This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/TBbYZVnRjlYXHQAtPcfmE7zFNhc.roa File: TBbYZVnRjlYXHQAtPcfmE7zFNhc.roa (raw, json) Hash identifier: gwN06t/I7Jawt3LQMpSh1ruXZaJYB/QUXUCidscAwp0= Subject key identifier: 4C:16:D8:65:59:D1:8E:56:17:1D:00:2D:3D:C7:E6:13:BC:C5:36:17 Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309 Certificate serial: 019B78347FCF52372AC872DF72CADB968BDA Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/TBbYZVnRjlYXHQAtPcfmE7zFNhc.roa Signing time: Thu 01 Jan 2026 06:17:45 +0000 ROA not before: Thu 01 Jan 2026 06:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201206 IP address blocks: 83.171.236.0/24 maxlen: 24 83.171.237.0/24 maxlen: 24 83.171.238.0/24 maxlen: 24 83.171.239.0/24 maxlen: 24 185.82.20.0/24 maxlen: 24 185.82.21.0/24 maxlen: 24 185.82.22.0/24 maxlen: 24 185.82.23.0/24 maxlen: 24 185.185.24.0/24 maxlen: 24 185.185.25.0/24 maxlen: 24 185.185.26.0/24 maxlen: 24 185.185.27.0/24 maxlen: 24 193.57.60.0/24 maxlen: 24 193.57.61.0/24 maxlen: 24 193.57.62.0/24 maxlen: 24 193.57.63.0/24 maxlen: 24 2a05:8b80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:7f:cf:52:37:2a:c8:72:df:72:ca:db:96:8b:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309 Validity Not Before: Jan 1 06:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c16d86559d18e56171d002d3dc7e613bcc53617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d7:5a:7f:6f:90:be:ad:8f:19:20:39:cd:f5: 9f:02:a2:de:cf:84:54:43:28:88:9f:7b:d0:c0:8a: e0:27:9a:d3:9d:49:20:5b:ad:20:0a:36:7d:1d:8a: 8e:82:9d:dd:f2:fc:a7:f8:42:41:fa:a4:ba:59:cd: d1:12:e0:d7:f3:81:8b:6c:ff:ac:7e:35:87:61:72: 62:58:91:e4:17:83:b8:ab:16:10:9c:e6:af:e8:41: 45:54:3b:0a:1f:f9:44:5e:a1:cc:72:04:9a:66:e2: ce:51:92:fe:1e:bd:ef:f4:b2:66:b8:9b:7b:7a:8c: fc:fb:2d:42:f8:51:ec:82:b9:25:e3:69:39:1d:21: b7:d0:74:57:e4:fa:8e:58:6f:c4:b9:8e:cb:41:22: 34:0c:c0:00:20:31:83:7f:29:c4:18:2d:ae:ce:33: e7:55:06:d8:9e:27:88:eb:36:05:b2:55:11:28:82: 1d:3a:4d:b6:9e:63:0a:6e:1d:34:59:fb:c6:c5:2e: 98:dc:60:e4:ac:30:47:07:3f:49:f1:d6:a8:3e:02: 81:91:aa:08:66:0a:41:ad:24:e5:56:c8:79:19:24: 66:95:39:63:bb:4a:bc:48:07:54:4f:00:fc:2a:76: cd:9a:2d:00:ff:1c:fe:b8:c4:b7:f5:07:b5:78:0e: dc:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:16:D8:65:59:D1:8E:56:17:1D:00:2D:3D:C7:E6:13:BC:C5:36:17 X509v3 Authority Key Identifier: keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/TBbYZVnRjlYXHQAtPcfmE7zFNhc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.171.236.0/22 