This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/tcAHli7McrHurKLlQpupJT4F1Eg.roa File: tcAHli7McrHurKLlQpupJT4F1Eg.roa (raw, json) Hash identifier: QCSEXnnY7zQrTDErUs9zw834usZizr8yuGt+j2bg9kE= Subject key identifier: B5:C0:07:96:2E:CC:72:B1:EE:AC:A2:E5:42:9B:A9:25:3E:05:D4:48 Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8 Certificate serial: 019B7F817224DFEA5869BFDDAEF10DF07601 Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/tcAHli7McrHurKLlQpupJT4F1Eg.roa Signing time: Fri 02 Jan 2026 16:19:08 +0000 ROA not before: Fri 02 Jan 2026 16:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20853 IP address blocks: 168.199.247.0/24 maxlen: 24 185.226.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 10:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:72:24:df:ea:58:69:bf:dd:ae:f1:0d:f0:76:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8 Validity Not Before: Jan 2 16:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5c007962ecc72b1eeaca2e5429ba9253e05d448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:04:95:01:54:31:e2:de:87:61:8d:ab:98:17: 43:15:da:94:0e:bf:ad:1d:a5:98:eb:f5:8c:1c:92: a0:6d:5b:25:27:dd:60:fb:68:af:76:38:b5:ad:eb: 18:0a:82:83:9c:00:00:1f:09:af:23:fd:eb:0d:73: f1:e8:23:9e:c1:1c:28:c0:3d:47:d7:20:c2:15:13: ce:66:34:92:fa:23:48:df:c9:34:c8:21:ed:96:65: 07:98:fa:91:14:45:2c:7e:97:d8:05:16:b5:03:c9: aa:8c:c9:01:8e:95:02:52:21:a4:06:33:ac:0c:ab: be:38:95:91:a1:b3:d3:c9:f6:4d:bf:49:17:48:a9: 96:f4:39:50:bd:2b:3a:d6:93:13:f2:be:fe:0d:cb: c7:13:80:80:67:f9:23:70:23:d0:63:cd:66:3e:f7: 4d:75:ee:0a:9d:55:a7:94:3e:c1:d6:e1:55:70:2e: 4e:e8:84:20:f4:06:5d:76:ef:85:1a:ef:11:0c:11: ff:42:75:93:09:af:fa:76:03:25:8a:bd:df:cd:5a: a1:98:50:e5:ff:db:e8:79:b6:c8:a7:66:1f:66:cd: eb:1f:47:52:b0:db:94:52:d1:61:9c:92:88:0a:0c: 11:93:96:0b:e0:ce:a7:8f:50:c8:42:bc:66:e2:13: 0f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:C0:07:96:2E:CC:72:B1:EE:AC:A2:E5:42:9B:A9:25:3E:05:D4:48 X509v3 Authority Key Identifier: keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/tcAHli7McrHurKLlQpupJT4F1Eg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.199.247.0/24 185.226.206.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:b1:02:57:b2:f5:9c:7d:fa:df:55:2e:89:3c:0e:d9:1d:f3: ac:f2:b7:1c:b8:66:76:ba:d3:6a:a9:0f:60:e4:2d:a0:7f:74: 4c:26:80:c8:50:7b:68:d9:50:7b:c2:f1:94:2e:6b:a9:e7:12: 8e:66:7b:9c:cc:93:85:36:3b:e1:24:09:8d:d1:c8:79:86:7b: ff:0d:4e:98:d1:4f:3d:d3:6b:ef:3c:70:73:ac:f8:d8:97:aa: b7:64:fc:df:55:08:f9:9f:2d:12:eb:4f:84:c3:74:8f:10:fb: c3:e3:c3:28:66:cb:f2:7d:94:5d:2e:87:f7:12:45:5c:3f:fd: 82:8c:b4:f6:13:c8:37:64:b8:45:b6:2d:aa:bb:d7:95:c2:d0: 7f:21:6d:74:9d:f3:8e:9f:b1:71:8d:e3:23:ae:23:b8:db:5f: cd:5e:ff:c1:6b:45:99:6f:6b:c0:90:80:0d:46:07:b4:e7:d3: ae:6a:3d:44:95:c7:24:a6:b1:79:68:0c:8f:86:78:79:58:34: 59:66:ab:e5:11:37:e3:42:16:ae:82:48:ea:58:2c:8c:fb:60: 6e:13:84:40:60:0d:c8:11:cb:8c:4b:d6:7e:17:77:28:45:78: c8:da:41:25:dc:1a:2f:09:31:8b:22:80:14:ea:cf:25:af:90: a2:7f:57:2b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/gXIk3+pYab/drvEN8HYBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNjYwNWI0ZDI3ZjEzOTY4ZTg3OTRlNmVmMDkxMjIzNzQ4 ODE3ZDgwHhcNMjYwMTAyMTYxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNWMwMDc5NjJlY2M3MmIxZWVhY2EyZTU0MjliYTkyNTNlMDVkNDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgSVAVQx4t6HYY2rmBdDFdqUDr+t HaWY6/WMHJKgbVslJ91g+2ivdji1resYCoKDnAAAHwmvI/3rDXPx6COewRwowD1H 1yDCFRPOZjSS+iNI38k0yCHtlmUHmPqRFEUsfpfYBRa1A8mqjMkBjpUCUiGkBjOs DKu+OJWRobPTyfZNv0kXSKmW9DlQvSs61pMT8r7+DcvHE4CAZ/kjcCPQY81mPvdN de4KnVWnlD7B1uFVcC5O6IQg9AZddu+FGu8RDBH/QnWTCa/6dgMlir3fzVqhmFDl /9voebbIp2YfZs3rH0dSsNuUUtFhnJKICgwRk5YL4M6nj1DIQrxm4hMPrwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLXAB5YuzHKx7qyi5UKbqSU+BdRIMB8GA1UdIwQY MBaAFIJmBbTSfxOWjoeU5u8JEiN0iBfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEt MmQxOTE4YmExYzBlLzEvdGNBSGxpN01jckh1cktMbFFwdXBKVDRGMUVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEtMmQxOTE4YmExYzBl LzEvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAqMf3AwQA ueLOMA0GCSqGSIb3DQEBCwUAA4IBAQCbsQJXsvWcffrfVS6JPA7ZHfOs8rccuGZ2 utNqqQ9g5C2gf3RMJoDIUHto2VB7wvGULmup5xKOZnuczJOFNjvhJAmN0ch5hnv/ DU6Y0U8902vvPHBzrPjYl6q3ZPzfVQj5ny0S60+Ew3SPEPvD48MoZsvyfZRdLof3 EkVcP/2CjLT2E8g3ZLhFti2qu9eVwtB/IW10nfOOn7FxjeMjriO421/NXv/Ba0WZ b2vAkIANRge059Ouaj1ElcckprF5aAyPhnh5WDRZZqvlETfjQhaugkjqWCyM+2Bu E4RAYA3IEcuMS9Z+F3coRXjI2kEl3BovCTGLIoAU6s8lr5Cif1cr -----END CERTIFICATE-----Generated at Fri Jan 9 16:50:56 2026 by rpki-client