This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/tLU7_bzaau1tfdnsi8rr9NFZ168.roa File: tLU7_bzaau1tfdnsi8rr9NFZ168.roa (raw, json) Hash identifier: 6yuhsyZZqvngC1bxHOsVAKXHySf91v1PlvKK7/v6/Ik= Subject key identifier: B4:B5:3B:FD:BC:DA:6A:ED:6D:7D:D9:EC:8B:CA:EB:F4:D1:59:D7:AF Certificate issuer: /CN=894928a39627cd5ee5f975bd897c2d775ab29940 Certificate serial: 019C32098E0C9C8890AED7EFADC7486618E0 Authority key identifier: 89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/tLU7_bzaau1tfdnsi8rr9NFZ168.roa Signing time: Fri 06 Feb 2026 08:20:12 +0000 ROA not before: Fri 06 Feb 2026 08:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52756 IP address blocks: 149.226.240.0/24 maxlen: 24 149.226.241.0/24 maxlen: 24 149.226.242.0/24 maxlen: 24 149.226.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:32:09:8e:0c:9c:88:90:ae:d7:ef:ad:c7:48:66:18:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=894928a39627cd5ee5f975bd897c2d775ab29940 Validity Not Before: Feb 6 08:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4b53bfdbcda6aed6d7dd9ec8bcaebf4d159d7af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d0:ec:69:3c:fc:f0:73:a5:f4:af:9f:99:e9: 88:c7:98:fd:54:b3:be:25:35:9a:38:c2:d5:bc:7e: 7e:bf:33:12:fa:45:79:51:2c:9d:56:ea:9a:84:a4: 85:2c:cd:45:09:b8:cb:f9:d8:2f:15:9c:2f:3d:63: fa:3f:05:28:82:eb:75:bc:3e:55:35:48:1a:96:f9: b6:c3:b1:d6:43:20:c8:8f:ce:73:9b:32:08:48:87: 20:0c:0c:55:2b:a5:9b:8d:d1:bb:8f:81:73:f4:1b: 05:59:7c:f3:4a:f8:f7:25:46:58:9a:1b:6d:2c:b5: 44:23:db:55:f7:06:9d:24:bd:25:20:7d:7d:78:3d: fc:0d:32:1a:1a:7c:b8:b3:c9:45:b3:06:53:d4:e1: 14:e8:fc:65:73:dc:1e:cf:44:22:cd:a4:f6:77:6b: ae:67:2a:e1:44:b1:f3:2f:30:ae:20:e8:93:71:be: 4b:de:d2:65:93:ff:a7:4c:c8:b1:2b:aa:b3:17:cf: 62:38:bc:6a:8a:79:22:98:a0:5a:52:ef:a7:19:0d: cb:70:c5:a6:7f:d0:61:d7:a7:d4:3a:db:1f:b0:b1: d9:6a:78:e9:fe:3c:63:68:c0:a4:37:0b:38:8c:96: 06:f5:a7:07:42:13:aa:64:22:8f:83:9b:dc:b3:63: d7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:B5:3B:FD:BC:DA:6A:ED:6D:7D:D9:EC:8B:CA:EB:F4:D1:59:D7:AF X509v3 Authority Key Identifier: keyid:89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/tLU7_bzaau1tfdnsi8rr9NFZ168.