185.82.20.0/22 185.185.24.0/22 193.57.60.0/22 IPv6: 2a05:8b80::/29 Signature Algorithm: sha256WithRSAEncryption 07:3f:2e:63:18:a0:8e:e2:03:2b:9a:0b:70:fe:82:4f:c9:85: 1b:d9:d4:e6:04:78:17:68:b5:45:a2:59:e6:32:49:1e:91:6c: 4d:fc:a1:8a:3c:01:a9:f7:05:4a:ad:b0:6e:ae:4a:a5:40:88: ae:54:cc:3a:05:b2:6c:41:bf:d8:e3:84:88:ea:48:43:f9:48: bf:92:94:35:46:27:dd:71:ac:7b:f2:2c:f2:0e:5e:c2:d3:ad: 21:f0:c9:b6:c8:b5:02:98:05:e3:10:57:4d:d7:e8:73:17:e5: 99:16:f8:6f:14:f8:28:13:fc:df:05:11:f2:43:43:2d:b6:a8: 80:30:da:53:12:61:f0:76:fd:e2:a4:10:54:ac:15:74:36:01: e1:09:0d:ca:3d:84:04:ea:60:37:85:2f:15:06:48:74:4b:71: 21:7a:ac:b5:04:ce:f3:b7:ad:0a:70:44:1b:82:19:4c:b2:df: 79:34:33:16:3e:fd:9b:8c:5c:29:23:fe:f9:e3:93:22:3c:d0: 64:84:70:18:6e:71:59:a9:1f:99:11:1b:09:d3:23:17:09:28: 8b:f6:ad:2d:ee:2b:c0:cb:fc:e1:b6:99:1c:01:7c:2d:97:79: e9:23:33:9c:35:80:fd:92:38:6e:6d:97:31:5a:37:86:20:9d: 39:5a:19:f5 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt4NH/PUjcqyHLfcsrblovaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMzY2ODYyOGYwZGY3OWQwNDdlY2EwZDlhZGNmYzBiNjY5 M2UzMDkwHhcNMjYwMTAxMDYxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzE2ZDg2NTU5ZDE4ZTU2MTcxZDAwMmQzZGM3ZTYxM2JjYzUzNjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ddaf2+Qvq2PGSA5zfWfAqLez4RU QyiIn3vQwIrgJ5rTnUkgW60gCjZ9HYqOgp3d8vyn+EJB+qS6Wc3REuDX84GLbP+s fjWHYXJiWJHkF4O4qxYQnOav6EFFVDsKH/lEXqHMcgSaZuLOUZL+Hr3v9LJmuJt7 eoz8+y1C+FHsgrkl42k5HSG30HRX5PqOWG/EuY7LQSI0DMAAIDGDfynEGC2uzjPn VQbYnieI6zYFslURKIIdOk22nmMKbh00WfvGxS6Y3GDkrDBHBz9J8daoPgKBkaoI ZgpBrSTlVsh5GSRmlTlju0q8SAdUTwD8KnbNmi0A/xz+uMS39Qe1eA7c4wIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFEwW2GVZ0Y5WFx0ALT3H5hO8xTYXMB8GA1UdIwQY MBaAFL02aGKPDfedBH7KDZrc/Atmk+MJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMt ZTZiZjMxNmM5NGExLzEvVEJiWVpWblJqbFlYSFFBdFBjZm1FN3pGTmhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMtZTZiZjMxNmM5NGEx LzEvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCU6vsAwQC uVIUAwQCubkYAwQCwTk8MA0EAgACMAcDBQMqBYuAMA0GCSqGSIb3DQEBCwUAA4IB AQAHPy5jGKCO4gMrmgtw/oJPyYUb2dTmBHgXaLVFolnmMkkekWxN/KGKPAGp9wVK rbBurkqlQIiuVMw6BbJsQb/Y44SI6khD+Ui/kpQ1Rifdcax78izyDl7C060h8Mm2 yLUCmAXjEFdN1+hzF+WZFvhvFPgoE/zfBRHyQ0MttqiAMNpTEmHwdv3ipBBUrBV0 NgHhCQ3KPYQE6mA3hS8VBkh0S3Eheqy1BM7zt60KcEQbghlMst95NDMWPv2bjFwp I/7545MiPNBkhHAYbnFZqR+ZERsJ0yMXCSiL9q0t7ivAy/zhtpkcAXwtl3npIzOc NYD9kjhubZcxWjeGIJ05Whn1 -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:54 2026 by rpki-client