This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/TMosgBiabWiuRyi5Ssatcr00sSE.roa File: TMosgBiabWiuRyi5Ssatcr00sSE.roa (raw, json) Hash identifier: F+7FnUFFY40UIl2jFbgxyGZqPlinYg7PSVeRNWNABjs= Subject key identifier: 4C:CA:2C:80:18:9A:6D:68:AE:47:28:B9:4A:C6:AD:72:BD:34:B1:21 Certificate issuer: /CN=731535a2eaebc68c1657aafcf5a788c8751d9b62 Certificate serial: 019B77C67F894D5D6E11EA469ACE6C6E35E4 Authority key identifier: 73:15:35:A2:EA:EB:C6:8C:16:57:AA:FC:F5:A7:88:C8:75:1D:9B:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/TMosgBiabWiuRyi5Ssatcr00sSE.roa Signing time: Thu 01 Jan 2026 04:17:35 +0000 ROA not before: Thu 01 Jan 2026 04:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 91.218.37.0/24 maxlen: 24 2a02:ef80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 16:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:7f:89:4d:5d:6e:11:ea:46:9a:ce:6c:6e:35:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=731535a2eaebc68c1657aafcf5a788c8751d9b62 Validity Not Before: Jan 1 04:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4cca2c80189a6d68ae4728b94ac6ad72bd34b121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f3:d7:ed:29:50:d1:eb:8b:4b:9d:53:06:2a: a1:b4:65:ed:a8:c8:c8:e2:89:e2:e1:7d:6a:00:94: 21:09:01:0b:f1:fd:37:b5:fd:c2:17:d9:b9:a8:d7: 08:31:a2:94:cc:91:d7:cd:da:4b:59:bb:57:fa:a7: c1:9b:e3:5b:94:d5:bf:e2:2a:29:6d:91:25:00:7f: 36:41:c8:9e:b5:8c:a3:84:38:fe:ca:03:e8:df:f6: c6:af:f5:85:65:6b:d0:b6:2f:89:52:66:f5:48:e8: 05:0b:94:f5:6a:6c:bf:3c:34:5b:1d:92:0a:20:6b: 6b:d4:ba:40:f2:00:62:53:bf:58:a2:ff:89:3e:1e: db:ac:3a:12:cc:8b:35:56:31:67:cc:0a:61:0c:be: 26:4c:4e:38:83:ad:62:9f:b5:f9:d0:9b:1c:34:6b: 03:03:89:d3:18:2e:a8:e5:69:df:eb:38:e8:18:b0: d6:06:14:ac:14:d0:be:17:a2:00:04:0b:de:0c:09: 0a:a7:3d:0d:5a:96:f8:10:8a:53:c9:59:0c:6e:55: b9:48:eb:9e:ad:61:dc:f8:a0:f5:5f:38:32:b1:eb: b5:7b:ed:99:2e:e2:a4:ab:a0:29:ee:d8:1b:d4:58: 74:4e:8a:c2:a7:05:c1:5d:28:c3:40:8a:e3:e5:94: 13:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:CA:2C:80:18:9A:6D:68:AE:47:28:B9:4A:C6:AD:72:BD:34:B1:21 X509v3 Authority Key Identifier: keyid:73:15:35:A2:EA:EB:C6:8C:16:57:AA:FC:F5:A7:88:C8:75:1D:9B:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/TMosgBiabWiuRyi5Ssatcr00sSE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.218.37.0/24 IPv6: 2a02:ef80::/48 Signature Algorithm: sha256WithRSAEncryption 4c:74:98:0c:83:9a:b1:e7:a3:7e:7b:5c:1f:6f:37:b0:01:8d: