This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/tlNcT1MiBSkZmUCLK9DZ-_CTY2g.roa File: tlNcT1MiBSkZmUCLK9DZ-_CTY2g.roa (raw, json) Hash identifier: 6s3KHnByP7wHbQjNbj6YgCo5HA6sEDGtTC7Og3yhpfc= Subject key identifier: B6:53:5C:4F:53:22:05:29:19:99:40:8B:2B:D0:D9:FB:F0:93:63:68 Certificate issuer: /CN=6fd33f9e68568dd605bc92afc1ef6b69e127abd8 Certificate serial: 019B7AC8D830DF4E161112913B9AB34B4AF9 Authority key identifier: 6F:D3:3F:9E:68:56:8D:D6:05:BC:92:AF:C1:EF:6B:69:E1:27:AB:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9M_nmhWjdYFvJKvwe9raeEnq9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/tlNcT1MiBSkZmUCLK9DZ-_CTY2g.roa Signing time: Thu 01 Jan 2026 18:19:01 +0000 ROA not before: Thu 01 Jan 2026 18:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48312 IP address blocks: 91.202.234.0/23 maxlen: 24 91.207.140.0/23 maxlen: 24 194.26.116.0/24 maxlen: 24 2a11:1a00::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.crl rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.mft rsync://rpki.ripe.net/repository/DEFAULT/b9M_nmhWjdYFvJKvwe9raeEnq9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:d8:30:df:4e:16:11:12:91:3b:9a:b3:4b:4a:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fd33f9e68568dd605bc92afc1ef6b69e127abd8 Validity Not Before: Jan 1 18:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b6535c4f532205291999408b2bd0d9fbf0936368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:dd:7f:a0:a4:81:07:4d:26:e0:de:36:cc:be: 3b:ec:5b:69:22:b1:5b:da:68:aa:64:3b:07:39:c1: 13:9d:36:dd:4d:0c:6e:4d:b5:12:a2:ae:27:b3:0a: c2:f7:85:d3:cf:ee:09:46:00:4b:7f:12:6a:44:49: 18:28:0f:c4:75:93:95:d8:e7:d5:db:ce:23:ad:99: c5:06:d8:68:fd:1a:91:c5:92:8a:6c:77:9a:59:b0: e3:e6:26:86:69:1e:09:49:8d:ac:67:ed:07:b6:c9: 8f:86:29:3b:fd:b6:a0:7d:eb:ff:1a:91:27:b6:3a: 72:4c:94:e0:80:7e:84:18:f8:49:b7:72:f9:9f:d9: 16:5d:d1:65:78:eb:42:73:0c:ec:1b:68:0a:a4:56: b0:08:e3:76:91:c2:15:ff:53:b0:73:91:4a:f0:aa: 4d:5e:fa:2f:29:34:4c:13:aa:90:2b:8f:92:b5:5a: 3d:a1:10:4e:5f:5f:dc:35:d9:3e:6c:6b:60:30:55: 17:02:b1:92:b3:3a:fe:c0:32:ac:f2:af:31:d9:ca: 62:3f:2b:b9:7f:8c:8e:ed:b1:d6:5f:fa:d5:39:8d: 9f:5b:8a:58:d7:49:b1:51:ae:f9:89:0f:c5:28:b5: 57:62:c0:ed:d9:a1:59:ab:e1:54:2d:c7:f5:6a:30: 80:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:53:5C:4F:53:22:05:29:19:99:40:8B:2B:D0:D9:FB:F0:93:63:68 X509v3 Authority Key Identifier: keyid:6F:D3:3F:9E:68:56:8D:D6:05:BC:92:AF:C1:EF:6B:69:E1:27:AB:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9M_nmhWjdYFvJKvwe9raeEnq9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/tlNcT1MiBSkZmUCLK9DZ-_CTY2g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.202.234.0/23 