This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/Tg_Dvwbj2a0giZ29M6thrWU6Se0.roa File: Tg_Dvwbj2a0giZ29M6thrWU6Se0.roa (raw, json) Hash identifier: nS+lJMCTTSoBDgGB69Pa9qofzjkEPFjXW3VnnoLfVLE= Subject key identifier: 4E:0F:C3:BF:06:E3:D9:AD:20:89:9D:BD:33:AB:61:AD:65:3A:49:ED Certificate issuer: /CN=e6dae3efe0a36797da43cbd58f6dff99c3bbdd8d Certificate serial: 019B7CECC5350B046BEED3607895A8236D4A Authority key identifier: E6:DA:E3:EF:E0:A3:67:97:DA:43:CB:D5:8F:6D:FF:99:C3:BB:DD:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/Tg_Dvwbj2a0giZ29M6thrWU6Se0.roa Signing time: Fri 02 Jan 2026 04:17:30 +0000 ROA not before: Fri 02 Jan 2026 04:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15474 IP address blocks: 130.208.0.0/16 maxlen: 16 2a00:c88::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:c5:35:0b:04:6b:ee:d3:60:78:95:a8:23:6d:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6dae3efe0a36797da43cbd58f6dff99c3bbdd8d Validity Not Before: Jan 2 04:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e0fc3bf06e3d9ad20899dbd33ab61ad653a49ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a7:0b:c1:ef:10:25:02:00:7b:85:3b:f9:d1: 56:b7:35:03:0d:cf:0e:3d:fe:d8:3a:9c:df:01:f0: 46:c7:f8:d3:d8:95:f1:6d:7f:de:f4:1b:c1:44:5d: ca:e4:42:b3:b6:b3:09:88:8b:80:ab:2a:f4:5a:98: cc:fa:d0:d1:02:cd:24:32:e5:64:62:24:41:b4:d5: 06:54:41:eb:f2:7f:45:54:58:d0:5f:af:0a:89:1e: 95:ca:88:76:94:79:cb:f5:5c:d2:7f:19:fc:13:62: 45:1b:53:1e:1c:a3:bb:ad:89:35:3d:4d:5f:b4:eb: bf:ca:52:63:69:a5:64:78:57:d0:33:b4:99:fa:8a: fd:27:22:02:6c:9b:01:c2:09:f1:ee:98:2e:30:1d: 71:29:cd:41:bd:e9:13:1a:94:b6:35:5e:53:6c:c1: e6:3a:3f:96:03:8d:24:28:42:3a:76:35:02:59:6b: 61:41:ef:d8:3c:01:a7:6c:0a:bd:21:58:27:d7:c9: 83:f0:45:a1:eb:43:9f:37:ad:0c:d5:a1:02:28:5e: 55:c3:b8:67:b1:b2:bb:7c:7a:b1:59:0c:25:56:0e: 21:c5:66:97:c0:00:9b:7c:3c:61:a9:e4:72:e6:6d: 6e:db:e3:57:f1:19:50:d9:dd:44:64:80:97:7b:7f: 1c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:0F:C3:BF:06:E3:D9:AD:20:89:9D:BD:33:AB:61:AD:65:3A:49:ED X509v3 Authority Key Identifier: keyid:E6:DA:E3:EF:E0:A3:67:97:DA:43:CB:D5:8F:6D:FF:99:C3:BB:DD:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/Tg_Dvwbj2a0giZ29M6thrWU6Se0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.208.0.0/16 IPv6: 2a00:c88::/32 Signature Algorithm: sha256WithRSAEncryption 63:09:4b:15:93:51:b0:b3:b7:b5:a7:e9:8e:b4:e4:4e:85:e6: 4f:1d:11:29:03:7c:ce:08:df:6d:75:ba:2b:cd:77:df:30:31: