This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/TJRxaYOzjaCJSFBaaOb3EycksAs.roa File: TJRxaYOzjaCJSFBaaOb3EycksAs.roa (raw, json) Hash identifier: eOSY9kDDMBMljbLW+yYUj3pzdf96TWtB5cU/Op3wa8A= Subject key identifier: 4C:94:71:69:83:B3:8D:A0:89:48:50:5A:68:E6:F7:13:27:24:B0:0B Certificate issuer: /CN=117a04a927019c3ce2d0c9db3a314977a0a7b35c Certificate serial: 019B78A2AAD0C2D03A391060293BD46E9CE3 Authority key identifier: 11:7A:04:A9:27:01:9C:3C:E2:D0:C9:DB:3A:31:49:77:A0:A7:B3:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXoEqScBnDzi0MnbOjFJd6Cns1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/TJRxaYOzjaCJSFBaaOb3EycksAs.roa Signing time: Thu 01 Jan 2026 08:18:05 +0000 ROA not before: Thu 01 Jan 2026 08:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211298 IP address blocks: 87.236.176.0/24 maxlen: 24 185.247.137.0/24 maxlen: 24 193.163.125.0/24 maxlen: 24 2a06:4880::/32 maxlen: 32 2a06:4881::/32 maxlen: 32 2a06:4882::/32 maxlen: 32 2a06:4883::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.mft rsync://rpki.ripe.net/repository/DEFAULT/EXoEqScBnDzi0MnbOjFJd6Cns1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:aa:d0:c2:d0:3a:39:10:60:29:3b:d4:6e:9c:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=117a04a927019c3ce2d0c9db3a314977a0a7b35c Validity Not Before: Jan 1 08:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c94716983b38da08948505a68e6f7132724b00b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d8:f2:ac:11:47:6b:51:21:6e:a8:45:b3:56: ec:d5:5c:be:f0:8c:63:58:fb:3a:fd:9d:80:4d:8d: 06:99:6e:3c:2e:0c:a7:f3:9f:50:f8:3c:96:09:58: 92:7c:31:b9:85:a4:e4:9e:e6:9f:8d:4a:ca:ce:21: 74:ef:49:ef:ca:fb:7a:0a:e6:48:97:dc:80:4a:7b: 0b:db:f1:4f:5e:21:77:3d:1b:36:67:d6:0d:c4:cf: f4:9e:ad:4c:d6:1a:bf:5a:86:6a:e8:f8:a9:4c:83: d4:a9:30:80:d9:61:62:49:c6:e5:5b:23:0d:fa:ba: b0:4d:f3:9f:22:e6:54:fc:de:99:5d:76:85:a9:b3: d5:46:81:2f:96:ef:6b:30:da:19:68:aa:00:6c:c5: 4f:40:47:97:ec:bc:ec:ae:20:40:02:49:89:74:16: a7:c4:c1:12:49:f4:d5:40:bb:77:4f:c8:b9:31:b7: fe:60:d1:16:e1:8a:bf:3e:2e:78:ac:53:c5:ee:ea: da:47:f5:5a:0d:7e:e3:12:d2:10:27:4e:64:72:33: 69:55:20:c9:6c:cb:14:4e:68:ae:c3:7d:89:8f:fe: 58:cb:a3:08:38:f1:81:eb:09:97:d4:cb:d1:1c:85: 6c:c0:6a:d9:e7:ed:d8:41:64:9d:d6:b7:87:cd:4b: 6a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:94:71:69:83:B3:8D:A0:89:48:50:5A:68:E6:F7:13:27:24:B0:0B X509v3 Authority Key Identifier: keyid:11:7A:04:A9:27:01:9C:3C:E2:D0:C9:DB:3A:31:49:77:A0:A7:B3:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXoEqScBnDzi0MnbOjFJd6Cns1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/TJRxaYOzjaCJSFBaaOb3EycksAs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.236.176.0/24 