This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/t2FHnnEHf_6TSghs3_z2wcfp-bA.roa File: t2FHnnEHf_6TSghs3_z2wcfp-bA.roa (raw, json) Hash identifier: 91+RIg0AqSl330cDSTT6P3HSGmorFbL8LnE7d4GsH5g= Subject key identifier: B7:61:47:9E:71:07:7F:FE:93:4A:08:6C:DF:FC:F6:C1:C7:E9:F9:B0 Certificate issuer: /CN=e6049cf87dd8f1fd4c8024b5a6c9ea94f17b6fbd Certificate serial: 019BFFC688A233F37D9925359DC14909A57B Authority key identifier: E6:04:9C:F8:7D:D8:F1:FD:4C:80:24:B5:A6:C9:EA:94:F1:7B:6F:BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gSc-H3Y8f1MgCS1psnqlPF7b70.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/t2FHnnEHf_6TSghs3_z2wcfp-bA.roa Signing time: Tue 27 Jan 2026 14:05:59 +0000 ROA not before: Tue 27 Jan 2026 14:05:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12502 IP address blocks: 195.190.145.0/24 maxlen: 24 2001:67c:684::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft rsync://rpki.ripe.net/repository/DEFAULT/5gSc-H3Y8f1MgCS1psnqlPF7b70.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ff:c6:88:a2:33:f3:7d:99:25:35:9d:c1:49:09:a5:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6049cf87dd8f1fd4c8024b5a6c9ea94f17b6fbd Validity Not Before: Jan 27 14:05:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b761479e71077ffe934a086cdffcf6c1c7e9f9b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1a:5b:05:4e:e9:26:10:20:cb:69:e1:0c:9b: 04:86:3b:c6:54:62:26:63:25:05:98:9b:b2:61:dd: 8f:45:be:dd:51:35:a0:e8:d7:58:c5:56:be:92:47: 03:2b:eb:a3:13:90:87:0a:f3:1f:c6:c9:3c:77:1d: b7:fc:01:d6:c4:d2:4a:d8:f1:10:f2:55:57:67:75: ac:c0:58:73:48:34:ab:09:72:84:1f:2b:58:51:6e: 0a:c3:44:0f:78:80:be:68:e5:bd:c4:74:af:99:ae: da:e9:d9:e0:ba:aa:f8:4b:0d:63:dc:14:b2:1f:3c: ac:03:34:33:75:b8:84:a4:4c:4b:47:27:c2:97:87: 5c:46:f0:d6:d6:f0:c6:f4:2d:19:81:75:1c:4f:21: 4b:8e:9f:d8:c9:43:f3:92:5d:83:13:ae:c6:c1:d9: 65:42:1c:7a:9c:0b:0a:73:c6:af:ff:74:4e:56:c2: da:33:6b:f6:8f:0b:9a:2b:95:6a:73:3a:8c:37:ba: 94:cc:0a:aa:2b:e4:7c:9c:16:be:8d:3a:24:aa:f7: b4:df:3b:d7:70:b0:2f:4e:8d:01:af:37:bc:db:22: 11:4e:a1:e9:30:c0:2e:02:ba:8f:95:c3:15:95:36: f7:7d:46:a3:ef:57:f8:64:6a:cc:00:85:b1:f5:ec: 6a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:61:47:9E:71:07:7F:FE:93:4A:08:6C:DF:FC:F6:C1:C7:E9:F9:B0 X509v3 Authority Key Identifier: keyid:E6:04:9C:F8:7D:D8:F1:FD:4C:80:24:B5:A6:C9:EA:94:F1:7B:6F:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gSc-H3Y8f1MgCS1psnqlPF7b70.