This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/TbbaXC5Vr5TmaMd_xbm8WF6u2S0.roa File: TbbaXC5Vr5TmaMd_xbm8WF6u2S0.roa (raw, json) Hash identifier: +nAGfw2iTYghUOUt6Pu3fvtqpyelpRx/U3nYc4p6P9k= Subject key identifier: 4D:B6:DA:5C:2E:55:AF:94:E6:68:C7:7F:C5:B9:BC:58:5E:AE:D9:2D Certificate issuer: /CN=fba0b0f1fdd64014e5057b848a19a239e849dbdd Certificate serial: 019B7AC9030A971178FD3716AED978F979FF Authority key identifier: FB:A0:B0:F1:FD:D6:40:14:E5:05:7B:84:8A:19:A2:39:E8:49:DB:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/TbbaXC5Vr5TmaMd_xbm8WF6u2S0.roa Signing time: Thu 01 Jan 2026 18:19:12 +0000 ROA not before: Thu 01 Jan 2026 18:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201737 IP address blocks: 62.3.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:03:0a:97:11:78:fd:37:16:ae:d9:78:f9:79:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fba0b0f1fdd64014e5057b848a19a239e849dbdd Validity Not Before: Jan 1 18:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4db6da5c2e55af94e668c77fc5b9bc585eaed92d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:7e:94:09:89:13:4a:61:4b:8b:59:87:06:5d: 1a:b3:f3:0f:6f:1d:04:81:48:d1:3f:5e:e2:1e:c2: 9a:04:05:72:76:32:31:87:4d:6f:aa:70:63:ad:41: 3d:08:15:0e:d5:3d:fb:e4:05:12:dc:fd:34:69:7f: e8:be:61:50:4c:a3:b8:1d:35:8d:3d:ed:f2:2d:ef: 6c:0b:d8:6c:73:0b:09:14:83:b4:e1:b2:23:7b:d7: dc:09:e9:05:78:65:b4:9f:12:2b:e2:38:91:23:ce: 10:66:fb:b7:01:d7:43:51:7b:10:e8:40:2c:b4:e4: 5d:7f:a2:17:ec:03:92:2d:77:07:59:99:8b:d2:c0: 5e:82:88:80:10:f4:3f:76:73:71:76:cf:42:b1:0a: 18:5d:93:44:ca:78:3e:5a:65:7b:fc:93:4f:6b:56: 27:29:25:86:59:9c:b7:7d:2d:36:68:c7:52:82:ff: f0:74:55:d8:98:ed:3d:f8:48:70:1f:62:d5:df:fb: 4e:08:db:6a:43:89:6e:91:9a:01:80:9f:b0:b1:29: fa:ec:aa:6e:a6:32:cb:34:c0:98:4c:e4:b3:ab:80: 50:c8:b0:30:ff:62:0e:9c:1b:37:14:91:7c:61:69: 34:48:4d:c3:ba:dd:ab:ff:ab:3d:cc:cb:09:66:3f: 04:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:B6:DA:5C:2E:55:AF:94:E6:68:C7:7F:C5:B9:BC:58:5E:AE:D9:2D X509v3 Authority Key Identifier: keyid:FB:A0:B0:F1:FD:D6:40:14:E5:05:7B:84:8A:19:A2:39:E8:49:DB:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/TbbaXC5Vr5TmaMd_xbm8WF6u2S0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.3.17.0/24 Signature Algorithm: sha256WithRSAEncryption b5:a2:46:4b:62:00:ba:54:b8:22:60:2a:df:e8:ce:69:23:e9: 2f:2a:5c:0d:49:f8:c5:d0:b8:47:21:c5:b4:8e:f1:1d:4f:5b: 