This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/TuuctTXsnDfzjdp1XhJCuSQCZBE.roa File: TuuctTXsnDfzjdp1XhJCuSQCZBE.roa (raw, json) Hash identifier: lL87XCaQxmWdIfEo3Mlnj0oxnulHe23ylI5Y0lZ+hHA= Subject key identifier: 4E:EB:9C:B5:35:EC:9C:37:F3:8D:DA:75:5E:12:42:B9:24:02:64:11 Certificate issuer: /CN=644c50d1dadf8b84b174fdb0587afb5f42df8a5f Certificate serial: 019B7B3679D328F27C9787EA82FB77B507C5 Authority key identifier: 64:4C:50:D1:DA:DF:8B:84:B1:74:FD:B0:58:7A:FB:5F:42:DF:8A:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZExQ0drfi4SxdP2wWHr7X0Lfil8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/TuuctTXsnDfzjdp1XhJCuSQCZBE.roa Signing time: Thu 01 Jan 2026 20:18:46 +0000 ROA not before: Thu 01 Jan 2026 20:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34273 IP address blocks: 46.17.192.0/21 maxlen: 21 193.138.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft rsync://rpki.ripe.net/repository/DEFAULT/ZExQ0drfi4SxdP2wWHr7X0Lfil8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:79:d3:28:f2:7c:97:87:ea:82:fb:77:b5:07:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=644c50d1dadf8b84b174fdb0587afb5f42df8a5f Validity Not Before: Jan 1 20:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4eeb9cb535ec9c37f38dda755e1242b924026411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:dc:df:15:c8:79:3e:a7:f0:d9:86:2a:d7:44: 95:b4:e5:4f:2a:0a:11:60:8c:d5:5b:ed:59:1d:45: 83:61:58:c4:d8:6f:48:52:2b:c4:0f:bf:69:a0:42: a2:59:39:9d:30:34:d3:fd:da:b5:98:c7:36:3b:be: a2:c8:65:24:98:e8:8f:d4:ba:d1:96:94:96:5d:6d: a7:26:76:6a:58:9d:f6:e1:5f:e9:ba:75:a1:ac:6e: 67:c8:85:8f:f2:88:57:c1:59:b5:17:fa:e8:d9:0c: b7:93:6a:5a:83:32:3e:f9:a0:39:ab:93:54:56:1e: 46:cd:f9:7a:0b:71:ba:23:fb:bd:66:86:3e:a9:fa: 2d:f7:81:02:97:70:b2:4c:39:0c:b7:88:d1:f6:b1: 19:3f:de:18:4e:57:da:0f:12:b7:06:60:12:63:3e: 58:d2:f7:f6:3d:01:b9:80:84:46:47:79:57:f4:fa: 52:5c:7e:78:b7:ab:06:fd:ec:a7:c0:52:45:fb:c3: d3:54:64:fb:ca:e7:67:56:9c:20:f9:b3:d3:be:55: a3:b4:76:b5:6e:99:3a:6b:b8:0d:44:dd:f9:01:55: 76:d8:2a:18:12:1a:c1:69:ff:4b:4a:7c:d3:18:c5: f8:57:82:39:d4:6c:86:a3:1f:43:3a:cb:17:2b:23: 62:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:EB:9C:B5:35:EC:9C:37:F3:8D:DA:75:5E:12:42:B9:24:02:64:11 X509v3 Authority Key Identifier: keyid:64:4C:50:D1:DA:DF:8B:84:B1:74:FD:B0:58:7A:FB:5F:42:DF:8A:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZExQ0drfi4SxdP2wWHr7X0Lfil8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/TuuctTXsnDfzjdp1XhJCuSQCZBE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.17.192.0/21 