This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/ToM6N48G8WGMzFpuQ0Gt_pOWEHc.roa File: ToM6N48G8WGMzFpuQ0Gt_pOWEHc.roa (raw, json) Hash identifier: f5NlaoVCrJ+ZbPHrxjLY8hxzqQ0aKUh9p8kFFA8E7Vo= Subject key identifier: 4E:83:3A:37:8F:06:F1:61:8C:CC:5A:6E:43:41:AD:FE:93:96:10:77 Certificate issuer: /CN=09a9e2ee8bcea6d5b919c4a33d26d9bbf982a843 Certificate serial: 019B797F04343C6A97D27E8912229238DEED Authority key identifier: 09:A9:E2:EE:8B:CE:A6:D5:B9:19:C4:A3:3D:26:D9:BB:F9:82:A8:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/ToM6N48G8WGMzFpuQ0Gt_pOWEHc.roa Signing time: Thu 01 Jan 2026 12:18:45 +0000 ROA not before: Thu 01 Jan 2026 12:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201505 IP address blocks: 86.48.60.0/22 maxlen: 22 86.58.216.0/21 maxlen: 21 185.187.144.0/22 maxlen: 22 2a13:2540::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.crl rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:04:34:3c:6a:97:d2:7e:89:12:22:92:38:de:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a9e2ee8bcea6d5b919c4a33d26d9bbf982a843 Validity Not Before: Jan 1 12:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e833a378f06f1618ccc5a6e4341adfe93961077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b0:1e:59:a2:62:24:45:1c:e8:f3:c2:92:37: 89:24:f5:8e:27:e7:5a:1f:64:86:35:b2:5e:29:39: ac:52:e2:98:1c:3e:0a:22:59:c6:9b:37:41:df:ef: da:f0:62:7f:a6:bb:4a:cd:84:69:e5:d5:d3:df:f4: ef:6d:b3:33:bc:16:e1:95:29:e0:02:ea:f9:af:51: ed:a1:0d:77:e3:0f:de:c8:7e:af:d8:cc:97:e5:2d: 90:77:ff:b4:66:11:0b:54:bc:68:97:2e:1d:aa:b0: 9e:b7:4c:a5:4f:01:39:98:2f:cd:5f:59:18:ab:4a: 04:74:fa:81:9a:d4:2c:1d:01:69:04:67:29:d9:5f: 04:13:50:21:5b:18:c7:f7:25:aa:db:b6:4d:59:01: a4:17:29:ab:56:25:2c:61:48:db:30:65:88:05:b6: b4:3d:f3:59:56:e1:f2:a5:99:1e:ad:65:cc:c5:18: c5:ea:69:44:48:f7:de:a7:67:de:f1:3f:06:b6:c1: c8:d3:0e:12:61:0b:05:b4:b9:99:c8:4b:78:a5:ee: aa:9a:fd:69:de:c2:b0:4c:69:6f:2b:22:06:ca:a5: 1b:54:bb:66:36:fe:39:3b:8d:a2:3e:ae:50:cc:ae: 15:8f:f3:9b:45:01:0e:98:96:2b:4d:42:f9:38:d5: 29:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:83:3A:37:8F:06:F1:61:8C:CC:5A:6E:43:41:AD:FE:93:96:10:77 X509v3 Authority Key Identifier: keyid:09:A9:E2:EE:8B:CE:A6:D5:B9:19:C4:A3:3D:26:D9:BB:F9:82:A8:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/ToM6N48G8WGMzFpuQ0Gt_pOWEHc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.48.60.0/22 86.58.216.0/21 185.187.144.0/22 IPv6: 2a13:2540::/29 Signature Algorithm: sha256WithRSAEncryption 