This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/TPBr4qhuEHbVrpx83N8QUJTDNdU.roa File: TPBr4qhuEHbVrpx83N8QUJTDNdU.roa (raw, json) Hash identifier: C2m3VR4l9I+Rc76oZzgGxywyrqTLMzeW3a0jSsQhw3k= Subject key identifier: 4C:F0:6B:E2:A8:6E:10:76:D5:AE:9C:7C:DC:DF:10:50:94:C3:35:D5 Certificate issuer: /CN=2c40fcd53987b209f8af39ca1211f27060a8902e Certificate serial: 019B7A5B542FF926CADF2D82EE7BC25A8C86 Authority key identifier: 2C:40:FC:D5:39:87:B2:09:F8:AF:39:CA:12:11:F2:70:60:A8:90:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/TPBr4qhuEHbVrpx83N8QUJTDNdU.roa Signing time: Thu 01 Jan 2026 16:19:24 +0000 ROA not before: Thu 01 Jan 2026 16:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208800 IP address blocks: 77.242.240.0/21 maxlen: 21 77.242.240.0/22 maxlen: 22 77.242.240.0/23 maxlen: 23 77.242.240.0/24 maxlen: 24 77.242.241.0/24 maxlen: 24 77.242.242.0/23 maxlen: 23 77.242.242.0/24 maxlen: 24 77.242.243.0/24 maxlen: 24 77.242.244.0/22 maxlen: 22 77.242.244.0/23 maxlen: 23 77.242.244.0/24 maxlen: 24 77.242.245.0/24 maxlen: 24 77.242.246.0/23 maxlen: 23 77.242.246.0/24 maxlen: 24 77.242.247.0/24 maxlen: 24 77.242.248.0/24 maxlen: 24 77.242.249.0/24 maxlen: 24 77.242.250.0/24 maxlen: 24 77.242.251.0/24 maxlen: 24 77.242.252.0/24 maxlen: 24 77.242.253.0/24 maxlen: 24 77.242.254.0/23 maxlen: 23 77.242.254.0/24 maxlen: 24 77.242.255.0/24 maxlen: 24 91.201.4.0/22 maxlen: 22 91.201.4.0/24 maxlen: 24 91.201.5.0/24 maxlen: 24 91.201.6.0/24 maxlen: 24 91.201.7.0/24 maxlen: 24 188.116.28.0/22 maxlen: 22 188.116.28.0/24 maxlen: 24 188.116.29.0/24 maxlen: 24 188.116.30.0/24 maxlen: 24 188.116.31.0/24 maxlen: 24 2a0e:6e80::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:54:2f:f9:26:ca:df:2d:82:ee:7b:c2:5a:8c:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c40fcd53987b209f8af39ca1211f27060a8902e Validity Not Before: Jan 1 16:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4cf06be2a86e1076d5ae9c7cdcdf105094c335d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:94:f9:78:08:ed:fe:a5:5e:89:0c:ec:29:f3: 22:57:ef:a9:fc:69:94:b8:e1:28:e1:50:d0:c0:09: 21:6a:f6:4a:95:21:28:b0:ca:cb:d8:07:31:83:43: cd:c5:88:f3:ee:d2:51:a4:3a:00:09:a9:e0:75:70: c6:19:9f:f0:53:0b:0b:1d:3d:76:fc:f2:59:90:0f: 4f:52:39:39:2c:fd:b0:d0:fa:d5:97:ae:34:8b:a0: 04:ab:59:58:f6:8d:a2:f3:53:ce:4f:a9:13:4b:fd: 94:0a:ed:0e:5d:4c:09:39:2b:eb:f9:39:c5:f2:30: ea:54:7c:d8:54:f6:5d:23:b1:b0:4b:df:00:aa:b1: 14:02:a8:57:c7:80:be:b9:27:43:2e:0b:c6:6d:0e: 56:b8:5e:5a:82:7f:f8:bf:aa:0e:86:a3:22:31:c1: 34:36:10:76:c7:63:99:34:db:ea:c3:9a:3a:8d:29: 16:2b:a4:d4:26:ab:d1:4f:fd:32:76:85:60:4d:f7: 49:eb:f8:c2:d2:28:14:14:17:12:6f:12:9e:a9:ea: 04:70:5e:4c:26:f7:c7:79:c3:ad:40:ef:0d:05:d3: ee:c8:4d:48:94:a0:ea:24:5c:7b:70:45:4e:fe:ea: f5:d4:4f:cc:de:49:c0:9c:c9:4d:f5:25:00:f0:1e: 1f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F0:6B:E2:A8:6E:10:76:D5:AE:9C:7C:DC:DF:10:50:94:C3:35:D5 