This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/tKouNcsrj6LFfH9-uUyr--AaPDI.roa File: tKouNcsrj6LFfH9-uUyr--AaPDI.roa (raw, json) Hash identifier: Sa3BqkF4uHobWWVxH+Tt4H+XaVgWBqx8peI9K1PSJ7c= Subject key identifier: B4:AA:2E:35:CB:2B:8F:A2:C5:7C:7F:7E:B9:4C:AB:FB:E0:1A:3C:32 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019C249EC4D4C42EE32763EDEEBFEEE1E7E6 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/tKouNcsrj6LFfH9-uUyr--AaPDI.roa Signing time: Tue 03 Feb 2026 17:48:30 +0000 ROA not before: Tue 03 Feb 2026 17:48:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208885 IP address blocks: 84.21.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:24:9e:c4:d4:c4:2e:e3:27:63:ed:ee:bf:ee:e1:e7:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Feb 3 17:48:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4aa2e35cb2b8fa2c57c7f7eb94cabfbe01a3c32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4c:f0:04:34:85:af:09:ea:20:75:64:85:dd: cd:b4:9e:01:a7:3a:ee:8e:1b:6e:c9:1a:98:56:94: cb:b9:78:c8:4e:50:52:b8:52:3a:d4:18:8f:d7:c8: ac:42:33:be:96:db:32:b8:38:62:21:32:81:08:bf: dd:11:9b:9f:82:c8:45:42:82:eb:41:93:4b:e1:5a: 2a:07:e4:a9:92:c4:d5:7b:6b:f2:24:d9:60:62:56: 87:06:92:97:9f:77:94:da:e8:52:fe:ef:eb:dc:9a: 60:b9:70:f0:82:8e:9c:97:c5:d7:98:56:cf:d9:60: f1:be:0f:99:d1:f0:da:02:09:a6:ce:a9:9c:be:73: bc:02:f9:3b:bc:55:79:4e:66:3d:82:c7:b2:93:39: 4e:02:5c:b5:42:fb:8c:b5:7c:c2:ca:4d:a8:53:d0: e9:03:e1:97:56:93:4b:a0:35:e3:3d:4f:43:87:34: e1:09:d3:eb:e9:7f:3d:7b:45:e9:b8:89:27:e5:27: b5:34:ce:21:59:c2:1f:88:4a:2b:26:9e:7b:50:71: c4:96:8b:95:97:69:cc:7f:37:25:c6:f8:b8:38:6e: 9a:e7:d7:8e:1b:a3:76:4b:82:68:5c:75:ec:9b:ef: 52:ab:8d:33:86:ea:31:36:72:a8:6b:2d:8e:08:a5: 24:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:AA:2E:35:CB:2B:8F:A2:C5:7C:7F:7E:B9:4C:AB:FB:E0:1A:3C:32 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/tKouNcsrj6LFfH9-uUyr--AaPDI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.21.190.0/24 Signature Algorithm: sha256WithRSAEncryption 54:2d:dd:3b:c8:3b:2d:9d:86:ce:f6:1b:ab:33:98:5f:1a:84: f5:b4:26:72:24:b3:5e:d2:45:40:ba:a0:ab:b7:7d:d6:cf:d8: 2b:2b:81:b4:a3:15:31:08:0f:b9:9b:f3:08:78:bf:88:d3:bf: 0f:bc:46:06:1c:99:3f:2d:9e:7a:09:e7:0c:7f:74:da:bc:7a: 23:68:2d:9a:25:4c:13:9f:01:4e:af:4f:24:1f:77:a3:ec:28: 41:2a:1b:c1:38:ac:fa:9a:96:7f:86:fe:7a:d4:26:eb:bd:17: c6:87:b4:ee:1b:34:96:e7:cd:1d:e7:81:b7:02:7a:e9:37:08: dc:10:92:24:eb:62:0a:c0:8a:a0:f6:59:00:d0:52:22:7a:0e: 64:49:ec:66:44:c0:3a:f3:0d:dd:3c:66:9e:f0:03:96:75:cb: d1:0d:ec:58:6c:28:13:25:f8:a8:92:ff:92:2b:90:95:51:94: c2:31:6e:52:0e:96:c9:78:f8:b3:0b:78:13:2b:b1:5a:b1:f1: 75:c1:21:b2:34:c1:04:aa:58:43:db:67:75:a6:7e:6d:0a:cf: d4:62:5d:ad:f3:52:1f:26:49:f8:68:4c:1f:5f:6c:0d:f3:1d: 75:f5:e8:a8:3f:1b:e7:3c:58:ee:23:3a:1a:ac:15:8f:f3:12: b3:71:06:d1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwknsTUxC7jJ2Pt7r/u4efmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMjAzMTc0ODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGFhMmUzNWNiMmI4ZmEyYzU3YzdmN2ViOTRjYWJmYmUwMWEzYzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UzwBDSFrwnqIHVkhd3NtJ4Bpzru jhtuyRqYVpTLuXjITlBSuFI61BiP18isQjO+ltsyuDhiITKBCL/dEZufgshFQoLr QZNL4VoqB+SpksTVe2vyJNlgYlaHBpKXn3eU2uhS/u/r3JpguXDwgo6cl8XXmFbP 2WDxvg+Z0fDaAgmmzqmcvnO8Avk7vFV5TmY9gseykzlOAly1QvuMtXzCyk2oU9Dp A+GXVpNLoDXjPU9DhzThCdPr6X89e0XpuIkn5Se1NM4hWcIfiEorJp57UHHElouV l2nMfzclxvi4OG6a59eOG6N2S4JoXHXsm+9Sq40zhuoxNnKoay2OCKUkUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLSqLjXLK4+ixXx/frlMq/vgGjwyMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvdEtvdU5jc3JqNkxGZkg5LXVVeXItLUFhUERJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVBW+MA0G CSqGSIb3DQEBCwUAA4IBAQBULd07yDstnYbO9hurM5hfGoT1tCZyJLNe0kVAuqCr t33Wz9grK4G0oxUxCA+5m/MIeL+I078PvEYGHJk/LZ56CecMf3TavHojaC2aJUwT nwFOr08kH3ej7ChBKhvBOKz6mpZ/hv561CbrvRfGh7TuGzSW580d54G3AnrpNwjc EJIk62IKwIqg9lkA0FIieg5kSexmRMA68w3dPGae8AOWdcvRDexYbCgTJfiokv+S K5CVUZTCMW5SDpbJePizC3gTK7FasfF1wSGyNMEEqlhD22d1pn5tCs/UYl2t81If Jkn4aEwfX2wN8x119eioPxvnPFjuIzoarBWP8xKzcQbR -----END CERTIFICATE-----Generated at Mon Feb 9 21:24:17 2026 by rpki-client