEwBuBf3I.roa File: tUMFPd4wBw-QPbXVj1ZEwBuBf3I.roa (raw, json) Hash identifier: U1EAUZ0JWsVCSGF8alTGYuPZXvlsvcWWQaqRLS9Y1d0= Subject key identifier: B5:43:05:3D:DE:30:07:0F:90:3D:B5:D5:8F:56:44:C0:1B:81:7F:72 Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B797E082443F11E81F8CB8BEECCB01C2C Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/tUMFPd4wBw-QPbXVj1ZEwBuBf3I.roa Signing time: Thu 01 Jan 2026 12:17:41 +0000 ROA not before: Thu 01 Jan 2026 12:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214794 IP address blocks: 185.193.100.0/24 maxlen: 24 185.193.101.0/24 maxlen: 24 185.254.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:08:24:43:f1:1e:81:f8:cb:8b:ee:cc:b0:1c:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Jan 1 12:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b543053dde30070f903db5d58f5644c01b817f72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:06:60:99:ce:9e:d7:01:c1:b1:19:d2:13:4f: 6c:2b:e4:8a:cb:d6:51:c9:aa:bb:41:f8:d1:77:c9: 15:81:64:fc:e5:b8:b3:b4:ec:7a:4c:e4:1d:a7:f5: f2:96:db:fd:22:9d:d2:79:e7:4e:85:e2:ed:ff:42: 58:47:8f:f3:47:d1:c7:ec:35:2f:28:29:4f:67:50: eb:59:b5:43:68:b5:ea:7b:4f:68:b9:43:a5:80:79: 0c:ef:c3:4b:6d:fa:3b:36:02:52:79:96:f7:99:20: e3:97:a1:52:34:86:30:4f:21:47:e8:82:c5:b4:4f: dd:08:14:a9:61:57:8e:3b:c1:79:19:7a:36:fe:b6: 29:d9:c7:2a:60:a4:6d:4f:06:28:c3:8a:03:c5:f9: c1:a2:db:85:ad:5c:e1:3b:dc:63:9e:47:ce:57:2b: 5f:44:29:c4:fd:9b:84:b7:ec:9e:b3:12:90:88:aa: 58:7b:7e:5d:12:79:57:d2:ac:9b:d1:3f:4d:02:0d: 40:b1:c2:8d:f3:76:32:9b:23:67:87:85:48:d1:34: 33:fa:62:ea:10:a6:69:07:3a:f0:0e:36:05:de:2b: 3c:8b:a2:9b:bb:fa:7e:95:ad:16:a9:2b:77:b6:36: 54:f6:6d:74:60:ae:0e:4d:6f:53:bc:96:95:3f:ad: 25:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:43:05:3D:DE:30:07:0F:90:3D:B5:D5:8F:56:44:C0:1B:81:7F:72 X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/tUMFPd4wBw-QPbXVj1ZEwBuBf3I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.193.100.0/23 185.254.66.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:4d:1e:a0:5b:cb:b7:32:98:f1:75:55:ec:6f:2d:0c:26:e4: da:14:b8:39:3c:72:77:d0:f4:34:09:c2:d4:36:0b:a2:52:c1: 6b:fb:30:4e:c1:ec:57:a9:50:fe:77:d6:ae:a8:54:4e:d8:c9: 19:d7:94:38:b2:d4:0b:c4:9b:4b:6c:a3:49:37:fc:87:7c:95: a0:fc:39:68:73:51:10:2d:35:d8:f7:44:8a:11:54:9b:72:04: 47:97:83:8a:90:b0:3c:10:95:8d:12:fe:7b:d6:d2:d4:35:e1: 75:b6:45:b9:03:04:43:77:e9:8e:be:33:3b:9e:8d:a9:d2:b9: 56:dd:82:af:73:d5:6c:f1:58:ff:41:3a:b7:bf:36:e2:c3:a3: ce:ac:33:ab:8c:7e:ee:28:39:8b:f1:d7:bb:ef:3c:78:99:fc: 21:70:4b:8e:98:8c:20:ee:49:1f:a5:b5:6e:f7:03:3d:e1:c5: de:c5:c9:ac:5a:74:53:6b:b8:a2:20:e7:d0:8e:3e:2d:f6:0f: 70:e5:90:f1:f8:f6:61:cb:56:47:49:03:81:7b:c7:e9:cb:7e: 0f:2b:13:bf:63:fe:ed:a8:28:9a:1b:3c:10:57:18:21:74:99: 9a:e3:75:82:3a:66:63:bb:02:2c:0d:9f:97:19:8e:2b:46:be: 96:82:47:e5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fggkQ/EegfjLi+7MsBwsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjYwMTAxMTIxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTQzMDUzZGRlMzAwNzBmOTAzZGI1ZDU4ZjU2NDRjMDFiODE3ZjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQZgmc6e1wHBsRnSE09sK+SKy9ZR yaq7QfjRd8kVgWT85biztOx6TOQdp/Xyltv9Ip3SeedOheLt/0JYR4/zR9HH7DUv KClPZ1DrWbVDaLXqe09ouUOlgHkM78NLbfo7NgJSeZb3mSDjl6FSNIYwTyFH6ILF tE/dCBSpYVeOO8F5GXo2/rYp2ccqYKRtTwYow4oDxfnBotuFrVzhO9xjnkfOVytf RCnE/ZuEt+yesxKQiKpYe35dEnlX0qyb0T9NAg1AscKN83YymyNnh4VI0TQz+mLq EKZpBzrwDjYF3is8i6Kbu/p+la0WqSt3tjZU9m10YK4OTW9TvJaVP60lxwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLVDBT3eMAcPkD211Y9WRMAbgX9yMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvdFVNRlBkNHdCdy1RUGJYVmoxWkV3QnVCZjNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBucFkAwQA uf5CMA0GCSqGSIb3DQEBCwUAA4IBAQAbTR6gW8u3MpjxdVXsby0MJuTaFLg5PHJ3 0PQ0CcLUNguiUsFr+zBOwexXqVD+d9auqFRO2MkZ15Q4stQLxJtLbKNJN/yHfJWg /Dloc1EQLTXY90SKEVSbcgRHl4OKkLA8EJWNEv571tLUNeF1tkW5AwRDd+mOvjM7 no2p0rlW3YKvc9Vs8Vj/QTq3vzbiw6POrDOrjH7uKDmL8de77zx4mfwhcEuOmIwg 7kkfpbVu9wM94cXexcmsWnRTa7iiIOfQjj4t9g9w5ZDx+PZhy1ZHSQOBe8fpy34P KxO/Y/7tqCiaGzwQVxghdJma43WCOmZjuwIsDZ+XGY4rRr6Wgkfl -----END CERTIFICATE-----Generated at Mon Jan 19 14:38:57 2026 by rpki-client