185.247.137.0/24 193.163.125.0/24 IPv6: 2a06:4880::/30 Signature Algorithm: sha256WithRSAEncryption 33:72:8b:36:fa:0b:e3:46:c1:55:5d:cd:72:05:ba:a2:47:5d: 8a:bf:c0:f8:2e:8a:7f:82:66:8e:17:e8:7b:df:41:c6:3d:c1: f9:05:23:68:12:1c:82:a5:98:bd:40:dc:c7:d2:16:1e:c1:e6: 08:2f:8a:91:d2:bd:f6:98:39:aa:d6:62:b5:a3:0c:ec:47:cb: 6c:a1:86:b3:92:ca:35:78:39:72:b2:45:7c:2c:d0:df:56:be: 61:cf:78:d5:98:f3:e0:65:d5:36:80:a9:46:db:9c:f9:76:bc: 59:c5:96:ad:22:bd:3f:d0:46:11:f6:c3:c4:ec:13:a5:44:f7: d5:34:f7:8d:16:d6:f2:73:d5:b2:2b:42:17:ff:95:78:76:bd: 7d:6c:95:f4:14:39:9d:eb:b7:a8:e0:c3:35:94:9e:05:13:a2: 08:7a:b1:7d:b6:74:a1:ee:81:10:99:e2:f3:a5:56:a1:85:5b: a6:69:83:69:24:8e:24:27:b9:47:d1:e6:87:0e:45:1b:ca:32: ca:49:a9:1b:47:22:51:32:68:75:2a:04:11:ca:9b:e6:90:99: 78:36:72:3f:62:ba:76:ec:0e:c9:1e:3d:be:dd:a5:2e:d6:ec: 09:89:ef:2c:1c:8d:73:eb:64:37:d3:38:81:eb:53:85:8c:f4: ec:f2:2a:74 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt4oqrQwtA6ORBgKTvUbpzjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExN2EwNGE5MjcwMTljM2NlMmQwYzlkYjNhMzE0OTc3YTBh N2IzNWMwHhcNMjYwMTAxMDgxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Yzk0NzE2OTgzYjM4ZGEwODk0ODUwNWE2OGU2ZjcxMzI3MjRiMDBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdjyrBFHa1EhbqhFs1bs1Vy+8Ixj WPs6/Z2ATY0GmW48Lgyn859Q+DyWCViSfDG5haTknuafjUrKziF070nvyvt6CuZI l9yASnsL2/FPXiF3PRs2Z9YNxM/0nq1M1hq/WoZq6PipTIPUqTCA2WFiScblWyMN +rqwTfOfIuZU/N6ZXXaFqbPVRoEvlu9rMNoZaKoAbMVPQEeX7LzsriBAAkmJdBan xMESSfTVQLt3T8i5Mbf+YNEW4Yq/Pi54rFPF7uraR/VaDX7jEtIQJ05kcjNpVSDJ bMsUTmiuw32Jj/5Yy6MIOPGB6wmX1MvRHIVswGrZ5+3YQWSd1reHzUtqSwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFEyUcWmDs42giUhQWmjm9xMnJLALMB8GA1UdIwQY MBaAFBF6BKknAZw84tDJ2zoxSXegp7NcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVhvRXFTY0JuRHppME1uYk9qRkpkNkNuczF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85ZGU5OGUtMTdiNC00N2ZmLWE5Yzkt MTFjMzAwOWY0NGRmLzEvVEpSeGFZT3pqYUNKU0ZCYWFPYjNFeWNrc0FzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy85ZGU5OGUtMTdiNC00N2ZmLWE5YzktMTFjMzAwOWY0NGRm LzEvRVhvRXFTY0JuRHppME1uYk9qRkpkNkNuczF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAV+ywAwQA ufeJAwQAwaN9MA0EAgACMAcDBQIqBkiAMA0GCSqGSIb3DQEBCwUAA4IBAQAzcos2 +gvjRsFVXc1yBbqiR12Kv8D4Lop/gmaOF+h730HGPcH5BSNoEhyCpZi9QNzH0hYe weYIL4qR0r32mDmq1mK1owzsR8tsoYazkso1eDlyskV8LNDfVr5hz3jVmPPgZdU2 gKlG25z5drxZxZatIr0/0EYR9sPE7BOlRPfVNPeNFtbyc9WyK0IX/5V4dr19bJX0 FDmd67eo4MM1lJ4FE6IIerF9tnSh7oEQmeLzpVahhVumaYNpJI4kJ7lH0eaHDkUb yjLKSakbRyJRMmh1KgQRypvmkJl4NnI/Yrp27A7JHj2+3aUu1uwJie8sHI1z62Q3 0ziB61OFjPTs8ip0 -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:34 2026 by rpki-client