This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/TTGFYY8k9xpvkyvodGbW8RVHqnU.roa File: TTGFYY8k9xpvkyvodGbW8RVHqnU.roa (raw, json) Hash identifier: +s0c6IoG2XA0m4/DkwS/xbWE67NARzvpIrkEzD/tMuU= Subject key identifier: 4D:31:85:61:8F:24:F7:1A:6F:93:2B:E8:74:66:D6:F1:15:47:AA:75 Certificate issuer: /CN=3c9f400f884f7030318eb6be74c528485abe4460 Certificate serial: 019B79ED3CA24D49A690B037A060F1C49F29 Authority key identifier: 3C:9F:40:0F:88:4F:70:30:31:8E:B6:BE:74:C5:28:48:5A:BE:44:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PJ9AD4hPcDAxjra-dMUoSFq-RGA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/TTGFYY8k9xpvkyvodGbW8RVHqnU.roa Signing time: Thu 01 Jan 2026 14:19:09 +0000 ROA not before: Thu 01 Jan 2026 14:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48869 IP address blocks: 91.199.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.crl rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft rsync://rpki.ripe.net/repository/DEFAULT/PJ9AD4hPcDAxjra-dMUoSFq-RGA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:3c:a2:4d:49:a6:90:b0:37:a0:60:f1:c4:9f:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c9f400f884f7030318eb6be74c528485abe4460 Validity Not Before: Jan 1 14:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d3185618f24f71a6f932be87466d6f11547aa75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e8:68:df:ec:2b:1a:b0:64:2f:cc:7e:a4:1f: 3a:f3:c8:19:91:69:13:6e:6e:ae:a0:3a:79:46:eb: 08:57:ee:48:b8:79:bb:7a:a2:bd:39:88:36:3e:47: 8b:c7:8d:15:04:02:c7:3a:43:9a:a1:9b:6d:49:98: fe:c2:87:cf:6b:ef:19:51:98:92:d2:dc:8d:28:df: c2:9d:33:e3:92:e1:75:00:13:8c:57:5a:8e:7a:c1: f1:d4:69:84:df:9e:51:ab:ba:a1:98:9b:49:c5:29: 16:d0:cb:34:91:62:c0:53:53:e8:68:79:5b:74:1c: 5d:c4:8b:a3:39:52:fe:a3:7d:07:9f:fb:f7:4d:1e: 3e:0e:e3:da:c0:e3:39:17:45:92:28:55:0f:fc:84: d0:ea:41:9d:c9:94:d7:3d:e5:b5:b5:2d:fb:65:11: cd:44:77:1f:26:c4:65:6f:dd:fe:2e:fc:d4:27:c3: ed:96:48:cb:2d:f4:ec:02:d9:9f:ae:4d:64:c8:aa: ac:ac:c0:7f:57:48:d8:bf:e1:60:2a:63:bb:a8:c2: 07:55:39:72:bc:81:cd:e3:99:ef:7d:d0:75:f2:8c: 04:19:b6:55:ec:08:3c:d9:a0:9f:b0:62:5e:fc:b0: cc:aa:d8:aa:e4:18:e4:9e:24:a1:54:72:a9:00:87: 55:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:31:85:61:8F:24:F7:1A:6F:93:2B:E8:74:66:D6:F1:15:47:AA:75 X509v3 Authority Key Identifier: keyid:3C:9F:40:0F:88:4F:70:30:31:8E:B6:BE:74:C5:28:48:5A:BE:44:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJ9AD4hPcDAxjra-dMUoSFq-RGA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/TTGFYY8k9xpvkyvodGbW8RVHqnU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.59.0/24 