This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/TWtbyGXJNUqoK61RLF8Zk_yb-OA.roa File: TWtbyGXJNUqoK61RLF8Zk_yb-OA.roa (raw, json) Hash identifier: V0MpIpfQqolsEoLYmXod5/+AyCdlRH/FtrIJe/Y/B+g= Subject key identifier: 4D:6B:5B:C8:65:C9:35:4A:A8:2B:AD:51:2C:5F:19:93:FC:9B:F8:E0 Certificate issuer: /CN=faf7066da09a56224260e46ea26dc9cb1dba8e37 Certificate serial: 019B7DCA98C68F1E2D80013BC8DA55707D7B Authority key identifier: FA:F7:06:6D:A0:9A:56:22:42:60:E4:6E:A2:6D:C9:CB:1D:BA:8E:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/TWtbyGXJNUqoK61RLF8Zk_yb-OA.roa Signing time: Fri 02 Jan 2026 08:19:47 +0000 ROA not before: Fri 02 Jan 2026 08:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57081 IP address blocks: 185.132.112.0/22 maxlen: 22 2a06:e180::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:98:c6:8f:1e:2d:80:01:3b:c8:da:55:70:7d:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faf7066da09a56224260e46ea26dc9cb1dba8e37 Validity Not Before: Jan 2 08:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d6b5bc865c9354aa82bad512c5f1993fc9bf8e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ec:27:c9:61:0d:83:e4:6a:17:e5:64:6a:2b: f7:f6:a8:1f:2d:99:e3:6f:33:fd:0b:ff:e5:49:a3: 3c:1a:b7:c4:5b:a0:c3:22:88:6b:9f:be:16:96:52: 59:5d:c4:32:25:f3:5d:64:e3:37:37:fd:e7:a4:96: 3f:16:4a:50:e6:85:af:db:e3:4e:ba:90:8d:1a:b0: 07:d0:64:1d:df:d4:15:80:45:eb:a3:fc:8c:40:df: 3f:5a:0c:e5:4a:d8:8e:07:77:41:32:a0:27:f8:25: eb:89:4d:9e:6d:3d:d7:dd:65:dc:d1:6a:9c:f2:00: 7f:f7:5b:4c:bf:87:b6:f8:f5:27:50:f6:c3:d7:b8: 08:f1:7c:91:49:02:ba:c7:d0:65:e4:ce:b7:78:fb: 9c:7a:b9:0d:05:b0:c4:25:61:aa:1e:d6:c9:d0:54: 6d:44:65:34:a5:66:ff:a6:69:7d:cd:24:0e:c4:32: 24:ea:99:2a:b0:fb:b2:5d:00:2c:09:59:cb:50:a4: 47:c4:c5:03:ff:44:10:5a:6a:d8:49:33:99:74:67: fa:2f:bb:c7:c8:50:7e:5e:df:55:a2:2d:37:49:1a: 1d:35:10:73:66:de:c7:dd:11:3a:96:1c:af:4e:92: e6:2d:2f:ea:73:37:d0:34:50:8c:14:a1:b8:d6:11: 17:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:6B:5B:C8:65:C9:35:4A:A8:2B:AD:51:2C:5F:19:93:FC:9B:F8:E0 X509v3 Authority Key Identifier: keyid:FA:F7:06:6D:A0:9A:56:22:42:60:E4:6E:A2:6D:C9:CB:1D:BA:8E:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/TWtbyGXJNUqoK61RLF8Zk_yb-OA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.132.112.0/22 IPv6: 2a06:e180::/29 Signature Algorithm: sha256WithRSAEncryption 96:23:30:71:02:a3:00:9b:74:bf:08:b7:17:f1:61:d7:34:be: e1:91:ed:fd:7d:01:79:d6:61:3c:da:85:17:fd:d7:c4:fe:d4: