This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/tevOSAyMp-1DHWOc8A6PPAJZLUs.roa File: tevOSAyMp-1DHWOc8A6PPAJZLUs.roa (raw, json) Hash identifier: /4F2MJ2YCwSX6I/W4Ebbet4QyTAZ6jd4w/oq57g4Qcw= Subject key identifier: B5:EB:CE:48:0C:8C:A7:ED:43:1D:63:9C:F0:0E:8F:3C:02:59:2D:4B Certificate issuer: /CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de Certificate serial: 019B7D5D2E0077BB64CCAF52B31DE2CEDD84 Authority key identifier: D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/tevOSAyMp-1DHWOc8A6PPAJZLUs.roa Signing time: Fri 02 Jan 2026 06:20:17 +0000 ROA not before: Fri 02 Jan 2026 06:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209699 IP address blocks: 77.93.88.0/22 maxlen: 24 217.116.168.0/21 maxlen: 24 2a14:7dc0:100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 15 Jan 2026 04:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:2e:00:77:bb:64:cc:af:52:b3:1d:e2:ce:dd:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de Validity Not Before: Jan 2 06:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5ebce480c8ca7ed431d639cf00e8f3c02592d4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:fe:43:7f:b4:12:44:ba:09:09:19:2a:9a:b3: ea:c2:71:9c:d2:aa:57:b4:75:57:ed:00:90:a9:c3: cc:8d:55:69:09:2f:83:51:fd:d2:61:ab:56:1e:7d: e6:bd:ec:ff:3c:2a:35:99:e3:cd:a0:05:b1:1c:f8: 12:f4:73:1c:43:9f:1e:f8:18:9d:da:fc:2d:50:87: 05:42:76:fe:97:e2:fa:40:3a:dd:bd:57:52:9a:d6: 43:23:c4:df:f0:ae:df:14:ee:36:dd:53:b1:1f:d7: bc:c5:e6:b7:d0:58:46:9d:f2:85:e4:9d:a3:6b:c8: b5:cd:0d:2a:07:7a:cd:7e:d7:aa:07:39:35:4d:e2: e7:0d:63:dc:aa:41:c4:86:48:5e:60:fe:db:fd:c0: 70:5d:b2:cd:ce:3b:90:5b:a2:76:33:58:87:8c:03: 8c:4c:30:68:21:f3:c1:8b:8b:2f:71:c0:c8:72:0b: b4:b1:6e:2f:a9:65:ee:83:84:51:fb:80:14:6b:4c: 56:d0:bf:7a:82:e3:35:a5:24:6b:8a:4c:9f:9a:09: b7:ac:55:f3:9e:26:ee:b1:8b:26:eb:fe:ea:ff:af: 51:aa:e7:d1:a0:ca:bc:51:da:27:a1:9d:27:34:86: 42:30:cd:29:bc:71:47:d3:3e:7c:da:58:d4:fb:ea: 65:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:EB:CE:48:0C:8C:A7:ED:43:1D:63:9C:F0:0E:8F:3C:02:59:2D:4B X509v3 Authority Key Identifier: keyid:D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/tevOSAyMp-1DHWOc8A6PPAJZLUs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.93.88.0/22 217.116.168.0/21 IPv6: 2a14:7dc0:100::/40 Signature Algorithm: sha256WithRSAEncryption c6:30:76:82:7b:21:c6:ee:07:cd:1e:b1:91:1f:74:7f:92:09: 4e:e2:5e:63:aa:2e:63:c8:c4:e1:f9:28:76:89:75:4a:5a:4f: 