Signature Algorithm: sha256WithRSAEncryption 46:fa:40:59:54:c1:9a:5f:a5:75:88:0f:5d:52:12:38:38:c2: 9b:d1:c0:3b:04:c8:1c:18:cd:5b:9e:e1:c2:a5:ec:9f:23:49: 70:c7:1b:9b:c1:ae:25:c3:26:33:a6:e3:ff:90:ca:af:b4:03: f2:bf:4e:3c:b2:8e:64:35:60:3e:a8:f8:d7:a3:ba:6e:d2:f8: 8f:d5:1b:18:18:55:da:96:3a:0e:fd:5e:79:07:ef:05:b2:38: ac:46:34:c8:86:f4:2e:8e:8e:18:29:d9:4f:a2:ce:fa:9d:76: 79:32:1f:01:09:e2:2b:31:76:0c:e6:78:bb:b8:07:12:f4:1b: 53:1e:3e:f1:b4:fc:9f:04:50:82:ac:52:10:4b:e9:bd:1e:72: 68:56:76:84:cc:05:04:9a:15:95:8e:df:9a:0d:90:b7:88:8c: a0:a4:cb:2f:6e:dd:02:ca:96:51:ea:74:9e:66:a3:52:80:2f: cf:41:43:87:39:60:57:37:9e:ac:f7:8c:61:c2:d9:71:fd:6a: 72:03:d1:7c:ca:26:1e:92:64:a1:fc:70:da:70:fb:f1:3f:9c: 28:f8:33:5e:17:04:9d:46:59:55:20:57:4c:a4:82:0f:e1:bf: 2a:f5:bf:22:dc:da:75:36:e9:c7:d4:9d:af:44:85:58:1d:e2: e4:96:89:36 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57TyiTUmmkLA3oGDxxJ8pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjOWY0MDBmODg0ZjcwMzAzMThlYjZiZTc0YzUyODQ4NWFi ZTQ0NjAwHhcNMjYwMTAxMTQxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDMxODU2MThmMjRmNzFhNmY5MzJiZTg3NDY2ZDZmMTE1NDdhYTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseho3+wrGrBkL8x+pB8688gZkWkT bm6uoDp5RusIV+5IuHm7eqK9OYg2PkeLx40VBALHOkOaoZttSZj+wofPa+8ZUZiS 0tyNKN/CnTPjkuF1ABOMV1qOesHx1GmE355Rq7qhmJtJxSkW0Ms0kWLAU1PoaHlb dBxdxIujOVL+o30Hn/v3TR4+DuPawOM5F0WSKFUP/ITQ6kGdyZTXPeW1tS37ZRHN RHcfJsRlb93+LvzUJ8PtlkjLLfTsAtmfrk1kyKqsrMB/V0jYv+FgKmO7qMIHVTly vIHN45nvfdB18owEGbZV7Ag82aCfsGJe/LDMqtiq5BjkniShVHKpAIdVdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE0xhWGPJPcab5Mr6HRm1vEVR6p1MB8GA1UdIwQY MBaAFDyfQA+IT3AwMY62vnTFKEhavkRgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEo5QUQ0aFBjREF4anJhLWRNVW9TRnEtUkdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My84NGFiZDUtMTkxZi00Zjg4LWJkZTEt Zjg0OGRkYzVhMGIyLzEvVFRHRllZOGs5eHB2a3l2b2RHYlc4UlZIcW5VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My84NGFiZDUtMTkxZi00Zjg4LWJkZTEtZjg0OGRkYzVhMGIy LzEvUEo5QUQ0aFBjREF4anJhLWRNVW9TRnEtUkdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8c7MA0G CSqGSIb3DQEBCwUAA4IBAQBG+kBZVMGaX6V1iA9dUhI4OMKb0cA7BMgcGM1bnuHC peyfI0lwxxubwa4lwyYzpuP/kMqvtAPyv048so5kNWA+qPjXo7pu0viP1RsYGFXa ljoO/V55B+8FsjisRjTIhvQujo4YKdlPos76nXZ5Mh8BCeIrMXYM5ni7uAcS9BtT Hj7xtPyfBFCCrFIQS+m9HnJoVnaEzAUEmhWVjt+aDZC3iIygpMsvbt0CypZR6nSe ZqNSgC/PQUOHOWBXN56s94xhwtlx/WpyA9F8yiYekmSh/HDacPvxP5wo+DNeFwSd RllVIFdMpIIP4b8q9b8i3Np1NunH1J2vRIVYHeLklok2 -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:11 2026 by rpki-client