This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/ts8WeGjGg3wwHGhPi2mxnwkcFTw.roa File: ts8WeGjGg3wwHGhPi2mxnwkcFTw.roa (raw, json) Hash identifier: xg5lwYc2/XUF5liNH+ui3OtMGbwyGCJPDg20ByKgo34= Subject key identifier: B6:CF:16:78:68:C6:83:7C:30:1C:68:4F:8B:69:B1:9F:09:1C:15:3C Certificate issuer: /CN=39732dcd0c35426144f9f026754179dfaebe8958 Certificate serial: 019B7DCB4E67D1881FB1109FD51A732A30B2 Authority key identifier: 39:73:2D:CD:0C:35:42:61:44:F9:F0:26:75:41:79:DF:AE:BE:89:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXMtzQw1QmFE-fAmdUF5366-iVg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/ts8WeGjGg3wwHGhPi2mxnwkcFTw.roa Signing time: Fri 02 Jan 2026 08:20:34 +0000 ROA not before: Fri 02 Jan 2026 08:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201240 IP address blocks: 192.166.240.0/24 maxlen: 24 2a07:eec0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.mft rsync://rpki.ripe.net/repository/DEFAULT/OXMtzQw1QmFE-fAmdUF5366-iVg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:4e:67:d1:88:1f:b1:10:9f:d5:1a:73:2a:30:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39732dcd0c35426144f9f026754179dfaebe8958 Validity Not Before: Jan 2 08:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b6cf167868c6837c301c684f8b69b19f091c153c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:55:8b:70:40:4a:26:81:db:02:28:dd:8e:5d: 8b:f1:d3:7a:f5:f0:d1:32:c5:26:54:ef:8f:9d:a9: 80:14:d1:23:e8:9b:85:3e:58:e8:49:52:f2:d9:66: 6a:c3:e4:67:43:cb:b8:5a:c3:7a:74:dc:74:46:84: 00:73:b1:81:83:02:44:1e:45:24:98:47:a8:82:87: 0b:7c:f3:58:fc:bb:9f:07:c5:9d:d4:24:08:2a:35: 38:aa:d2:3b:e7:3e:e5:61:bf:10:87:a5:94:d1:e0: d8:2f:2e:4a:24:53:a9:fb:cd:f4:68:1c:e2:ae:9d: 89:9c:be:8b:57:55:46:06:eb:35:47:61:a8:73:76: 8d:9e:1d:e9:9d:44:92:f2:98:b6:fa:64:dd:ed:93: 0a:9e:0e:56:d5:25:88:4f:fb:26:22:dd:ec:eb:6e: bf:03:ae:55:11:a2:ba:3b:89:b4:f1:4e:07:9d:39: b5:54:ad:d6:24:e0:6a:a7:6a:5c:b2:3c:9e:6e:8b: 46:95:75:3a:bc:10:83:83:50:03:b6:d2:0d:e9:e5: f3:6c:c4:db:67:85:73:d8:12:97:6f:58:87:dd:43: 27:8e:f3:7d:4a:ea:5a:a4:ef:a2:e1:a9:78:5f:4f: 94:88:ea:09:31:3d:a8:68:83:32:e1:15:45:e6:05: cf:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:CF:16:78:68:C6:83:7C:30:1C:68:4F:8B:69:B1:9F:09:1C:15:3C X509v3 Authority Key Identifier: keyid:39:73:2D:CD:0C:35:42:61:44:F9:F0:26:75:41:79:DF:AE:BE:89:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXMtzQw1QmFE-fAmdUF5366-iVg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/ts8WeGjGg3wwHGhPi2mxnwkcFTw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.166.240.0/24 IPv6: 