54:f4:a9:5b:7c:98:07:17:3f:8a:6c:b4:2d:ec:7f:b8:70:8b: 0c:68:99:94:db:47:92:d4:1c:ac:96:c0:29:44:07:52:24:b5: 4f:c6:4e:4d:db:c1:3c:67:6b:db:a8:09:3e:13:f3:02:7c:6c: 08:1c:a6:64:fa:7d:e1:3f:e0:0d:d7:af:1c:cd:31:78:7f:6f: bb:54:be:90:2a:fa:48:3a:6b:45:02:42:bd:73:98:49:45:47: 90:27:eb:bf:7b:37:19:61:b1:8c:2d:1a:1d:fe:9f:d5:f6:6e: 3b:a0:43:15:7b:e0:14:cc:f0:c2:09:8f:90:10:ac:94:6d:ae: f3:76:2a:8e:b8:12:c7:95:05:d7:ee:22:d1:05:17:e7:65:a0: 82:17:95:10:b4:a2:d3:30:97:38:fc:7f:a5:e1:33:1c:0d:34: e5:4a:a7:2a:89:3b:fc:58:48:e9:d1:ab:26:84:25:7f:7b:bb: c5:d1:56:88:2b:97:f2:17:7e:e1:7e:0f:69:1f:44:c6:15:df: 83:e5:c7:88:e8:5a:bc:c4:59:5e:5f:60:d0:84:61:37:ee:36: f5:45:45:99:7d:d7:ea:6b:2d:08:ba:eb:cd:3c:bb:1e:73:b2: 47:0c:8c:bb:ad:4e:4a:b0:1a:5a:4f:7f:ca:a4:70:74:21:f5: 02:3f:c4:ec -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt5fwQ0PGqX0n6JEiKSON7tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5YTllMmVlOGJjZWE2ZDViOTE5YzRhMzNkMjZkOWJiZjk4 MmE4NDMwHhcNMjYwMTAxMTIxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTgzM2EzNzhmMDZmMTYxOGNjYzVhNmU0MzQxYWRmZTkzOTYxMDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrAeWaJiJEUc6PPCkjeJJPWOJ+da H2SGNbJeKTmsUuKYHD4KIlnGmzdB3+/a8GJ/prtKzYRp5dXT3/TvbbMzvBbhlSng Aur5r1HtoQ134w/eyH6v2MyX5S2Qd/+0ZhELVLxoly4dqrCet0ylTwE5mC/NX1kY q0oEdPqBmtQsHQFpBGcp2V8EE1AhWxjH9yWq27ZNWQGkFymrViUsYUjbMGWIBba0 PfNZVuHypZkerWXMxRjF6mlESPfep2fe8T8GtsHI0w4SYQsFtLmZyEt4pe6qmv1p 3sKwTGlvKyIGyqUbVLtmNv45O42iPq5QzK4Vj/ObRQEOmJYrTUL5ONUpJQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFE6DOjePBvFhjMxabkNBrf6TlhB3MB8GA1UdIwQY MBaAFAmp4u6LzqbVuRnEoz0m2bv5gqhDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2FuaTdvdk9wdFc1R2NTalBTYlp1X21DcUVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS81OGQxNWItOWYwMi00MmM0LWIwMmQt YTAxZWVhNjVmZDMzLzEvVG9NNk40OEc4V0dNekZwdVEwR3RfcE9XRUhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS81OGQxNWItOWYwMi00MmM0LWIwMmQtYTAxZWVhNjVmZDMz LzEvQ2FuaTdvdk9wdFc1R2NTalBTYlp1X21DcUVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCVjA8AwQD VjrYAwQCubuQMA0EAgACMAcDBQMqEyVAMA0GCSqGSIb3DQEBCwUAA4IBAQBU9Klb fJgHFz+KbLQt7H+4cIsMaJmU20eS1ByslsApRAdSJLVPxk5N28E8Z2vbqAk+E/MC fGwIHKZk+n3hP+AN168czTF4f2+7VL6QKvpIOmtFAkK9c5hJRUeQJ+u/ezcZYbGM LRod/p/V9m47oEMVe+AUzPDCCY+QEKyUba7zdiqOuBLHlQXX7iLRBRfnZaCCF5UQ tKLTMJc4/H+l4TMcDTTlSqcqiTv8WEjp0asmhCV/e7vF0VaIK5fyF37hfg9pH0TG Fd+D5ceI6Fq8xFleX2DQhGE37jb1RUWZfdfqay0IuuvNPLsec7JHDIy7rU5KsBpa T3/KpHB0IfUCP8Ts -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:45 2026 by rpki-client