This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/ts_UWt22Q4mWqxSB7ZFYxzHtPis.roa File: ts_UWt22Q4mWqxSB7ZFYxzHtPis.roa (raw, json) Hash identifier: ftNvK4quhd+aCIDNnGQHvGWOv6HTZuEG7taZaiTGHxw= Subject key identifier: B6:CF:D4:5A:DD:B6:43:89:96:AB:14:81:ED:91:58:C7:31:ED:3E:2B Certificate issuer: /CN=385206ac08d840c28bf4ac56899f2a28f8fdccc5 Certificate serial: 019B797E684330FE97BE2BC6EBFEBDC80BDE Authority key identifier: 38:52:06:AC:08:D8:40:C2:8B:F4:AC:56:89:9F:2A:28:F8:FD:CC:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/ts_UWt22Q4mWqxSB7ZFYxzHtPis.roa Signing time: Thu 01 Jan 2026 12:18:05 +0000 ROA not before: Thu 01 Jan 2026 12:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200939 IP address blocks: 185.42.142.0/23 maxlen: 23 185.42.142.0/24 maxlen: 24 185.42.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft rsync://rpki.ripe.net/repository/DEFAULT/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:68:43:30:fe:97:be:2b:c6:eb:fe:bd:c8:0b:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=385206ac08d840c28bf4ac56899f2a28f8fdccc5 Validity Not Before: Jan 1 12:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b6cfd45addb6438996ab1481ed9158c731ed3e2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d8:12:2b:5b:00:87:2c:d6:b1:0e:c4:98:23: bc:10:01:77:0c:6e:3e:90:90:c0:84:27:5b:5f:20: 4b:58:0c:1f:14:24:9a:a2:10:98:96:af:7b:86:d8: a0:24:ec:3d:ab:c3:b1:bb:ab:56:1e:f8:0a:c9:b9: db:5e:38:68:2f:c0:e2:37:e7:43:7c:ba:37:46:54: d0:a8:2c:81:e4:d1:07:ef:b4:05:4b:bb:23:86:63: 34:db:5b:e4:8a:5d:05:f9:b7:61:d2:65:e7:fc:ee: 59:95:cf:53:5b:53:01:c5:f0:ab:db:77:8c:ae:64: 28:b8:4a:04:69:1d:d6:a0:33:20:24:5d:63:0c:60: 7f:e2:46:8c:cc:59:ed:54:1a:57:62:25:32:06:d9: 3b:05:3a:97:86:e1:bd:be:ed:97:dd:d4:43:1e:b3: 07:5c:b5:fb:b0:4a:89:d5:8f:7f:2c:c0:41:28:eb: ba:88:d8:d6:85:fb:aa:20:48:4c:0e:b2:74:ed:72: 4b:0b:27:b8:34:d6:08:36:44:b3:a4:97:9e:1f:04: 5c:8c:19:45:e1:e0:41:09:1e:e5:16:9c:c2:11:aa: 62:5f:2b:a8:81:3e:49:69:5f:fa:ba:fc:6d:83:ea: e7:3b:de:2e:2b:ce:f0:be:38:34:78:5f:62:cd:2d: 25:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:CF:D4:5A:DD:B6:43:89:96:AB:14:81:ED:91:58:C7:31:ED:3E:2B X509v3 Authority Key Identifier: keyid:38:52:06:AC:08:D8:40:C2:8B:F4:AC:56:89:9F:2A:28:F8:FD:CC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/ts_UWt22Q4mWqxSB7ZFYxzHtPis.