This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/tgLyfLjlcwMzEupMfST57LV3Kh8.roa File: tgLyfLjlcwMzEupMfST57LV3Kh8.roa (raw, json) Hash identifier: 0v0L+j/WsnBYBPti3JFWgZtxat+165mo5Q0XdxS+nu0= Subject key identifier: B6:02:F2:7C:B8:E5:73:03:33:12:EA:4C:7D:24:F9:EC:B5:77:2A:1F Certificate issuer: /CN=45fc0aa5a6c3391effffa83425b23b264c71085f Certificate serial: 019B7F80B948B27D8EFED440DBF5709D9832 Authority key identifier: 45:FC:0A:A5:A6:C3:39:1E:FF:FF:A8:34:25:B2:3B:26:4C:71:08:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RfwKpabDOR7__6g0JbI7JkxxCF8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/tgLyfLjlcwMzEupMfST57LV3Kh8.roa Signing time: Fri 02 Jan 2026 16:18:21 +0000 ROA not before: Fri 02 Jan 2026 16:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59471 IP address blocks: 185.99.192.0/22 maxlen: 22 194.153.107.0/24 maxlen: 24 195.74.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft rsync://rpki.ripe.net/repository/DEFAULT/RfwKpabDOR7__6g0JbI7JkxxCF8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:b9:48:b2:7d:8e:fe:d4:40:db:f5:70:9d:98:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45fc0aa5a6c3391effffa83425b23b264c71085f Validity Not Before: Jan 2 16:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b602f27cb8e573033312ea4c7d24f9ecb5772a1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:41:73:6c:2a:26:e0:58:4d:44:57:98:07:d0: d3:b9:e6:65:92:f1:e6:67:2a:94:34:38:71:2f:3b: 3d:c2:cb:d1:47:b9:d0:06:d8:c4:a2:30:f2:91:3e: cc:7c:65:bc:8f:5c:e9:f4:5b:2f:5b:64:fd:78:aa: a7:87:13:81:80:5b:e0:e6:3f:30:2c:62:24:83:61: 99:e2:6a:af:e7:60:cd:2a:7b:af:d7:53:ca:a5:9d: eb:ad:07:f1:70:5f:f2:c0:dc:0e:26:15:73:41:68: ff:ea:64:80:e6:2e:cf:62:d1:49:cc:41:fe:4b:c3: 51:99:2b:f2:b6:fd:58:46:ba:de:17:5a:bf:c8:0e: bf:38:97:ab:4d:38:5e:33:d2:2d:88:c4:9d:4f:01: 47:ca:8d:46:ca:47:92:e7:87:76:5c:18:ab:3c:6e: f4:4e:80:f3:41:ec:b9:42:7f:33:13:28:b4:21:f3: 70:0d:39:ea:bb:75:2a:2b:ea:35:ba:01:de:f7:bf: 91:3a:9b:69:d6:22:19:25:46:28:b6:09:1c:ac:c0: 60:e1:0f:7b:1a:20:cb:66:e6:d6:a9:2b:bc:2f:76: 16:56:6a:75:d8:16:4a:da:b7:46:c5:1c:86:ab:63: a3:4f:eb:c8:4d:53:e2:98:89:ec:10:4f:74:e4:cc: 0e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:02:F2:7C:B8:E5:73:03:33:12:EA:4C:7D:24:F9:EC:B5:77:2A:1F X509v3 Authority Key Identifier: keyid:45:FC:0A:A5:A6:C3:39:1E:FF:FF:A8:34:25:B2:3B:26:4C:71:08:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RfwKpabDOR7__6g0JbI7JkxxCF8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/tgLyfLjlcwMzEupMfST57LV3Kh8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.99.192.0/22 194.153.107.0/24 195.74.64.