fb:a0:6c:1e:a2:f2:f6:4c:eb:04:db:78:27:be:01:8a:72:31: ec:26:36:d6:11:5f:6b:b5:13:3a:17:29:de:1c:75:c7:05:59: d3:55:28:e5:e2:4d:74:59:9a:cb:2f:1b:60:81:ea:7c:c0:fc: 1a:c9:d0:db:13:50:ad:05:f1:00:e4:1a:d0:95:7b:70:82:1b: 43:66:ab:ad:5d:31:63:7a:68:14:77:a6:e0:52:03:58:8d:ad: 71:de:0c:45:de:b0:72:0d:8a:08:54:1f:cf:1c:43:12:13:fa: fc:2d:e3:2c:bd:55:51:1c:9e:3e:e4:96:96:2e:3a:1f:59:28: f2:2d:45:3d:6f:4c:b5:07:29:14:8f:bb:64:1a:c4:bf:77:a2: f8:3d:99:5b:7d:eb:21:d1:86:d9:6f:d3:3e:4c:c7:aa:11:95: a1:21:dc:bf:c9:8b:0d:96:e3:ca:3f:9a:ab:4f:76:04:3c:8c: 1e:1f:3a:a0:cf:c9:bf:e0:7e:34:19:ef:36:fb:03:93:41:8d: 4f:66:b2:c6:39:cb:0d:2b:fb:cc:2e:dc:8e:8e:72:14:d7:8f: 0c:a5:08:c4:3b:9a:96:40:2b:63:ef:67:c3:22:69:96:69:ac: 3e:3c:3f:65 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt3xn+JTV1uEepGms5sbjXkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczMTUzNWEyZWFlYmM2OGMxNjU3YWFmY2Y1YTc4OGM4NzUx ZDliNjIwHhcNMjYwMTAxMDQxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Y2NhMmM4MDE4OWE2ZDY4YWU0NzI4Yjk0YWM2YWQ3MmJkMzRiMTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifPX7SlQ0euLS51TBiqhtGXtqMjI 4oni4X1qAJQhCQEL8f03tf3CF9m5qNcIMaKUzJHXzdpLWbtX+qfBm+NblNW/4iop bZElAH82QcietYyjhDj+ygPo3/bGr/WFZWvQti+JUmb1SOgFC5T1amy/PDRbHZIK IGtr1LpA8gBiU79Yov+JPh7brDoSzIs1VjFnzAphDL4mTE44g61in7X50JscNGsD A4nTGC6o5Wnf6zjoGLDWBhSsFNC+F6IABAveDAkKpz0NWpb4EIpTyVkMblW5SOue rWHc+KD1Xzgyseu1e+2ZLuKkq6Ap7tgb1Fh0TorCpwXBXSjDQIrj5ZQT/wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFEzKLIAYmm1orkcouUrGrXK9NLEhMB8GA1UdIwQY MBaAFHMVNaLq68aMFleq/PWniMh1HZtiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3hVMW91cnJ4b3dXVjZyODlhZUl5SFVkbTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85NjIwY2UtNDNmMC00MmJjLWFmNTkt NDM1YmRhNWJkMDQ4LzEvVE1vc2dCaWFiV2l1UnlpNVNzYXRjcjAwc1NFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS85NjIwY2UtNDNmMC00MmJjLWFmNTktNDM1YmRhNWJkMDQ4 LzEvY3hVMW91cnJ4b3dXVjZyODlhZUl5SFVkbTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW9olMA8E AgACMAkDBwAqAu+AAAAwDQYJKoZIhvcNAQELBQADggEBAEx0mAyDmrHno357XB9v N7ABjfugbB6i8vZM6wTbeCe+AYpyMewmNtYRX2u1EzoXKd4cdccFWdNVKOXiTXRZ mssvG2CB6nzA/BrJ0NsTUK0F8QDkGtCVe3CCG0Nmq61dMWN6aBR3puBSA1iNrXHe DEXesHINighUH88cQxIT+vwt4yy9VVEcnj7klpYuOh9ZKPItRT1vTLUHKRSPu2Qa xL93ovg9mVt96yHRhtlv0z5Mx6oRlaEh3L/Jiw2W48o/mqtPdgQ8jB4fOqDPyb/g fjQZ7zb7A5NBjU9mssY5yw0r+8wu3I6OchTXjwylCMQ7mpZAK2PvZ8MiaZZprD48 P2U= -----END CERTIFICATE-----Generated at Sat Jan 3 01:32:36 2026 by rpki-client