This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/Tn_7bKvMuX8wX1EpKYGbD8kg1p0.roa File: Tn_7bKvMuX8wX1EpKYGbD8kg1p0.roa (raw, json) Hash identifier: arj2lz3m1CKLXQA+b+0nfQ4tgMR/lYV9tLqCCkGgt5s= Subject key identifier: 4E:7F:FB:6C:AB:CC:B9:7F:30:5F:51:29:29:81:9B:0F:C9:20:D6:9D Certificate issuer: /CN=8ea175861ced0cf70d516479b3fa8807626ac31f Certificate serial: 019B7EA59FF2CDC7B593500E64255607931C Authority key identifier: 8E:A1:75:86:1C:ED:0C:F7:0D:51:64:79:B3:FA:88:07:62:6A:C3:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/Tn_7bKvMuX8wX1EpKYGbD8kg1p0.roa Signing time: Fri 02 Jan 2026 12:19:01 +0000 ROA not before: Fri 02 Jan 2026 12:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212312 IP address blocks: 89.184.58.0/24 maxlen: 24 185.242.238.0/23 maxlen: 23 2a12:77c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:9f:f2:cd:c7:b5:93:50:0e:64:25:56:07:93:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ea175861ced0cf70d516479b3fa8807626ac31f Validity Not Before: Jan 2 12:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e7ffb6cabccb97f305f512929819b0fc920d69d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a1:74:4e:f9:eb:9f:75:a6:75:47:ba:ae:c3: bc:45:b3:d8:4c:2e:77:25:07:22:1e:5b:f7:6f:11: a2:90:6a:ef:e2:c9:93:7b:3f:52:fc:40:c6:21:61: 70:61:fe:23:73:54:39:5b:44:f7:2a:1d:9c:a5:62: 6e:1a:78:43:2b:0b:82:7d:57:d5:89:f1:f7:59:8d: c2:42:8c:23:72:c7:81:42:01:1f:3d:3f:cd:e7:fe: 26:c4:65:63:e5:ac:02:59:97:a5:0a:e5:e8:39:ed: 38:22:e1:5b:4f:57:a5:fa:62:48:75:96:47:77:6f: ed:27:62:bd:fb:bd:48:5b:bb:e1:d7:89:c2:35:a3: 82:37:4e:d8:11:54:9d:74:be:62:da:94:7a:46:08: 36:3b:f4:f2:70:59:23:8e:f3:7f:3b:ee:be:05:5c: ab:07:4e:b6:54:07:39:7d:d1:2b:b7:11:b4:db:3a: 36:91:db:e9:b1:01:d7:4d:74:e3:bd:4a:0e:52:ea: cb:27:45:05:4a:05:1c:81:69:fc:d0:5c:4a:a0:c9: 2d:d6:5a:de:40:68:08:8b:d4:2b:48:13:c9:b8:e5: 6b:9d:f2:4a:dd:94:71:36:9d:6b:6a:cc:6f:21:c5: d7:a3:d8:a4:ae:b1:12:c1:b1:17:b8:d6:43:c6:38: f3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:7F:FB:6C:AB:CC:B9:7F:30:5F:51:29:29:81:9B:0F:C9:20:D6:9D X509v3 Authority Key Identifier: keyid:8E:A1:75:86:1C:ED:0C:F7:0D:51:64:79:B3:FA:88:07:62:6A:C3:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/Tn_7bKvMuX8wX1EpKYGbD8kg1p0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.184.58.0/24 185.242.238.0/23 IPv6: 2a12:77c0::/32 Signature Algorithm: sha256WithRSAEncryption 80:1f:43:fc:43:2b:f4:60:c1:30:e8:cb:db:e7:02:20:fb:92: 