91.207.140.0/23 194.26.116.0/24 IPv6: 2a11:1a00::/29 Signature Algorithm: sha256WithRSAEncryption 25:61:78:a1:93:a7:f8:1b:46:24:92:97:ae:8e:08:3f:83:b9: af:5e:82:53:29:86:cc:89:95:5b:f7:bb:b4:2e:fb:92:e6:3a: de:35:9d:2c:b4:5b:40:2b:03:9c:0e:da:2e:34:c1:c3:52:9b: f9:d2:d6:8e:36:8e:64:52:7e:c5:b3:10:da:9a:d8:07:8c:e2: 6d:cd:7d:37:9f:79:2f:a0:1d:f0:6a:62:af:ca:de:c5:48:d3: b7:3d:f2:4d:8b:69:cb:ab:7e:e1:24:c8:98:4b:3a:38:d0:a0: a4:fd:0c:2c:99:a7:2b:ea:28:61:93:01:31:1f:3d:d5:7f:78: c9:65:f2:4f:ed:19:be:64:5f:7f:af:3d:ed:0b:58:12:6d:dd: a7:81:f8:d2:82:dc:eb:99:b7:70:93:ef:7f:81:9f:a7:c0:8e: da:4e:a1:ba:ea:52:9c:c1:49:09:fb:2c:d7:5e:0b:e4:92:fb: c3:4e:63:45:e6:d8:82:00:b8:dd:4a:3f:2d:9f:a7:a1:6b:34: 8e:d8:77:20:9a:b6:6e:a1:8a:9c:28:b2:e9:a6:52:ad:a7:22: 50:5d:04:cd:23:ce:59:17:64:1f:09:e7:4a:ab:16:7b:f8:f7: 14:58:89:c8:dd:e6:e7:71:c6:2e:ab:df:33:28:a0:48:fa:de: f7:d1:f7:89 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt6yNgw304WERKRO5qzS0r5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmZDMzZjllNjg1NjhkZDYwNWJjOTJhZmMxZWY2YjY5ZTEy N2FiZDgwHhcNMjYwMTAxMTgxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjUzNWM0ZjUzMjIwNTI5MTk5OTQwOGIyYmQwZDlmYmYwOTM2MzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsN1/oKSBB00m4N42zL477FtpIrFb 2miqZDsHOcETnTbdTQxuTbUSoq4nswrC94XTz+4JRgBLfxJqREkYKA/EdZOV2OfV 284jrZnFBtho/RqRxZKKbHeaWbDj5iaGaR4JSY2sZ+0HtsmPhik7/bagfev/GpEn tjpyTJTggH6EGPhJt3L5n9kWXdFleOtCcwzsG2gKpFawCON2kcIV/1Owc5FK8KpN XvovKTRME6qQK4+StVo9oRBOX1/cNdk+bGtgMFUXArGSszr+wDKs8q8x2cpiPyu5 f4yO7bHWX/rVOY2fW4pY10mxUa75iQ/FKLVXYsDt2aFZq+FULcf1ajCAWQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFLZTXE9TIgUpGZlAiyvQ2fvwk2NoMB8GA1UdIwQY MBaAFG/TP55oVo3WBbySr8Hva2nhJ6vYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjlNX25taFdqZFlGdkpLdndlOXJhZUVucTlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9hMWM3ZjUtMWVhOS00YTFmLWEzZTQt OGMyN2M5NzY2M2RjLzEvdGxOY1QxTWlCU2tabVVDTEs5RFotX0NUWTJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9hMWM3ZjUtMWVhOS00YTFmLWEzZTQtOGMyN2M5NzY2M2Rj LzEvYjlNX25taFdqZFlGdkpLdndlOXJhZUVucTlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQBW8rqAwQB W8+MAwQAwhp0MA0EAgACMAcDBQMqERoAMA0GCSqGSIb3DQEBCwUAA4IBAQAlYXih k6f4G0Ykkpeujgg/g7mvXoJTKYbMiZVb97u0LvuS5jreNZ0stFtAKwOcDtouNMHD Upv50taONo5kUn7FsxDamtgHjOJtzX03n3kvoB3wamKvyt7FSNO3PfJNi2nLq37h JMiYSzo40KCk/Qwsmacr6ihhkwExHz3Vf3jJZfJP7Rm+ZF9/rz3tC1gSbd2ngfjS gtzrmbdwk+9/gZ+nwI7aTqG66lKcwUkJ+yzXXgvkkvvDTmNF5tiCALjdSj8tn6eh azSO2HcgmrZuoYqcKLLpplKtpyJQXQTNI85ZF2QfCedKqxZ7+PcUWInI3ebnccYu q98zKKBI+t730feJ -----END CERTIFICATE-----Generated at Tue Feb 10 02:33:35 2026 by rpki-client