35:c1:13:02:bd:29:0b:08:34:3b:9b:28:0d:17:ef:5d:db:0d: 3b:db:e9:a5:68:c5:57:4e:d9:00:b2:c1:82:fb:7b:ce:8a:08: 64:10:27:16:3e:8e:33:4c:e7:dd:b9:ea:00:2a:7d:00:2b:b0: 30:63:a5:ec:8b:9d:21:f4:df:de:0d:46:68:12:b8:76:94:7e: 1d:e3:3b:f2:7d:f4:d4:87:84:83:83:70:11:90:bd:41:26:41: d4:17:e9:cd:84:32:6b:8b:6f:03:4d:f6:93:8a:2c:7f:da:9c: c0:4b:42:2a:59:26:ee:9c:df:4a:d2:89:4c:16:6d:d1:f0:17: aa:3b:d8:53:ad:a6:f9:7f:2c:5f:38:c5:3d:2f:f5:c6:e8:a9: ff:d1:ed:2e:1e:a1:6d:92:2c:98:a6:90:36:fe:ea:a2:48:cf: b8:cc:ba:12:4a:2b:50:94:3a:75:2b:3d:37:23:aa:c2:01:06: 9e:ca:4c:35:1a:dc:ae:b0:a7:b2:33:69:ee:1a:67:e6:a9:6a: 06:e7:84:9c:20:da:16:9b:7d:57:76:08:f1:61:03:d0:ba:58: 72:52:2d:58 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt9XS4Ad7tkzK9Ssx3izt2EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4ZDNjYTJjMjMxYWZkZjNiMDM1NWM3N2E3Y2JiMjI2Zjgx Yjc0ZGUwHhcNMjYwMTAyMDYyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNWViY2U0ODBjOGNhN2VkNDMxZDYzOWNmMDBlOGYzYzAyNTkyZDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/5Df7QSRLoJCRkqmrPqwnGc0qpX tHVX7QCQqcPMjVVpCS+DUf3SYatWHn3mvez/PCo1mePNoAWxHPgS9HMcQ58e+Bid 2vwtUIcFQnb+l+L6QDrdvVdSmtZDI8Tf8K7fFO423VOxH9e8xea30FhGnfKF5J2j a8i1zQ0qB3rNfteqBzk1TeLnDWPcqkHEhkheYP7b/cBwXbLNzjuQW6J2M1iHjAOM TDBoIfPBi4svccDIcgu0sW4vqWXug4RR+4AUa0xW0L96guM1pSRrikyfmgm3rFXz nibusYsm6/7q/69RqufRoMq8UdonoZ0nNIZCMM0pvHFH0z582ljU++pl9QIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFLXrzkgMjKftQx1jnPAOjzwCWS1LMB8GA1UdIwQY MBaAFNjTyiwjGv3zsDVcd6fLsib4G3TeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk5QS0xDTWFfZk93TlZ4M3A4dXlKdmdiZE40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8zYzA3NmItYWVhMS00YTMzLWE5ZTkt OTkxMjhiZjZhODQxLzEvdGV2T1NBeU1wLTFESFdPYzhBNlBQQUpaTFVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8zYzA3NmItYWVhMS00YTMzLWE5ZTktOTkxMjhiZjZhODQx LzEvMk5QS0xDTWFfZk93TlZ4M3A4dXlKdmdiZE40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQCTV1YAwQD 2XSoMA4EAgACMAgDBgAqFH3AATANBgkqhkiG9w0BAQsFAAOCAQEAxjB2gnshxu4H zR6xkR90f5IJTuJeY6ouY8jE4fkodol1SlpPNcETAr0pCwg0O5soDRfvXdsNO9vp pWjFV07ZALLBgvt7zooIZBAnFj6OM0zn3bnqACp9ACuwMGOl7IudIfTf3g1GaBK4 dpR+HeM78n301IeEg4NwEZC9QSZB1BfpzYQya4tvA032k4osf9qcwEtCKlkm7pzf StKJTBZt0fAXqjvYU62m+X8sXzjFPS/1xuip/9HtLh6hbZIsmKaQNv7qokjPuMy6 EkorUJQ6dSs9NyOqwgEGnspMNRrcrrCnsjNp7hpn5qlqBueEnCDaFpt9V3YI8WED 0LpYclItWA== -----END CERTIFICATE-----Generated at Wed Jan 14 12:59:47 2026 by rpki-client