This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/tvvdON_7uU2iILnjNIDovzdgl18.roa File: tvvdON_7uU2iILnjNIDovzdgl18.roa (raw, json) Hash identifier: HmPjAANeq+ZoUqxrsiFavZcSafX1mVbsEsctTvfq1to= Subject key identifier: B6:FB:DD:38:DF:FB:B9:4D:A2:20:B9:E3:34:80:E8:BF:37:60:97:5F Certificate issuer: /CN=12c305404e80b5a4d70d21dab86fc5b6b801a8b8 Certificate serial: 019B7E37FD98EE52D54E08EEFA683CA2EC27 Authority key identifier: 12:C3:05:40:4E:80:B5:A4:D7:0D:21:DA:B8:6F:C5:B6:B8:01:A8:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsMFQE6AtaTXDSHauG_FtrgBqLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/tvvdON_7uU2iILnjNIDovzdgl18.roa Signing time: Fri 02 Jan 2026 10:19:17 +0000 ROA not before: Fri 02 Jan 2026 10:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24594 IP address blocks: 93.95.120.0/21 maxlen: 21 93.95.123.0/24 maxlen: 24 93.95.125.0/24 maxlen: 24 93.95.126.0/24 maxlen: 24 185.120.52.0/22 maxlen: 22 2a00:d68::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.crl rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.mft rsync://rpki.ripe.net/repository/DEFAULT/EsMFQE6AtaTXDSHauG_FtrgBqLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:fd:98:ee:52:d5:4e:08:ee:fa:68:3c:a2:ec:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12c305404e80b5a4d70d21dab86fc5b6b801a8b8 Validity Not Before: Jan 2 10:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b6fbdd38dffbb94da220b9e33480e8bf3760975f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0a:cd:c2:88:db:af:8f:9f:47:a0:1b:b8:84: 96:3a:39:8e:cb:73:fb:c0:e2:d5:1e:3a:96:1f:18: 47:ce:30:3b:8e:9f:72:a7:cf:94:a2:8c:6c:65:ad: fa:d7:64:af:05:39:f8:c7:1b:75:7c:ae:21:8c:73: 54:81:6b:c6:d0:9a:d9:e3:bc:36:8d:6b:65:02:64: 66:3b:d2:8a:6c:17:6a:5a:62:7e:07:58:ed:df:fb: b3:6e:19:95:17:0d:0a:73:a9:39:65:b0:3a:45:e8: 24:13:1a:47:0a:3c:92:90:60:5c:d3:1a:9e:4d:dc: a6:fa:02:16:a5:7e:63:43:14:ac:94:5d:4d:55:27: 3b:15:bd:be:3d:af:e2:88:e5:0e:1d:3b:9e:50:49: 2d:e9:b2:bb:62:cc:aa:8a:5e:7f:d9:8c:00:45:ba: 72:1b:e1:ca:0c:89:38:23:f1:2d:d4:cc:47:f1:cc: 6f:9f:fd:6d:a5:d8:8e:36:36:e7:46:7d:ea:fc:24: 18:44:56:ae:56:71:69:02:8c:4d:bf:64:d6:32:b3: 35:fd:0a:2d:f8:ef:77:5b:d3:19:de:fe:9a:30:32: 62:9d:29:f0:d3:fe:52:74:a5:c8:cf:40:74:8b:12: bc:3b:d2:ed:7c:e3:df:e4:d7:c8:7c:6a:c1:02:4a: 88:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:FB:DD:38:DF:FB:B9:4D:A2:20:B9:E3:34:80:E8:BF:37:60:97:5F X509v3 Authority Key Identifier: keyid:12:C3:05:40:4E:80:B5:A4:D7:0D:21:DA:B8:6F:C5:B6:B8:01:A8:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsMFQE6AtaTXDSHauG_FtrgBqLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/tvvdON_7uU2iILnjNIDovzdgl18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.95.120.0/21 