c5:9d:cf:df:78:0f:b3:48:1c:19:c3:a9:8a:63:ca:22:03:b9: 6a:ee:f7:ce:9b:76:e5:73:4f:70:7b:ca:d3:d1:2f:5c:bf:d7: c9:fa:7b:fa:34:41:6c:3c:4b:d9:1c:aa:68:cf:de:2a:f2:13: 62:60:77:f6:a8:20:ff:46:20:23:d5:ec:8d:ba:44:77:c2:82: 16:de:00:35:1b:fa:03:84:a2:35:59:6b:79:55:23:37:55:51: b1:ec:8d:f3:b7:d5:2b:e1:71:26:a4:93:f5:d8:c6:b4:79:08: 28:fd:df:2c:f9:42:02:71:dc:d3:54:42:27:e7:5f:77:23:35: a6:81:ad:e3:4f:2f:1b:c5:b8:7c:19:a1:02:da:16:fb:ea:73: 2b:dd:06:c0:4e:ba:98:d7:dc:3d:ba:8c:dc:b9:5a:5b:ba:73: 2a:b6:01:4b:7f:a8:27:43:dd:e3:c6:ee:b5:86:2a:cd:07:c0: 46:70:ee:1b:c1:d8:90:0d:49:8b:24:28:d9:5d:11:7e:c9:24: f0:9b:03:5f:67:20:dd:19:32:d3:7c:30:fb:8d:3d:d4:20:be: 3f:7f:35:b2 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt87MU1CwRr7tNgeJWoI21KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2ZGFlM2VmZTBhMzY3OTdkYTQzY2JkNThmNmRmZjk5YzNi YmRkOGQwHhcNMjYwMTAyMDQxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTBmYzNiZjA2ZTNkOWFkMjA4OTlkYmQzM2FiNjFhZDY1M2E0OWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqcLwe8QJQIAe4U7+dFWtzUDDc8O Pf7YOpzfAfBGx/jT2JXxbX/e9BvBRF3K5EKztrMJiIuAqyr0WpjM+tDRAs0kMuVk YiRBtNUGVEHr8n9FVFjQX68KiR6Vyoh2lHnL9VzSfxn8E2JFG1MeHKO7rYk1PU1f tOu/ylJjaaVkeFfQM7SZ+or9JyICbJsBwgnx7pguMB1xKc1BvekTGpS2NV5TbMHm Oj+WA40kKEI6djUCWWthQe/YPAGnbAq9IVgn18mD8EWh60OfN60M1aECKF5Vw7hn sbK7fHqxWQwlVg4hxWaXwACbfDxhqeRy5m1u2+NX8RlQ2d1EZICXe38cEQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFE4Pw78G49mtIImdvTOrYa1lOkntMB8GA1UdIwQY MBaAFOba4+/go2eX2kPL1Y9t/5nDu92NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXRyajctQ2paNWZhUTh2VmoyM19tY083M1kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9kMTI1ZmQtYzM5Yy00MjcyLThjYWQt NmMyZmZiNGI2MWU2LzEvVGdfRHZ3YmoyYTBnaVoyOU02dGhyV1U2U2UwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9kMTI1ZmQtYzM5Yy00MjcyLThjYWQtNmMyZmZiNGI2MWU2 LzEvNXRyajctQ2paNWZhUTh2VmoyM19tY083M1kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDALBAIAATAFAwMAgtAwDQQC AAIwBwMFACoADIgwDQYJKoZIhvcNAQELBQADggEBAGMJSxWTUbCzt7Wn6Y605E6F 5k8dESkDfM4I3211uivNd98wMcWdz994D7NIHBnDqYpjyiIDuWru986bduVzT3B7 ytPRL1y/18n6e/o0QWw8S9kcqmjP3iryE2Jgd/aoIP9GICPV7I26RHfCghbeADUb +gOEojVZa3lVIzdVUbHsjfO31SvhcSakk/XYxrR5CCj93yz5QgJx3NNUQifnX3cj NaaBreNPLxvFuHwZoQLaFvvqcyvdBsBOupjX3D26jNy5Wlu6cyq2AUt/qCdD3ePG 7rWGKs0HwEZw7hvB2JANSYskKNldEX7JJPCbA19nIN0ZMtN8MPuNPdQgvj9/NbI= -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:36 2026 by rpki-client