This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/f-TtHG-5pZXW87X0GbscTUNU96w.roa File: f-TtHG-5pZXW87X0GbscTUNU96w.roa (raw, json) Hash identifier: lCxogCHK18lqz8wrch+QF7zhq9f/HEWgIBotwp+AlGk= Subject key identifier: 7F:E4:ED:1C:6F:B9:A5:95:D6:F3:B5:F4:19:BB:1C:4D:43:54:F7:AC Certificate issuer: /CN=5ceb0ebd878b77d42f2ca9dd08f70c323c5d03db Certificate serial: 019B7BA4F3864EEB979F136BA116280152BD Authority key identifier: 5C:EB:0E:BD:87:8B:77:D4:2F:2C:A9:DD:08:F7:0C:32:3C:5D:03:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/f-TtHG-5pZXW87X0GbscTUNU96w.roa Signing time: Thu 01 Jan 2026 22:19:26 +0000 ROA not before: Thu 01 Jan 2026 22:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44700 IP address blocks: 88.151.64.0/21 maxlen: 24 93.89.0.0/22 maxlen: 24 95.129.208.0/21 maxlen: 24 185.6.68.0/22 maxlen: 24 185.59.12.0/22 maxlen: 24 2a02:17f8::/32 maxlen: 48 2a02:21e0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.crl rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:f3:86:4e:eb:97:9f:13:6b:a1:16:28:01:52:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ceb0ebd878b77d42f2ca9dd08f70c323c5d03db Validity Not Before: Jan 1 22:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7fe4ed1c6fb9a595d6f3b5f419bb1c4d4354f7ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d0:4a:33:77:0b:ed:a7:ab:db:dd:37:14:a6: 7a:7d:da:16:2c:0b:c4:5b:6e:c6:d9:13:f6:cd:9d: d8:35:90:69:f4:e3:3f:99:98:fc:b1:d4:3d:5b:a7: f1:10:ec:ef:7f:03:67:9a:4d:83:0b:0d:b8:09:61: 8b:0a:86:ac:44:54:7e:76:76:e4:de:6d:43:d4:3a: c2:fc:38:2c:a1:33:86:6c:0f:16:78:45:0c:d0:a7: 4d:e6:d7:e8:30:d2:3a:77:f8:bc:40:07:a9:6d:9d: 4a:12:6f:67:7a:93:8d:6d:b8:8c:c1:be:e0:98:b4: 5b:00:7b:9f:11:fb:88:69:71:41:11:20:38:40:b1: 57:82:df:eb:98:0c:62:75:6e:43:5b:bb:8b:4b:57: c2:78:e2:e2:d3:27:da:21:45:60:f2:47:ce:13:51: e4:c2:20:68:f9:8c:46:23:f5:5d:68:57:1c:5d:c0: c3:a6:86:c8:9b:f2:7f:a8:98:7e:0e:31:01:ce:47: a4:0e:f2:62:40:a7:d5:ba:f4:04:67:79:6c:2b:fb: 51:e8:f6:cd:34:aa:10:fb:b9:12:52:64:76:15:79: 81:03:a2:ed:c5:fd:33:65:1d:1a:73:43:d5:ae:a8: b6:9c:4c:de:c8:34:f2:84:01:6c:9e:8e:99:a9:7f: f9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:E4:ED:1C:6F:B9:A5:95:D6:F3:B5:F4:19:BB:1C:4D:43:54:F7:AC X509v3 Authority Key Identifier: keyid:5C:EB:0E:BD:87:8B:77:D4:2F:2C:A9:DD:08:F7:0C:32:3C:5D:03:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/f-TtHG-5pZXW87X0GbscTUNU96w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.151.64.0/21 93.89.0.0/22 95.129.208.0/21 185.6.68.0/22 185.59.12.0/22 IPv6: 2a02:17f8::/32 2a02:21e0::/32 Signature Algorithm: