This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/tjcd2B2MoHez1-FLdOBN_2wuTBg.roa File: tjcd2B2MoHez1-FLdOBN_2wuTBg.roa (raw, json) Hash identifier: nHwqBLL+1vMmNTrdugL+2uUX5fBDVoNX8Hv9HhSFUYw= Subject key identifier: B6:37:1D:D8:1D:8C:A0:77:B3:D7:E1:4B:74:E0:4D:FF:6C:2E:4C:18 Certificate issuer: /CN=489c263e818486cfd831c245ddfacca91fbd81c0 Certificate serial: 019B7AC887B472E5A0F7DC1D7C08CF275703 Authority key identifier: 48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/tjcd2B2MoHez1-FLdOBN_2wuTBg.roa Signing time: Thu 01 Jan 2026 18:18:40 +0000 ROA not before: Thu 01 Jan 2026 18:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209281 IP address blocks: 93.115.196.0/22 maxlen: 22 137.59.56.0/23 maxlen: 23 185.20.108.0/22 maxlen: 22 185.107.0.0/22 maxlen: 22 185.134.189.0/24 maxlen: 24 185.216.188.0/23 maxlen: 23 185.216.188.0/24 maxlen: 24 185.216.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:87:b4:72:e5:a0:f7:dc:1d:7c:08:cf:27:57:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=489c263e818486cfd831c245ddfacca91fbd81c0 Validity Not Before: Jan 1 18:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b6371dd81d8ca077b3d7e14b74e04dff6c2e4c18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:99:0b:02:d5:ea:af:ac:b8:6c:ca:78:23:54: 63:78:05:ef:66:25:38:a0:7a:06:f6:86:e7:ca:64: 53:cf:12:ed:de:4b:ac:db:95:95:8a:25:8b:f9:4d: 43:2e:ce:07:93:85:61:16:33:3a:29:69:03:29:3a: fd:e8:06:1c:29:26:20:9e:5c:46:ae:62:26:53:89: b0:3d:ac:34:f8:e1:61:e0:d6:da:fc:d9:43:92:b1: e4:68:4d:dc:3b:e5:ce:26:f9:ef:26:e5:d1:c4:d1: 45:d1:33:b9:aa:a4:fa:81:14:3c:03:15:80:65:23: b2:01:2b:ec:1b:17:02:ee:e6:cd:b2:51:10:c3:ed: c6:9f:aa:2e:cd:0b:d8:98:4a:ca:ce:29:41:58:6f: e4:88:ba:3f:b2:47:2f:2b:f3:64:40:59:68:ad:a8: 9e:4b:b4:92:39:4e:a7:a3:66:25:33:76:66:e8:fd: a3:7d:52:c5:57:50:9a:30:61:24:35:c1:80:0b:79: cf:0e:30:a9:ee:35:11:b7:55:d1:0a:c6:40:e0:83: 8b:7d:5b:2c:a4:eb:e3:8b:8b:35:ff:a7:bf:e6:06: 9c:a1:28:ba:e5:2c:bb:9b:63:d8:fe:16:5d:e2:9e: 87:87:ec:94:1c:44:e6:30:c9:9a:b0:7d:81:be:7f: 6c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:37:1D:D8:1D:8C:A0:77:B3:D7:E1:4B:74:E0:4D:FF:6C:2E:4C:18 X509v3 Authority Key Identifier: keyid:48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/tjcd2B2MoHez1-FLdOBN_2wuTBg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.115.196.0/22 137.59.56.0/23 185.20.108.0/22 185.107.0.0/22 185.134.189.0/24 185.216.188.0/23 Signature Algorithm: sha256WithRSAEncryption d1:85:81:1b:81:5b:c6:c0:10:99:56:90:2a:49:34:69:2b:d7: 