This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/tO-A92aPh-c1kbPiiGTELi4pWsI.roa File: tO-A92aPh-c1kbPiiGTELi4pWsI.roa (raw, json) Hash identifier: VYiMeDkb56YkXPTmAgRa9xezBuKdyWi7Fakxz9UBLlA= Subject key identifier: B4:EF:80:F7:66:8F:87:E7:35:91:B3:E2:88:64:C4:2E:2E:29:5A:C2 Certificate issuer: /CN=896d5866c35093352e7b9e0762c591e08e50f967 Certificate serial: 019B7FF2085761E3F24F2FDC3452BD021B43 Authority key identifier: 89:6D:58:66:C3:50:93:35:2E:7B:9E:07:62:C5:91:E0:8E:50:F9:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/tO-A92aPh-c1kbPiiGTELi4pWsI.roa Signing time: Fri 02 Jan 2026 18:22:06 +0000 ROA not before: Fri 02 Jan 2026 18:22:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31308 IP address blocks: 193.151.20.0/24 maxlen: 24 193.151.21.0/24 maxlen: 24 2001:67c:2c90::/48 maxlen: 48 2001:67c:2c91::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:08:57:61:e3:f2:4f:2f:dc:34:52:bd:02:1b:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=896d5866c35093352e7b9e0762c591e08e50f967 Validity Not Before: Jan 2 18:22:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4ef80f7668f87e73591b3e28864c42e2e295ac2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5f:92:50:ca:5d:2e:25:9d:7b:4b:2e:61:3f: 8c:9f:10:63:20:e6:63:00:4f:55:1d:6f:51:a2:9b: 86:c3:dd:f4:66:35:f8:02:63:7b:e1:b5:3b:fd:c1: 2e:6c:96:ed:77:85:81:38:18:30:e1:2e:58:e6:08: 0d:fc:43:6f:2b:ca:91:8c:39:65:2d:62:a0:e2:91: 49:af:90:76:45:14:db:d6:83:3d:22:cf:fc:00:0c: ca:88:58:3c:2b:08:13:92:f8:b7:67:51:26:b6:b4: 51:49:1a:a4:0a:1b:ba:06:40:55:fe:29:9d:08:c4: ea:13:85:95:7e:dd:1c:ea:13:93:6c:6f:a2:26:5f: b3:5b:44:0e:4e:e6:cc:3b:07:ad:d6:c8:78:65:18: cc:2a:77:a3:ef:f7:a6:e1:26:b4:ed:3b:d7:b4:73: 6d:67:61:84:fd:09:77:75:3c:bf:b1:31:4e:78:6b: bb:df:1a:92:b2:0f:4c:52:86:57:1e:82:c8:ad:80: 9b:62:d8:5e:ca:f1:87:75:f4:16:c3:98:50:45:65: 31:45:9f:3a:c7:db:72:1d:13:4c:b1:9a:58:a0:cf: 6d:c0:e0:4c:1d:56:17:0a:8b:0c:fc:54:45:a8:f2: 27:af:57:6e:b2:d0:29:54:17:f8:13:f6:3f:31:30: 9e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:EF:80:F7:66:8F:87:E7:35:91:B3:E2:88:64:C4:2E:2E:29:5A:C2 X509v3 Authority Key Identifier: keyid:89:6D:58:66:C3:50:93:35:2E:7B:9E:07:62:C5:91:E0:8E:50:F9:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/tO-A92aPh-c1kbPiiGTELi4pWsI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.151.20.0/23 IPv6: 2001:67c:2c90::/47 Signature Algorithm: sha256WithRSAEncryption 27:bf:82:d9:c1:30:a3:8d:37:45:09:7a:27:2b:8a:65:b2:65: 