This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/TsOc3ubRn91JAdgQ5aLAsWxpMqE.roa File: TsOc3ubRn91JAdgQ5aLAsWxpMqE.roa (raw, json) Hash identifier: tbfSoTjpCJFJ4FddOzyLpgPxxaJetU74fFW5NiMSulQ= Subject key identifier: 4E:C3:9C:DE:E6:D1:9F:DD:49:01:D8:10:E5:A2:C0:B1:6C:69:32:A1 Certificate issuer: /CN=199ef1b4eb6a0f812511b6bb2704801a3311f709 Certificate serial: 019B797EF4FCE4F9FA7C95C80A550B1E23DC Authority key identifier: 19:9E:F1:B4:EB:6A:0F:81:25:11:B6:BB:27:04:80:1A:33:11:F7:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/TsOc3ubRn91JAdgQ5aLAsWxpMqE.roa Signing time: Thu 01 Jan 2026 12:18:42 +0000 ROA not before: Thu 01 Jan 2026 12:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 185.197.176.0/24 maxlen: 24 185.197.177.0/24 maxlen: 24 185.197.178.0/24 maxlen: 24 185.197.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:f4:fc:e4:f9:fa:7c:95:c8:0a:55:0b:1e:23:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=199ef1b4eb6a0f812511b6bb2704801a3311f709 Validity Not Before: Jan 1 12:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ec39cdee6d19fdd4901d810e5a2c0b16c6932a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c0:cd:65:f9:82:f3:66:ec:0f:ff:39:00:16: 5d:3f:fc:c7:e9:53:08:3e:66:6f:f7:fd:fa:1a:59: 0b:4a:7d:81:d1:a9:87:b5:aa:d0:51:cd:df:4d:81: 77:fa:2f:29:a5:6c:25:2a:c7:9b:ad:09:53:a3:15: a1:0f:52:e4:3e:19:0d:0e:c6:29:a4:35:14:c9:5f: b3:72:01:0b:d7:68:51:f3:90:de:2f:a2:a0:1e:df: 78:96:4f:49:26:b9:dc:7b:fc:f2:e5:0f:2e:b2:9d: 19:f3:64:fb:fb:36:58:0a:67:35:da:de:be:8a:1a: 51:27:c9:70:8e:b4:62:0c:6d:9c:f9:65:8c:56:12: bc:78:22:ca:c0:3a:44:26:92:ed:28:38:8f:f4:57: 7a:63:2e:a5:fb:b9:88:82:76:2a:a7:72:24:92:6c: 1e:9b:7a:e4:85:d4:a9:2f:ae:0b:84:dc:ef:c3:8d: 21:cb:45:c2:c0:8d:3f:d9:d0:d5:a8:01:36:ab:90: 18:75:46:9e:d8:94:b7:21:e0:af:a3:66:0c:5f:66: c6:be:70:33:18:12:ca:1b:7b:55:4b:e9:8e:46:1c: 4b:0b:ee:0a:5a:dd:89:f6:76:f3:e1:91:f0:25:b9: 5c:1d:26:85:60:85:99:46:dc:21:4f:72:aa:59:23: 31:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:C3:9C:DE:E6:D1:9F:DD:49:01:D8:10:E5:A2:C0:B1:6C:69:32:A1 X509v3 Authority Key Identifier: keyid:19:9E:F1:B4:EB:6A:0F:81:25:11:B6:BB:27:04:80:1A:33:11:F7:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/TsOc3ubRn91JAdgQ5aLAsWxpMqE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.197.176.0/22 Signature Algorithm: sha256WithRSAEncryption 98:d7:51:f1:5b:e1:73:85:0a:45:98:be:1c:41:99:da:2a:1d: 