This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/tvMXQZLl7Wysz_xvdn4KxR27LYI.roa File: tvMXQZLl7Wysz_xvdn4KxR27LYI.roa (raw, json) Hash identifier: DS+mGSmFWnDI1NNRJFgUsn5iaFW320NJTO3U5Mk3hfc= Subject key identifier: B6:F3:17:41:92:E5:ED:6C:AC:CF:FC:6F:76:7E:0A:C5:1D:BB:2D:82 Certificate issuer: /CN=f62654658f672aacf37133b5c71cf4b11c1869da Certificate serial: 019B775920740287AF329497BA62AEDB46AE Authority key identifier: F6:26:54:65:8F:67:2A:AC:F3:71:33:B5:C7:1C:F4:B1:1C:18:69:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9iZUZY9nKqzzcTO1xxz0sRwYado.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/tvMXQZLl7Wysz_xvdn4KxR27LYI.roa Signing time: Thu 01 Jan 2026 02:18:08 +0000 ROA not before: Thu 01 Jan 2026 02:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29534 IP address blocks: 195.140.244.0/22 maxlen: 24 195.140.244.0/24 maxlen: 24 195.140.245.0/24 maxlen: 24 195.140.246.0/24 maxlen: 24 195.140.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.mft rsync://rpki.ripe.net/repository/DEFAULT/9iZUZY9nKqzzcTO1xxz0sRwYado.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:20:74:02:87:af:32:94:97:ba:62:ae:db:46:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f62654658f672aacf37133b5c71cf4b11c1869da Validity Not Before: Jan 1 02:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b6f3174192e5ed6caccffc6f767e0ac51dbb2d82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:93:c7:a4:32:e0:30:dd:4a:95:7a:6f:1d:6a: 09:b2:da:06:66:fe:2f:55:cd:73:6e:d8:6e:e8:1d: e6:ad:2f:da:5e:86:85:17:87:31:89:d2:0b:7a:f4: 43:71:da:2f:f7:16:32:08:b9:ef:7c:86:d5:fb:b0: 5a:9f:0e:82:38:b8:1f:dc:35:b7:ff:85:56:49:e9: 99:24:6a:c3:d7:d9:d1:92:95:f7:36:2d:0b:62:02: 75:d4:76:3f:25:2e:f5:42:2c:4c:52:ab:f2:37:6c: 96:15:c6:ed:61:70:00:0b:5c:b9:19:e7:76:e4:4d: 49:e2:26:5d:2b:05:29:92:91:36:de:c7:03:da:66: b0:6f:9a:03:7a:b4:76:68:9d:39:d8:e4:51:98:4d: 8d:1d:f9:5d:7b:f0:ef:60:f2:36:96:db:e5:01:c1: 77:f7:03:ed:6a:a2:8b:41:af:8b:9b:3f:67:30:6a: 67:6c:f8:67:f3:83:f1:73:ad:cf:91:03:b5:34:00: b5:b4:87:81:06:af:15:e8:65:7f:a2:17:b1:b7:be: a0:d5:b8:be:a4:2f:90:6d:f6:09:0e:81:20:66:29: b3:47:82:76:60:7b:1d:b8:b2:66:30:5b:1b:52:78: 04:f5:30:a7:b3:1a:30:64:45:0c:59:c3:44:51:78: 0a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:F3:17:41:92:E5:ED:6C:AC:CF:FC:6F:76:7E:0A:C5:1D:BB:2D:82 X509v3 Authority Key Identifier: keyid:F6:26:54:65:8F:67:2A:AC:F3:71:33:B5:C7:1C:F4:B1:1C:18:69:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9iZUZY9nKqzzcTO1xxz0sRwYado.