185.120.52.0/22 IPv6: 2a00:d68::/32 Signature Algorithm: sha256WithRSAEncryption 2b:13:b6:11:be:fb:bd:33:97:93:54:69:94:9f:d4:65:6f:ff: 78:e8:26:7a:d9:ed:35:73:0e:a6:05:e3:53:63:db:18:3d:30: 29:71:ec:cf:d1:12:94:e6:06:0b:a9:0c:7c:56:82:6d:2c:5e: 60:89:a6:ea:6f:ba:9a:0e:ff:aa:98:05:5c:1b:75:f0:b9:12: 40:31:ce:09:2a:87:d6:ef:02:f7:56:8f:cd:1c:3a:1c:20:10: b4:6f:e7:52:ed:cd:ae:2c:3d:34:77:e2:a8:7a:fb:b8:d7:8f: bc:45:e3:3d:e8:b4:59:66:de:e3:27:37:9f:89:be:14:39:e3: dd:98:1b:0b:6d:99:94:40:7e:7c:db:b1:67:89:96:41:93:39: 7d:06:df:df:c5:44:be:a6:11:c2:cf:03:ba:8e:56:8c:90:53: fe:71:eb:12:08:e4:35:db:e3:b8:be:7d:20:4e:7c:ca:69:bb: 83:c3:52:14:55:50:84:63:47:81:69:25:dd:2c:ff:8a:af:c5: b2:ac:5a:a1:6f:94:52:15:7f:54:8e:9d:b6:1e:78:24:dd:6c: f2:90:4d:e1:53:31:5a:7b:81:3e:83:b6:40:9d:92:f8:a9:05: b5:ce:7d:b8:0f:0e:e8:09:4d:6c:de:07:17:8f:f7:06:49:ee: e1:11:22:26 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt+N/2Y7lLVTgju+mg8ouwnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYzMwNTQwNGU4MGI1YTRkNzBkMjFkYWI4NmZjNWI2Yjgw MWE4YjgwHhcNMjYwMTAyMTAxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNmZiZGQzOGRmZmJiOTRkYTIyMGI5ZTMzNDgwZThiZjM3NjA5NzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwrNwojbr4+fR6AbuISWOjmOy3P7 wOLVHjqWHxhHzjA7jp9yp8+UooxsZa3612SvBTn4xxt1fK4hjHNUgWvG0JrZ47w2 jWtlAmRmO9KKbBdqWmJ+B1jt3/uzbhmVFw0Kc6k5ZbA6RegkExpHCjySkGBc0xqe Tdym+gIWpX5jQxSslF1NVSc7Fb2+Pa/iiOUOHTueUEkt6bK7Ysyqil5/2YwARbpy G+HKDIk4I/Et1MxH8cxvn/1tpdiONjbnRn3q/CQYRFauVnFpAoxNv2TWMrM1/Qot +O93W9MZ3v6aMDJinSnw0/5SdKXIz0B0ixK8O9LtfOPf5NfIfGrBAkqIQQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFLb73Tjf+7lNoiC54zSA6L83YJdfMB8GA1UdIwQY MBaAFBLDBUBOgLWk1w0h2rhvxba4Aai4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXNNRlFFNkF0YVRYRFNIYXVHX0Z0cmdCcUxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni83YzdlOTAtYzc4MS00MmFiLTk2OTEt Y2U5MjNkMTk1MDhmLzEvdHZ2ZE9OXzd1VTJpSUxuak5JRG92emRnbDE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni83YzdlOTAtYzc4MS00MmFiLTk2OTEtY2U5MjNkMTk1MDhm LzEvRXNNRlFFNkF0YVRYRFNIYXVHX0Z0cmdCcUxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDXV94AwQC uXg0MA0EAgACMAcDBQAqAA1oMA0GCSqGSIb3DQEBCwUAA4IBAQArE7YRvvu9M5eT VGmUn9Rlb/946CZ62e01cw6mBeNTY9sYPTApcezP0RKU5gYLqQx8VoJtLF5giabq b7qaDv+qmAVcG3XwuRJAMc4JKofW7wL3Vo/NHDocIBC0b+dS7c2uLD00d+Koevu4 14+8ReM96LRZZt7jJzefib4UOePdmBsLbZmUQH5827FniZZBkzl9Bt/fxUS+phHC zwO6jlaMkFP+cesSCOQ12+O4vn0gTnzKabuDw1IUVVCEY0eBaSXdLP+Kr8WyrFqh b5RSFX9Ujp22Hngk3WzykE3hUzFae4E+g7ZAnZL4qQW1zn24Dw7oCU1s3gcXj/cG Se7hESIm -----END CERTIFICATE-----Generated at Mon Jan 26 18:20:26 2026 by rpki-client