This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/tXhKuNb4B-Nkw-Ko0kv7aBe86Mo.roa File: tXhKuNb4B-Nkw-Ko0kv7aBe86Mo.roa (raw, json) Hash identifier: nAgAkoHpMUFVWXw/y+ljVkLkx6oi2l2uF+ZlnoJC4s8= Subject key identifier: B5:78:4A:B8:D6:F8:07:E3:64:C3:E2:A8:D2:4B:FB:68:17:BC:E8:CA Certificate issuer: /CN=c4c032935e9633df8b19925df0bd25b81c6863b7 Certificate serial: 019B78A30DF7DE39C865E0D9641A291A8584 Authority key identifier: C4:C0:32:93:5E:96:33:DF:8B:19:92:5D:F0:BD:25:B8:1C:68:63:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/tXhKuNb4B-Nkw-Ko0kv7aBe86Mo.roa Signing time: Thu 01 Jan 2026 08:18:30 +0000 ROA not before: Thu 01 Jan 2026 08:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59909 IP address blocks: 168.222.188.0/22 maxlen: 22 185.67.108.0/22 maxlen: 24 185.67.108.0/24 maxlen: 24 185.67.109.0/24 maxlen: 24 185.67.110.0/24 maxlen: 24 185.67.111.0/24 maxlen: 24 2a05:e40::/29 maxlen: 38 2a05:e40:1000::/38 maxlen: 38 2a05:e40:2000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.crl rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:0d:f7:de:39:c8:65:e0:d9:64:1a:29:1a:85:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4c032935e9633df8b19925df0bd25b81c6863b7 Validity Not Before: Jan 1 08:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5784ab8d6f807e364c3e2a8d24bfb6817bce8ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:55:09:1e:b2:79:32:95:94:55:03:d6:92:33: 44:93:62:ce:bd:28:36:9d:98:1b:4f:61:8b:a7:8d: 71:64:89:cf:0b:5f:1d:d6:16:24:17:e7:56:bf:2e: d1:66:70:57:a9:3d:75:22:3f:32:4a:c2:4e:0f:79: 2c:ff:80:f7:88:17:91:d1:78:69:1a:fd:81:5e:17: c8:9b:7a:01:09:9e:93:56:0a:83:3c:ad:f5:4b:2f: 00:5a:d6:62:e1:1f:59:1e:9c:9f:b3:6c:f6:da:59: 44:b9:f1:a9:66:3f:68:c6:e6:7d:30:fa:e0:94:69: 1b:98:21:0e:c6:96:60:91:6d:c6:f4:03:6d:27:89: 8c:4c:c4:17:7c:aa:a0:8a:7c:88:06:16:e1:93:1a: 48:4b:c6:a4:bd:f3:72:6f:b2:b3:55:5e:39:61:e6: 95:4e:0e:0d:77:8a:ff:03:23:98:7b:1e:13:22:0a: 0b:bf:9f:2c:15:19:f4:ca:9e:10:02:01:c2:af:eb: 8d:0a:6f:be:68:2a:a1:5f:8e:fb:9a:bc:45:8d:02: 6f:70:5b:3a:fe:61:4a:73:fd:7b:f6:0f:d9:cc:cd: 32:77:6a:aa:d7:86:a1:04:23:ba:9c:87:d4:00:1b: 02:be:e8:5b:aa:bb:db:59:d0:75:e1:3b:ae:e5:fc: 07:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:78:4A:B8:D6:F8:07:E3:64:C3:E2:A8:D2:4B:FB:68:17:BC:E8:CA X509v3 Authority Key Identifier: keyid:C4:C0:32:93:5E:96:33:DF:8B:19:92:5D:F0:BD:25:B8:1C:68:63:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/tXhKuNb4B-Nkw-Ko0kv7aBe86Mo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.222.188.0/22 185.67.108.0/22 IPv6: 2a05:e40::/29 