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/tvMXQZLl7Wysz_xvdn4KxR27LYI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.140.244.0/22 Signature Algorithm: sha256WithRSAEncryption bb:be:1f:cf:14:04:43:e9:14:fd:97:82:f8:c5:84:9a:82:8b: f9:09:8e:0b:4b:86:31:ea:8d:33:ee:e5:cf:e8:1e:f7:76:ad: aa:eb:ab:3b:cd:30:23:3d:38:6e:72:e9:c6:d8:37:7f:ab:1d: 15:d2:e0:87:be:f0:38:bf:53:8a:1e:dc:78:58:18:77:c2:04: 4d:5a:90:9f:c4:15:8b:77:1d:c5:e5:18:a8:af:a0:7f:71:3d: 58:69:94:3f:71:f3:ed:02:66:ad:49:9d:65:79:f8:08:7f:8c: 65:24:30:27:3b:76:fb:03:6e:73:85:3b:b8:5f:ec:4d:0a:ea: ae:e9:09:9c:f6:03:d6:04:46:91:34:f9:f8:d9:ee:96:d2:3b: 92:21:b6:31:9b:0c:ab:35:6f:af:18:d3:cd:89:e5:18:e8:6e: c7:c7:13:56:fe:34:54:a2:31:7b:ac:6a:20:da:4a:cd:96:9f: f7:99:25:6f:29:8c:22:14:cf:99:58:0d:1d:57:2d:0e:2c:33: 5b:4b:f1:e8:ec:2f:94:ec:51:78:ef:f7:7d:10:5c:96:a9:28: 2f:08:d1:32:cf:9d:29:70:46:dc:58:1d:97:7a:f1:4f:f0:32: 25:95:aa:d0:c1:93:5c:ad:c7:0e:fc:27:d8:a7:34:88:bb:1e: 88:53:f2:9c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WSB0AoevMpSXumKu20auMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2MjY1NDY1OGY2NzJhYWNmMzcxMzNiNWM3MWNmNGIxMWMx ODY5ZGEwHhcNMjYwMTAxMDIxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNmYzMTc0MTkyZTVlZDZjYWNjZmZjNmY3NjdlMGFjNTFkYmIyZDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpPHpDLgMN1KlXpvHWoJstoGZv4v Vc1zbthu6B3mrS/aXoaFF4cxidILevRDcdov9xYyCLnvfIbV+7Banw6COLgf3DW3 /4VWSemZJGrD19nRkpX3Ni0LYgJ11HY/JS71QixMUqvyN2yWFcbtYXAAC1y5Ged2 5E1J4iZdKwUpkpE23scD2mawb5oDerR2aJ052ORRmE2NHflde/DvYPI2ltvlAcF3 9wPtaqKLQa+Lmz9nMGpnbPhn84Pxc63PkQO1NAC1tIeBBq8V6GV/ohext76g1bi+ pC+QbfYJDoEgZimzR4J2YHsduLJmMFsbUngE9TCnsxowZEUMWcNEUXgK5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLbzF0GS5e1srM/8b3Z+CsUduy2CMB8GA1UdIwQY MBaAFPYmVGWPZyqs83Eztccc9LEcGGnaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWlaVVpZOW5LcXp6Y1RPMXh4ejBzUndZYWRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9hNjhlMjYtOTJlNS00ZjQ5LWFkYjgt NjY0Nzc4ODQ1YjE2LzEvdHZNWFFaTGw3V3lzel94dmRuNEt4UjI3TFlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9hNjhlMjYtOTJlNS00ZjQ5LWFkYjgtNjY0Nzc4ODQ1YjE2 LzEvOWlaVVpZOW5LcXp6Y1RPMXh4ejBzUndZYWRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw4z0MA0G CSqGSIb3DQEBCwUAA4IBAQC7vh/PFARD6RT9l4L4xYSagov5CY4LS4Yx6o0z7uXP 6B73dq2q66s7zTAjPThucunG2Dd/qx0V0uCHvvA4v1OKHtx4WBh3wgRNWpCfxBWL dx3F5Rior6B/cT1YaZQ/cfPtAmatSZ1lefgIf4xlJDAnO3b7A25zhTu4X+xNCuqu 6Qmc9gPWBEaRNPn42e6W0juSIbYxmwyrNW+vGNPNieUY6G7HxxNW/jRUojF7rGog 2krNlp/3mSVvKYwiFM+ZWA0dVy0OLDNbS/Ho7C+U7FF47/d9EFyWqSgvCNEyz50p cEbcWB2XevFP8DIllarQwZNcrccO/CfYpzSIux6IU/Kc -----END CERTIFICATE-----Generated at Mon Feb 9 20:11:03 2026 by rpki-client