This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/tGIilz64WI57MUI_MCj3taMBRL0.roa File: tGIilz64WI57MUI_MCj3taMBRL0.roa (raw, json) Hash identifier: DEjo9Vwuj51ivsqsTKFyfCU2IKBbvkG1N6bQbVeaaJY= Subject key identifier: B4:62:22:97:3E:B8:58:8E:7B:31:42:3F:30:28:F7:B5:A3:01:44:BD Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019C2824911B43D4B41ED46B303D9BA28AC5 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/tGIilz64WI57MUI_MCj3taMBRL0.roa Signing time: Wed 04 Feb 2026 10:13:30 +0000 ROA not before: Wed 04 Feb 2026 10:13:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 984 IP address blocks: 185.214.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 18:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:28:24:91:1b:43:d4:b4:1e:d4:6b:30:3d:9b:a2:8a:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Feb 4 10:13:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b46222973eb8588e7b31423f3028f7b5a30144bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:14:6d:df:81:3e:23:40:29:e6:0b:eb:a2:df: eb:a8:77:f5:67:10:5a:c0:83:40:af:7b:f8:e4:96: 31:1f:9b:b2:6c:de:50:03:b9:9a:9d:79:14:8f:af: 1d:8d:9d:28:5a:02:89:01:ef:fc:7e:52:da:fd:4b: fa:eb:91:aa:fd:cd:23:8a:e6:d8:2c:bf:db:e3:6a: 85:66:a9:17:bc:f9:9f:c1:90:05:15:fd:b7:a0:63: 9e:9f:db:40:17:f8:32:77:50:38:e2:e2:46:61:8d: a0:6c:cb:41:84:fa:77:19:34:5b:8a:9b:61:84:fd: bb:96:78:2c:16:17:a2:05:32:44:20:23:3e:75:8b: 87:1d:35:61:12:a9:3b:c5:08:cb:00:16:b9:5f:d0: 77:e0:69:2f:b4:16:9f:41:e0:f0:87:36:f2:b6:9d: 45:8c:34:69:ff:9e:28:ff:09:b5:f8:ec:61:f2:57: 9d:f5:cd:eb:2f:68:2c:27:c0:e9:8b:2e:b4:cb:10: 71:29:1a:3d:92:52:89:25:05:6e:9e:54:73:70:97: 08:41:c7:aa:23:7d:ca:91:05:d6:08:2b:1b:a9:a8: 98:61:06:83:37:1f:2f:25:f3:f3:87:39:f3:ab:13: ab:3a:c2:29:aa:e6:7a:b3:ae:41:31:3d:69:b3:f5: 99:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:62:22:97:3E:B8:58:8E:7B:31:42:3F:30:28:F7:B5:A3:01:44:BD X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/tGIilz64WI57MUI_MCj3taMBRL0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.214.108.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:e8:e1:50:2c:f0:7e:92:31:24:8b:8c:17:7e:44:e9:68:2a: b4:ae:b3:1e:2d:ee:f4:98:78:5b:a6:fe:28:8b:77:81:e4:38: 1d:2a:55:33:45:96:fb:5b:aa:fc:30:e3:5d:c0:3d:82:ad:86: 36:9d:fb:93:9a:ac:b4:ca:07:22:b5:92:7a:15:ad:8d:6e:b5: 9f:6e:02:5a:6e:3d:87:9f:8a:a4:16:cd:e0:a7:b5:5e:0b:dd: 27:6a:98:d9:93:c9:09:0d:3a:e3:22:74:08:17:6b:32:76:a3: 5b:6c:fa:4b:20:39:e0:51:30:ae:a4:5c:98:c3:4d:41:61:4c: 7c:26:88:15:c9:84:77:47:b3:b6:b7:b0:a2:c0:13:00:d6:0b: e5:ad:0e:43:9b:c5:67:47:51:20:f0:40:59:56:4f:51:0e:f9: 3c:ff:53:d2:cd:8c:8b:6f:52:12:71:07:d4:e7:87:14:1f:24: 11:44:f4:4d:1d:80:5e:8d:27:b7:f6:64:69:a2:4b:3a:01:ab: e3:ab:5d:17:8b:b6:93:68:22:fc:34:bb:c6:b9:ac:63:47:33: 6e:a0:af:dc:27:0b:10:82:10:cd:87:66:18:6e:5b:a9:85:d8: 48:e0:5a:02:2e:2f:f7:21:59:a5:03:0f:77:67:0e:9a:88:4b: 92:65:09:ba -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwoJJEbQ9S0HtRrMD2boorFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMjA0MTAxMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDYyMjI5NzNlYjg1ODhlN2IzMTQyM2YzMDI4ZjdiNWEzMDE0NGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxRt34E+I0Ap5gvrot/rqHf1ZxBa wINAr3v45JYxH5uybN5QA7manXkUj68djZ0oWgKJAe/8flLa/Uv665Gq/c0jiubY LL/b42qFZqkXvPmfwZAFFf23oGOen9tAF/gyd1A44uJGYY2gbMtBhPp3GTRbipth hP27lngsFheiBTJEICM+dYuHHTVhEqk7xQjLABa5X9B34GkvtBafQeDwhzbytp1F jDRp/54o/wm1+Oxh8led9c3rL2gsJ8Dpiy60yxBxKRo9klKJJQVunlRzcJcIQceq I33KkQXWCCsbqaiYYQaDNx8vJfPzhznzqxOrOsIpquZ6s65BMT1ps/WZEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLRiIpc+uFiOezFCPzAo97WjAUS9MB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvdEdJaWx6NjRXSTU3TVVJX01DajN0YU1CUkwwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudZsMA0G CSqGSIb3DQEBCwUAA4IBAQBa6OFQLPB+kjEki4wXfkTpaCq0rrMeLe70mHhbpv4o i3eB5DgdKlUzRZb7W6r8MONdwD2CrYY2nfuTmqy0ygcitZJ6Fa2NbrWfbgJabj2H n4qkFs3gp7VeC90napjZk8kJDTrjInQIF2sydqNbbPpLIDngUTCupFyYw01BYUx8 JogVyYR3R7O2t7CiwBMA1gvlrQ5Dm8VnR1Eg8EBZVk9RDvk8/1PSzYyLb1IScQfU 54cUHyQRRPRNHYBejSe39mRpoks6Aavjq10Xi7aTaCL8NLvGuaxjRzNuoK/cJwsQ ghDNh2YYbluphdhI4FoCLi/3IVmlAw93Zw6aiEuSZQm6 -----END CERTIFICATE-----Generated at Thu Feb 5 02:39:38 2026 by rpki-client