This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/TBovewG4XNfT-AXXW_cdOvWTQ_s.roa File: TBovewG4XNfT-AXXW_cdOvWTQ_s.roa (raw, json) Hash identifier: YA6Ko3u2RNnOBu+b0YRR5au4lqdCjuXBaHqeZND+6cM= Subject key identifier: 4C:1A:2F:7B:01:B8:5C:D7:D3:F8:05:D7:5B:F7:1D:3A:F5:93:43:FB Certificate issuer: /CN=6bc1ad1676a2a32a45a0cf392f7f9c5ea68e2dea Certificate serial: 019B77592F338CE2C9B9CB260CD9E8B3649E Authority key identifier: 6B:C1:AD:16:76:A2:A3:2A:45:A0:CF:39:2F:7F:9C:5E:A6:8E:2D:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8GtFnaioypFoM85L3-cXqaOLeo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/TBovewG4XNfT-AXXW_cdOvWTQ_s.roa Signing time: Thu 01 Jan 2026 02:18:12 +0000 ROA not before: Thu 01 Jan 2026 02:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33867 IP address blocks: 195.248.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.mft rsync://rpki.ripe.net/repository/DEFAULT/a8GtFnaioypFoM85L3-cXqaOLeo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:2f:33:8c:e2:c9:b9:cb:26:0c:d9:e8:b3:64:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bc1ad1676a2a32a45a0cf392f7f9c5ea68e2dea Validity Not Before: Jan 1 02:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c1a2f7b01b85cd7d3f805d75bf71d3af59343fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:40:44:22:84:12:1b:a2:c0:9b:68:5f:dc:89: 70:11:4a:f1:5e:2c:44:ed:83:6d:25:dd:22:7d:07: 6c:bc:72:24:d4:74:a2:a0:fc:72:bd:3c:b1:89:89: af:b3:9e:cc:3a:68:b1:25:a4:13:bb:dd:3e:5e:e4: 3e:be:8e:85:c1:55:2a:d0:ad:05:65:e8:c6:34:a4: b7:70:af:16:44:ca:90:56:6f:0f:e2:ab:7d:4a:2c: e5:29:3a:d0:0c:ad:bd:3c:40:7c:46:e8:38:af:fb: 70:d0:16:b0:2c:7a:3a:83:03:30:40:40:45:0c:47: 4f:8f:ce:52:6f:70:fd:da:4c:2d:8d:9f:70:1a:b5: aa:91:45:2f:ff:63:3d:7e:aa:1d:1c:4e:61:76:1c: 37:aa:f2:20:fe:4a:47:69:a0:44:57:61:9d:b7:e6: fb:9b:dd:12:37:f6:97:e0:c1:82:e8:b7:8e:42:8a: b4:34:8f:dd:19:1e:1f:53:47:c5:cd:1a:ed:c3:ef: 88:bc:7d:e8:56:0e:23:bb:2f:c5:e5:28:32:15:a9: 30:71:66:59:5f:9d:90:b2:bc:45:99:71:4c:01:27: 55:c0:d6:44:7b:0f:0d:cf:52:0c:1d:cd:87:09:f5: bb:8e:3b:67:fe:e8:47:99:b3:d5:0e:36:c5:ec:63: 80:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:1A:2F:7B:01:B8:5C:D7:D3:F8:05:D7:5B:F7:1D:3A:F5:93:43:FB X509v3 Authority Key Identifier: keyid:6B:C1:AD:16:76:A2:A3:2A:45:A0:CF:39:2F:7F:9C:5E:A6:8E:2D:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8GtFnaioypFoM85L3-cXqaOLeo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/TBovewG4XNfT-AXXW_cdOvWTQ_s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.248.64.