This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/TdxBcOD5KFu7zTwSyG-2pUCjuA0.roa File: TdxBcOD5KFu7zTwSyG-2pUCjuA0.roa (raw, json) Hash identifier: 8RAAcXqpQJQmn19i+1tiOizdZ3vYf+HaxrOra0Z4LNU= Subject key identifier: 4D:DC:41:70:E0:F9:28:5B:BB:CD:3C:12:C8:6F:B6:A5:40:A3:B8:0D Certificate issuer: /CN=9a7b9a8cd819f4a920334d7e72ec2340870d7749 Certificate serial: 019B79ED654CC14BE92D9E9D027423249C0E Authority key identifier: 9A:7B:9A:8C:D8:19:F4:A9:20:33:4D:7E:72:EC:23:40:87:0D:77:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/TdxBcOD5KFu7zTwSyG-2pUCjuA0.roa Signing time: Thu 01 Jan 2026 14:19:19 +0000 ROA not before: Thu 01 Jan 2026 14:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44696 IP address blocks: 85.202.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.mft rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:65:4c:c1:4b:e9:2d:9e:9d:02:74:23:24:9c:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a7b9a8cd819f4a920334d7e72ec2340870d7749 Validity Not Before: Jan 1 14:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ddc4170e0f9285bbbcd3c12c86fb6a540a3b80d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6c:b1:fb:98:f1:03:7c:0e:39:42:a0:fe:7d: 92:78:01:30:a5:23:20:10:b6:c6:57:0a:be:e2:4e: df:f3:10:eb:90:b6:c4:c2:c0:f6:d3:40:b1:2c:4a: f9:bc:67:13:3b:c7:0a:d2:25:2b:9c:6b:c1:c1:ed: 6d:d9:49:bc:89:df:1f:af:6d:4a:3d:09:9a:06:c0: ef:f8:be:36:53:e7:c2:71:d5:69:ba:ae:72:bf:89: 24:87:06:72:8b:d9:11:01:ea:14:d6:75:b6:a6:16: 98:d2:0f:c9:21:fa:29:4b:de:3e:2c:93:ba:b9:e4: 77:cd:75:f0:e3:cf:cf:0f:26:c9:ba:f9:4e:ab:d7: e6:58:fc:f8:bc:2b:f8:8a:4f:d6:52:3e:28:21:61: e8:6f:5c:7d:33:85:be:11:e0:4c:d6:d0:eb:ba:c9: 88:5a:75:d4:6a:eb:ee:02:05:c1:47:b5:e3:ed:35: 93:4a:75:d0:74:78:95:2b:49:1e:f3:0e:4a:59:63: 54:85:63:c2:ac:d1:2a:ef:42:bd:84:75:34:00:1e: 35:f5:1e:23:e9:45:bd:69:42:70:95:a5:12:00:e5: f9:38:4b:17:c8:a3:85:6b:64:52:c6:28:f8:14:db: 9e:1d:0f:f5:22:59:57:cc:03:fd:7c:fe:96:0c:4b: bc:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:DC:41:70:E0:F9:28:5B:BB:CD:3C:12:C8:6F:B6:A5:40:A3:B8:0D X509v3 Authority Key Identifier: keyid:9A:7B:9A:8C:D8:19:F4:A9:20:33:4D:7E:72:EC:23:40:87:0D:77:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/TdxBcOD5KFu7zTwSyG-2pUCjuA0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.202.240.0/20 Signature Algorithm: sha256WithRSAEncryption 5e:0a:7e:9a:e8:ea:fe:33:1a:43:96:3c:a6:f8:e4:29:9b:74: 