This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/tMGhRP-Xzge3RXgNfdMGJBwHoL8.roa File: tMGhRP-Xzge3RXgNfdMGJBwHoL8.roa (raw, json) Hash identifier: o/l+UfaRASye/WyLBJkfDvEuNMAWi4a+yJfDJFDSNrc= Subject key identifier: B4:C1:A1:44:FF:97:CE:07:B7:45:78:0D:7D:D3:06:24:1C:07:A0:BF Certificate issuer: /CN=056ad2f4ffc5872e35a429e53ef179925ff4215e Certificate serial: 019B7C130FC8D8E4A76FFCBE5BA9AA1DF6C6 Authority key identifier: 05:6A:D2:F4:FF:C5:87:2E:35:A4:29:E5:3E:F1:79:92:5F:F4:21:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/tMGhRP-Xzge3RXgNfdMGJBwHoL8.roa Signing time: Fri 02 Jan 2026 00:19:42 +0000 ROA not before: Fri 02 Jan 2026 00:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5605 IP address blocks: 193.98.110.0/24 maxlen: 24 193.101.58.0/24 maxlen: 24 193.102.227.0/24 maxlen: 24 195.244.224.0/24 maxlen: 24 195.244.225.0/24 maxlen: 24 195.244.226.0/24 maxlen: 24 195.244.227.0/24 maxlen: 24 195.244.228.0/24 maxlen: 24 195.244.229.0/24 maxlen: 24 195.244.230.0/24 maxlen: 24 195.244.231.0/24 maxlen: 24 195.244.232.0/24 maxlen: 24 195.244.233.0/24 maxlen: 24 195.244.234.0/24 maxlen: 24 195.244.235.0/24 maxlen: 24 195.244.236.0/24 maxlen: 24 195.244.238.0/24 maxlen: 24 195.244.239.0/24 maxlen: 24 195.244.240.0/24 maxlen: 24 195.244.241.0/24 maxlen: 24 195.244.242.0/24 maxlen: 24 195.244.243.0/24 maxlen: 24 195.244.244.0/24 maxlen: 24 195.244.245.0/24 maxlen: 24 195.244.246.0/24 maxlen: 24 195.244.247.0/24 maxlen: 24 195.244.248.0/24 maxlen: 24 195.244.249.0/24 maxlen: 24 195.244.250.0/24 maxlen: 24 195.244.251.0/24 maxlen: 24 195.244.252.0/24 maxlen: 24 195.244.253.0/24 maxlen: 24 195.244.254.0/24 maxlen: 24 195.244.255.0/24 maxlen: 24 2a00:fa8::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:0f:c8:d8:e4:a7:6f:fc:be:5b:a9:aa:1d:f6:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=056ad2f4ffc5872e35a429e53ef179925ff4215e Validity Not Before: Jan 2 00:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4c1a144ff97ce07b745780d7dd306241c07a0bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c9:62:de:3b:98:1d:fd:a1:0d:85:48:be:9b: 71:8e:15:3d:9c:f3:cc:bd:dd:92:6f:e3:05:27:91: f6:b5:a2:a6:80:80:63:ed:78:e6:95:d5:73:62:ea: 9c:69:b1:7f:77:24:0f:19:53:c8:7b:bf:3d:b7:bd: 3b:57:1a:06:83:e8:8c:68:ef:cf:43:99:dc:1f:52: b8:f9:63:a8:27:2a:a0:b3:80:95:55:56:bf:45:c9: d0:74:9c:77:63:c3:e4:5a:11:18:e5:20:8d:3e:93: eb:ae:c2:62:15:09:0e:9f:71:ef:8e:13:e4:e6:3c: 99:84:2d:3e:54:6a:03:5d:35:92:4d:77:4d:2b:8c: 4b:50:dd:d5:8c:f7:aa:ef:90:8d:c4:73:38:2c:ca: 9a:cc:96:af:e2:3a:f7:18:54:1a:17:97:09:7f:67: e9:08:e7:20:bc:14:6a:f7:51:c6:2d:64:2f:1b:14: 18:62:3a:cc:10:a0:9b:99:1b:03:15:31:a9:22:58: b9:13:fc:db:a0:7f:af:f2:f7:d6:00:89:9b:ad:6b: 9d:10:45:7e:e8:1e:5e:4e:07:e2:60:8c:aa:a9:60: 91:26:59:10:0d:ab:da:a3:b2:82:83:62:e3:05:9c: 75:f9:5b:e7:a3:df:83:ef:3b:c6:e1:89:85:25:59: 14:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C1:A1:44:FF:97:CE:07:B7:45:78:0D:7D:D3:06:24:1C:07:A0:BF X509v3 Authority