This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/TC97HjNs0IC4EKR9enZJIqgEZ2Y.roa File: TC97HjNs0IC4EKR9enZJIqgEZ2Y.roa (raw, json) Hash identifier: YzLzlBSzxjBcEeB8/fSR9TVjgk9aSxEfekBZqcoz880= Subject key identifier: 4C:2F:7B:1E:33:6C:D0:80:B8:10:A4:7D:7A:76:49:22:A8:04:67:66 Certificate issuer: /CN=acfeacea5d812f3030c557e48c53758753fb6c6b Certificate serial: 019B7BA540604D3A297D08EFC853673168D0 Authority key identifier: AC:FE:AC:EA:5D:81:2F:30:30:C5:57:E4:8C:53:75:87:53:FB:6C:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rP6s6l2BLzAwxVfkjFN1h1P7bGs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/TC97HjNs0IC4EKR9enZJIqgEZ2Y.roa Signing time: Thu 01 Jan 2026 22:19:46 +0000 ROA not before: Thu 01 Jan 2026 22:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9158 IP address blocks: 2.128.0.0/14 maxlen: 14 5.33.0.0/16 maxlen: 16 37.96.0.0/16 maxlen: 16 62.66.0.0/16 maxlen: 16 62.79.0.0/16 maxlen: 16 62.121.160.0/19 maxlen: 19 77.212.0.0/14 maxlen: 14 80.91.0.0/20 maxlen: 20 83.72.0.0/14 maxlen: 14 85.80.0.0/14 maxlen: 14 94.144.0.0/13 maxlen: 13 129.142.0.0/16 maxlen: 16 130.227.0.0/16 maxlen: 16 130.228.0.0/16 maxlen: 16 185.116.184.0/22 maxlen: 22 192.38.128.0/17 maxlen: 17 195.47.128.0/18 maxlen: 18 195.82.192.0/19 maxlen: 19 212.54.64.0/19 maxlen: 19 212.88.64.0/19 maxlen: 19 212.242.0.0/16 maxlen: 16 213.83.128.0/17 maxlen: 17 213.237.0.0/17 maxlen: 17 217.157.0.0/16 maxlen: 16 2001:1580::/32 maxlen: 32 2a02:2a30::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.crl rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft rsync://rpki.ripe.net/repository/DEFAULT/rP6s6l2BLzAwxVfkjFN1h1P7bGs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:40:60:4d:3a:29:7d:08:ef:c8:53:67:31:68:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acfeacea5d812f3030c557e48c53758753fb6c6b Validity Not Before: Jan 1 22:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c2f7b1e336cd080b810a47d7a764922a8046766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3e:2f:71:55:79:03:87:62:4a:73:8f:d0:d1: e0:5f:20:18:16:51:48:8f:f9:4d:42:7d:6d:b7:69: 08:1c:62:1d:be:9a:c4:53:2b:77:ba:d0:00:bc:9b: ff:8d:0f:b2:e8:ab:39:b2:14:ad:f1:f1:4e:45:1f: 7f:c0:3c:e5:51:ef:a2:51:97:99:54:7f:78:ff:21: ed:80:5b:5e:d9:06:d7:f4:e8:08:87:05:95:68:93: d4:41:bf:c7:c8:88:32:25:78:9b:bf:9b:44:e2:df: 60:79:8b:89:ff:1c:86:2e:c1:b6:40:90:75:7d:03: 2a:36:61:d2:00:41:93:fb:c8:0a:f9:f8:d5:0e:5e: 34:ca:b5:5a:be:cf:77:fc:27:f8:f3:e8:24:9e:70: ba:8d:b6:25:21:59:24:ce:72:e6:3b:aa:48:7f:9d: 4a:f9:c1:9d:98:8e:b7:d0:f4:29:21:1e:36:81:04: 4d:c4:88:ba:58:f8:dd:6d:6d:45:29:cd:cc:4d:13: ab:ed:bc:c6:2c:64:90:24:f1:0a:ef:fb:d0:bb:3e: 15:be:71:f9:2b:76:46:82:4b:d0:bf:89:1b:16:ad: 04:ca:6b:ce:28:a2:e8:f3:3d:81:31:b3:0a:ab:a7: bc:4a:75:17:98:82:e0:43:94:6c:b8:dc:ea:97:09: 15:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:2F:7B:1E:33:6C:D0:80:B8:10:A4:7D:7A:76:49:22:A8:04:67:66 X509v3 Authority Key Identifier: keyid:AC:FE:AC:EA:5D:81:2F:30:30:C5:57:E4:8C:53:75:87:53:FB:6C:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rP6s6l2BLzAwxVfkjFN1h1P7bGs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/TC97HjNs0IC4EKR9enZJIqgEZ2Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.128.0.0/14 