This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/TM2u3nE4U4gt579zKk1egxcYwGw.roa File: TM2u3nE4U4gt579zKk1egxcYwGw.roa (raw, json) Hash identifier: XOA83pwjmnyrd8JcXEc6+qU+kfl85cy7kc2/rS23hZc= Subject key identifier: 4C:CD:AE:DE:71:38:53:88:2D:E7:BF:73:2A:4D:5E:83:17:18:C0:6C Certificate issuer: /CN=068cb85bc4e9e4b732e957f08aa1c0237aadc47f Certificate serial: 019B7D5CC93124B408D01CEBB23823A02EB9 Authority key identifier: 06:8C:B8:5B:C4:E9:E4:B7:32:E9:57:F0:8A:A1:C0:23:7A:AD:C4:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/TM2u3nE4U4gt579zKk1egxcYwGw.roa Signing time: Fri 02 Jan 2026 06:19:51 +0000 ROA not before: Fri 02 Jan 2026 06:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29686 IP address blocks: 194.0.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:c9:31:24:b4:08:d0:1c:eb:b2:38:23:a0:2e:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=068cb85bc4e9e4b732e957f08aa1c0237aadc47f Validity Not Before: Jan 2 06:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ccdaede713853882de7bf732a4d5e831718c06c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:dc:e0:2a:e5:21:de:71:3c:18:94:95:11:93: e4:f0:98:15:37:3b:23:f9:85:e2:55:07:a9:9e:2a: 18:25:a9:18:3c:56:ca:41:74:cf:56:72:58:89:6a: ed:94:19:62:ff:fb:b2:9f:ef:8d:ca:61:4e:06:c9: 98:c2:79:10:5a:dd:1e:26:71:53:d4:00:28:66:08: 0a:9f:48:f0:2e:54:48:51:ef:9e:fa:6c:79:cf:21: f2:8c:8c:4d:05:af:5d:66:ef:47:24:31:14:d0:c5: 1e:3b:c1:34:be:4a:32:16:c4:b5:57:0c:e6:6a:c3: 71:83:8d:6f:7a:a5:e5:7b:92:88:4a:0f:9e:0d:53: 94:de:69:99:1d:04:e9:26:79:a1:e0:50:40:60:0a: 81:bc:be:58:01:91:5c:84:54:ff:bb:c4:d4:51:c6: 49:95:6a:2d:45:31:e0:db:ba:81:98:49:16:a7:a0: fe:eb:dc:45:b6:ce:7a:90:1a:76:3a:53:1d:de:b1: ba:bc:f0:5a:07:86:be:19:fb:60:bc:bd:d7:47:fb: 57:e2:e2:b9:4a:51:a9:83:b0:3b:f9:cf:64:ca:4f: c0:95:a4:76:ac:41:4d:53:6c:ff:49:63:6c:30:af: 60:c1:fd:be:c2:1b:37:07:fd:93:b2:b3:44:48:d7: c1:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:CD:AE:DE:71:38:53:88:2D:E7:BF:73:2A:4D:5E:83:17:18:C0:6C X509v3 Authority Key Identifier: keyid:06:8C:B8:5B:C4:E9:E4:B7:32:E9:57:F0:8A:A1:C0:23:7A:AD:C4:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/TM2u3nE4U4gt579zKk1egxcYwGw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.0.208.