This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/TUbGa1Pmd7nNnXpHY5ZghqY1ZTg.roa File: TUbGa1Pmd7nNnXpHY5ZghqY1ZTg.roa (raw, json) Hash identifier: XMmHn4bI1/zHGOmxQxotD/VPUEBHxwHpms++PNlyFtw= Subject key identifier: 4D:46:C6:6B:53:E6:77:B9:CD:9D:7A:47:63:96:60:86:A6:35:65:38 Certificate issuer: /CN=274889c4410b43172f41c8c14aea899bbb2adabd Certificate serial: 019B7F826E1302F97E815EFF9553B139DEE8 Authority key identifier: 27:48:89:C4:41:0B:43:17:2F:41:C8:C1:4A:EA:89:9B:BB:2A:DA:BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0iJxEELQxcvQcjBSuqJm7sq2r0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/TUbGa1Pmd7nNnXpHY5ZghqY1ZTg.roa Signing time: Fri 02 Jan 2026 16:20:12 +0000 ROA not before: Fri 02 Jan 2026 16:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12785 IP address blocks: 91.223.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/J0iJxEELQxcvQcjBSuqJm7sq2r0.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/J0iJxEELQxcvQcjBSuqJm7sq2r0.mft rsync://rpki.ripe.net/repository/DEFAULT/J0iJxEELQxcvQcjBSuqJm7sq2r0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:6e:13:02:f9:7e:81:5e:ff:95:53:b1:39:de:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=274889c4410b43172f41c8c14aea899bbb2adabd Validity Not Before: Jan 2 16:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d46c66b53e677b9cd9d7a4763966086a6356538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a2:d4:ed:e6:b5:0d:40:09:39:26:8e:c3:3d: e4:13:42:75:de:e1:32:5a:8a:98:05:9a:6f:d2:ff: b9:65:a1:27:de:35:1e:3b:73:9d:ba:dc:86:ca:25: 41:95:52:db:1d:50:6c:48:64:9a:8a:3a:c5:be:c6: 39:87:58:b5:57:92:90:ff:de:d8:1d:33:32:0c:18: 34:b5:0f:1b:0e:8b:60:bf:4e:c5:77:6a:08:bf:c2: 98:c9:c4:ca:cc:7e:22:d9:6b:07:9a:ba:e8:f8:3f: 4e:ca:45:0b:9d:3a:47:89:08:55:aa:4a:b6:be:4b: c0:69:49:ad:54:41:1d:00:d3:ae:d4:91:6a:bb:b6: 58:fd:eb:0e:8c:61:06:5f:47:97:3f:03:f2:f8:8a: 02:50:76:85:07:96:12:93:59:74:02:04:77:7a:59: 0d:a1:ba:83:64:dc:13:a4:12:b7:03:8c:5d:62:c1: 41:d6:9d:60:d5:44:5c:1b:29:58:38:5c:6c:bf:9c: 6d:9a:fb:db:f8:3d:e8:86:92:25:ce:74:a3:f1:f2: 54:b1:ad:34:fc:85:7e:ab:d4:41:ed:09:e1:e9:25: c6:92:6a:42:8d:a3:fd:dc:1b:61:ea:a4:08:ae:21: 2b:d0:2b:38:0e:d1:c1:55:54:0c:45:ad:3c:91:9b: c7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:46:C6:6B:53:E6:77:B9:CD:9D:7A:47:63:96:60:86:A6:35:65:38 X509v3 Authority Key Identifier: keyid:27:48:89:C4:41:0B:43:17:2F:41:C8:C1:4A:EA:89:9B:BB:2A:DA:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0iJxEELQxcvQcjBSuqJm7sq2r0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/TUbGa1Pmd7nNnXpHY5ZghqY1ZTg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/J0iJxEELQxcvQcjBSuqJm7sq2r0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.230.