5.33.0.0/16 37.96.0.0/16 62.66.0.0/16 62.79.0.0/16 62.121.160.0/19 77.212.0.0/14 80.91.0.0/20 83.72.0.0/14 85.80.0.0/14 94.144.0.0/13 129.142.0.0/16 130.227.0.0-130.228.255.255 185.116.184.0/22 192.38.128.0/17 195.47.128.0/18 195.82.192.0/19 212.54.64.0/19 212.88.64.0/19 212.242.0.0/16 213.83.128.0/17 213.237.0.0/17 217.157.0.0/16 IPv6: 2001:1580::/32 2a02:2a30::/29 Signature Algorithm: sha256WithRSAEncryption 89:dc:e2:e0:9f:e5:f3:99:f8:4b:6d:07:5c:04:2d:37:f9:97: 1c:31:60:b6:7a:be:c7:63:3c:ce:4b:61:f7:06:ef:85:5e:95: 61:76:51:18:c0:0f:d2:f7:57:1c:30:a8:b6:a5:db:7e:1f:08: 35:64:bc:a1:70:fe:4e:d6:25:ba:43:28:79:51:6e:99:19:3c: 16:5e:f4:96:2e:5b:97:29:1d:94:d4:0a:33:b8:45:2f:ea:4b: 0d:d5:ea:bc:8e:d0:d3:5e:ac:de:9a:82:0f:15:b9:02:a5:1c: 68:76:7f:5a:6a:f1:c8:68:70:65:bf:fc:a5:29:7f:66:0c:d7: 25:84:42:f6:68:d5:69:cf:e4:01:18:a7:f3:b3:4a:ac:84:af: 47:2c:4b:40:96:77:f6:0d:ba:9c:30:99:45:96:f7:51:58:56: e8:d3:01:85:18:ac:07:74:be:b7:62:1d:17:57:88:f1:86:a6: 49:e8:a1:07:ff:53:17:ed:04:06:61:ac:d0:64:4b:56:cc:43: 3f:ab:7d:f4:82:2b:7b:6f:f8:6c:a7:28:ec:b4:83:da:50:bc: f9:40:cf:0e:1a:74:af:53:69:ac:da:e0:72:70:9c:5f:22:fd: 5b:ac:28:2c:90:c0:02:0b:40:10:29:ad:d7:ac:6b:06:b2:2d: 95:2c:fc:ea -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgISAZt7pUBgTTopfQjvyFNnMWjQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjZmVhY2VhNWQ4MTJmMzAzMGM1NTdlNDhjNTM3NTg3NTNm YjZjNmIwHhcNMjYwMTAxMjIxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzJmN2IxZTMzNmNkMDgwYjgxMGE0N2Q3YTc2NDkyMmE4MDQ2NzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApj4vcVV5A4diSnOP0NHgXyAYFlFI j/lNQn1tt2kIHGIdvprEUyt3utAAvJv/jQ+y6Ks5shSt8fFORR9/wDzlUe+iUZeZ VH94/yHtgFte2QbX9OgIhwWVaJPUQb/HyIgyJXibv5tE4t9geYuJ/xyGLsG2QJB1 fQMqNmHSAEGT+8gK+fjVDl40yrVavs93/Cf48+gknnC6jbYlIVkkznLmO6pIf51K +cGdmI630PQpIR42gQRNxIi6WPjdbW1FKc3MTROr7bzGLGSQJPEK7/vQuz4VvnH5 K3ZGgkvQv4kbFq0EymvOKKLo8z2BMbMKq6e8SnUXmILgQ5RsuNzqlwkVGQIDAQAB o4ICojCCAp4wHQYDVR0OBBYEFEwvex4zbNCAuBCkfXp2SSKoBGdmMB8GA1UdIwQY MBaAFKz+rOpdgS8wMMVX5IxTdYdT+2xrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclA2czZsMkJMekF3eFZma2pGTjFoMVA3YkdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8yNzI3YjUtNWVjYi00ODVmLWI3ZDkt YTJmZDI4ODQwYTAzLzEvVEM5N0hqTnMwSUM0RUtSOWVuWkpJcWdFWjJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My8yNzI3YjUtNWVjYi00ODVmLWI3ZDktYTJmZDI4ODQwYTAz LzEvclA2czZsMkJMekF3eFZma2pGTjFoMVA3YkdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG3BggrBgEFBQcBBwEB/wSBpzCBpDCBiwQCAAEwgYQDAwIC gAMDAAUhAwMAJWADAwA+QgMDAD5PAwQFPnmgAwMCTdQDBARQWwADAwJTSAMDAlVQ AwMDXpADAwCBjjAKAwMAguMDAwCC5AMEArl0uAMEB8AmgAMEBsMvgAMEBcNSwAME BdQ2QAMEBdRYQAMDANTyAwQH1VOAAwQH1e0AAwMA2Z0wFAQCAAIwDgMFACABFYAD BQMqAiowMA0GCSqGSIb3DQEBCwUAA4IBAQCJ3OLgn+XzmfhLbQdcBC03+ZccMWC2 er7HYzzOS2H3Bu+FXpVhdlEYwA/S91ccMKi2pdt+Hwg1ZLyhcP5O1iW6Qyh5UW6Z GTwWXvSWLluXKR2U1AozuEUv6ksN1eq8jtDTXqzemoIPFbkCpRxodn9aavHIaHBl v/ylKX9mDNclhEL2aNVpz+QBGKfzs0qshK9HLEtAlnf2DbqcMJlFlvdRWFbo0wGF GKwHdL63Yh0XV4jxhqZJ6KEH/1MX7QQGYazQZEtWzEM/q330git7b/hspyjstIPa ULz5QM8OGnSvU2ms2uBycJxfIv1brCgskMACC0AQKa3XrGsGsi2VLPzq -----END CERTIFICATE-----Generated at Tue Jan 27 01:14:14 2026 by rpki-client