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:88:62:a0:fb:a1:01:63:81:07:14:b9:90:0e:19:a2:35:44: 92:8f:4b:92:e7:73:b8:79:f5:bc:ba:2e:ab:fe:4f:58:0b:d3: 33:73:54:03:18:9f:6a:1a:fd:54:fd:07:9a:69:20:5e:37:a4: 49:20:93:1a:a7:bb:0c:ae:1a:8c:d3:85:1d:b1:7e:0c:ad:14: 38:97:3c:a3:59:ac:88:16:86:20:79:b8:e4:6f:c5:a8:19:02: 89:b3:94:96:85:8c:44:b2:d9:9a:16:a6:82:7b:ba:ca:d1:19: a3:ee:7f:0b:6f:f2:5a:33:8d:3e:f7:02:92:8c:9b:b0:99:f8: d4:29:06:16:dc:2e:b7:3c:f0:d0:8a:69:0e:9c:6a:7f:aa:d7: 19:dd:57:76:03:31:85:98:5e:e8:db:3a:8f:b9:96:f2:2e:59: b4:3d:73:0d:00:75:23:2e:88:89:f5:5d:e8:05:76:38:3f:22: 2d:be:9f:38:a7:0c:97:1b:bc:a7:f0:82:ce:1d:4a:fe:83:d5: 49:4d:fc:6f:74:48:06:dd:af:d3:36:14:77:d6:db:3c:e6:53: 5c:f3:e3:26:e5:58:f8:b5:5a:2f:37:9e:05:d5:54:a6:14:fb: b2:3a:e6:88:a5:16:f4:55:cd:71:5b:23:31:7d:16:6f:68:32: 53:92:e8:0f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XMkxJLQI0BzrsjgjoC65MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2OGNiODViYzRlOWU0YjczMmU5NTdmMDhhYTFjMDIzN2Fh ZGM0N2YwHhcNMjYwMTAyMDYxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Y2NkYWVkZTcxMzg1Mzg4MmRlN2JmNzMyYTRkNWU4MzE3MThjMDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtzgKuUh3nE8GJSVEZPk8JgVNzsj +YXiVQepnioYJakYPFbKQXTPVnJYiWrtlBli//uyn++NymFOBsmYwnkQWt0eJnFT 1AAoZggKn0jwLlRIUe+e+mx5zyHyjIxNBa9dZu9HJDEU0MUeO8E0vkoyFsS1Vwzm asNxg41veqXle5KISg+eDVOU3mmZHQTpJnmh4FBAYAqBvL5YAZFchFT/u8TUUcZJ lWotRTHg27qBmEkWp6D+69xFts56kBp2OlMd3rG6vPBaB4a+GftgvL3XR/tX4uK5 SlGpg7A7+c9kyk/AlaR2rEFNU2z/SWNsMK9gwf2+whs3B/2TsrNESNfBJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEzNrt5xOFOILee/cypNXoMXGMBsMB8GA1UdIwQY MBaAFAaMuFvE6eS3MulX8IqhwCN6rcR/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm95NFc4VHA1TGN5NlZmd2lxSEFJM3F0eEg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8xOGM4NTYtMThiMS00Mzc1LWJjYWMt MTlmMjJlZDYxM2E1LzEvVE0ydTNuRTRVNGd0NTc5ektrMWVneGNZd0d3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8xOGM4NTYtMThiMS00Mzc1LWJjYWMtMTlmMjJlZDYxM2E1 LzEvQm95NFc4VHA1TGN5NlZmd2lxSEFJM3F0eEg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgDQMA0G CSqGSIb3DQEBCwUAA4IBAQCLiGKg+6EBY4EHFLmQDhmiNUSSj0uS53O4efW8ui6r /k9YC9Mzc1QDGJ9qGv1U/QeaaSBeN6RJIJMap7sMrhqM04UdsX4MrRQ4lzyjWayI FoYgebjkb8WoGQKJs5SWhYxEstmaFqaCe7rK0Rmj7n8Lb/JaM40+9wKSjJuwmfjU KQYW3C63PPDQimkOnGp/qtcZ3Vd2AzGFmF7o2zqPuZbyLlm0PXMNAHUjLoiJ9V3o BXY4PyItvp84pwyXG7yn8ILOHUr+g9VJTfxvdEgG3a/TNhR31ts85lNc8+Mm5Vj4 tVovN54F1VSmFPuyOuaIpRb0Vc1xWyMxfRZvaDJTkugP -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:29 2026 by rpki-client