X509v3 Authority Key Identifier: keyid:2C:40:FC:D5:39:87:B2:09:F8:AF:39:CA:12:11:F2:70:60:A8:90:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/TPBr4qhuEHbVrpx83N8QUJTDNdU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.242.240.0/20 91.201.4.0/22 188.116.28.0/22 IPv6: 2a0e:6e80::/44 Signature Algorithm: sha256WithRSAEncryption 1b:0c:c5:bc:c3:86:ff:74:76:34:4c:8a:c6:ec:0d:1a:8e:84: 53:ab:f6:39:3c:8a:9f:cc:6c:b7:9c:e3:0e:f9:69:6e:88:2c: 07:7f:c2:e9:3c:18:ff:8e:2b:fb:3d:05:73:c2:1f:bc:25:80: a6:a5:6d:6b:4b:af:15:8e:20:d6:24:cb:49:aa:90:30:20:b8: 16:8f:52:7e:b9:35:a3:67:0d:e5:45:9b:3d:d2:20:4d:73:14: 92:bc:6e:80:3c:4a:fe:d2:82:d9:6e:3d:ca:b9:42:b5:d8:7a: 22:09:0e:20:49:bb:d2:51:ef:5d:81:f0:05:e7:dd:15:e3:91: 44:ec:d8:89:cd:b9:51:66:b5:e4:37:9e:de:a0:6d:e2:66:be: 4a:14:57:9f:9c:b6:49:8e:9f:23:4b:4e:8f:d6:38:30:66:da: 73:4a:88:8b:41:04:3e:c1:38:48:8c:24:a5:69:f4:7c:30:fe: 5d:d0:ad:a5:6e:fb:28:d4:75:57:3e:5e:07:f5:c4:d6:18:08: 18:03:78:88:e3:17:4c:c1:b9:01:71:0c:61:bb:7d:90:f3:9e: a9:e4:7e:bc:c6:47:b9:5d:37:b9:ff:6f:55:ae:0e:9c:f9:5a: 25:9f:9f:f7:04:be:a8:9b:8e:54:af:f8:b1:cc:35:42:ba:7d: 63:11:91:69 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt6W1Qv+SbK3y2C7nvCWoyGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNDBmY2Q1Mzk4N2IyMDlmOGFmMzljYTEyMTFmMjcwNjBh ODkwMmUwHhcNMjYwMTAxMTYxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Y2YwNmJlMmE4NmUxMDc2ZDVhZTljN2NkY2RmMTA1MDk0YzMzNWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpT5eAjt/qVeiQzsKfMiV++p/GmU uOEo4VDQwAkhavZKlSEosMrL2Acxg0PNxYjz7tJRpDoACangdXDGGZ/wUwsLHT12 /PJZkA9PUjk5LP2w0PrVl640i6AEq1lY9o2i81POT6kTS/2UCu0OXUwJOSvr+TnF 8jDqVHzYVPZdI7GwS98AqrEUAqhXx4C+uSdDLgvGbQ5WuF5agn/4v6oOhqMiMcE0 NhB2x2OZNNvqw5o6jSkWK6TUJqvRT/0ydoVgTfdJ6/jC0igUFBcSbxKeqeoEcF5M JvfHecOtQO8NBdPuyE1IlKDqJFx7cEVO/ur11E/M3knAnMlN9SUA8B4fzQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFEzwa+KobhB21a6cfNzfEFCUwzXVMB8GA1UdIwQY MBaAFCxA/NU5h7IJ+K85yhIR8nBgqJAuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEVEODFUbUhzZ240cnpuS0VoSHljR0Nva0M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy83MDlmYzktNjhlZi00MTFlLWExY2Mt ZTFlODA3ZWNkNGRmLzEvVFBCcjRxaHVFSGJWcnB4ODNOOFFVSlRETmRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy83MDlmYzktNjhlZi00MTFlLWExY2MtZTFlODA3ZWNkNGRm LzEvTEVEODFUbUhzZ240cnpuS0VoSHljR0Nva0M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQETfLwAwQC W8kEAwQCvHQcMA8EAgACMAkDBwQqDm6AAAAwDQYJKoZIhvcNAQELBQADggEBABsM xbzDhv90djRMisbsDRqOhFOr9jk8ip/MbLec4w75aW6ILAd/wuk8GP+OK/s9BXPC H7wlgKalbWtLrxWOINYky0mqkDAguBaPUn65NaNnDeVFmz3SIE1zFJK8boA8Sv7S gtluPcq5QrXYeiIJDiBJu9JR712B8AXn3RXjkUTs2InNuVFmteQ3nt6gbeJmvkoU V5+ctkmOnyNLTo/WODBm2nNKiItBBD7BOEiMJKVp9Hww/l3QraVu+yjUdVc+Xgf1 xNYYCBgDeIjjF0zBuQFxDGG7fZDznqnkfrzGR7ldN7n/b1WuDpz5WiWfn/cEvqib jlSv+LHMNUK6fWMRkWk= -----END CERTIFICATE-----Generated at Mon Feb 9 23:54:56 2026 by rpki-client