71:f2:9e:25:2a:06:ac:76:94:91:ab:eb:74:e6:d1:26:58:71: 4a:13:e0:a0:c2:89:8e:58:fa:a4:ab:2a:11:bc:b7:44:21:d8: 16:76:91:66:40:4f:1c:31:24:7f:8e:6d:f0:56:ba:cd:0e:e7: f1:21:1e:43:0c:c2:08:2f:67:0b:28:96:40:7a:52:c7:bc:f0: 19:c7:c2:dc:48:15:b3:11:ab:e7:6e:14:1c:54:f0:c6:45:14: 3b:cc:1c:7c:96:8a:e9:e3:59:29:27:af:2e:3a:d8:2b:b1:e1: 8c:51:1b:ca:90:32:77:4d:20:1a:74:c9:21:0c:36:db:65:69: fc:86:de:7d:c1:de:11:ff:26:c6:98:8a:fa:2c:32:d8:e8:b1: 14:47:5a:39:85:cd:3c:24:92:6f:1d:05:cf:da:a0:41:64:d2: f0:ea:e5:05:e8:f8:1b:89:26:62:34:8f:db:2b:34:8a:89:74: e0:db:24:a7:42:c3:b9:60:07:a6:3a:59:1c:b9:28:8d:91:74: 4b:04:87:07:e4:bd:d2:41:f2:11:36:46:65:2d:53:d0:8a:07: 7e:51:4c:4d -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt6yQMKlxF4/TcWrtl4+Xn/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiYTBiMGYxZmRkNjQwMTRlNTA1N2I4NDhhMTlhMjM5ZTg0 OWRiZGQwHhcNMjYwMTAxMTgxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZGI2ZGE1YzJlNTVhZjk0ZTY2OGM3N2ZjNWI5YmM1ODVlYWVkOTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh36UCYkTSmFLi1mHBl0as/MPbx0E gUjRP17iHsKaBAVydjIxh01vqnBjrUE9CBUO1T375AUS3P00aX/ovmFQTKO4HTWN Pe3yLe9sC9hscwsJFIO04bIje9fcCekFeGW0nxIr4jiRI84QZvu3AddDUXsQ6EAs tORdf6IX7AOSLXcHWZmL0sBegoiAEPQ/dnNxds9CsQoYXZNEyng+WmV7/JNPa1Yn KSWGWZy3fS02aMdSgv/wdFXYmO09+EhwH2LV3/tOCNtqQ4lukZoBgJ+wsSn67Kpu pjLLNMCYTOSzq4BQyLAw/2IOnBs3FJF8YWk0SE3Dut2r/6s9zMsJZj8ETQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFE222lwuVa+U5mjHf8W5vFhertktMB8GA1UdIwQY MBaAFPugsPH91kAU5QV7hIoZojnoSdvdMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS02Q3c4ZjNXUUJUbEJYdUVpaG1pT2VoSjI5MC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUvZmQ2OTc3LThhYWUtNDg4OS1iZTZm LWM3MTE2OTdmZDNjMy8xL1RiYmFYQzVWcjVUbWFNZF94Ym04V0Y2dTJTMC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZTUvZmQ2OTc3LThhYWUtNDg4OS1iZTZmLWM3MTE2OTdmZDNj My8xLzEtNkN3OGYzV1FCVGxCWHVFaWhtaU9laEoyOTAuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA+AxEw DQYJKoZIhvcNAQELBQADggEBALWiRktiALpUuCJgKt/ozmkj6S8qXA1J+MXQuEch xbSO8R1PW3HyniUqBqx2lJGr63Tm0SZYcUoT4KDCiY5Y+qSrKhG8t0Qh2BZ2kWZA TxwxJH+ObfBWus0O5/EhHkMMwggvZwsolkB6Use88BnHwtxIFbMRq+duFBxU8MZF FDvMHHyWiunjWSknry462Cux4YxRG8qQMndNIBp0ySEMNttlafyG3n3B3hH/JsaY ivosMtjosRRHWjmFzTwkkm8dBc/aoEFk0vDq5QXo+BuJJmI0j9srNIqJdODbJKdC w7lgB6Y6WRy5KI2RdEsEhwfkvdJB8hE2RmUtU9CKB35RTE0= -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:28 2026 by rpki-client