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:21:08:c4:9b:c2:98:08:3a:08:04:9e:85:42:c6:0b:ae:8c: 34:3d:99:e1:a2:61:56:eb:12:fd:2f:86:6a:bb:66:13:2d:d4: 26:a7:c1:0a:bd:cb:f1:51:8b:f0:5c:7d:b2:5a:eb:02:f0:01: 95:f7:16:bd:e8:d2:91:a6:19:a9:56:3d:d3:27:91:9c:cf:e9: 00:6a:46:c8:26:1c:a3:e6:63:ee:d0:03:28:87:45:0a:2d:4f: 0d:fa:17:c2:43:07:a8:7d:3c:35:31:03:34:a2:ed:3a:ea:36: ce:01:21:8f:57:ea:88:22:00:d8:1a:7f:c5:93:b5:a7:5d:9b: 58:be:19:af:23:34:70:98:23:36:f0:db:39:fe:0f:06:e6:0e: 0b:d8:41:a1:3f:34:84:81:35:f5:93:4e:30:cc:ff:2c:7d:46: 13:aa:f4:c1:ed:7e:40:50:2e:0d:e5:5c:3a:68:2c:b8:f1:c8: cf:c7:26:a1:8d:85:52:43:68:d5:8c:09:ed:7c:96:36:90:07: 0c:49:a8:79:a7:e3:f7:b9:5b:79:72:70:8d:ed:01:d0:7c:a3: 64:70:57:bd:d5:17:7b:c2:14:cd:64:f4:ee:0c:66:17:9a:45: a6:3b:4a:65:09:a2:ce:f0:ce:ea:a4:aa:fd:22:2f:8d:0e:14: 5d:5e:d2:b9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WS8zjOLJucsmDNnos2SeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYzFhZDE2NzZhMmEzMmE0NWEwY2YzOTJmN2Y5YzVlYTY4 ZTJkZWEwHhcNMjYwMTAxMDIxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzFhMmY3YjAxYjg1Y2Q3ZDNmODA1ZDc1YmY3MWQzYWY1OTM0M2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUBEIoQSG6LAm2hf3IlwEUrxXixE 7YNtJd0ifQdsvHIk1HSioPxyvTyxiYmvs57MOmixJaQTu90+XuQ+vo6FwVUq0K0F ZejGNKS3cK8WRMqQVm8P4qt9SizlKTrQDK29PEB8Rug4r/tw0BawLHo6gwMwQEBF DEdPj85Sb3D92kwtjZ9wGrWqkUUv/2M9fqodHE5hdhw3qvIg/kpHaaBEV2Gdt+b7 m90SN/aX4MGC6LeOQoq0NI/dGR4fU0fFzRrtw++IvH3oVg4juy/F5SgyFakwcWZZ X52QsrxFmXFMASdVwNZEew8Nz1IMHc2HCfW7jjtn/uhHmbPVDjbF7GOALQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEwaL3sBuFzX0/gF11v3HTr1k0P7MB8GA1UdIwQY MBaAFGvBrRZ2oqMqRaDPOS9/nF6mji3qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYThHdEZuYWlveXBGb004NUwzLWNYcWFPTGVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8yMjM5MmUtYWE2Ny00NTg4LWI4MDkt ZWYxYWFhYWJmZTJiLzEvVEJvdmV3RzRYTmZULUFYWFdfY2RPdldUUV9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8yMjM5MmUtYWE2Ny00NTg4LWI4MDktZWYxYWFhYWJmZTJi LzEvYThHdEZuYWlveXBGb004NUwzLWNYcWFPTGVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw/hAMA0G CSqGSIb3DQEBCwUAA4IBAQCOIQjEm8KYCDoIBJ6FQsYLrow0PZnhomFW6xL9L4Zq u2YTLdQmp8EKvcvxUYvwXH2yWusC8AGV9xa96NKRphmpVj3TJ5Gcz+kAakbIJhyj 5mPu0AMoh0UKLU8N+hfCQweofTw1MQM0ou066jbOASGPV+qIIgDYGn/Fk7WnXZtY vhmvIzRwmCM28Ns5/g8G5g4L2EGhPzSEgTX1k04wzP8sfUYTqvTB7X5AUC4N5Vw6 aCy48cjPxyahjYVSQ2jVjAntfJY2kAcMSah5p+P3uVt5cnCN7QHQfKNkcFe91Rd7 whTNZPTuDGYXmkWmO0plCaLO8M7qpKr9Ii+NDhRdXtK5 -----END CERTIFICATE-----Generated at Tue Jan 27 05:42:01 2026 by rpki-client