2a07:eec0::/29 Signature Algorithm: sha256WithRSAEncryption 64:83:eb:5e:56:31:dd:ec:8e:b0:f0:88:98:cc:ba:cf:d3:7f: 51:10:ea:71:01:3a:e1:94:67:b6:70:fb:3b:6c:74:7e:17:c0: 85:01:20:f7:73:f2:05:32:fa:77:97:de:63:48:64:cd:62:7f: e4:d4:aa:95:57:9a:d5:9f:52:e7:94:d9:cc:1d:b4:90:eb:f9: 1c:d6:bd:3b:a6:f7:6e:22:e9:e6:7d:6e:f5:74:dc:cf:c5:0c: 92:1b:d3:01:3e:23:01:af:50:8f:91:90:c4:95:a8:53:ed:69: 6f:e5:4b:ea:37:97:dc:04:98:50:1e:01:09:7b:af:61:fd:33: b1:38:1b:2c:c8:db:2b:c2:0d:b8:91:bf:3e:7d:fe:d5:c0:60: ba:a9:21:ae:85:2c:ef:d5:ae:6f:66:d9:99:7b:13:c2:87:3c: e5:71:43:e5:45:bb:e2:36:f5:03:9e:79:c6:af:64:89:38:bc: 90:75:74:9c:42:50:c8:59:ab:6e:14:3e:5b:8a:23:17:38:21: 13:04:0d:a5:73:53:92:eb:cd:9e:d4:b7:b4:a9:d9:90:7a:3b: b9:f3:14:03:41:9a:68:28:19:31:7a:fa:0a:d7:46:8e:d2:ed: f7:1a:bc:57:52:d3:e7:04:73:37:a8:cd:07:f6:03:35:e1:36: 6c:f1:17:67 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9y05n0YgfsRCf1RpzKjCyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5NzMyZGNkMGMzNTQyNjE0NGY5ZjAyNjc1NDE3OWRmYWVi ZTg5NTgwHhcNMjYwMTAyMDgyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNmNmMTY3ODY4YzY4MzdjMzAxYzY4NGY4YjY5YjE5ZjA5MWMxNTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFWLcEBKJoHbAijdjl2L8dN69fDR MsUmVO+PnamAFNEj6JuFPljoSVLy2WZqw+RnQ8u4WsN6dNx0RoQAc7GBgwJEHkUk mEeogocLfPNY/LufB8Wd1CQIKjU4qtI75z7lYb8Qh6WU0eDYLy5KJFOp+830aBzi rp2JnL6LV1VGBus1R2Goc3aNnh3pnUSS8pi2+mTd7ZMKng5W1SWIT/smIt3s626/ A65VEaK6O4m08U4HnTm1VK3WJOBqp2pcsjyebotGlXU6vBCDg1ADttIN6eXzbMTb Z4Vz2BKXb1iH3UMnjvN9SupapO+i4al4X0+UiOoJMT2oaIMy4RVF5gXPfwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLbPFnhoxoN8MBxoT4tpsZ8JHBU8MB8GA1UdIwQY MBaAFDlzLc0MNUJhRPnwJnVBed+uvolYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1hNdHpRdzFRbUZFLWZBbWRVRjUzNjYtaVZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yMzcxMDYtZDA4ZC00YWEwLWFjODIt ZjYwYWYyYTgyMDYwLzEvdHM4V2VHakdnM3d3SEdoUGkybXhud2tjRlR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8yMzcxMDYtZDA4ZC00YWEwLWFjODItZjYwYWYyYTgyMDYw LzEvT1hNdHpRdzFRbUZFLWZBbWRVRjUzNjYtaVZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwKbwMA0E AgACMAcDBQMqB+7AMA0GCSqGSIb3DQEBCwUAA4IBAQBkg+teVjHd7I6w8IiYzLrP 039REOpxATrhlGe2cPs7bHR+F8CFASD3c/IFMvp3l95jSGTNYn/k1KqVV5rVn1Ln lNnMHbSQ6/kc1r07pvduIunmfW71dNzPxQySG9MBPiMBr1CPkZDElahT7Wlv5Uvq N5fcBJhQHgEJe69h/TOxOBssyNsrwg24kb8+ff7VwGC6qSGuhSzv1a5vZtmZexPC hzzlcUPlRbviNvUDnnnGr2SJOLyQdXScQlDIWatuFD5biiMXOCETBA2lc1OS682e 1Le0qdmQeju58xQDQZpoKBkxevoK10aO0u33GrxXUtPnBHM3qM0H9gM14TZs8Rdn -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:03 2026 by rpki-client