3a:05:5d:4e:15:09:5c:a8:89:21:ec:77:fb:79:e4:2c:0e:2a: 84:d1:cb:ea:f9:ef:84:4a:1f:a0:21:fb:bd:e7:19:81:bd:53: f4:b9:da:18:4e:fc:31:48:b3:db:2d:5d:99:bc:83:b8:21:4c: a8:e2:d7:1c:3a:e3:c9:06:b7:c0:32:35:ed:86:02:30:03:10: e3:55:88:b9:5f:ad:39:bb:a9:1c:bc:9c:e5:66:e8:20:d0:24: 00:98:1c:d9:e6:5f:8c:f5:6e:b1:5e:a5:16:26:94:33:0f:f8: 1f:4b:d7:89:72:cb:51:59:d2:ba:43:c1:be:50:33:61:5e:a2: 99:5c:7c:8b:86:23:e3:be:f5:73:fd:1f:ca:bf:55:11:38:8d: 4e:c4:81:fc:ea:f7:c1:ea:f0:dd:c3:0d:7a:5a:9c:ef:f1:3f: 3b:76:e0:d4:9c:84:a0:fd:95:12:27:cc:e2:9e:06:04:a4:25: 5d:41:95:d8:82:ab:0d:6f:e7:d8:cc:c8:7c:69:05:94:6a:d6: 62:f3:31:20:b9:c2:51:21:fc:14:85:45:23:4d:fb:d1:0d:09: 58:a8:43:45:c3:4c:8a:cf:6e:62:77:b9:c3:5b:a2:e0:79:f4: 19:6f:62:12 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt6yIe0cuWg99wdfAjPJ1cDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4OWMyNjNlODE4NDg2Y2ZkODMxYzI0NWRkZmFjY2E5MWZi ZDgxYzAwHhcNMjYwMTAxMTgxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjM3MWRkODFkOGNhMDc3YjNkN2UxNGI3NGUwNGRmZjZjMmU0YzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5kLAtXqr6y4bMp4I1RjeAXvZiU4 oHoG9obnymRTzxLt3kus25WViiWL+U1DLs4Hk4VhFjM6KWkDKTr96AYcKSYgnlxG rmImU4mwPaw0+OFh4Nba/NlDkrHkaE3cO+XOJvnvJuXRxNFF0TO5qqT6gRQ8AxWA ZSOyASvsGxcC7ubNslEQw+3Gn6ouzQvYmErKzilBWG/kiLo/skcvK/NkQFloraie S7SSOU6no2YlM3Zm6P2jfVLFV1CaMGEkNcGAC3nPDjCp7jURt1XRCsZA4IOLfVss pOvji4s1/6e/5gacoSi65Sy7m2PY/hZd4p6Hh+yUHETmMMmasH2Bvn9sTQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFLY3HdgdjKB3s9fhS3TgTf9sLkwYMB8GA1UdIwQY MBaAFEicJj6BhIbP2DHCRd36zKkfvYHAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0p3bVBvR0Voc19ZTWNKRjNmck1xUi05Z2NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8xMTdmYzktN2E2Mi00NjgyLWJmYmMt MmNhM2FhNzFlYzVmLzEvdGpjZDJCMk1vSGV6MS1GTGRPQk5fMnd1VEJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi8xMTdmYzktN2E2Mi00NjgyLWJmYmMtMmNhM2FhNzFlYzVm LzEvU0p3bVBvR0Voc19ZTWNKRjNmck1xUi05Z2NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCXXPEAwQB iTs4AwQCuRRsAwQCuWsAAwQAuYa9AwQBudi8MA0GCSqGSIb3DQEBCwUAA4IBAQDR hYEbgVvGwBCZVpAqSTRpK9c6BV1OFQlcqIkh7Hf7eeQsDiqE0cvq+e+ESh+gIfu9 5xmBvVP0udoYTvwxSLPbLV2ZvIO4IUyo4tccOuPJBrfAMjXthgIwAxDjVYi5X605 u6kcvJzlZugg0CQAmBzZ5l+M9W6xXqUWJpQzD/gfS9eJcstRWdK6Q8G+UDNhXqKZ XHyLhiPjvvVz/R/Kv1UROI1OxIH86vfB6vDdww16Wpzv8T87duDUnISg/ZUSJ8zi ngYEpCVdQZXYgqsNb+fYzMh8aQWUatZi8zEgucJRIfwUhUUjTfvRDQlYqENFw0yK z25id7nDW6LgefQZb2IS -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:41 2026 by rpki-client