This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/0tgi-bedT7M90yonGJNHWcEtkks.roa File: 0tgi-bedT7M90yonGJNHWcEtkks.roa (raw, json) Hash identifier: jx45i7P1C49PseKbfYGkTcUnQdu8nI1iX163v3oChsI= Subject key identifier: D2:D8:22:F9:B7:9D:4F:B3:3D:D3:2A:27:18:93:47:59:C1:2D:92:4B Certificate issuer: /CN=167ac5231a0d7bc5824590a0b2f621ede984770c Certificate serial: 019B7B367AFFD7B9296A1D07B8EEBB94F10C Authority key identifier: 16:7A:C5:23:1A:0D:7B:C5:82:45:90:A0:B2:F6:21:ED:E9:84:77:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/0tgi-bedT7M90yonGJNHWcEtkks.roa Signing time: Thu 01 Jan 2026 20:18:46 +0000 ROA not before: Thu 01 Jan 2026 20:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206289 IP address blocks: 185.189.248.0/22 maxlen: 22 185.189.248.0/23 maxlen: 23 185.189.248.0/24 maxlen: 24 185.189.249.0/24 maxlen: 24 185.189.250.0/23 maxlen: 23 185.189.250.0/24 maxlen: 24 185.189.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:7a:ff:d7:b9:29:6a:1d:07:b8:ee:bb:94:f1:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=167ac5231a0d7bc5824590a0b2f621ede984770c Validity Not Before: Jan 1 20:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2d822f9b79d4fb33dd32a2718934759c12d924b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:76:d1:50:de:5a:69:12:02:c2:09:a3:1c:09: 9c:7a:1c:2b:d5:e6:da:5f:0e:2e:1b:d7:95:77:5c: 59:b3:d0:1c:df:22:90:e0:af:53:e0:27:b8:4f:51: ae:cd:09:71:53:30:74:d7:89:72:8b:27:de:45:00: 40:6a:22:3e:fe:5f:a7:ad:fd:55:50:d9:d6:98:12: ae:5e:b5:52:80:ef:f7:0d:98:2b:c5:6c:43:bf:88: e8:d2:9b:9f:21:25:a0:f2:ff:d9:03:b4:b9:15:5a: 5f:22:1b:83:7f:d4:15:3c:f3:45:5c:5f:33:e6:94: 9e:c3:d7:86:e1:17:f2:77:91:d6:e1:88:d2:6b:c0: f4:fd:e9:23:80:59:d7:fa:74:7a:e8:6b:ad:1c:7e: 23:8b:9c:ec:d7:ca:f6:74:c5:32:99:98:9b:7a:cf: 39:56:dd:c2:ba:62:f9:60:4b:3f:9b:57:c8:29:0f: 32:b3:26:06:ec:2a:92:2c:35:1d:af:af:fc:da:4a: 67:ed:b3:41:74:7e:98:b5:17:69:4a:b6:5d:98:67: 83:ea:d3:02:94:de:85:b4:e3:fa:66:ef:1f:c3:11: 89:57:01:22:0c:04:6b:86:df:76:08:c1:61:4a:04: 2c:e1:9f:33:5a:31:ed:9d:bc:19:91:fc:c1:3b:4d: a4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:D8:22:F9:B7:9D:4F:B3:3D:D3:2A:27:18:93:47:59:C1:2D:92:4B X509v3 Authority Key Identifier: keyid:16:7A:C5:23:1A:0D:7B:C5:82:45:90:A0:B2:F6:21:ED:E9:84:77:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/0tgi-bedT7M90yonGJNHWcEtkks.