a9:fd:a9:b6:88:dd:62:00:96:38:ca:b0:b6:e2:8a:3f:57:63: c3:6e:22:62:37:37:21:8e:3b:61:11:a3:84:96:64:02:f8:9b: 8c:36:4b:d3:3d:b1:fb:56:6c:92:c5:e7:24:3d:6f:39:b9:82: 57:91:4b:5f:38:a9:3c:5b:48:02:a9:a5:4b:72:fb:ad:96:aa: 85:db:4a:34:c9:49:ae:d8:c3:8b:45:2d:ac:8d:55:f1:77:82: e5:b2:35:57:86:c9:ff:8f:06:cd:bd:9f:e1:28:cd:de:0f:bf: 04:61:54:cb:ca:03:b0:8e:ba:b9:06:cb:a3:ab:c9:ed:6d:21: 05:59:c9:b2:de:db:09:a2:67:f6:cf:94:34:44:ee:1b:4c:f0: 2e:cd:2e:4d:77:ba:6e:ce:6f:b1:6f:00:24:10:c1:3f:50:41: 5e:e0:5b:f7:c2:f2:f3:b4:be:3f:c3:9c:96:cd:3f:aa:f9:44: 80:b5:98:08:9d:e2:30:65:ba:eb:27:9a:63:ef:3a:18:9b:8d: 87:6e:3c:56:54:17:84:a7:d9:a5:0a:35:b8:c3:a0:85:d6:0a: e8:ff:29:f8 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9ypjGjx4tgAE7yNpVcH17MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZjcwNjZkYTA5YTU2MjI0MjYwZTQ2ZWEyNmRjOWNiMWRi YThlMzcwHhcNMjYwMTAyMDgxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDZiNWJjODY1YzkzNTRhYTgyYmFkNTEyYzVmMTk5M2ZjOWJmOGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ewnyWENg+RqF+Vkaiv39qgfLZnj bzP9C//lSaM8GrfEW6DDIohrn74WllJZXcQyJfNdZOM3N/3npJY/FkpQ5oWv2+NO upCNGrAH0GQd39QVgEXro/yMQN8/WgzlStiOB3dBMqAn+CXriU2ebT3X3WXc0Wqc 8gB/91tMv4e2+PUnUPbD17gI8XyRSQK6x9Bl5M63ePucerkNBbDEJWGqHtbJ0FRt RGU0pWb/pml9zSQOxDIk6pkqsPuyXQAsCVnLUKRHxMUD/0QQWmrYSTOZdGf6L7vH yFB+Xt9Voi03SRodNRBzZt7H3RE6lhyvTpLmLS/qczfQNFCMFKG41hEXqwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFE1rW8hlyTVKqCutUSxfGZP8m/jgMB8GA1UdIwQY MBaAFPr3Bm2gmlYiQmDkbqJtycsduo43MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS12Y0diYUNhVmlKQ1lPUnVvbTNKeXgyNmpqYy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTMvNmRiYzJmLTBmMGItNGEyZi1iMTQ5 LWI3NTk4MzEyMjQ1NS8xL1RXdGJ5R1hKTlVxb0s2MVJMRjhaa195Yi1PQS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYTMvNmRiYzJmLTBmMGItNGEyZi1iMTQ5LWI3NTk4MzEyMjQ1 NS8xLzEtdmNHYmFDYVZpSkNZT1J1b20zSnl4MjZqamMuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAK5hHAw DQQCAAIwBwMFAyoG4YAwDQYJKoZIhvcNAQELBQADggEBAJYjMHECowCbdL8Itxfx Ydc0vuGR7f19AXnWYTzahRf918T+1Kn9qbaI3WIAljjKsLbiij9XY8NuImI3NyGO O2ERo4SWZAL4m4w2S9M9sftWbJLF5yQ9bzm5gleRS184qTxbSAKppUty+62WqoXb SjTJSa7Yw4tFLayNVfF3guWyNVeGyf+PBs29n+Eozd4PvwRhVMvKA7COurkGy6Or ye1tIQVZybLe2wmiZ/bPlDRE7htM8C7NLk13um7Ob7FvACQQwT9QQV7gW/fC8vO0 vj/DnJbNP6r5RIC1mAid4jBluusnmmPvOhibjYduPFZUF4Sn2aUKNbjDoIXWCuj/ Kfg= -----END CERTIFICATE-----Generated at Tue Feb 10 04:31:28 2026 by rpki-client