sha256WithRSAEncryption 9c:09:01:c2:58:33:fe:0b:00:59:db:3f:7a:81:06:9a:15:34: c4:64:41:e9:fe:a5:8f:bd:bf:2e:0d:7f:51:57:6d:a4:5b:e8: e3:77:42:87:c2:19:dc:c3:5d:25:72:94:00:eb:08:1b:e0:31: 96:11:5b:3e:44:dd:32:f3:1b:8b:d3:a0:60:bd:4a:e6:f0:bf: 6f:0c:bb:35:25:69:27:23:2c:25:28:a0:5b:14:f6:c5:68:ac: 0e:8d:29:09:56:42:5d:0b:51:85:59:9b:29:44:fd:7b:98:19: fa:ce:f7:70:22:6c:a8:71:7f:04:bb:08:cb:fa:a5:1d:77:6d: 99:2b:10:0c:a3:7f:a5:06:34:96:36:6a:0c:fc:f6:2d:42:b1: a7:de:30:5f:b3:15:89:b4:f6:8a:3b:99:c5:f8:ba:73:89:ed: dd:58:f1:98:97:a0:04:b8:d5:28:05:7f:38:df:b5:f2:84:83: 72:54:91:82:6c:08:61:d7:85:01:2c:6a:08:b9:29:e0:01:06: c6:50:f8:bf:5d:85:e2:63:b3:42:4a:08:29:c3:5c:56:d9:79: 30:03:4c:83:3f:45:5a:94:2d:73:8b:ad:2e:c2:ac:6e:fd:4a: 40:7e:ea:3c:ad:4d:42:c4:05:4e:6b:3b:7f:2c:41:bc:7a:3e: dc:77:25:cd -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgISAZt7pPOGTuuXnxNroRYoAVK9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZWIwZWJkODc4Yjc3ZDQyZjJjYTlkZDA4ZjcwYzMyM2M1 ZDAzZGIwHhcNMjYwMTAxMjIxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZmU0ZWQxYzZmYjlhNTk1ZDZmM2I1ZjQxOWJiMWM0ZDQzNTRmN2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztBKM3cL7aer2903FKZ6fdoWLAvE W27G2RP2zZ3YNZBp9OM/mZj8sdQ9W6fxEOzvfwNnmk2DCw24CWGLCoasRFR+dnbk 3m1D1DrC/DgsoTOGbA8WeEUM0KdN5tfoMNI6d/i8QAepbZ1KEm9nepONbbiMwb7g mLRbAHufEfuIaXFBESA4QLFXgt/rmAxidW5DW7uLS1fCeOLi0yfaIUVg8kfOE1Hk wiBo+YxGI/VdaFccXcDDpobIm/J/qJh+DjEBzkekDvJiQKfVuvQEZ3lsK/tR6PbN NKoQ+7kSUmR2FXmBA6Ltxf0zZR0ac0PVrqi2nEzeyDTyhAFsno6ZqX/50QIDAQAB o4ICNzCCAjMwHQYDVR0OBBYEFH/k7RxvuaWV1vO19Bm7HE1DVPesMB8GA1UdIwQY MBaAFFzrDr2Hi3fULyyp3Qj3DDI8XQPbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWE9zT3ZZZUxkOVF2TEtuZENQY01NanhkQTlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8zZTcyZWQtMWQ2NS00OTgyLWFkOWEt OWMzNzQ3OGE1OTNmLzEvZi1UdEhHLTVwWlhXODdYMEdic2NUVU5VOTZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8zZTcyZWQtMWQ2NS00OTgyLWFkOWEtOWMzNzQ3OGE1OTNm LzEvWE9zT3ZZZUxkOVF2TEtuZENQY01NanhkQTlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDAkBAIAATAeAwQDWJdAAwQC XVkAAwQDX4HQAwQCuQZEAwQCuTsMMBQEAgACMA4DBQAqAhf4AwUAKgIh4DANBgkq hkiG9w0BAQsFAAOCAQEAnAkBwlgz/gsAWds/eoEGmhU0xGRB6f6lj72/Lg1/UVdt pFvo43dCh8IZ3MNdJXKUAOsIG+AxlhFbPkTdMvMbi9OgYL1K5vC/bwy7NSVpJyMs JSigWxT2xWisDo0pCVZCXQtRhVmbKUT9e5gZ+s73cCJsqHF/BLsIy/qlHXdtmSsQ DKN/pQY0ljZqDPz2LUKxp94wX7MVibT2ijuZxfi6c4nt3VjxmJegBLjVKAV/ON+1 8oSDclSRgmwIYdeFASxqCLkp4AEGxlD4v12F4mOzQkoIKcNcVtl5MANMgz9FWpQt c4utLsKsbv1KQH7qPK1NQsQFTms7fyxBvHo+3HclzQ== -----END CERTIFICATE-----Generated at Tue Feb 10 04:30:59 2026 by rpki-client