This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Tetlbq6G4OBayOTJy3b3U4wRBh4.roa File: Tetlbq6G4OBayOTJy3b3U4wRBh4.roa (raw, json) Hash identifier: 1xUBjhvrmdkFzC6zQkAh1tvj2NS9eZ4GK2w5leTWRXU= Subject key identifier: 4D:EB:65:6E:AE:86:E0:E0:5A:C8:E4:C9:CB:76:F7:53:8C:11:06:1E Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C1399DB053BD7D02C8F27837025E216 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Tetlbq6G4OBayOTJy3b3U4wRBh4.roa Signing time: Fri 02 Jan 2026 00:20:17 +0000 ROA not before: Fri 02 Jan 2026 00:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213005 IP address blocks: 45.81.155.0/24 maxlen: 24 81.21.228.0/22 maxlen: 24 85.115.192.0/22 maxlen: 24 88.135.64.0/22 maxlen: 24 92.60.34.0/24 maxlen: 24 93.92.228.0/22 maxlen: 24 185.106.124.0/22 maxlen: 24 185.179.228.0/22 maxlen: 22 185.189.64.0/22 maxlen: 24 185.211.180.0/22 maxlen: 22 185.223.220.0/22 maxlen: 22 185.227.128.0/22 maxlen: 22 185.230.48.0/22 maxlen: 24 185.245.34.0/23 maxlen: 23 193.26.152.0/22 maxlen: 24 193.35.88.0/22 maxlen: 24 194.38.56.0/22 maxlen: 24 212.80.208.0/22 maxlen: 24 212.115.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:99:db:05:3b:d7:d0:2c:8f:27:83:70:25:e2:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4deb656eae86e0e05ac8e4c9cb76f7538c11061e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2a:a7:05:39:44:93:fb:ea:0c:7b:18:be:be: 65:ee:37:8a:06:1d:dc:05:8c:b8:24:8d:2f:08:84: 2b:19:a2:72:6e:be:6f:61:4a:22:2a:01:aa:45:c0: 69:e8:eb:36:59:68:07:99:7f:05:cb:ab:25:4c:17: 0f:dc:4e:40:e8:a5:3e:e3:05:93:e1:ff:3c:06:2e: 70:fd:10:55:0f:60:0a:73:82:ec:31:5c:c4:d6:1c: e1:d7:59:c4:a1:62:73:2b:aa:00:28:e1:26:de:d4: a5:be:86:9e:ab:25:22:05:26:54:5a:31:64:fe:7f: 58:64:a7:85:c2:73:72:90:ac:e5:1e:34:b8:18:5f: 0b:70:ce:ef:f8:09:15:ba:72:e2:95:c9:cc:a2:bc: 65:6a:95:e0:1b:2d:c9:d5:bb:09:0b:d0:af:97:eb: 0c:4e:f8:7d:28:8d:39:ad:76:74:23:94:58:9b:0a: 5a:90:03:bb:60:79:22:a6:f3:32:4b:c5:fe:64:d3: 23:b1:02:3e:53:20:0c:39:25:d2:d1:a6:30:97:de: 35:51:a9:5c:13:54:c0:e8:7b:c1:e1:f4:7f:32:1f: 87:9b:a6:4e:1f:6d:3e:1e:93:2f:b5:91:9e:69:83: f6:90:ec:ec:1f:bb:d3:b2:8d:d6:7c:06:25:4f:85: b2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:EB:65:6E:AE:86:E0:E0:5A:C8:E4:C9:CB:76:F7:53:8C:11:06:1E X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Tetlbq6G4OBayOTJy3b3U4wRBh4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.155.0/24 81.21.228.0/22 85.115.192.0/22 88.135.64.0/22 92.60.34.0/24 93.92.228.0/22 