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:57:59:cd:1c:70:a9:5a:a1:a8:3d:64:6f:25:83:8f:6c:b7: a9:f8:55:b5:56:08:35:91:aa:c8:31:70:c5:61:07:75:d5:72: 2b:0a:d2:cc:f4:97:cd:41:ce:19:78:26:7c:72:b1:36:46:7d: d2:4c:8a:05:07:96:e7:3d:28:d8:17:7b:b4:45:de:12:54:20: bf:b0:47:51:c9:af:13:08:f1:70:da:b3:b9:54:a2:8e:46:e6: 94:83:66:98:84:9f:85:ef:15:29:bb:3c:24:7a:9c:a0:02:6b: f4:99:6f:d2:30:a4:cd:f2:99:12:e4:69:ec:53:86:ec:f2:66: 92:ab:78:0a:f1:63:d3:e5:86:0d:81:ab:18:a0:d3:6b:ee:bc: f4:5f:52:dc:3f:83:32:27:0a:9f:94:c5:6b:c0:54:3a:9c:36: 98:98:26:29:e4:ee:df:a8:45:05:8c:21:6b:51:3b:95:45:f9: 82:90:4a:ac:de:ab:41:ff:3d:f3:b6:a1:24:d4:f6:e7:97:55: 14:97:92:a5:93:bf:20:7d:ce:dd:a3:b0:5c:70:5d:86:a5:2f: 18:1a:79:c6:d7:a8:a3:9a:c7:04:6c:25:f5:82:26:6e:01:d3: 7d:e7:be:27:fa:cd:07:56:58:c3:aa:31:79:c3:2e:72:56:b5: b7:63:5a:79 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gm4TAvl+gV7/lVOxOd7oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3NDg4OWM0NDEwYjQzMTcyZjQxYzhjMTRhZWE4OTliYmIy YWRhYmQwHhcNMjYwMTAyMTYyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDQ2YzY2YjUzZTY3N2I5Y2Q5ZDdhNDc2Mzk2NjA4NmE2MzU2NTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKLU7ea1DUAJOSaOwz3kE0J13uEy WoqYBZpv0v+5ZaEn3jUeO3OdutyGyiVBlVLbHVBsSGSaijrFvsY5h1i1V5KQ/97Y HTMyDBg0tQ8bDotgv07Fd2oIv8KYycTKzH4i2WsHmrro+D9OykULnTpHiQhVqkq2 vkvAaUmtVEEdANOu1JFqu7ZY/esOjGEGX0eXPwPy+IoCUHaFB5YSk1l0AgR3elkN obqDZNwTpBK3A4xdYsFB1p1g1URcGylYOFxsv5xtmvvb+D3ohpIlznSj8fJUsa00 /IV+q9RB7Qnh6SXGkmpCjaP93Bth6qQIriEr0Cs4DtHBVVQMRa08kZvH8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE1GxmtT5ne5zZ16R2OWYIamNWU4MB8GA1UdIwQY MBaAFCdIicRBC0MXL0HIwUrqiZu7Ktq9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjBpSnhFRUxReGN2UWNqQlN1cUptN3NxMnIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi82MmJhY2ItYTk1Zi00MzBiLWFmZjkt MTlhM2VkYTA1MjRlLzEvVFViR2ExUG1kN25OblhwSFk1WmdocVkxWlRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi82MmJhY2ItYTk1Zi00MzBiLWFmZjktMTlhM2VkYTA1MjRl LzEvSjBpSnhFRUxReGN2UWNqQlN1cUptN3NxMnIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9/mMA0G CSqGSIb3DQEBCwUAA4IBAQAdV1nNHHCpWqGoPWRvJYOPbLep+FW1Vgg1karIMXDF YQd11XIrCtLM9JfNQc4ZeCZ8crE2Rn3STIoFB5bnPSjYF3u0Rd4SVCC/sEdRya8T CPFw2rO5VKKORuaUg2aYhJ+F7xUpuzwkepygAmv0mW/SMKTN8pkS5GnsU4bs8maS q3gK8WPT5YYNgasYoNNr7rz0X1LcP4MyJwqflMVrwFQ6nDaYmCYp5O7fqEUFjCFr UTuVRfmCkEqs3qtB/z3ztqEk1Pbnl1UUl5Klk78gfc7do7BccF2GpS8YGnnG16ij mscEbCX1giZuAdN9574n+s0HVljDqjF5wy5yVrW3Y1p5 -----END CERTIFICATE-----Generated at Mon Feb 9 18:43:41 2026 by rpki-client