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.226.240.0/22 Signature Algorithm: sha256WithRSAEncryption 7c:3a:c0:45:84:38:8d:5d:af:29:29:eb:ce:cb:92:2d:a0:a3: f0:92:ce:8e:c6:3b:98:11:b8:8a:34:07:80:81:66:e4:00:5c: ab:fe:8b:ba:61:c9:89:31:5a:92:bd:01:84:84:f8:d7:86:1e: c0:ee:b2:44:3e:10:ee:d7:57:62:ac:11:93:0d:d6:41:4e:7b: d9:87:17:6c:e6:5a:96:c0:2b:a9:5b:47:99:b6:eb:b4:63:0d: a4:4a:05:3d:26:b2:ff:a4:e3:ed:2e:65:90:f4:93:10:bf:4c: 29:2c:3b:bd:02:d3:1b:10:65:38:60:9e:ed:81:35:cf:a6:ac: c4:7a:f6:f8:74:67:d1:c9:a0:08:22:93:6c:e0:98:f5:17:6f: f3:d1:05:39:4f:fd:f7:87:fa:30:a1:c2:d1:fe:f1:66:7d:de: c1:1e:5c:53:f4:ba:27:0a:ae:98:c9:05:c0:ee:7b:cf:98:fb: 82:14:2a:ed:89:c6:39:dc:1b:c1:8d:aa:bb:19:21:e6:94:51: 44:8a:2b:52:fa:74:e5:bd:49:cd:02:33:68:37:09:a2:9b:e1: 72:7e:7a:ac:20:0e:0a:ac:31:42:1d:96:71:67:60:3f:5a:39: 6f:fc:25:19:c3:d4:a8:a7:9b:a1:bd:5b:a9:19:51:b0:fe:64: 3a:b1:fd:03 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwyCY4MnIiQrtfvrcdIZhjgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NDkyOGEzOTYyN2NkNWVlNWY5NzViZDg5N2MyZDc3NWFi Mjk5NDAwHhcNMjYwMjA2MDgyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGI1M2JmZGJjZGE2YWVkNmQ3ZGQ5ZWM4YmNhZWJmNGQxNTlkN2FmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdDsaTz88HOl9K+fmemIx5j9VLO+ JTWaOMLVvH5+vzMS+kV5USydVuqahKSFLM1FCbjL+dgvFZwvPWP6PwUogut1vD5V NUgalvm2w7HWQyDIj85zmzIISIcgDAxVK6WbjdG7j4Fz9BsFWXzzSvj3JUZYmhtt LLVEI9tV9wadJL0lIH19eD38DTIaGny4s8lFswZT1OEU6Pxlc9wez0QizaT2d2uu ZyrhRLHzLzCuIOiTcb5L3tJlk/+nTMixK6qzF89iOLxqinkimKBaUu+nGQ3LcMWm f9Bh16fUOtsfsLHZanjp/jxjaMCkNws4jJYG9acHQhOqZCKPg5vcs2PX/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLS1O/282mrtbX3Z7IvK6/TRWdevMB8GA1UdIwQY MBaAFIlJKKOWJ81e5fl1vYl8LXdasplAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVVrb281WW56VjdsLVhXOWlYd3RkMXF5bVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC82OWM3ZDEtYzQzZC00YmNkLThlNmEt MTU5M2Q0MDQ1Y2JjLzEvdExVN19iemFhdTF0ZmRuc2k4cnI5TkZaMTY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC82OWM3ZDEtYzQzZC00YmNkLThlNmEtMTU5M2Q0MDQ1Y2Jj LzEvaVVrb281WW56VjdsLVhXOWlYd3RkMXF5bVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCleLwMA0G CSqGSIb3DQEBCwUAA4IBAQB8OsBFhDiNXa8pKevOy5ItoKPwks6OxjuYEbiKNAeA gWbkAFyr/ou6YcmJMVqSvQGEhPjXhh7A7rJEPhDu11dirBGTDdZBTnvZhxds5lqW wCupW0eZtuu0Yw2kSgU9JrL/pOPtLmWQ9JMQv0wpLDu9AtMbEGU4YJ7tgTXPpqzE evb4dGfRyaAIIpNs4Jj1F2/z0QU5T/33h/owocLR/vFmfd7BHlxT9LonCq6YyQXA 7nvPmPuCFCrticY53BvBjaq7GSHmlFFEiitS+nTlvUnNAjNoNwmim+FyfnqsIA4K rDFCHZZxZ2A/Wjlv/CUZw9Sop5uhvVupGVGw/mQ6sf0D -----END CERTIFICATE-----Generated at Mon Feb 9 21:24:18 2026 by rpki-client