185.106.124.0/22 185.179.228.0/22 185.189.64.0/22 185.211.180.0/22 185.223.220.0/22 185.227.128.0/22 185.230.48.0/22 185.245.34.0/23 193.26.152.0/22 193.35.88.0/22 194.38.56.0/22 212.80.208.0/22 212.115.44.0/22 Signature Algorithm: sha256WithRSAEncryption b9:27:ac:95:9e:aa:2e:25:ba:fd:88:fc:3b:fd:ce:3d:67:66: d9:4e:b1:9d:5d:c0:e9:64:a3:63:ce:35:35:e0:ee:2f:21:20: 65:c2:93:5e:45:52:45:4a:d4:78:58:0e:f1:bb:27:2e:82:58: 0f:25:b6:f1:55:c5:84:df:4f:cd:0e:db:35:e7:0d:76:d9:a8: 15:f8:c1:41:1e:42:d0:88:0d:be:f5:4e:7f:63:1e:10:a8:5a: ea:9a:38:49:79:2c:15:51:89:bb:01:e1:6b:78:27:f0:c2:c7: a8:3e:4f:1a:7a:88:19:9e:41:77:27:70:cc:75:6f:73:a8:ae: 4c:c7:68:8b:61:64:2e:98:1c:95:f1:b2:e9:f2:a0:39:e0:cc: f6:a0:ee:c4:86:6a:c2:81:ba:4e:6b:56:d6:56:89:8f:25:4e: c9:b4:91:87:d2:f8:12:a7:9a:d6:79:8b:6a:8a:7f:49:e2:5d: b7:77:42:80:34:eb:cc:d5:a2:86:7b:da:50:90:45:f7:15:10: 12:4b:f1:31:22:a7:77:d2:b3:3f:46:53:c7:8b:15:38:14:8a: 03:b3:4c:b2:3f:6c:e9:c7:67:eb:d8:cc:2b:9e:1d:74:12:2d: e6:82:a6:5f:96:c5:cb:26:10:2b:7a:cf:f8:6a:fc:e4:9a:4c: 2b:de:ae:f3 -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgISAZt8E5nbBTvX0CyPJ4NwJeIWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZGViNjU2ZWFlODZlMGUwNWFjOGU0YzljYjc2Zjc1MzhjMTEwNjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyqnBTlEk/vqDHsYvr5l7jeKBh3c BYy4JI0vCIQrGaJybr5vYUoiKgGqRcBp6Os2WWgHmX8Fy6slTBcP3E5A6KU+4wWT 4f88Bi5w/RBVD2AKc4LsMVzE1hzh11nEoWJzK6oAKOEm3tSlvoaeqyUiBSZUWjFk /n9YZKeFwnNykKzlHjS4GF8LcM7v+AkVunLilcnMorxlapXgGy3J1bsJC9Cvl+sM Tvh9KI05rXZ0I5RYmwpakAO7YHkipvMyS8X+ZNMjsQI+UyAMOSXS0aYwl941Ualc E1TA6HvB4fR/Mh+Hm6ZOH20+HpMvtZGeaYP2kOzsH7vTso3WfAYlT4WymwIDAQAB o4ICdjCCAnIwHQYDVR0OBBYEFE3rZW6uhuDgWsjkyct291OMEQYeMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvVGV0bGJxNkc0T0JheU9USnkzYjNVNHdSQmg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGLBggrBgEFBQcBBwEB/wR8MHoweAQCAAEwcgMEAC1RmwME AlEV5AMEAlVzwAMEAliHQAMEAFw8IgMEAl1c5AMEArlqfAMEArmz5AMEArm9QAME ArnTtAMEArnf3AMEArnjgAMEArnmMAMEAbn1IgMEAsEamAMEAsEjWAMEAsImOAME AtRQ0AMEAtRzLDANBgkqhkiG9w0BAQsFAAOCAQEAuSeslZ6qLiW6/Yj8O/3OPWdm 2U6xnV3A6WSjY841NeDuLyEgZcKTXkVSRUrUeFgO8bsnLoJYDyW28VXFhN9PzQ7b NecNdtmoFfjBQR5C0IgNvvVOf2MeEKha6po4SXksFVGJuwHha3gn8MLHqD5PGnqI GZ5BdydwzHVvc6iuTMdoi2FkLpgclfGy6fKgOeDM9qDuxIZqwoG6TmtW1laJjyVO ybSRh9L4Eqea1nmLaop/SeJdt3dCgDTrzNWihnvaUJBF9xUQEkvxMSKnd9KzP0ZT x4sVOBSKA7NMsj9s6cdn69jMK54ddBIt5oKmX5bFyyYQK3rP+Gr85JpMK96u8w== -----END CERTIFICATE-----Generated at Fri Jan 2 23:53:19 2026 by rpki-client