This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/tglsOsq2MXVhhtPQ1fuHwjxCRDE.roa File: tglsOsq2MXVhhtPQ1fuHwjxCRDE.roa (raw, json) Hash identifier: 8XEuad3zZxDli1a1G3vIehCptWc+Hmtp2zxnb2jVTdQ= Subject key identifier: B6:09:6C:3A:CA:B6:31:75:61:86:D3:D0:D5:FB:87:C2:3C:42:44:31 Certificate issuer: /CN=6c195b9bd47001eab50fdba1de0d2d3f4527f675 Certificate serial: 019B7CECF11E6B3A6234427292AA17BE07BF Authority key identifier: 6C:19:5B:9B:D4:70:01:EA:B5:0F:DB:A1:DE:0D:2D:3F:45:27:F6:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/tglsOsq2MXVhhtPQ1fuHwjxCRDE.roa Signing time: Fri 02 Jan 2026 04:17:41 +0000 ROA not before: Fri 02 Jan 2026 04:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 185.121.140.0/24 maxlen: 24 185.121.141.0/24 maxlen: 24 185.121.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:f1:1e:6b:3a:62:34:42:72:92:aa:17:be:07:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c195b9bd47001eab50fdba1de0d2d3f4527f675 Validity Not Before: Jan 2 04:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b6096c3acab631756186d3d0d5fb87c23c424431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:17:9d:79:60:74:82:26:e9:3d:81:7d:ae:21: 86:46:4c:1b:33:d7:05:4c:38:5e:d2:0b:ed:37:fd: ba:5d:75:10:c5:08:e3:0b:8c:0c:a5:37:40:89:7c: 62:ff:ca:aa:54:4f:d1:b9:0e:e1:b8:69:10:48:91: 2b:94:cb:81:c7:ee:aa:dc:e9:04:8b:52:74:76:f1: 23:87:d6:55:7c:05:26:bb:62:50:8e:d5:be:76:21: 87:2e:49:64:ae:0f:03:c8:59:37:e6:fc:73:54:be: d7:4c:c6:da:c1:46:c8:ca:fb:33:57:2e:bc:36:ef: 2d:43:30:1c:8b:18:01:6b:e3:06:14:f9:ba:6d:1b: 8d:d5:0b:12:61:7c:f5:3c:b1:ac:98:39:c7:a6:db: ab:3e:c0:c4:c0:4b:d6:fa:13:6b:69:85:c6:51:62: 59:f0:e1:a4:6b:6e:bd:04:71:f4:01:d7:a4:a4:ea: 9c:ed:f2:0e:a6:b1:96:fa:a2:9e:b0:8c:1c:11:e2: 61:de:ff:60:f0:d2:8e:8f:1f:3d:85:b4:b1:eb:40: 5b:7b:5c:53:19:49:44:19:7c:69:a2:00:73:cd:16: ae:6c:8e:1c:59:d1:9e:9e:2a:f9:d7:8f:e9:39:18: 80:9e:b6:a6:6c:1e:41:bd:00:dd:fa:67:80:90:59: 76:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:09:6C:3A:CA:B6:31:75:61:86:D3:D0:D5:FB:87:C2:3C:42:44:31 X509v3 Authority Key Identifier: keyid:6C:19:5B:9B:D4:70:01:EA:B5:0F:DB:A1:DE:0D:2D:3F:45:27:F6:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/tglsOsq2MXVhhtPQ1fuHwjxCRDE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.121.140.0/23 185.121.143.0/24 Signature Algorithm: sha256WithRSAEncryption c3:0b:4a:c2:16:8f:1e:1f:66:33:d8:41:44:de:1e:01:ff:21: 