This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/TKG6JIO5NTaXTUbXfBu90s4mtRE.roa File: TKG6JIO5NTaXTUbXfBu90s4mtRE.roa (raw, json) Hash identifier: U2QEQxBIuCigDglAujNTXtIh1vUVB2LqzesEEmT2csQ= Subject key identifier: 4C:A1:BA:24:83:B9:35:36:97:4D:46:D7:7C:1B:BD:D2:CE:26:B5:11 Certificate issuer: /CN=252a182d91f456d850210dbf72da7e475fbf3c08 Certificate serial: 019B7F81528AD421A5CCB5F42C6C026F92F7 Authority key identifier: 25:2A:18:2D:91:F4:56:D8:50:21:0D:BF:72:DA:7E:47:5F:BF:3C:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/TKG6JIO5NTaXTUbXfBu90s4mtRE.roa Signing time: Fri 02 Jan 2026 16:19:00 +0000 ROA not before: Fri 02 Jan 2026 16:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203150 IP address blocks: 185.73.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:52:8a:d4:21:a5:cc:b5:f4:2c:6c:02:6f:92:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=252a182d91f456d850210dbf72da7e475fbf3c08 Validity Not Before: Jan 2 16:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ca1ba2483b93536974d46d77c1bbdd2ce26b511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2d:70:52:11:b6:d3:9f:ee:cb:65:eb:d3:6b: 8e:a4:43:84:68:4e:1d:bd:c2:42:59:22:9d:d6:66: c2:ac:d1:e6:75:cd:cf:7d:23:cd:88:53:a7:10:f6: d3:65:e7:cf:11:c1:d6:b2:55:32:33:aa:bb:1d:e7: ac:1d:bc:86:99:0f:a1:b7:89:64:68:ba:74:e4:a8: e5:15:3f:e9:83:84:91:22:0a:b6:63:a5:a2:61:64: 41:a8:32:60:3f:95:91:81:7a:91:18:a1:78:6c:ed: c5:41:71:76:6b:fe:81:00:8b:69:62:32:b1:ea:22: 07:6b:dd:a0:a2:7d:42:d8:24:c6:09:b2:dc:a8:8b: 6d:6d:1a:9e:b6:b5:ec:0a:d5:cb:27:b7:68:f4:68: 16:51:ec:ee:32:e2:57:d6:4d:a7:7d:81:b1:93:55: 5b:04:98:c4:60:62:17:b0:c0:51:a4:a1:66:c0:c3: 10:db:e0:2b:44:bd:ab:c2:39:8d:81:1e:a3:4a:64: ac:3e:58:9a:62:db:3f:bd:87:26:96:84:24:82:fa: e2:0c:1c:8d:73:79:f2:57:05:fe:2c:0b:5a:16:b3: 5d:03:45:c9:98:ed:c3:f8:69:6e:cd:00:d1:2c:e8: b9:3b:97:be:b0:b7:b2:7c:82:85:57:62:fc:18:0a: f0:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:A1:BA:24:83:B9:35:36:97:4D:46:D7:7C:1B:BD:D2:CE:26:B5:11 X509v3 Authority Key Identifier: keyid:25:2A:18:2D:91:F4:56:D8:50:21:0D:BF:72:DA:7E:47:5F:BF:3C:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/TKG6JIO5NTaXTUbXfBu90s4mtRE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.73.251.0/24 Signature Algorithm: sha256WithRSAEncryption 50:8e:92:d3:f5:7a:c3:eb:d6:6e:38:e0:c2:2b:ce:bf:e5:94: b9:eb:18:af:62:54:1d:c9:e9:51:0b:fc:18:ec:cc:07:9f:9d: a0:2e:93:f1:ee:e4:07:f5:1f:12:73:1b:28:ee:d0:71:b3:39: ca:2d:26:4d:69:d7:d0:ac:e5:f4:bf:d1:f7:28:91:25:1f:8e: cd:fd:15:58:d5:40:f2:58:7a:f5:e6:8c:15:0e:84:61:a5:6a: cf:d9:70:ae:b4:3f:51:a9:ed:34:d5:9d:54:e1:ed:ef:b6:99: bd:14:75:07:62:3b:ba:e1:b9:66:c8:c4:f9:13:04:47:40:59: 49:ba:8c:5d:4a:f7:6c:80:da:78:cc:93:e4:15:73:54:4b:2c: 0a:9b:30:0c:77:c8:eb:e1:c4:26:85:e6:13:23:c1:af:9f:53: a1:97:71:05:3e:a8:b6:30:ea:96:ce:bf:fa:9d:0c:83:fb:63: bc:52:3e:63:8e:ab:a7:5e:82:fd:c0:05:9b:88:71:1e:3e:67: 8e:e0:d4:1f:50:5a:fd:b9:09:93:30:70:73:14:9d:f2:f8:bc: cb:e6:8a:6c:33:80:94:9c:6d:8b:73:61:4b:7a:dd:92:7c:62: c8:20:32:87:e8:35:3f:27:28:3a:38:c3:4e:bf:ac:86:fa:5c: 2a:b4:80:fd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gVKK1CGlzLX0LGwCb5L3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1MmExODJkOTFmNDU2ZDg1MDIxMGRiZjcyZGE3ZTQ3NWZi ZjNjMDgwHhcNMjYwMTAyMTYxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Y2ExYmEyNDgzYjkzNTM2OTc0ZDQ2ZDc3YzFiYmRkMmNlMjZiNTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzS1wUhG205/uy2Xr02uOpEOEaE4d vcJCWSKd1mbCrNHmdc3PfSPNiFOnEPbTZefPEcHWslUyM6q7HeesHbyGmQ+ht4lk aLp05KjlFT/pg4SRIgq2Y6WiYWRBqDJgP5WRgXqRGKF4bO3FQXF2a/6BAItpYjKx 6iIHa92gon1C2CTGCbLcqIttbRqetrXsCtXLJ7do9GgWUezuMuJX1k2nfYGxk1Vb BJjEYGIXsMBRpKFmwMMQ2+ArRL2rwjmNgR6jSmSsPliaYts/vYcmloQkgvriDByN c3nyVwX+LAtaFrNdA0XJmO3D+GluzQDRLOi5O5e+sLeyfIKFV2L8GArwAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEyhuiSDuTU2l01G13wbvdLOJrURMB8GA1UdIwQY MBaAFCUqGC2R9FbYUCENv3LafkdfvzwIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlNvWUxaSDBWdGhRSVEyX2N0cC1SMS1fUEFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9iNzdlNmEtYWNlMy00ZmYyLWIyMmEt NTgyZjlkMmUzOGIyLzEvVEtHNkpJTzVOVGFYVFViWGZCdTkwczRtdFJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9iNzdlNmEtYWNlMy00ZmYyLWIyMmEtNTgyZjlkMmUzOGIy LzEvSlNvWUxaSDBWdGhRSVEyX2N0cC1SMS1fUEFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUn7MA0G CSqGSIb3DQEBCwUAA4IBAQBQjpLT9XrD69ZuOODCK86/5ZS56xivYlQdyelRC/wY 7MwHn52gLpPx7uQH9R8Scxso7tBxsznKLSZNadfQrOX0v9H3KJElH47N/RVY1UDy WHr15owVDoRhpWrP2XCutD9Rqe001Z1U4e3vtpm9FHUHYju64blmyMT5EwRHQFlJ uoxdSvdsgNp4zJPkFXNUSywKmzAMd8jr4cQmheYTI8Gvn1Ohl3EFPqi2MOqWzr/6 nQyD+2O8Uj5jjqunXoL9wAWbiHEePmeO4NQfUFr9uQmTMHBzFJ3y+LzL5opsM4CU nG2Lc2FLet2SfGLIIDKH6DU/Jyg6OMNOv6yG+lwqtID9 -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:36 2026 by rpki-client