Signature Algorithm: sha256WithRSAEncryption 31:fc:9a:79:0c:bb:02:cc:ef:4a:9a:d5:d4:cf:2f:99:5c:53: 03:21:2e:84:6c:c4:e0:72:52:fb:f4:d5:88:76:52:7b:cd:c4: 00:e9:a0:2b:7f:7a:f4:15:53:12:02:49:d2:b9:37:09:66:36: 9b:43:e2:9f:b8:49:20:7e:8a:49:f2:72:90:d7:9e:9f:bd:67: 8c:89:d1:49:eb:ea:ca:90:01:62:b5:4a:ef:b2:12:7b:98:18: c8:0b:47:0c:3b:5b:08:0b:48:f9:e3:e7:90:94:fe:10:3d:49: 8e:56:44:f5:92:8c:c9:65:d3:b9:c0:a2:72:5f:47:5b:fc:73: 77:42:1e:3f:90:ac:76:39:83:c7:24:59:e0:c4:f7:21:49:15: 16:64:72:d9:a1:40:16:85:f3:94:6a:6a:35:82:1e:a7:cb:4d: 57:1d:f6:07:a5:32:d7:bd:e7:9a:b1:52:ab:21:4e:15:74:09: bf:db:e1:09:ef:ad:ce:21:71:1e:3a:76:d9:a3:79:4d:d1:64: ab:38:06:80:ab:24:1d:43:bc:64:7a:2d:94:03:fa:ea:26:c9: 29:49:ca:82:44:35:e4:04:6d:fa:89:27:f7:95:20:bd:b9:72: 93:38:51:b4:ad:53:16:3b:0c:8b:36:be:f7:38:24:27:f8:de: e5:4c:ea:1e -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt4ow333jnIZeDZZBopGoWEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0YzAzMjkzNWU5NjMzZGY4YjE5OTI1ZGYwYmQyNWI4MWM2 ODYzYjcwHhcNMjYwMTAxMDgxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTc4NGFiOGQ2ZjgwN2UzNjRjM2UyYThkMjRiZmI2ODE3YmNlOGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlUJHrJ5MpWUVQPWkjNEk2LOvSg2 nZgbT2GLp41xZInPC18d1hYkF+dWvy7RZnBXqT11Ij8ySsJOD3ks/4D3iBeR0Xhp Gv2BXhfIm3oBCZ6TVgqDPK31Sy8AWtZi4R9ZHpyfs2z22llEufGpZj9oxuZ9MPrg lGkbmCEOxpZgkW3G9ANtJ4mMTMQXfKqginyIBhbhkxpIS8akvfNyb7KzVV45YeaV Tg4Nd4r/AyOYex4TIgoLv58sFRn0yp4QAgHCr+uNCm++aCqhX477mrxFjQJvcFs6 /mFKc/179g/ZzM0yd2qq14ahBCO6nIfUABsCvuhbqrvbWdB14Tuu5fwHaQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFLV4SrjW+AfjZMPiqNJL+2gXvOjKMB8GA1UdIwQY MBaAFMTAMpNeljPfixmSXfC9JbgcaGO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveE1BeWsxNldNOS1MR1pKZDhMMGx1QnhvWTdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lMDAxMzktZWRiNi00MTFiLWE5YjIt OWVhOWNhMTc0MmRiLzEvdFhoS3VOYjRCLU5rdy1LbzBrdjdhQmU4Nk1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9lMDAxMzktZWRiNi00MTFiLWE5YjItOWVhOWNhMTc0MmRi LzEveE1BeWsxNldNOS1MR1pKZDhMMGx1QnhvWTdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCqN68AwQC uUNsMA0EAgACMAcDBQMqBQ5AMA0GCSqGSIb3DQEBCwUAA4IBAQAx/Jp5DLsCzO9K mtXUzy+ZXFMDIS6EbMTgclL79NWIdlJ7zcQA6aArf3r0FVMSAknSuTcJZjabQ+Kf uEkgfopJ8nKQ156fvWeMidFJ6+rKkAFitUrvshJ7mBjIC0cMO1sIC0j54+eQlP4Q PUmOVkT1kozJZdO5wKJyX0db/HN3Qh4/kKx2OYPHJFngxPchSRUWZHLZoUAWhfOU amo1gh6ny01XHfYHpTLXveeasVKrIU4VdAm/2+EJ763OIXEeOnbZo3lN0WSrOAaA qyQdQ7xkei2UA/rqJskpScqCRDXkBG36iSf3lSC9uXKTOFG0rVMWOwyLNr73OCQn +N7lTOoe -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:59 2026 by rpki-client