This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/tvVz3gUCgldDkrhOEK9-WF9eoc4.roa File: tvVz3gUCgldDkrhOEK9-WF9eoc4.roa (raw, json) Hash identifier: VM0xQWpxXmLKkz6M8pgyNY4WFuott6QJjASY1s27SWU= Subject key identifier: B6:F5:73:DE:05:02:82:57:43:92:B8:4E:10:AF:7E:58:5F:5E:A1:CE Certificate issuer: /CN=a5c249eb6fa6b5dbaf6ab9deb3a7778ee0eb3487 Certificate serial: 019B7F84F6E049A5A27B6ACE2BEC4ECB498E Authority key identifier: A5:C2:49:EB:6F:A6:B5:DB:AF:6A:B9:DE:B3:A7:77:8E:E0:EB:34:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcJJ62-mtduvarnes6d3juDrNIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/tvVz3gUCgldDkrhOEK9-WF9eoc4.roa Signing time: Fri 02 Jan 2026 16:22:58 +0000 ROA not before: Fri 02 Jan 2026 16:22:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215489 IP address blocks: 170.237.6.0/23 maxlen: 23 170.237.8.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.mft rsync://rpki.ripe.net/repository/DEFAULT/pcJJ62-mtduvarnes6d3juDrNIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:f6:e0:49:a5:a2:7b:6a:ce:2b:ec:4e:cb:49:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5c249eb6fa6b5dbaf6ab9deb3a7778ee0eb3487 Validity Not Before: Jan 2 16:22:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b6f573de050282574392b84e10af7e585f5ea1ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:92:01:05:84:2d:09:19:d1:96:41:65:14:5c: 30:4c:99:3e:39:63:a5:6d:30:1c:20:4b:c8:c8:57: 05:b0:6a:f1:d5:3e:8d:a3:47:68:d4:66:5a:9c:fb: 8c:a5:61:8b:5d:b9:6b:63:aa:0d:5a:2e:4f:44:93: 85:c0:b9:d1:29:96:12:4d:b0:d5:52:d6:7a:7b:43: c2:f5:93:e5:57:d6:08:15:c2:a9:eb:a5:fb:7e:51: 9a:6e:16:38:a0:8e:31:fd:e3:c9:e9:a5:39:8b:12: e9:7c:2f:25:b8:0c:21:6e:53:c7:42:a6:c6:e3:f5: d4:cd:eb:17:e1:20:ad:04:a0:81:8d:7f:1f:67:b8: 6a:a8:a9:ea:9a:38:05:0f:0f:31:8a:9f:26:56:1e: 7e:cc:71:52:8f:b7:5f:e2:78:ec:6c:88:71:7f:1e: 47:94:a5:ad:e0:57:71:0b:32:ac:44:91:6f:da:12: ad:4d:2e:1f:28:1c:e5:f0:94:11:bf:44:cf:7c:77: de:85:d7:a5:b4:c3:3b:ff:88:37:55:fd:06:e4:92: 20:06:58:bd:23:fc:14:4c:5a:e1:ce:29:7a:4e:4d: 10:c5:21:d2:03:a5:a9:3c:0c:62:44:0e:53:f3:bb: 4f:8b:22:09:52:c1:56:78:0b:24:8f:76:56:02:54: cc:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:F5:73:DE:05:02:82:57:43:92:B8:4E:10:AF:7E:58:5F:5E:A1:CE X509v3 Authority Key Identifier: keyid:A5:C2:49:EB:6F:A6:B5:DB:AF:6A:B9:DE:B3:A7:77:8E:E0:EB:34:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcJJ62-mtduvarnes6d3juDrNIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/tvVz3gUCgldDkrhOEK9-WF9eoc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.237.6.0-170.237.9.255 