This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/tlubz_uTOm80ijju_zQ-qZU5G58.roa File: tlubz_uTOm80ijju_zQ-qZU5G58.roa (raw, json) Hash identifier: R98++GHRdgnXwKsMPi6YnhkFAb9DDbniVHzPpPwqoJk= Subject key identifier: B6:5B:9B:CF:FB:93:3A:6F:34:8A:38:EE:FF:34:3E:A9:95:39:1B:9F Certificate issuer: /CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae Certificate serial: 019B797F078493C5CBA5D95367819E707483 Authority key identifier: 09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/tlubz_uTOm80ijju_zQ-qZU5G58.roa Signing time: Thu 01 Jan 2026 12:18:46 +0000 ROA not before: Thu 01 Jan 2026 12:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42488 IP address blocks: 194.0.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:07:84:93:c5:cb:a5:d9:53:67:81:9e:70:74:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae Validity Not Before: Jan 1 12:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b65b9bcffb933a6f348a38eeff343ea995391b9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d5:2c:ca:fe:ca:9b:20:f6:78:2b:ad:cc:cc: dd:a1:7d:cf:e1:90:f6:17:96:a3:db:f9:43:78:c2: 30:15:78:9e:4a:bd:a4:6e:73:64:c7:1d:e7:a2:75: 34:ed:7d:55:9d:f6:c8:3f:2a:85:1c:d6:10:a5:2f: e0:ef:49:75:63:1d:e5:cb:c3:4c:1c:5a:b3:c5:11: 0c:5b:89:d1:04:ab:c0:c4:13:4f:7d:37:07:3f:0d: 26:82:16:bf:50:7e:98:5d:84:d5:bf:6e:5e:ae:92: 24:ec:5d:b9:98:35:da:03:94:0d:c7:c0:92:8d:5a: 1e:a4:8a:0d:45:36:3b:2f:30:29:8a:39:2a:35:76: 2a:48:27:ac:87:54:55:b8:37:f9:f0:8b:d3:aa:7f: e8:1e:98:09:22:90:3f:22:d2:3b:ec:d6:28:4c:08: 52:d5:70:81:f5:69:78:97:21:c6:09:37:b0:21:ea: 39:65:9f:43:98:98:42:a1:8e:06:c5:ca:19:8c:65: 27:41:ba:94:ce:0d:05:cd:2d:fa:d8:a0:c2:c4:2f: 6b:1d:41:3d:4b:62:9e:ed:04:8b:9f:5c:6b:ff:8a: 65:c4:b9:6d:5e:e0:06:07:11:22:45:ce:4d:24:d5: 27:ef:ba:ef:b5:d8:45:d4:4b:5d:30:95:3f:54:a6: a2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:5B:9B:CF:FB:93:3A:6F:34:8A:38:EE:FF:34:3E:A9:95:39:1B:9F X509v3 Authority Key Identifier: keyid:09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/tlubz_uTOm80ijju_zQ-qZU5G58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.0.224.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:a4:6e:3e:a8:1e:71:11:8f:ac:7f:38:5f:fd:2b:ce:78:b3: 2b:99:19:ef:26:f7:d7:c9:a4:68:6a:58:51:20:3c:e8:8f:47: 02:18:f4:ed:b6:91:c4:82:e5:81:26:d2:c4:5d:73:5a:7d:c8: 64:13:5e:85:4c:80:e0:09:66:ba:31:ca:ab:07:f4:9b:ab:21: 72:17:ec:2b:39:3f:fb:83:ba:4d:46:ed:e5:0b:a1:46:ae:27: fd:38:32:d3:e2:3f:9d:1b:26:98:f6:6c:27:64:15:21:be:08: 6d:15:58:3a:46:af:7b:2a:03:a3:2f:b6:9a:0e:54:40:d3:17: d6:1c:d3:d7:87:f7:15:04:7d:20:e1:04:68:e7:38:8e:a8:23: f1:25:cf:57:77:c3:19:1a:76:2c:d9:d9:4d:05:54:f6:f8:2c: 9c:f5:ab:a3:cf:5d:17:64:57:a4:93:30:d4:bb:37:2a:95:e5: 9d:59:ec:f0:a5:87:ca:8f:15:1c:59:31:5d:99:32:18:c2:2b: 8b:6f:54:b8:ab:e8:06:be:9c:21:13:ad:35:66:36:42:45:e0: a0:b5:ae:fe:61:18:43:9d:2e:40:8d:e4:1b:7c:9f:6a:a2:b7: e2:16:0d:5c:f6:4d:27:95:b3:9e:56:fd:03:db:cd:06:40:9c: da:a1:32:5e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fweEk8XLpdlTZ4GecHSDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZjZjOGY0NmZjODBkMmY4NzdjMzVmZDI4ZDhhMDY1MWI3 MDgwYWUwHhcNMjYwMTAxMTIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjViOWJjZmZiOTMzYTZmMzQ4YTM4ZWVmZjM0M2VhOTk1MzkxYjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNUsyv7KmyD2eCutzMzdoX3P4ZD2 F5aj2/lDeMIwFXieSr2kbnNkxx3nonU07X1VnfbIPyqFHNYQpS/g70l1Yx3ly8NM HFqzxREMW4nRBKvAxBNPfTcHPw0mgha/UH6YXYTVv25erpIk7F25mDXaA5QNx8CS jVoepIoNRTY7LzApijkqNXYqSCesh1RVuDf58IvTqn/oHpgJIpA/ItI77NYoTAhS 1XCB9Wl4lyHGCTewIeo5ZZ9DmJhCoY4GxcoZjGUnQbqUzg0FzS362KDCxC9rHUE9 S2Ke7QSLn1xr/4plxLltXuAGBxEiRc5NJNUn77rvtdhF1EtdMJU/VKaiLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLZbm8/7kzpvNIo47v80PqmVORufMB8GA1UdIwQY MBaAFAn2yPRvyA0vh3w1/SjYoGUbcICuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2ZiSTlHX0lEUy1IZkRYOUtOaWdaUnR3Z0s0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8xOTdkMGMtMDJmMy00MDQ5LWE1ZmEt ZWU3M2M4ZTcwNDdkLzEvdGx1YnpfdVRPbTgwaWpqdV96US1xWlU1RzU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8xOTdkMGMtMDJmMy00MDQ5LWE1ZmEtZWU3M2M4ZTcwNDdk LzEvQ2ZiSTlHX0lEUy1IZkRYOUtOaWdaUnR3Z0s0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgDgMA0G CSqGSIb3DQEBCwUAA4IBAQA9pG4+qB5xEY+sfzhf/SvOeLMrmRnvJvfXyaRoalhR IDzoj0cCGPTttpHEguWBJtLEXXNafchkE16FTIDgCWa6McqrB/SbqyFyF+wrOT/7 g7pNRu3lC6FGrif9ODLT4j+dGyaY9mwnZBUhvghtFVg6Rq97KgOjL7aaDlRA0xfW HNPXh/cVBH0g4QRo5ziOqCPxJc9Xd8MZGnYs2dlNBVT2+Cyc9aujz10XZFekkzDU uzcqleWdWezwpYfKjxUcWTFdmTIYwiuLb1S4q+gGvpwhE601ZjZCReCgta7+YRhD nS5AjeQbfJ9qorfiFg1c9k0nlbOeVv0D280GQJzaoTJe -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:13 2026 by rpki-client