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.42.142.0/23 Signature Algorithm: sha256WithRSAEncryption 48:98:fb:34:59:a1:e1:43:ba:e4:c3:f6:9a:55:83:3f:36:2b: 17:58:2a:bb:43:f3:b4:33:01:d0:35:2c:b0:97:de:5c:f0:ad: 63:62:cf:84:85:ec:7a:39:12:6d:1b:f1:ef:de:39:1c:b1:84: 40:04:7e:d6:bb:82:81:ad:94:ab:67:b3:8f:77:4f:a5:74:ff: f1:a6:15:d4:ca:67:c7:cf:c5:99:87:bd:4e:85:90:92:1d:40: 84:9e:56:c2:54:e9:25:a2:b5:18:9a:96:1a:2e:9a:37:25:db: 37:b0:3f:52:b8:90:5d:e1:45:3b:12:da:83:d8:03:37:49:f5: b8:f9:92:2c:59:1f:69:9b:04:db:25:9f:f9:5b:30:8f:b0:7d: 1e:fc:4a:b9:c7:e6:b2:3e:57:8f:6a:4c:37:ae:74:e3:75:4f: 11:82:81:4f:1c:a9:db:bc:56:00:07:1d:37:d0:1c:25:ac:73: 2b:69:ba:be:6b:9d:cc:40:c0:9f:4a:37:d1:d6:c3:c4:f7:80: 47:20:60:fe:51:9d:74:51:36:2a:41:f0:eb:c6:0a:2b:4e:97: b1:f9:7a:fa:9c:42:dd:64:2f:ac:b3:4c:d3:2e:23:18:cd:51: f6:59:87:4e:f1:24:2c:36:c8:7f:66:13:42:24:c1:8d:cf:62: dc:bd:98:46 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fmhDMP6XvivG6/69yAveMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4NTIwNmFjMDhkODQwYzI4YmY0YWM1Njg5OWYyYTI4Zjhm ZGNjYzUwHhcNMjYwMTAxMTIxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNmNmZDQ1YWRkYjY0Mzg5OTZhYjE0ODFlZDkxNThjNzMxZWQzZTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNgSK1sAhyzWsQ7EmCO8EAF3DG4+ kJDAhCdbXyBLWAwfFCSaohCYlq97htigJOw9q8Oxu6tWHvgKybnbXjhoL8DiN+dD fLo3RlTQqCyB5NEH77QFS7sjhmM021vkil0F+bdh0mXn/O5Zlc9TW1MBxfCr23eM rmQouEoEaR3WoDMgJF1jDGB/4kaMzFntVBpXYiUyBtk7BTqXhuG9vu2X3dRDHrMH XLX7sEqJ1Y9/LMBBKOu6iNjWhfuqIEhMDrJ07XJLCye4NNYINkSzpJeeHwRcjBlF 4eBBCR7lFpzCEapiXyuogT5JaV/6uvxtg+rnO94uK87wvjg0eF9izS0ldQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLbP1FrdtkOJlqsUge2RWMcx7T4rMB8GA1UdIwQY MBaAFDhSBqwI2EDCi/SsVomfKij4/czFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0ZJR3JBallRTUtMOUt4V2laOHFLUGo5ek1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9mOTU5NjktNjdlZi00MDhlLWE3NDMt ZTFlYjc5ODk5MjQyLzEvdHNfVVd0MjJRNG1XcXhTQjdaRll4ekh0UGlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9mOTU5NjktNjdlZi00MDhlLWE3NDMtZTFlYjc5ODk5MjQy LzEvT0ZJR3JBallRTUtMOUt4V2laOHFLUGo5ek1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuSqOMA0G CSqGSIb3DQEBCwUAA4IBAQBImPs0WaHhQ7rkw/aaVYM/NisXWCq7Q/O0MwHQNSyw l95c8K1jYs+Ehex6ORJtG/Hv3jkcsYRABH7Wu4KBrZSrZ7OPd0+ldP/xphXUymfH z8WZh71OhZCSHUCEnlbCVOklorUYmpYaLpo3Jds3sD9SuJBd4UU7EtqD2AM3SfW4 +ZIsWR9pmwTbJZ/5WzCPsH0e/Eq5x+ayPlePakw3rnTjdU8RgoFPHKnbvFYABx03 0BwlrHMrabq+a53MQMCfSjfR1sPE94BHIGD+UZ10UTYqQfDrxgorTpex+Xr6nELd ZC+ss0zTLiMYzVH2WYdO8SQsNsh/ZhNCJMGNz2LcvZhG -----END CERTIFICATE-----Generated at Tue Feb 10 00:09:56 2026 by rpki-client