Key Identifier: keyid:05:6A:D2:F4:FF:C5:87:2E:35:A4:29:E5:3E:F1:79:92:5F:F4:21:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/tMGhRP-Xzge3RXgNfdMGJBwHoL8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.98.110.0/24 193.101.58.0/24 193.102.227.0/24 195.244.224.0-195.244.236.255 195.244.238.0-195.244.255.255 IPv6: 2a00:fa8::/32 Signature Algorithm: sha256WithRSAEncryption 97:22:f0:0e:44:6d:92:6e:c4:6f:72:53:9c:70:25:c8:06:35: ee:af:fe:12:88:51:9e:b6:72:3d:6b:c9:7d:4a:e9:af:c2:c4: 22:78:0f:2b:96:80:2b:44:3e:8a:49:a3:5d:a0:68:66:f9:59: 89:4d:6b:c9:74:97:41:48:c0:ba:a6:0a:bc:8b:16:7e:72:47: 87:73:d2:84:b3:de:d4:92:86:43:53:8b:18:e3:b1:97:ea:de: 24:14:ab:c9:be:36:2f:7b:86:7b:72:57:56:b1:29:91:69:70: 11:88:c4:30:e7:6e:7b:cb:16:e7:77:94:51:b1:d1:8f:75:15: f8:55:91:95:17:19:7a:80:c9:07:96:3a:c0:11:a6:17:2a:21: f7:fc:89:b8:e3:cc:5f:6f:76:54:09:ab:f3:e2:bd:99:c2:f5: 5c:92:88:a7:0a:b6:fd:e9:64:b8:dc:a8:09:80:f4:5b:78:24: 99:50:0e:5a:b2:8e:23:2f:8b:db:71:76:33:9a:0e:e9:61:cb: 69:29:3f:a1:35:e7:9b:2c:0b:32:e0:fd:f5:38:f9:3b:8d:69: cc:99:2a:43:7d:64:0c:86:ee:25:8e:e0:e3:16:3e:ea:fc:37: d0:07:68:3b:09:16:d1:e5:39:d7:72:d3:2e:d2:e6:a1:52:36: 77:75:79:0b -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZt8Ew/I2OSnb/y+W6mqHfbGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NmFkMmY0ZmZjNTg3MmUzNWE0MjllNTNlZjE3OTkyNWZm NDIxNWUwHhcNMjYwMTAyMDAxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGMxYTE0NGZmOTdjZTA3Yjc0NTc4MGQ3ZGQzMDYyNDFjMDdhMGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMli3juYHf2hDYVIvptxjhU9nPPM vd2Sb+MFJ5H2taKmgIBj7XjmldVzYuqcabF/dyQPGVPIe789t707VxoGg+iMaO/P Q5ncH1K4+WOoJyqgs4CVVVa/RcnQdJx3Y8PkWhEY5SCNPpPrrsJiFQkOn3HvjhPk 5jyZhC0+VGoDXTWSTXdNK4xLUN3VjPeq75CNxHM4LMqazJav4jr3GFQaF5cJf2fp COcgvBRq91HGLWQvGxQYYjrMEKCbmRsDFTGpIli5E/zboH+v8vfWAImbrWudEEV+ 6B5eTgfiYIyqqWCRJlkQDavao7KCg2LjBZx1+Vvno9+D7zvG4YmFJVkUOwIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFLTBoUT/l84Ht0V4DX3TBiQcB6C/MB8GA1UdIwQY MBaAFAVq0vT/xYcuNaQp5T7xeZJf9CFeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQldyUzlQX0ZoeTQxcENubFB2RjVrbF8wSVY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC80MzMwZmUtZGJmYy00ODFmLThmZDkt MWU0ZmNiMWM2MGNiLzEvdE1HaFJQLVh6Z2UzUlhnTmZkTUdKQndIb0w4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC80MzMwZmUtZGJmYy00ODFmLThmZDktMWU0ZmNiMWM2MGNi LzEvQldyUzlQX0ZoeTQxcENubFB2RjVrbF8wSVY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDAzBAIAATAtAwQAwWJuAwQA wWU6AwQAwWbjMAwDBAXD9OADBADD9OwwCwMEAcP07gMDAMP0MA0EAgACMAcDBQAq AA+oMA0GCSqGSIb3DQEBCwUAA4IBAQCXIvAORG2SbsRvclOccCXIBjXur/4SiFGe tnI9a8l9SumvwsQieA8rloArRD6KSaNdoGhm+VmJTWvJdJdBSMC6pgq8ixZ+ckeH c9KEs97UkoZDU4sY47GX6t4kFKvJvjYve4Z7cldWsSmRaXARiMQw5257yxbnd5RR sdGPdRX4VZGVFxl6gMkHljrAEaYXKiH3/Im448xfb3ZUCavz4r2ZwvVckoinCrb9 6WS43KgJgPRbeCSZUA5aso4jL4vbcXYzmg7pYctpKT+hNeebLAsy4P31OPk7jWnM mSpDfWQMhu4ljuDjFj7q/DfQB2g7CRbR5TnXctMu0uahUjZ3dXkL -----END CERTIFICATE-----Generated at Mon Feb 9 23:41:44 2026 by rpki-client