0a:3e:1d:c2:9c:31:d2:7a:fe:ab:e9:f4:a4:da:2d:98:29:8b: d2:40:f9:8d:94:3c:5a:0c:3b:c2:59:37:9f:1f:96:cc:04:fc: 48:62:dc:e6:ef:13:a0:bb:1f:44:27:17:93:81:2d:cb:f7:c8: bc:78:52:3d:52:2d:1d:ea:77:dc:22:d6:f9:27:7a:82:23:7a: 60:ac:32:22:76:5c:76:03:9e:28:0c:79:f5:63:f3:84:e8:32: 43:34:05:46:48:07:a4:96:47:fd:18:8d:98:69:46:48:5b:8d: 6b:2c:99:39:f3:8c:93:30:0e:91:52:83:77:88:01:58:89:d3: 7d:73:b1:9e:f8:95:a4:07:b4:e7:74:96:2b:a4:8d:0f:cc:b3: 91:68:70:4a:9e:8a:9a:99:e4:c9:19:65:5f:f6:9b:be:42:df: 1d:40:c0:09:d6:05:8d:57:03:f0:c3:9f:b9:bc:bd:af:3b:a9: e9:c8:ac:b1:63:52:f1:99:4c:ab:23:8c:41:57:53:e4:8d:0b: 39:ed:64:50:0b:d5:c6:db:6d:a8:4d:67:50:17:e8:5e:6a:85: f5:aa:8d:05:29:e6:93:d7:c4:74:da:03:f9:0c:73:b9:5d:e1: 52:36:c5:10 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87PEeazpiNEJykqoXvge/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMTk1YjliZDQ3MDAxZWFiNTBmZGJhMWRlMGQyZDNmNDUy N2Y2NzUwHhcNMjYwMTAyMDQxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjA5NmMzYWNhYjYzMTc1NjE4NmQzZDBkNWZiODdjMjNjNDI0NDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRedeWB0gibpPYF9riGGRkwbM9cF TDhe0gvtN/26XXUQxQjjC4wMpTdAiXxi/8qqVE/RuQ7huGkQSJErlMuBx+6q3OkE i1J0dvEjh9ZVfAUmu2JQjtW+diGHLklkrg8DyFk35vxzVL7XTMbawUbIyvszVy68 Nu8tQzAcixgBa+MGFPm6bRuN1QsSYXz1PLGsmDnHpturPsDEwEvW+hNraYXGUWJZ 8OGka269BHH0AdekpOqc7fIOprGW+qKesIwcEeJh3v9g8NKOjx89hbSx60Bbe1xT GUlEGXxpogBzzRaubI4cWdGenir514/pORiAnrambB5BvQDd+meAkFl2EwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLYJbDrKtjF1YYbT0NX7h8I8QkQxMB8GA1UdIwQY MBaAFGwZW5vUcAHqtQ/bod4NLT9FJ/Z1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkJsYm05UndBZXExRDl1aDNnMHRQMFVuOW5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8wMTBkM2QtMWJhOC00YTk2LTgyMTIt OTRhYzhhZjFiZmNmLzEvdGdsc09zcTJNWFZoaHRQUTFmdUh3anhDUkRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS8wMTBkM2QtMWJhOC00YTk2LTgyMTItOTRhYzhhZjFiZmNm LzEvYkJsYm05UndBZXExRDl1aDNnMHRQMFVuOW5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBuXmMAwQA uXmPMA0GCSqGSIb3DQEBCwUAA4IBAQDDC0rCFo8eH2Yz2EFE3h4B/yEKPh3CnDHS ev6r6fSk2i2YKYvSQPmNlDxaDDvCWTefH5bMBPxIYtzm7xOgux9EJxeTgS3L98i8 eFI9Ui0d6nfcItb5J3qCI3pgrDIidlx2A54oDHn1Y/OE6DJDNAVGSAeklkf9GI2Y aUZIW41rLJk584yTMA6RUoN3iAFYidN9c7Ge+JWkB7TndJYrpI0PzLORaHBKnoqa meTJGWVf9pu+Qt8dQMAJ1gWNVwPww5+5vL2vO6npyKyxY1LxmUyrI4xBV1PkjQs5 7WRQC9XG222oTWdQF+heaoX1qo0FKeaT18R02gP5DHO5XeFSNsUQ -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:13 2026 by rpki-client