This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/tctjfvEK8lIPOjwUvqqkMwO89Sw.roa File: tctjfvEK8lIPOjwUvqqkMwO89Sw.roa (raw, json) Hash identifier: 7VLR3lYq1THF3pPz4Meczlt3X6WQU5Q9fRxXqj/nnGc= Subject key identifier: B5:CB:63:7E:F1:0A:F2:52:0F:3A:3C:14:BE:AA:A4:33:03:BC:F5:2C Certificate issuer: /CN=7d0213e3e7ebe6170a3600a8e3ae64ed962c0e36 Certificate serial: 019B7B36242A4F887D7757091F209824E520 Authority key identifier: 7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/tctjfvEK8lIPOjwUvqqkMwO89Sw.roa Signing time: Thu 01 Jan 2026 20:18:24 +0000 ROA not before: Thu 01 Jan 2026 20:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50718 IP address blocks: 46.151.202.0/23 maxlen: 23 46.151.205.0/24 maxlen: 24 46.151.206.0/23 maxlen: 23 91.227.236.0/22 maxlen: 22 185.29.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.mft rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:24:2a:4f:88:7d:77:57:09:1f:20:98:24:e5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d0213e3e7ebe6170a3600a8e3ae64ed962c0e36 Validity Not Before: Jan 1 20:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5cb637ef10af2520f3a3c14beaaa43303bcf52c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c7:91:4d:29:be:c8:45:c8:28:69:87:79:14: 59:07:87:32:c2:cf:97:81:82:0a:e9:55:1e:24:7d: 4d:8a:04:c3:ef:a8:65:8a:51:bd:92:79:68:aa:a7: 5b:79:83:1c:ae:34:9c:d2:a5:02:8c:9f:e6:b3:3e: 42:74:ff:89:c9:9d:35:fb:46:2c:58:db:a9:bc:77: 3f:f4:d4:d4:42:c8:a4:d8:c0:4b:4c:0f:b5:f1:67: 49:d2:c0:06:3c:b6:7d:d3:ce:fa:e0:7d:6d:ad:a7: 41:4a:f1:84:31:bf:6c:db:16:01:47:50:90:da:a8: 6d:d0:f1:a5:a8:08:f8:d4:53:86:9e:a4:93:4b:43: cb:a3:f0:de:9b:fb:e4:c9:6e:97:f6:7c:40:13:8b: 06:c3:2c:3b:1a:8e:6a:8b:09:37:9a:8c:d1:ce:00: bb:d0:b2:ab:f2:27:d5:b3:f7:12:c2:2b:c8:de:32: fb:93:1f:7d:6c:64:d3:86:65:39:66:3e:c7:ea:43: ad:d3:82:5a:a6:f8:f9:10:0a:27:b1:36:29:5c:53: 79:37:48:06:e8:0e:e6:7b:81:9c:a9:ba:2a:df:78: 8d:79:fc:d9:98:29:d2:80:66:8c:b9:0c:60:a0:72: 87:49:89:c1:65:2c:af:44:04:5a:c3:16:6a:9a:ed: 81:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:CB:63:7E:F1:0A:F2:52:0F:3A:3C:14:BE:AA:A4:33:03:BC:F5:2C X509v3 Authority Key Identifier: keyid:7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/tctjfvEK8lIPOjwUvqqkMwO89Sw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.151.202.0/23 46.151.205.0-46.151.207.255 91.227.236.0/22 185.29.89.