24:da:5d:ad:67:98:cd:ca:6b:0c:d8:bf:64:ca:d5:68:06:af: c4:92:52:61:8c:9a:9a:e8:ef:d1:00:78:b4:4f:8a:af:ca:2e: f3:28:19:88:6a:59:e1:1e:c4:d0:61:81:c1:be:a0:a4:f4:15: 91:86:f1:a8:fb:c0:3e:10:41:56:5c:73:6f:b8:82:78:20:0e: 84:fd:97:3d:49:65:40:d3:9c:17:73:7d:d8:2b:5f:c0:0c:12: c1:2a:c8:ad:0d:fe:0c:ac:46:6e:ca:7f:a4:44:2e:35:3a:ea: db:96:31:5c:af:92:79:4f:a8:1e:db:b8:86:d9:b3:b6:44:09: 54:25:06:91:a9:e0:ea:d8:91:65:34:ca:8d:15:a6:54:ac:f3: 66:10:9c:0a:a0:92:32:ef:c6:b9:1a:56:62:bb:e6:a8:91:b5: 62:01:9a:5b:14:92:fc:3a:44:7d:1c:a5:8a:52:5c:41:87:69: e5:07:d8:41:3f:3a:77:71:3d:d0:d8:59:70:a6:f0:75:8a:fa: 80:b6:2c:9d:a5:ea:02:33:34:d5:0c:0d:09:97:02:02:d7:ac: 0d:02:f3:00:08:3c:2e:85:43:81:ea:a3:dc:7b:81:e2:37:f5: cf:c1:41:94 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fvT85Pn6fJXIClULHiPcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5OWVmMWI0ZWI2YTBmODEyNTExYjZiYjI3MDQ4MDFhMzMx MWY3MDkwHhcNMjYwMTAxMTIxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZWMzOWNkZWU2ZDE5ZmRkNDkwMWQ4MTBlNWEyYzBiMTZjNjkzMmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsDNZfmC82bsD/85ABZdP/zH6VMI PmZv9/36GlkLSn2B0amHtarQUc3fTYF3+i8ppWwlKsebrQlToxWhD1LkPhkNDsYp pDUUyV+zcgEL12hR85DeL6KgHt94lk9JJrnce/zy5Q8usp0Z82T7+zZYCmc12t6+ ihpRJ8lwjrRiDG2c+WWMVhK8eCLKwDpEJpLtKDiP9Fd6Yy6l+7mIgnYqp3Ikkmwe m3rkhdSpL64LhNzvw40hy0XCwI0/2dDVqAE2q5AYdUae2JS3IeCvo2YMX2bGvnAz GBLKG3tVS+mORhxLC+4KWt2J9nbz4ZHwJblcHSaFYIWZRtwhT3KqWSMxBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE7DnN7m0Z/dSQHYEOWiwLFsaTKhMB8GA1UdIwQY MBaAFBme8bTrag+BJRG2uycEgBozEfcJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1o3eHRPdHFENEVsRWJhN0p3U0FHak1SOXdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9lYWZlNmUtY2ZlMy00MjQ1LTljMzYt MDdhMjhhZDNjYjY0LzEvVHNPYzN1YlJuOTFKQWRnUTVhTEFzV3hwTXFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni9lYWZlNmUtY2ZlMy00MjQ1LTljMzYtMDdhMjhhZDNjYjY0 LzEvR1o3eHRPdHFENEVsRWJhN0p3U0FHak1SOXdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucWwMA0G CSqGSIb3DQEBCwUAA4IBAQCY11HxW+FzhQpFmL4cQZnaKh0k2l2tZ5jNymsM2L9k ytVoBq/EklJhjJqa6O/RAHi0T4qvyi7zKBmIalnhHsTQYYHBvqCk9BWRhvGo+8A+ EEFWXHNvuIJ4IA6E/Zc9SWVA05wXc33YK1/ADBLBKsitDf4MrEZuyn+kRC41Ourb ljFcr5J5T6ge27iG2bO2RAlUJQaRqeDq2JFlNMqNFaZUrPNmEJwKoJIy78a5GlZi u+aokbViAZpbFJL8OkR9HKWKUlxBh2nlB9hBPzp3cT3Q2FlwpvB1ivqAtiydpeoC MzTVDA0JlwIC16wNAvMACDwuhUOB6qPce4HiN/XPwUGU -----END CERTIFICATE-----Generated at Tue Jan 20 01:20:51 2026 by rpki-client