This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/tjgNOkewXtwMB18fxqlUOfpgfqw.roa File: tjgNOkewXtwMB18fxqlUOfpgfqw.roa (raw, json) Hash identifier: qmgtem7sjQ52nwbafsv8UedM8hBXxgPbXN0VdERw+b4= Subject key identifier: B6:38:0D:3A:47:B0:5E:DC:0C:07:5F:1F:C6:A9:54:39:FA:60:7E:AC Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8 Certificate serial: 019B7F816FC55E366D141F62D3A583C1C163 Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/tjgNOkewXtwMB18fxqlUOfpgfqw.roa Signing time: Fri 02 Jan 2026 16:19:07 +0000 ROA not before: Fri 02 Jan 2026 16:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7018 IP address blocks: 168.199.169.0/24 maxlen: 24 168.199.234.0/24 maxlen: 24 168.199.245.0/24 maxlen: 24 185.101.255.0/24 maxlen: 24 185.226.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 10:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:6f:c5:5e:36:6d:14:1f:62:d3:a5:83:c1:c1:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8 Validity Not Before: Jan 2 16:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b6380d3a47b05edc0c075f1fc6a95439fa607eac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0d:e4:c8:0b:5e:aa:29:50:19:e5:c6:0c:78: d3:5d:22:9d:1b:cb:04:e0:9c:e0:29:00:61:82:e9: 0a:f9:e5:81:bc:40:a0:0e:31:22:a2:6a:07:5f:82: ae:fd:c2:1d:6c:e0:e0:24:eb:4d:bb:d0:34:05:3d: 07:62:00:61:2c:45:d1:59:0a:f3:68:9f:07:6e:54: 58:76:e6:75:f5:ae:d5:f4:6b:a2:9b:7e:da:eb:89: 02:6d:cb:38:dd:d8:b4:e9:72:e6:4d:93:30:89:50: ea:ee:bc:ef:fd:08:f9:e2:a8:02:8f:79:6b:5c:9e: 18:67:c3:39:7f:2e:aa:70:94:77:ce:4b:7c:b4:4a: 7c:1e:50:39:dc:3b:cf:8c:46:c0:be:60:97:b6:c9: c9:05:99:45:61:ad:7a:d9:92:26:7b:3c:2a:dd:51: a9:18:75:8a:85:fb:69:6e:de:d3:60:4c:23:b7:a9: 02:9d:7d:12:28:3e:5d:df:a6:45:b9:94:d1:5f:b4: 48:94:01:e7:fb:75:4d:59:3e:22:47:cc:41:d2:ae: b5:80:d5:0c:cb:55:0b:a9:6e:af:a1:d5:e3:36:57: 47:f8:bb:2b:a3:86:4c:91:a3:ed:59:b7:dc:0d:e0: 1e:d3:86:5f:2d:b9:62:3e:52:52:63:10:f7:74:e8: b3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:38:0D:3A:47:B0:5E:DC:0C:07:5F:1F:C6:A9:54:39:FA:60:7E:AC X509v3 Authority Key Identifier: keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/tjgNOkewXtwMB18fxqlUOfpgfqw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.199.169.0/24 168.199.234.0/24 168.199.245.0/24 185.101.255.0/24 185.226.207.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:df:da:b0:ad:a2:a6:c5:fc:3b:1d:91:9c:c5:d7:2d:0b:d9: b6:0b:49:55:de:05:35:5c:18:c7:7e:07:54:1b:9d:38:20:73: cb:83:b5:7a:42:c5:83:72:60:1b:9a:b3:b1:4c:ca:10:05:9e: 32:06:2f:91:e5:04:d2:a5:1b:d9:17:bd:55:68:80:1d:5c:77: ec:30:ca:dd:c9:1d:93:99:fb:0e:f9:ed:99:41:be:e5:9b:64: 0b:66:a9:3f:2f:87:57:ea:62:ea:3a:5f:8b:5a:b2:f5:10:ca: a7:1e:af:13:6d:a4:0c:aa:f7:a8:64:73:8e:dc:c3:07:d4:ee: 02:e5:ec:ee:0f:52:fa:87:4b:f4:0d:91:7c:4e:c6:f3:9a:0f: 1f:29:40:14:e6:e2:a2:3e:b9:13:58:e8:db:c8:17:f1:28:5e: ec:a4:89:ec:61:85:b4:73:d1:af:3d:a4:d6:66:16:4d:89:93: 19:15:e8:fb:fc:2b:d5:c4:cc:b2:b4:61:1a:80:b7:95:83:af: 4f:28:6e:a0:18:e9:ff:52:57:ee:22:38:65:0b:4e:93:83:83: 01:13:72:aa:b1:fb:41:e3:6a:b4:37:d7:86:57:f5:94:ce:fe: 58:6a:f1:e9:cb:56:33:5a:42:f6:7f:c5:cd:36:78:af:f0:1f: 57:56:52:53 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt/gW/FXjZtFB9i06WDwcFjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNjYwNWI0ZDI3ZjEzOTY4ZTg3OTRlNmVmMDkxMjIzNzQ4 ODE3ZDgwHhcNMjYwMTAyMTYxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjM4MGQzYTQ3YjA1ZWRjMGMwNzVmMWZjNmE5NTQzOWZhNjA3ZWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnw3kyAteqilQGeXGDHjTXSKdG8sE 4JzgKQBhgukK+eWBvECgDjEiomoHX4Ku/cIdbODgJOtNu9A0BT0HYgBhLEXRWQrz aJ8HblRYduZ19a7V9Guim37a64kCbcs43di06XLmTZMwiVDq7rzv/Qj54qgCj3lr XJ4YZ8M5fy6qcJR3zkt8tEp8HlA53DvPjEbAvmCXtsnJBZlFYa162ZImezwq3VGp GHWKhftpbt7TYEwjt6kCnX0SKD5d36ZFuZTRX7RIlAHn+3VNWT4iR8xB0q61gNUM y1ULqW6vodXjNldH+Lsro4ZMkaPtWbfcDeAe04ZfLbliPlJSYxD3dOizEQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFLY4DTpHsF7cDAdfH8apVDn6YH6sMB8GA1UdIwQY MBaAFIJmBbTSfxOWjoeU5u8JEiN0iBfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEt MmQxOTE4YmExYzBlLzEvdGpnTk9rZXdYdHdNQjE4ZnhxbFVPZnBnZnF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEtMmQxOTE4YmExYzBl LzEvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAqMepAwQA qMfqAwQAqMf1AwQAuWX/AwQAueLPMA0GCSqGSIb3DQEBCwUAA4IBAQA839qwraKm xfw7HZGcxdctC9m2C0lV3gU1XBjHfgdUG504IHPLg7V6QsWDcmAbmrOxTMoQBZ4y Bi+R5QTSpRvZF71VaIAdXHfsMMrdyR2TmfsO+e2ZQb7lm2QLZqk/L4dX6mLqOl+L WrL1EMqnHq8TbaQMqveoZHOO3MMH1O4C5ezuD1L6h0v0DZF8Tsbzmg8fKUAU5uKi PrkTWOjbyBfxKF7spInsYYW0c9GvPaTWZhZNiZMZFej7/CvVxMyytGEagLeVg69P KG6gGOn/UlfuIjhlC06Tg4MBE3KqsftB42q0N9eGV/WUzv5YavHpy1YzWkL2f8XN Nniv8B9XVlJT -----END CERTIFICATE-----Generated at Fri Jan 9 16:50:37 2026 by rpki-client