This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/TrLgt6O4kepcEuMxF4qEbgp9fso.roa File: TrLgt6O4kepcEuMxF4qEbgp9fso.roa (raw, json) Hash identifier: 6t22oRdt1hxqWXIDOjdGE92BzuYNUoFqu24pLal79dQ= Subject key identifier: 4E:B2:E0:B7:A3:B8:91:EA:5C:12:E3:31:17:8A:84:6E:0A:7D:7E:CA Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019BFA87ED3EB3D94DAFF706C0B61AC3F113 Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/TrLgt6O4kepcEuMxF4qEbgp9fso.roa Signing time: Mon 26 Jan 2026 13:39:30 +0000 ROA not before: Mon 26 Jan 2026 13:39:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63023 IP address blocks: 194.26.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 07:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:87:ed:3e:b3:d9:4d:af:f7:06:c0:b6:1a:c3:f1:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Jan 26 13:39:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4eb2e0b7a3b891ea5c12e331178a846e0a7d7eca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f0:a7:64:80:b1:de:82:9f:81:ad:ed:d6:59: 79:df:98:c1:19:39:e3:de:92:5a:96:88:74:f9:bd: 41:13:9d:75:c4:cc:93:16:af:ce:bb:e4:c8:1c:e1: de:73:07:55:c0:01:2a:55:a6:41:e7:63:14:ba:7c: d8:f1:65:34:28:b3:1c:c3:96:2e:ec:f0:4b:f1:93: d8:43:92:c8:cc:25:ef:10:10:8f:d6:8f:21:b5:38: d8:cf:6a:e6:82:06:43:2c:f9:2d:78:63:bd:6f:f5: 46:4f:32:9a:c3:a4:2a:f7:ff:b2:c4:69:2e:c4:c1: 2d:c2:c8:c4:fe:09:ab:f2:69:1d:57:44:d3:42:72: c5:4b:57:ea:b7:c8:17:6b:5d:cd:35:b8:90:30:17: f7:e3:af:16:1b:d2:4e:4b:26:04:14:22:bb:22:c9: d4:03:17:40:3b:38:0c:45:82:bb:11:ae:b5:4a:b5: 33:c4:d8:49:f0:eb:2e:bb:44:a0:bd:8a:da:7c:28: 44:9b:22:9f:fc:60:91:3a:57:25:05:0c:17:2d:2c: 26:ff:4f:e0:c3:42:dd:85:e1:88:ba:a1:c3:9a:b0: 32:e1:fb:46:65:00:c2:16:f8:89:b0:d8:fb:d2:19: 9d:b5:28:f2:b5:09:d7:95:f7:32:24:02:ad:a1:94: bc:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:B2:E0:B7:A3:B8:91:EA:5C:12:E3:31:17:8A:84:6E:0A:7D:7E:CA X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/TrLgt6O4kepcEuMxF4qEbgp9fso.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.26.195.0/24 Signature Algorithm: sha256WithRSAEncryption d8:c9:13:cc:9a:a2:8b:56:3f:fc:0c:7a:05:3a:ba:bf:70:b6: 5c:60:2c:5c:a8:be:fa:02:ac:12:4f:26:cf:9a:1e:d4:74:aa: 26:93:a4:48:36:3f:63:b7:9b:47:f3:84:3b:36:b0:8b:83:a7: 03:de:09:ad:a6:04:1f:99:fb:d6:45:cf:14:09:3c:98:e3:73: e7:f5:e9:4c:4d:f3:f0:73:05:87:c1:1e:8e:64:0f:48:04:93: 1c:13:55:99:d5:38:04:33:ce:2f:76:65:b9:b3:b7:4e:54:69: fd:2a:8f:5a:67:48:6e:6b:29:62:87:46:b5:73:f6:08:4d:6e: 3f:55:67:39:d1:bb:9f:04:07:5b:9f:61:81:a5:05:71:e9:14: ea:a6:de:87:9a:05:05:ee:a3:b6:e2:9e:25:0a:8b:0d:09:48: cf:19:98:87:4e:bf:c7:36:f9:8d:10:1a:fc:da:8d:b1:2b:36: 72:9e:d4:63:f0:90:28:9d:f7:95:a7:4b:22:8c:ab:91:33:94: 90:41:8f:9d:cb:12:03:56:e8:43:34:9d:65:7e:01:b5:1e:99: 5b:e8:70:84:04:a2:b2:d0:30:0f:4e:9f:32:a3:58:72:ad:59: cd:8a:e0:c8:1a:1e:28:ab:f1:e6:be:a8:fa:dc:52:66:f5:67: 9d:18:53:17 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZv6h+0+s9lNr/cGwLYaw/ETMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjYwMTI2MTMzOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZWIyZTBiN2EzYjg5MWVhNWMxMmUzMzExNzhhODQ2ZTBhN2Q3ZWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvCnZICx3oKfga3t1ll535jBGTnj 3pJaloh0+b1BE511xMyTFq/Ou+TIHOHecwdVwAEqVaZB52MUunzY8WU0KLMcw5Yu 7PBL8ZPYQ5LIzCXvEBCP1o8htTjYz2rmggZDLPkteGO9b/VGTzKaw6Qq9/+yxGku xMEtwsjE/gmr8mkdV0TTQnLFS1fqt8gXa13NNbiQMBf3468WG9JOSyYEFCK7IsnU AxdAOzgMRYK7Ea61SrUzxNhJ8Osuu0SgvYrafChEmyKf/GCROlclBQwXLSwm/0/g w0LdheGIuqHDmrAy4ftGZQDCFviJsNj70hmdtSjytQnXlfcyJAKtoZS8EQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE6y4LejuJHqXBLjMReKhG4KfX7KMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvVHJMZ3Q2TzRrZXBjRXVNeEY0cUViZ3A5ZnNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwhrDMA0G CSqGSIb3DQEBCwUAA4IBAQDYyRPMmqKLVj/8DHoFOrq/cLZcYCxcqL76AqwSTybP mh7UdKomk6RINj9jt5tH84Q7NrCLg6cD3gmtpgQfmfvWRc8UCTyY43Pn9elMTfPw cwWHwR6OZA9IBJMcE1WZ1TgEM84vdmW5s7dOVGn9Ko9aZ0huaylih0a1c/YITW4/ VWc50bufBAdbn2GBpQVx6RTqpt6HmgUF7qO24p4lCosNCUjPGZiHTr/HNvmNEBr8 2o2xKzZyntRj8JAonfeVp0sijKuRM5SQQY+dyxIDVuhDNJ1lfgG1Hplb6HCEBKKy 0DAPTp8yo1hyrVnNiuDIGh4oq/Hmvqj63FJm9WedGFMX -----END CERTIFICATE-----Generated at Tue Jan 27 11:47:10 2026 by rpki-client