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:ce:1b:c8:8c:e2:9f:83:1f:6e:70:d9:1f:45:af:03:52:b0: 10:d7:11:8e:da:50:43:43:50:95:87:46:02:3c:c7:99:19:96: c7:68:6e:e5:e2:8a:79:87:41:65:35:88:82:56:00:b1:04:c7: 4f:64:ea:d3:73:70:1a:5d:fd:20:b7:93:31:c0:d0:f0:9a:d3: 9e:96:07:59:e1:69:40:20:0e:02:76:90:a3:20:e9:8f:6d:da: 45:9b:21:85:f0:bf:d1:f8:02:53:15:ba:bb:e9:bc:d3:7c:8d: 3d:88:37:ca:e4:ec:f1:08:90:13:8a:81:53:61:d2:86:1d:87: 66:80:91:b9:bc:39:a7:c0:41:9f:d5:c7:85:25:41:be:34:14: 71:df:4a:a6:e0:b7:b2:7e:90:00:cc:c7:82:ae:5f:91:ef:e0: 2f:06:f7:f0:36:43:40:0c:dc:38:82:2e:c7:09:ff:2b:6c:9e: 92:55:11:ac:f5:02:e0:e5:d7:49:f2:d3:35:44:6c:9f:20:b0: 92:b0:ab:b4:ce:bb:bb:86:02:63:81:10:c9:5d:3e:5e:7a:f0: 2c:23:18:0c:a1:43:6b:6a:99:c8:bd:f9:39:e1:c2:bd:a8:fc: a8:c5:c8:af:e0:45:10:68:e9:9c:86:99:7d:6c:bb:43:22:e3: c5:ce:a6:dc -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt7NiQqT4h9d1cJHyCYJOUgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDIxM2UzZTdlYmU2MTcwYTM2MDBhOGUzYWU2NGVkOTYy YzBlMzYwHhcNMjYwMTAxMjAxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNWNiNjM3ZWYxMGFmMjUyMGYzYTNjMTRiZWFhYTQzMzAzYmNmNTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMeRTSm+yEXIKGmHeRRZB4cyws+X gYIK6VUeJH1NigTD76hlilG9knloqqdbeYMcrjSc0qUCjJ/msz5CdP+JyZ01+0Ys WNupvHc/9NTUQsik2MBLTA+18WdJ0sAGPLZ908764H1tradBSvGEMb9s2xYBR1CQ 2qht0PGlqAj41FOGnqSTS0PLo/Dem/vkyW6X9nxAE4sGwyw7Go5qiwk3mozRzgC7 0LKr8ifVs/cSwivI3jL7kx99bGTThmU5Zj7H6kOt04Japvj5EAonsTYpXFN5N0gG 6A7me4Gcqboq33iNefzZmCnSgGaMuQxgoHKHSYnBZSyvRARawxZqmu2BxQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFLXLY37xCvJSDzo8FL6qpDMDvPUsMB8GA1UdIwQY MBaAFH0CE+Pn6+YXCjYAqOOuZO2WLA42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFJVDQtZnI1aGNLTmdDbzQ2NWs3WllzRGpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy84MjFkYzItNjc2Ni00OTg4LWI3Nzct MDM1MzIxNDBlZjUyLzEvdGN0amZ2RUs4bElQT2p3VXZxcWtNd084OVN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy84MjFkYzItNjc2Ni00OTg4LWI3NzctMDM1MzIxNDBlZjUy LzEvZlFJVDQtZnI1aGNLTmdDbzQ2NWs3WllzRGpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQBLpfKMAwD BAAul80DBAQul8ADBAJb4+wDBAC5HVkwDQYJKoZIhvcNAQELBQADggEBAJ7OG8iM 4p+DH25w2R9FrwNSsBDXEY7aUENDUJWHRgI8x5kZlsdobuXiinmHQWU1iIJWALEE x09k6tNzcBpd/SC3kzHA0PCa056WB1nhaUAgDgJ2kKMg6Y9t2kWbIYXwv9H4AlMV urvpvNN8jT2IN8rk7PEIkBOKgVNh0oYdh2aAkbm8OafAQZ/Vx4UlQb40FHHfSqbg t7J+kADMx4KuX5Hv4C8G9/A2Q0AM3DiCLscJ/ytsnpJVEaz1AuDl10ny0zVEbJ8g sJKwq7TOu7uGAmOBEMldPl568CwjGAyhQ2tqmci9+Tnhwr2o/KjFyK/gRRBo6ZyG mX1su0Mi48XOptw= -----END CERTIFICATE-----Generated at Tue Jan 27 01:41:59 2026 by rpki-client