193.138.200.0/22 Signature Algorithm: sha256WithRSAEncryption 81:80:49:20:40:67:a0:57:53:85:a7:ff:a2:78:2a:b6:92:11: 17:cc:9d:96:01:76:5a:d3:e1:7f:b8:73:82:43:dd:f0:77:7d: 7e:26:cc:3c:70:1d:cb:6e:80:d7:ef:91:be:87:b6:31:af:6b: 37:b1:27:da:26:c4:cd:29:40:92:7f:c2:15:f5:96:71:86:d2: 68:d7:42:20:e7:94:b6:68:35:9f:b5:a2:6a:d6:a1:a2:10:d3: a1:0e:79:ec:6a:87:d5:eb:f3:3d:f6:5c:be:15:e3:14:3b:eb: a1:90:36:ba:99:29:f4:04:8b:0e:ed:e9:c3:b4:c2:7d:7f:ed: 88:7f:a8:59:92:7c:cd:6d:1b:c6:bb:6b:f3:3f:b2:73:23:f1: 3d:b1:d9:a6:97:44:c6:e9:1d:24:1a:2b:a9:b4:42:55:2a:47: bb:7c:33:e2:66:21:c2:a7:8f:28:94:47:14:bd:47:e4:63:46: a9:97:57:97:52:f7:f8:52:9a:ae:61:ba:c8:c6:e5:ca:55:20: d9:f2:32:fa:b5:92:87:3b:ca:ea:db:00:65:6f:7b:3f:c4:86: a7:af:b0:21:bb:a6:c4:22:37:08:8b:68:e0:d6:3f:10:8d:2d: a2:95:87:f9:c9:82:6b:fa:d1:2e:d2:84:39:47:be:3b:ae:9f: c4:ea:e7:5b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NnnTKPJ8l4fqgvt3tQfFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0NGM1MGQxZGFkZjhiODRiMTc0ZmRiMDU4N2FmYjVmNDJk ZjhhNWYwHhcNMjYwMTAxMjAxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZWViOWNiNTM1ZWM5YzM3ZjM4ZGRhNzU1ZTEyNDJiOTI0MDI2NDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodzfFch5Pqfw2YYq10SVtOVPKgoR YIzVW+1ZHUWDYVjE2G9IUivED79poEKiWTmdMDTT/dq1mMc2O76iyGUkmOiP1LrR lpSWXW2nJnZqWJ324V/punWhrG5nyIWP8ohXwVm1F/ro2Qy3k2pagzI++aA5q5NU Vh5Gzfl6C3G6I/u9ZoY+qfot94ECl3CyTDkMt4jR9rEZP94YTlfaDxK3BmASYz5Y 0vf2PQG5gIRGR3lX9PpSXH54t6sG/eynwFJF+8PTVGT7yudnVpwg+bPTvlWjtHa1 bpk6a7gNRN35AVV22CoYEhrBaf9LSnzTGMX4V4I51GyGox9DOssXKyNiAQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFE7rnLU17Jw3843adV4SQrkkAmQRMB8GA1UdIwQY MBaAFGRMUNHa34uEsXT9sFh6+19C34pfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkV4UTBkcmZpNFN4ZFAyd1dIcjdYMExmaWw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8yOGJkZTMtYTRjYS00ODhkLTgwNjEt ZDM4ZDg0M2JmYTFkLzEvVHV1Y3RUWHNuRGZ6amRwMVhoSkN1U1FDWkJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8yOGJkZTMtYTRjYS00ODhkLTgwNjEtZDM4ZDg0M2JmYTFk LzEvWkV4UTBkcmZpNFN4ZFAyd1dIcjdYMExmaWw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLhHAAwQC wYrIMA0GCSqGSIb3DQEBCwUAA4IBAQCBgEkgQGegV1OFp/+ieCq2khEXzJ2WAXZa 0+F/uHOCQ93wd31+Jsw8cB3LboDX75G+h7Yxr2s3sSfaJsTNKUCSf8IV9ZZxhtJo 10Ig55S2aDWftaJq1qGiENOhDnnsaofV6/M99ly+FeMUO+uhkDa6mSn0BIsO7enD tMJ9f+2If6hZknzNbRvGu2vzP7JzI/E9sdmml0TG6R0kGiuptEJVKke7fDPiZiHC p48olEcUvUfkY0apl1eXUvf4UpquYbrIxuXKVSDZ8jL6tZKHO8rq2wBlb3s/xIan r7Ahu6bEIjcIi2jg1j8QjS2ilYf5yYJr+tEu0oQ5R747rp/E6udb -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:07 2026 by rpki-client