3e:1a:c9:a9:5c:4c:45:b4:15:ab:e9:79:5a:72:49:02:7e:03: 8b:69:97:9e:31:15:99:5c:53:3e:e0:6e:d4:cc:15:ee:5c:58: bc:79:58:02:40:9e:f5:e1:ae:97:98:ff:ae:d3:c8:70:02:90: 2c:a5:25:22:c1:ba:bd:1f:72:50:cb:25:04:60:25:f6:ab:07: 28:6c:76:b2:a4:20:cf:d0:30:dc:7f:b1:e7:d3:38:46:5e:5e: 34:17:ec:2e:7f:5e:ed:e2:5a:e1:bc:10:47:df:cd:5e:a2:95: 84:5b:a9:50:ac:cd:2a:e4:1d:87:b2:9e:f1:f4:54:8d:d2:63: 20:01:8c:a6:c4:d9:8d:6e:28:04:11:86:8f:b9:f0:f6:c4:85: 26:82:29:a8:27:e7:3f:dd:8c:5f:c5:0c:2f:50:5a:43:dd:ce: da:7e:e7:02:12:65:a8:48:bd:7b:41:c4:57:58:b7:b2:9c:e0: ff:4a:61:5a:32:18:e2:29:9a:de:92:f4:61:12:50:22:0c:ad: 05:f7:08:77:df:ef:fb:4e:70:3f:71:5e:36:0e:b7:7c:f8:dd: 69:fe:18:10:4a:09:1a:b3:55:e8:9e:30:bd:84:1d:69:f4:e9: f0:f5:72:ac -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt+pZ/yzce1k1AOZCVWB5McMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYTE3NTg2MWNlZDBjZjcwZDUxNjQ3OWIzZmE4ODA3NjI2 YWMzMWYwHhcNMjYwMTAyMTIxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTdmZmI2Y2FiY2NiOTdmMzA1ZjUxMjkyOTgxOWIwZmM5MjBkNjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKF0Tvnrn3WmdUe6rsO8RbPYTC53 JQciHlv3bxGikGrv4smTez9S/EDGIWFwYf4jc1Q5W0T3Kh2cpWJuGnhDKwuCfVfV ifH3WY3CQowjcseBQgEfPT/N5/4mxGVj5awCWZelCuXoOe04IuFbT1el+mJIdZZH d2/tJ2K9+71IW7vh14nCNaOCN07YEVSddL5i2pR6Rgg2O/TycFkjjvN/O+6+BVyr B062VAc5fdErtxG02zo2kdvpsQHXTXTjvUoOUurLJ0UFSgUcgWn80FxKoMkt1lre QGgIi9QrSBPJuOVrnfJK3ZRxNp1rasxvIcXXo9ikrrESwbEXuNZDxjjzfwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFE5/+2yrzLl/MF9RKSmBmw/JINadMB8GA1UdIwQY MBaAFI6hdYYc7Qz3DVFkebP6iAdiasMfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanFGMWhoenREUGNOVVdSNXNfcUlCMkpxd3g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9lYmZhYzgtNTdiNS00OGE0LWE2OTAt ZGFlZDhmMWU3NDhiLzEvVG5fN2JLdk11WDh3WDFFcEtZR2JEOGtnMXAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9lYmZhYzgtNTdiNS00OGE0LWE2OTAtZGFlZDhmMWU3NDhi LzEvanFGMWhoenREUGNOVVdSNXNfcUlCMkpxd3g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAWbg6AwQB ufLuMA0EAgACMAcDBQAqEnfAMA0GCSqGSIb3DQEBCwUAA4IBAQCAH0P8Qyv0YMEw 6Mvb5wIg+5I+GsmpXExFtBWr6XlackkCfgOLaZeeMRWZXFM+4G7UzBXuXFi8eVgC QJ714a6XmP+u08hwApAspSUiwbq9H3JQyyUEYCX2qwcobHaypCDP0DDcf7Hn0zhG Xl40F+wuf17t4lrhvBBH381eopWEW6lQrM0q5B2Hsp7x9FSN0mMgAYymxNmNbigE EYaPufD2xIUmgimoJ+c/3YxfxQwvUFpD3c7afucCEmWoSL17QcRXWLeynOD/SmFa MhjiKZrekvRhElAiDK0F9wh33+/7TnA/cV42Drd8+N1p/hgQSgkas1XonjC9hB1p 9Onw9XKs -----END CERTIFICATE-----Generated at Tue Feb 10 02:58:24 2026 by rpki-client