3e:f5:a4:37:22:cf:b0:0f:f6:65:86:1b:b1:4f:7b:ff:d7:0e: 8f:1f:ef:90:6a:a4:9e:6c:2b:99:ae:69:d9:87:30:f4:4d:a3: 63:0d:48:b0:d8:04:2e:40:77:b0:85:1c:e9:c6:b7:97:55:cc: b3:28:3e:35:0d:f9:64:76:30:cf:4e:26:2f:d3:7e:d4:6b:7e: 0b:b1:1f:98:57:f6:d1:bd:5f:da:ac:1b:0d:75:ad:ee:7b:46: 29:ff:92:2f:74:12:43:b1:d3:16:40:7e:ce:0f:79:d6:b2:72: 46:17:40:80:7a:3e:86:af:cc:01:94:f9:c7:b5:a1:2d:f3:ed: 3b:81:53:ed:90:62:85:6b:69:c4:39:89:dd:fb:de:c3:aa:40: 70:3f:9d:ed:28:b7:90:9b:9e:82:ca:f3:ac:77:b1:15:7e:04: 54:eb:90:f2:87:82:45:73:a5:90:ae:45:f4:28:f3:fd:1c:e0: 62:9a:55:7b:0a:f8:3f:29:1a:8c:1d:21:74:da:15:91:e4:4d: 18:b6:76:65:d4:75:26:2a:04:de:88:7b:44:33:ea:7c:73:44: b2:af:29:70:5b:15:85:c6:7a:2a:7f:8b:8d:c5:aa:65:e0:d1: 3c:79:5b:1c -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/8ghXYePyTy/cNFK9AhtDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NmQ1ODY2YzM1MDkzMzUyZTdiOWUwNzYyYzU5MWUwOGU1 MGY5NjcwHhcNMjYwMTAyMTgyMjA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGVmODBmNzY2OGY4N2U3MzU5MWIzZTI4ODY0YzQyZTJlMjk1YWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoV+SUMpdLiWde0suYT+MnxBjIOZj AE9VHW9RopuGw930ZjX4AmN74bU7/cEubJbtd4WBOBgw4S5Y5ggN/ENvK8qRjDll LWKg4pFJr5B2RRTb1oM9Is/8AAzKiFg8KwgTkvi3Z1EmtrRRSRqkChu6BkBV/imd CMTqE4WVft0c6hOTbG+iJl+zW0QOTubMOwet1sh4ZRjMKnej7/em4Sa07TvXtHNt Z2GE/Ql3dTy/sTFOeGu73xqSsg9MUoZXHoLIrYCbYtheyvGHdfQWw5hQRWUxRZ86 x9tyHRNMsZpYoM9twOBMHVYXCosM/FRFqPInr1dustApVBf4E/Y/MTCeMwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFLTvgPdmj4fnNZGz4ohkxC4uKVrCMB8GA1UdIwQY MBaAFIltWGbDUJM1LnueB2LFkeCOUPlnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVcxWVpzTlFrelV1ZTU0SFlzV1I0STVRLVdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi85ZDhmMjEtYjI3Zi00MzVkLWE3YjUt Nzg0NjI0YTdiNDdlLzEvdE8tQTkyYVBoLWMxa2JQaWlHVEVMaTRwV3NJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi85ZDhmMjEtYjI3Zi00MzVkLWE3YjUtNzg0NjI0YTdiNDdl LzEvaVcxWVpzTlFrelV1ZTU0SFlzV1I0STVRLVdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBwZcUMA8E AgACMAkDBwEgAQZ8LJAwDQYJKoZIhvcNAQELBQADggEBACe/gtnBMKONN0UJeicr imWyZT71pDciz7AP9mWGG7FPe//XDo8f75BqpJ5sK5muadmHMPRNo2MNSLDYBC5A d7CFHOnGt5dVzLMoPjUN+WR2MM9OJi/TftRrfguxH5hX9tG9X9qsGw11re57Rin/ ki90EkOx0xZAfs4PedayckYXQIB6PoavzAGU+ce1oS3z7TuBU+2QYoVracQ5id37 3sOqQHA/ne0ot5CbnoLK86x3sRV+BFTrkPKHgkVzpZCuRfQo8/0c4GKaVXsK+D8p GowdIXTaFZHkTRi2dmXUdSYqBN6Ie0Qz6nxzRLKvKXBbFYXGeip/i43FqmXg0Tx5 Wxw= -----END CERTIFICATE-----Generated at Tue Feb 10 00:29:46 2026 by rpki-client