2e:b4:a1:79:c9:10:bd:a3:62:db:ac:e6:dd:ab:c1:5f:a4:06: d7:1f:a8:cd:25:a7:9e:2c:10:7d:a9:7a:19:3a:97:da:e2:ce: da:cf:ca:56:ff:4e:57:a0:6e:83:f2:c2:a5:26:29:cf:3f:75: 37:c5:55:81:a5:7e:11:0b:d8:94:33:95:c7:e0:9d:dd:6f:b6: 45:e6:81:c1:88:79:19:83:c8:25:51:a5:34:94:2f:2f:32:9d: e9:1e:d6:87:23:8d:50:66:37:bb:eb:b0:8c:aa:42:69:fa:4a: 83:59:16:00:60:1b:76:ac:5e:70:d2:3c:be:10:6f:e0:9c:4c: a0:2a:a5:ba:75:c6:4d:8f:85:aa:02:a7:37:3e:3c:1b:0c:cf: aa:d4:9b:11:fd:f9:02:b2:99:61:98:1b:30:58:7c:a4:b3:f0: 01:3f:58:e2:b4:25:22:20:1d:4a:ef:29:01:ff:23:15:c9:3b: 25:6d:6f:72:e9:de:70:1c:bf:76:b4:c5:ec:b1:d8:6d:89:17: 4a:e9:5f:5c:b6:bf:e4:ee:aa:5f:51:59:e8:12:ac:c5:c6:ee: 9f:95:3d:23:22:61:68:5d:54:aa:6b:36:50:27:e6:a9:f9:d1: 21:e4:60:b4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57WVMwUvpLZ6dAnQjJJwOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhN2I5YThjZDgxOWY0YTkyMDMzNGQ3ZTcyZWMyMzQwODcw ZDc3NDkwHhcNMjYwMTAxMTQxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZGRjNDE3MGUwZjkyODViYmJjZDNjMTJjODZmYjZhNTQwYTNiODBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmyx+5jxA3wOOUKg/n2SeAEwpSMg ELbGVwq+4k7f8xDrkLbEwsD200CxLEr5vGcTO8cK0iUrnGvBwe1t2Um8id8fr21K PQmaBsDv+L42U+fCcdVpuq5yv4kkhwZyi9kRAeoU1nW2phaY0g/JIfopS94+LJO6 ueR3zXXw48/PDybJuvlOq9fmWPz4vCv4ik/WUj4oIWHob1x9M4W+EeBM1tDrusmI WnXUauvuAgXBR7Xj7TWTSnXQdHiVK0ke8w5KWWNUhWPCrNEq70K9hHU0AB419R4j 6UW9aUJwlaUSAOX5OEsXyKOFa2RSxij4FNueHQ/1IllXzAP9fP6WDEu8HQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE3cQXDg+Shbu808EshvtqVAo7gNMB8GA1UdIwQY MBaAFJp7mozYGfSpIDNNfnLsI0CHDXdJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW51YWpOZ1o5S2tnTTAxLWN1d2pRSWNOZDBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS83ZTBlYmItNDY4Ni00MDZlLWI5OWYt MjFmYWYxNDRjYjYyLzEvVGR4QmNPRDVLRnU3elR3U3lHLTJwVUNqdUEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS83ZTBlYmItNDY4Ni00MDZlLWI5OWYtMjFmYWYxNDRjYjYy LzEvbW51YWpOZ1o5S2tnTTAxLWN1d2pRSWNOZDBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEVcrwMA0G CSqGSIb3DQEBCwUAA4IBAQBeCn6a6Or+MxpDljym+OQpm3QutKF5yRC9o2LbrObd q8FfpAbXH6jNJaeeLBB9qXoZOpfa4s7az8pW/05XoG6D8sKlJinPP3U3xVWBpX4R C9iUM5XH4J3db7ZF5oHBiHkZg8glUaU0lC8vMp3pHtaHI41QZje767CMqkJp+kqD WRYAYBt2rF5w0jy+EG/gnEygKqW6dcZNj4WqAqc3PjwbDM+q1JsR/fkCsplhmBsw WHyks/ABP1jitCUiIB1K7ykB/yMVyTslbW9y6d5wHL92tMXssdhtiRdK6V9ctr/k 7qpfUVnoEqzFxu6flT0jImFoXVSqazZQJ+ap+dEh5GC0 -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:05 2026 by rpki-client