This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/tmmgBap4GndSbssVWP_Zv5yxy0U.roa File: tmmgBap4GndSbssVWP_Zv5yxy0U.roa (raw, json) Hash identifier: gb73VFKax2G1EDr6hdJmhCo4dXaXn9QU9aZ7nqN+6A8= Subject key identifier: B6:69:A0:05:AA:78:1A:77:52:6E:CB:15:58:FF:D9:BF:9C:B1:CB:45 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C136FB8A8A478F2AE5E1D8569494F3E Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/tmmgBap4GndSbssVWP_Zv5yxy0U.roa Signing time: Fri 02 Jan 2026 00:20:07 +0000 ROA not before: Fri 02 Jan 2026 00:20:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48266 IP address blocks: 194.147.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:6f:b8:a8:a4:78:f2:ae:5e:1d:85:69:49:4f:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b669a005aa781a77526ecb1558ffd9bf9cb1cb45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:43:09:1f:1a:1d:b5:85:3c:de:29:e1:1f:a9: 79:60:d7:57:8a:92:c4:41:b5:eb:0f:84:28:8f:ae: 95:19:6b:9a:54:bc:ea:f2:c9:27:2d:c2:c8:38:c4: e1:2c:73:2f:8e:31:a9:a3:7b:31:d6:99:e3:65:34: 83:6c:33:47:12:02:6e:65:b5:00:a8:77:de:a2:3c: 93:5e:3c:3f:44:0f:4e:ee:ff:c1:ac:dc:13:b9:f0: 39:48:b4:50:d7:6d:93:fc:9c:11:88:74:b6:c0:c0: c6:3b:58:ad:4e:aa:c6:25:31:31:bf:21:7a:47:68: b5:c5:e4:bf:ef:98:1f:5b:35:ed:2b:eb:51:bb:fa: d0:be:6e:3a:f4:a3:7b:53:e7:12:53:07:19:7e:31: a2:13:96:c9:4b:8f:b7:2a:73:d7:71:ce:55:f1:e4: a4:bf:8a:e0:27:5e:94:8e:db:ff:2e:49:ea:58:b5: 23:66:b4:0c:a2:3f:be:da:aa:d1:8a:b2:9c:88:75: d5:ba:fe:40:e2:d1:61:d7:fe:12:93:cc:1d:90:84: 03:27:d1:6e:9c:14:f8:d6:be:de:9f:e2:01:b1:1e: 22:db:27:ad:1e:ac:9a:fa:98:37:e4:8e:3c:5e:16: d2:f3:e6:a6:42:f0:c2:db:b5:02:cd:72:24:6f:9f: 81:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:69:A0:05:AA:78:1A:77:52:6E:CB:15:58:FF:D9:BF:9C:B1:CB:45 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/tmmgBap4GndSbssVWP_Zv5yxy0U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.147.16.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:c3:60:bb:c5:6c:c0:30:aa:0c:19:3c:0e:d7:b8:f1:6c:6f: 81:98:92:19:8f:9e:8d:19:f7:c2:30:15:f8:53:7a:21:b8:79: 28:89:6f:9a:69:26:2b:2f:77:11:68:a2:77:1a:9e:ee:1b:11: f8:6f:8d:ee:e5:f8:42:6e:72:52:29:a9:68:b4:b4:99:43:e8: 0f:b6:60:e1:9e:6a:20:c5:5e:ad:a6:98:19:f2:54:b1:89:13: 39:e6:12:cb:56:cf:a2:b4:f5:d6:c4:30:83:82:44:ac:6f:fc: ca:78:41:f5:19:75:dd:d3:0d:06:6b:33:0b:cb:a4:da:a9:ef: f1:e3:e0:e4:ba:ab:64:28:c5:74:68:f3:7a:2e:4c:0b:78:fe: 31:e4:76:5f:13:bb:01:f1:b4:08:fe:ea:2b:2d:dc:4a:e4:17: 53:f0:21:a3:95:47:6a:67:b2:e8:9e:ba:3a:77:ee:f9:69:6c: 82:81:e1:a4:b7:90:4f:4c:db:ba:45:27:9a:66:e9:1f:d5:a1: e7:1e:23:29:76:3b:f3:11:69:ca:9f:f8:de:db:a6:fe:b2:77: 05:49:98:97:50:ee:78:61:51:29:5d:6d:9b:c2:5e:eb:a1:f3: b3:95:3e:d6:a1:66:4b:08:da:2c:cd:fa:75:c1:00:c6:d2:e1: 75:e3:29:2a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E2+4qKR48q5eHYVpSU8+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjY5YTAwNWFhNzgxYTc3NTI2ZWNiMTU1OGZmZDliZjljYjFjYjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0MJHxodtYU83inhH6l5YNdXipLE QbXrD4Qoj66VGWuaVLzq8sknLcLIOMThLHMvjjGpo3sx1pnjZTSDbDNHEgJuZbUA qHfeojyTXjw/RA9O7v/BrNwTufA5SLRQ122T/JwRiHS2wMDGO1itTqrGJTExvyF6 R2i1xeS/75gfWzXtK+tRu/rQvm469KN7U+cSUwcZfjGiE5bJS4+3KnPXcc5V8eSk v4rgJ16Ujtv/LknqWLUjZrQMoj++2qrRirKciHXVuv5A4tFh1/4Sk8wdkIQDJ9Fu nBT41r7en+IBsR4i2yetHqya+pg35I48XhbS8+amQvDC27UCzXIkb5+BuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLZpoAWqeBp3Um7LFVj/2b+csctFMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvdG1tZ0JhcDRHbmRTYnNzVldQX1p2NXl4eTBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpMQMA0G CSqGSIb3DQEBCwUAA4IBAQALw2C7xWzAMKoMGTwO17jxbG+BmJIZj56NGffCMBX4 U3ohuHkoiW+aaSYrL3cRaKJ3Gp7uGxH4b43u5fhCbnJSKalotLSZQ+gPtmDhnmog xV6tppgZ8lSxiRM55hLLVs+itPXWxDCDgkSsb/zKeEH1GXXd0w0GazMLy6Taqe/x 4+DkuqtkKMV0aPN6LkwLeP4x5HZfE7sB8bQI/uorLdxK5BdT8CGjlUdqZ7Lonro6 d+75aWyCgeGkt5BPTNu6RSeaZukf1aHnHiMpdjvzEWnKn/je26b+sncFSZiXUO54 YVEpXW2bwl7rofOzlT7WoWZLCNoszfp1wQDG0uF14ykq -----END CERTIFICATE-----Generated at Fri Jan 2 23:53:13 2026 by rpki-client