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/t2FHnnEHf_6TSghs3_z2wcfp-bA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.190.145.0/24 IPv6: 2001:67c:684::/48 Signature Algorithm: sha256WithRSAEncryption 48:43:12:41:bd:44:d9:33:1c:1a:ce:5b:2a:31:ad:b1:9f:93: 20:6f:7e:16:61:12:63:a8:f4:a1:04:7d:73:27:9f:49:46:2a: d8:d3:3a:1b:d9:c9:36:a0:0d:91:98:5a:df:4f:1c:44:f6:24: 25:34:5c:d4:e6:b4:43:e7:91:18:95:a8:07:22:0e:f0:2e:e9: 76:77:33:a8:b3:4c:cf:00:4b:e7:b4:68:68:3d:b4:34:2c:b0: c9:8c:92:d9:72:b5:22:ad:57:c6:a9:87:07:58:41:cd:f6:53: 83:70:83:0e:c5:49:a0:98:13:a2:a9:1b:74:ca:72:8c:d8:4a: 1e:ba:b4:c4:9e:12:5e:79:3d:b1:82:33:2b:42:65:da:25:68: f3:09:02:d1:64:4c:fa:1f:6d:6f:c8:31:08:5f:60:d4:83:35: a3:7d:a4:c5:f2:42:29:7d:95:6c:86:c0:72:ba:d9:7b:b9:2f: 6b:d1:9f:e2:73:48:07:dc:9e:d4:a3:9a:3a:08:52:83:c8:3c: f9:b8:ee:f1:c4:d4:17:70:63:eb:38:59:3d:de:f7:cd:0e:51: 69:a5:96:db:73:a7:68:e8:2d:a2:cb:93:e8:a5:c4:0b:f7:33: 37:8b:0e:eb:21:01:d0:b4:f4:8b:c7:a7:9f:fd:cb:2b:51:39: 77:41:bc:fb -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZv/xoiiM/N9mSU1ncFJCaV7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MDQ5Y2Y4N2RkOGYxZmQ0YzgwMjRiNWE2YzllYTk0ZjE3 YjZmYmQwHhcNMjYwMTI3MTQwNTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzYxNDc5ZTcxMDc3ZmZlOTM0YTA4NmNkZmZjZjZjMWM3ZTlmOWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBpbBU7pJhAgy2nhDJsEhjvGVGIm YyUFmJuyYd2PRb7dUTWg6NdYxVa+kkcDK+ujE5CHCvMfxsk8dx23/AHWxNJK2PEQ 8lVXZ3WswFhzSDSrCXKEHytYUW4Kw0QPeIC+aOW9xHSvma7a6dnguqr4Sw1j3BSy HzysAzQzdbiEpExLRyfCl4dcRvDW1vDG9C0ZgXUcTyFLjp/YyUPzkl2DE67Gwdll Qhx6nAsKc8av/3ROVsLaM2v2jwuaK5VqczqMN7qUzAqqK+R8nBa+jTokqve03zvX cLAvTo0Brze82yIRTqHpMMAuArqPlcMVlTb3fUaj71f4ZGrMAIWx9exq6QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFLdhR55xB3/+k0oIbN/89sHH6fmwMB8GA1UdIwQY MBaAFOYEnPh92PH9TIAktabJ6pTxe2+9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWdTYy1IM1k4ZjFNZ0NTMXBzbnFsUEY3YjcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8wNjBjZWEtZTkyMC00MGRlLTkwZGEt OGQ0OWViY2FlOWIzLzEvdDJGSG5uRUhmXzZUU2doczNfejJ3Y2ZwLWJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8wNjBjZWEtZTkyMC00MGRlLTkwZGEtOGQ0OWViY2FlOWIz LzEvNWdTYy1IM1k4ZjFNZ0NTMXBzbnFsUEY3YjcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAw76RMA8E AgACMAkDBwAgAQZ8BoQwDQYJKoZIhvcNAQELBQADggEBAEhDEkG9RNkzHBrOWyox rbGfkyBvfhZhEmOo9KEEfXMnn0lGKtjTOhvZyTagDZGYWt9PHET2JCU0XNTmtEPn kRiVqAciDvAu6XZ3M6izTM8AS+e0aGg9tDQssMmMktlytSKtV8aphwdYQc32U4Nw gw7FSaCYE6KpG3TKcozYSh66tMSeEl55PbGCMytCZdolaPMJAtFkTPofbW/IMQhf YNSDNaN9pMXyQil9lWyGwHK62Xu5L2vRn+JzSAfcntSjmjoIUoPIPPm47vHE1Bdw Y+s4WT3e980OUWmllttzp2joLaLLk+ilxAv3MzeLDushAdC09IvHp5/9yytROXdB vPs= -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:29 2026 by rpki-client