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:6e:1e:44:33:dc:4a:04:28:3d:36:51:57:4f:93:17:99:c4: e3:38:a9:f1:54:60:1d:5a:6a:a2:44:2d:6f:00:da:0d:b1:66: 17:cc:8c:5a:2a:3b:36:1e:40:f7:14:50:65:d5:04:3f:32:c5: 5b:d1:da:42:2b:04:d3:ec:d3:44:b2:33:07:0a:74:64:ba:b6: cc:21:0e:7f:95:c3:bf:f5:6a:4c:44:6d:85:e8:58:58:d2:e7: ee:7f:e5:a8:43:10:1e:1a:50:19:21:c8:65:b9:66:d2:dd:a6: 60:32:6f:93:56:ca:ee:de:0f:24:11:6a:d4:c7:3a:87:3f:52: d6:d4:fc:2d:21:4f:0a:e1:83:03:ad:1f:5b:ed:fb:9a:b5:d8: d9:25:3c:aa:1e:82:22:2b:83:92:fb:cf:bb:d2:70:1e:48:bf: 95:5a:27:58:1e:f7:47:7b:f5:9b:0a:3c:88:2e:14:31:9c:ca: 58:f3:86:c8:9c:8c:38:3f:b5:38:67:ed:dd:04:c1:8b:b4:18: 6e:25:3b:df:92:0f:26:a8:1c:6c:59:ac:94:af:93:7d:40:c1: 4a:79:c3:24:be:01:ac:b8:34:0b:0b:ca:ba:21:eb:97:58:4e: 7b:7b:93:f8:9f:2c:54:e7:76:c9:eb:af:f5:d0:14:93:27:43: b8:d4:d7:57 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/gLlIsn2O/tRA2/VwnZgyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1ZmMwYWE1YTZjMzM5MWVmZmZmYTgzNDI1YjIzYjI2NGM3 MTA4NWYwHhcNMjYwMTAyMTYxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjAyZjI3Y2I4ZTU3MzAzMzMxMmVhNGM3ZDI0ZjllY2I1NzcyYTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUFzbCom4FhNRFeYB9DTueZlkvHm ZyqUNDhxLzs9wsvRR7nQBtjEojDykT7MfGW8j1zp9FsvW2T9eKqnhxOBgFvg5j8w LGIkg2GZ4mqv52DNKnuv11PKpZ3rrQfxcF/ywNwOJhVzQWj/6mSA5i7PYtFJzEH+ S8NRmSvytv1YRrreF1q/yA6/OJerTTheM9ItiMSdTwFHyo1GykeS54d2XBirPG70 ToDzQey5Qn8zEyi0IfNwDTnqu3UqK+o1ugHe97+ROptp1iIZJUYotgkcrMBg4Q97 GiDLZubWqSu8L3YWVmp12BZK2rdGxRyGq2OjT+vITVPimInsEE905MwO2QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLYC8ny45XMDMxLqTH0k+ey1dyofMB8GA1UdIwQY MBaAFEX8CqWmwzke//+oNCWyOyZMcQhfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmZ3S3BhYkRPUjdfXzZnMEpiSTdKa3h4Q0Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS83M2M2MGItMThjZC00MjViLThlNmYt OTI3MTliMDBiYmQ0LzEvdGdMeWZMamxjd016RXVwTWZTVDU3TFYzS2g4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS83M2M2MGItMThjZC00MjViLThlNmYtOTI3MTliMDBiYmQ0 LzEvUmZ3S3BhYkRPUjdfXzZnMEpiSTdKa3h4Q0Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCuWPAAwQA wplrAwQAw0pAMA0GCSqGSIb3DQEBCwUAA4IBAQB8bh5EM9xKBCg9NlFXT5MXmcTj OKnxVGAdWmqiRC1vANoNsWYXzIxaKjs2HkD3FFBl1QQ/MsVb0dpCKwTT7NNEsjMH CnRkurbMIQ5/lcO/9WpMRG2F6FhY0ufuf+WoQxAeGlAZIchluWbS3aZgMm+TVsru 3g8kEWrUxzqHP1LW1PwtIU8K4YMDrR9b7fuatdjZJTyqHoIiK4OS+8+70nAeSL+V WidYHvdHe/WbCjyILhQxnMpY84bInIw4P7U4Z+3dBMGLtBhuJTvfkg8mqBxsWayU r5N9QMFKecMkvgGsuDQLC8q6IeuXWE57e5P4nyxU53bJ66/10BSTJ0O41NdX -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:54 2026 by rpki-client