This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/tnOvqbiqo6KcISm2Z92wnQLo7AA.roa File: tnOvqbiqo6KcISm2Z92wnQLo7AA.roa (raw, json) Hash identifier: xwsx+sSVYc3HTkslJcSA74X9wr4O1+vTlAG6cVjM+So= Subject key identifier: B6:73:AF:A9:B8:AA:A3:A2:9C:21:29:B6:67:DD:B0:9D:02:E8:EC:00 Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f Certificate serial: 019B7A5AA734E36584B6895EB94D1E14F950 Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/tnOvqbiqo6KcISm2Z92wnQLo7AA.roa Signing time: Thu 01 Jan 2026 16:18:39 +0000 ROA not before: Thu 01 Jan 2026 16:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397423 IP address blocks: 83.147.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 11:57:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:a7:34:e3:65:84:b6:89:5e:b9:4d:1e:14:f9:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f Validity Not Before: Jan 1 16:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b673afa9b8aaa3a29c2129b667ddb09d02e8ec00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f7:2e:75:a4:ad:5b:5c:75:5e:7b:f8:d8:50: 14:d2:46:32:00:91:a3:3b:7e:7f:52:4e:fe:a2:17: 3a:bf:c3:76:e4:b8:b4:4b:a7:4b:dc:fb:fc:35:75: 89:6c:89:10:1f:43:bc:1f:4f:3a:fb:8b:b3:58:ce: c6:58:46:f2:f1:a8:5e:47:af:bd:68:09:88:a2:f2: 40:a4:ad:d0:24:83:6b:da:96:f2:55:90:3f:c3:09: cf:5e:6f:bd:b8:a1:97:04:ce:0e:95:b9:8a:d3:1a: fb:34:91:9c:12:81:79:9a:5d:76:10:ea:db:a7:36: 63:ae:92:7f:d0:48:8c:ed:34:00:f0:1c:2c:0e:fb: be:29:b9:d9:06:e4:07:fa:82:26:0b:98:05:16:17: a4:b0:d2:60:96:28:85:60:77:69:f8:dc:8d:3e:63: 74:f4:fc:7c:75:67:43:77:12:a5:cf:78:13:62:9c: b1:3d:80:14:0e:f3:20:0c:be:93:90:ee:50:c2:bb: 05:de:c2:21:42:64:a1:5b:99:f3:80:a9:b7:b8:6e: 0a:95:60:4f:92:6d:b0:5b:cc:90:e6:db:50:e5:e0: b6:69:bc:2e:00:58:c1:43:b2:52:7e:ce:2c:df:df: 3e:d1:85:11:d5:03:c5:03:84:b1:29:a4:3b:6e:23: 77:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:73:AF:A9:B8:AA:A3:A2:9C:21:29:B6:67:DD:B0:9D:02:E8:EC:00 X509v3 Authority Key Identifier: keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/tnOvqbiqo6KcISm2Z92wnQLo7AA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.147.16.0/24 Signature Algorithm: sha256WithRSAEncryption a7:63:b1:41:1d:51:6c:60:e5:6a:84:dc:d7:08:7f:bb:c9:26: 01:e0:21:f9:c7:1e:b8:35:49:f0:8b:db:e5:42:73:e3:b3:18: a3:84:c0:f1:17:77:f7:03:0a:5f:f0:0a:09:6f:00:8a:aa:1f: c9:6f:03:a9:b9:27:04:5d:e6:4a:39:b9:f8:65:30:7c:6a:2b: e9:ba:4a:8d:66:d2:56:b6:53:9d:62:6e:31:95:07:4a:87:e7: a2:a4:cd:9b:05:33:16:42:a2:88:6f:77:88:94:f4:05:93:a9: d6:e2:b1:9a:7e:6f:c9:75:d4:57:3b:1b:a5:41:3a:0b:6a:ce: 53:87:a3:18:42:65:f3:a9:3e:30:0f:d5:61:89:d8:e6:0e:b0: c0:7a:46:a8:d4:9f:9f:88:2b:6d:18:93:79:21:23:84:9e:b2: e1:53:da:0a:09:15:cd:ea:d4:75:26:fc:1b:01:9a:e9:12:a8: 62:4b:96:42:9a:cf:a4:e8:bb:2f:f9:ff:99:ff:e8:6a:49:3a: 3b:70:ea:57:6b:ed:1b:1c:de:27:a2:35:76:7a:10:bc:4e:66: 53:e4:f2:b6:b4:f9:ac:4d:f7:7f:e9:c2:0e:05:b3:2d:0c:27: 14:22:f4:3a:34:9b:c6:e8:b4:74:80:5a:96:a7:5e:8f:32:e7: c5:25:51:ef -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wqc042WEtoleuU0eFPlQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm MzBjOWYwHhcNMjYwMTAxMTYxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjczYWZhOWI4YWFhM2EyOWMyMTI5YjY2N2RkYjA5ZDAyZThlYzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vcudaStW1x1Xnv42FAU0kYyAJGj O35/Uk7+ohc6v8N25Li0S6dL3Pv8NXWJbIkQH0O8H086+4uzWM7GWEby8aheR6+9 aAmIovJApK3QJINr2pbyVZA/wwnPXm+9uKGXBM4OlbmK0xr7NJGcEoF5ml12EOrb pzZjrpJ/0EiM7TQA8BwsDvu+KbnZBuQH+oImC5gFFheksNJgliiFYHdp+NyNPmN0 9Px8dWdDdxKlz3gTYpyxPYAUDvMgDL6TkO5QwrsF3sIhQmShW5nzgKm3uG4KlWBP km2wW8yQ5ttQ5eC2abwuAFjBQ7JSfs4s398+0YUR1QPFA4SxKaQ7biN3+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLZzr6m4qqOinCEptmfdsJ0C6OwAMB8GA1UdIwQY MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt MDhkMTI3MGMyZTcxLzEvdG5PdnFiaXFvNktjSVNtMlo5MnduUUxvN0FBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU5MQMA0G CSqGSIb3DQEBCwUAA4IBAQCnY7FBHVFsYOVqhNzXCH+7ySYB4CH5xx64NUnwi9vl QnPjsxijhMDxF3f3Awpf8AoJbwCKqh/JbwOpuScEXeZKObn4ZTB8aivpukqNZtJW tlOdYm4xlQdKh+eipM2bBTMWQqKIb3eIlPQFk6nW4rGafm/JddRXOxulQToLas5T h6MYQmXzqT4wD9VhidjmDrDAekao1J+fiCttGJN5ISOEnrLhU9oKCRXN6tR1Jvwb AZrpEqhiS5ZCms+k6Lsv+f+Z/+hqSTo7cOpXa+0bHN4nojV2ehC8TmZT5PK2tPms Tfd/6cIOBbMtDCcUIvQ6NJvG6LR0gFqWp16PMufFJVHv -----END CERTIFICATE-----Generated at Fri Jan 9 17:59:17 2026 by rpki-client