Signature Algorithm: sha256WithRSAEncryption af:18:9d:22:8d:99:c9:f7:78:1d:8f:01:46:21:2d:cf:41:55: d5:b8:51:cd:29:ae:cf:a8:1a:44:5b:2c:1c:48:06:e2:22:25: 6d:01:b9:5e:a5:a2:37:b5:71:60:0c:56:9b:ac:4c:cc:df:57: be:93:02:8c:1c:12:0d:c2:ab:9a:61:40:5a:e7:c6:ff:e3:4f: 3c:72:36:b4:2c:d1:f4:35:42:30:88:61:07:39:52:bd:81:64: 5c:6c:04:05:8c:2a:af:2a:dd:71:c0:15:ee:b7:58:08:9d:a5: 15:4b:9e:55:da:55:b9:d2:b5:e9:bf:87:0d:56:7e:55:7d:df: a5:1a:e3:61:4d:1b:a8:09:0f:62:94:a3:58:8b:5f:55:96:07: 5d:8b:44:99:03:22:b7:23:28:88:26:80:e5:8c:a2:36:80:5a: 02:76:0f:98:db:28:d4:9e:1f:99:fc:e2:b6:8c:0f:eb:2d:3c: ff:24:7e:b6:68:a6:8f:fb:fb:a0:5f:21:73:26:2c:58:74:d8: 06:82:fa:6f:2e:4f:b1:80:21:8c:dd:55:97:d4:c4:c3:23:6d: 44:c5:10:35:de:95:5d:66:3a:58:cd:01:aa:df:4f:15:92:50: 00:d3:37:c3:d8:99:a3:02:ad:25:8c:8a:b2:d8:55:ee:cd:25: 0f:58:e9:08 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt/hPbgSaWie2rOK+xOy0mOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YzI0OWViNmZhNmI1ZGJhZjZhYjlkZWIzYTc3NzhlZTBl YjM0ODcwHhcNMjYwMTAyMTYyMjU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNmY1NzNkZTA1MDI4MjU3NDM5MmI4NGUxMGFmN2U1ODVmNWVhMWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5IBBYQtCRnRlkFlFFwwTJk+OWOl bTAcIEvIyFcFsGrx1T6No0do1GZanPuMpWGLXblrY6oNWi5PRJOFwLnRKZYSTbDV UtZ6e0PC9ZPlV9YIFcKp66X7flGabhY4oI4x/ePJ6aU5ixLpfC8luAwhblPHQqbG 4/XUzesX4SCtBKCBjX8fZ7hqqKnqmjgFDw8xip8mVh5+zHFSj7df4njsbIhxfx5H lKWt4FdxCzKsRJFv2hKtTS4fKBzl8JQRv0TPfHfehdeltMM7/4g3Vf0G5JIgBli9 I/wUTFrhzil6Tk0QxSHSA6WpPAxiRA5T87tPiyIJUsFWeAskj3ZWAlTMXQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFLb1c94FAoJXQ5K4ThCvflhfXqHOMB8GA1UdIwQY MBaAFKXCSetvprXbr2q53rOnd47g6zSHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGNKSjYyLW10ZHV2YXJuZXM2ZDNqdURyTkljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi80NTMxOTktNjM0My00YzY3LWI4N2Ut MzJlYjNhNGVhZDQzLzEvdHZWejNnVUNnbGREa3JoT0VLOS1XRjllb2M0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi80NTMxOTktNjM0My00YzY3LWI4N2UtMzJlYjNhNGVhZDQz LzEvcGNKSjYyLW10ZHV2YXJuZXM2ZDNqdURyTkljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGq7QYD BAGq7QgwDQYJKoZIhvcNAQELBQADggEBAK8YnSKNmcn3eB2PAUYhLc9BVdW4Uc0p rs+oGkRbLBxIBuIiJW0BuV6loje1cWAMVpusTMzfV76TAowcEg3Cq5phQFrnxv/j TzxyNrQs0fQ1QjCIYQc5Ur2BZFxsBAWMKq8q3XHAFe63WAidpRVLnlXaVbnStem/ hw1WflV936Ua42FNG6gJD2KUo1iLX1WWB12LRJkDIrcjKIgmgOWMojaAWgJ2D5jb KNSeH5n84raMD+stPP8kfrZopo/7+6BfIXMmLFh02AaC+m8uT7GAIYzdVZfUxMMj bUTFEDXelV1mOljNAarfTxWSUADTN8PYmaMCrSWMirLYVe7NJQ9Y6Qg= -----END CERTIFICATE-----Generated at Tue Jan 20 04:47:59 2026 by rpki-client