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.189.248.0/22 Signature Algorithm: sha256WithRSAEncryption 53:d1:ca:63:a6:d2:f6:9d:88:27:05:c7:d5:ff:30:71:c5:fc: e6:42:c3:41:5c:6a:bd:43:75:04:f4:a5:30:a6:f5:ec:c0:85: 48:ac:ed:d5:86:72:ff:05:49:b8:fa:ed:25:fd:2e:0e:7b:2d: 45:d0:c8:c6:00:b9:2a:1d:0b:22:92:3c:81:84:ff:b5:f0:dc: df:9d:c9:3f:b3:99:3a:a9:73:9d:df:bd:a3:42:8b:b8:41:12: 45:af:4b:19:bc:d5:5d:4e:05:c4:15:5a:a0:7c:bc:0a:6e:25: 0e:41:7a:ff:2e:c3:07:a7:ad:cb:5a:0e:0d:15:38:3e:0a:7c: 0e:3d:b8:90:89:00:01:d6:53:b5:49:3e:1d:85:0b:13:94:ef: c6:64:76:2b:f5:f9:76:53:b7:cb:80:2c:b9:16:cb:a1:e1:89: 24:d1:28:b9:fe:10:3c:9a:f0:b8:6b:75:77:ff:4d:f4:dd:58: 80:0b:c6:90:26:87:4a:a0:d8:f0:47:17:9f:03:e6:30:89:9c: 6d:1b:ba:be:31:2d:47:69:46:7c:64:a2:46:bf:d6:d2:ab:ec: 31:36:12:6e:e4:f2:a6:84:8f:9d:95:38:33:41:fd:b6:c3:3d: 11:e5:0d:5d:79:14:90:11:fd:24:66:82:02:85:59:45:57:32: 1a:ad:73:64 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nnr/17kpah0HuO67lPEMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2N2FjNTIzMWEwZDdiYzU4MjQ1OTBhMGIyZjYyMWVkZTk4 NDc3MGMwHhcNMjYwMTAxMjAxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmQ4MjJmOWI3OWQ0ZmIzM2RkMzJhMjcxODkzNDc1OWMxMmQ5MjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HbRUN5aaRICwgmjHAmcehwr1eba Xw4uG9eVd1xZs9Ac3yKQ4K9T4Ce4T1GuzQlxUzB014lyiyfeRQBAaiI+/l+nrf1V UNnWmBKuXrVSgO/3DZgrxWxDv4jo0pufISWg8v/ZA7S5FVpfIhuDf9QVPPNFXF8z 5pSew9eG4Rfyd5HW4YjSa8D0/ekjgFnX+nR66GutHH4ji5zs18r2dMUymZibes85 Vt3CumL5YEs/m1fIKQ8ysyYG7CqSLDUdr6/82kpn7bNBdH6YtRdpSrZdmGeD6tMC lN6FtOP6Zu8fwxGJVwEiDARrht92CMFhSgQs4Z8zWjHtnbwZkfzBO02k4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNLYIvm3nU+zPdMqJxiTR1nBLZJLMB8GA1UdIwQY MBaAFBZ6xSMaDXvFgkWQoLL2Ie3phHcMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm5yRkl4b05lOFdDUlpDZ3N2WWg3ZW1FZHd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS82MTczOGUtMzk3Ny00OTVlLWJhMWEt ODAzNWYyZGZjMWY0LzEvMHRnaS1iZWRUN005MHlvbkdKTkhXY0V0a2tzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS82MTczOGUtMzk3Ny00OTVlLWJhMWEtODAzNWYyZGZjMWY0 LzEvRm5yRkl4b05lOFdDUlpDZ3N2WWg3ZW1FZHd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCub34MA0G CSqGSIb3DQEBCwUAA4IBAQBT0cpjptL2nYgnBcfV/zBxxfzmQsNBXGq9Q3UE9KUw pvXswIVIrO3VhnL/BUm4+u0l/S4Oey1F0MjGALkqHQsikjyBhP+18Nzfnck/s5k6 qXOd372jQou4QRJFr0sZvNVdTgXEFVqgfLwKbiUOQXr/LsMHp63LWg4NFTg+CnwO PbiQiQAB1lO1ST4dhQsTlO/GZHYr9fl2U7fLgCy5Fsuh4Ykk0Si5/hA8mvC4a3V3 /0303ViAC8aQJodKoNjwRxefA+YwiZxtG7q+MS1HaUZ8ZKJGv9bSq+wxNhJu5PKm hI+dlTgzQf22wz0R5Q1deRSQEf0kZoIChVlFVzIarXNk -----END CERTIFICATE-----Generated at Mon Feb 9 19:38:35 2026 by rpki-client