This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/TUtT-E6R6aqfPD_ccshhdr0R_dA.roa File: TUtT-E6R6aqfPD_ccshhdr0R_dA.roa (raw, json) Hash identifier: Sfi3xHqP/8/oyPQM6jYBEGo2skhCpY+mvC/2b33k6wk= Subject key identifier: 4D:4B:53:F8:4E:91:E9:AA:9F:3C:3F:DC:72:C8:61:76:BD:11:FD:D0 Certificate issuer: /CN=a3e2161d7f01fa6fd0842c211080633f3ed36ba5 Certificate serial: 019B7B36B12804341EADB5C6DD8619951FEE Authority key identifier: A3:E2:16:1D:7F:01:FA:6F:D0:84:2C:21:10:80:63:3F:3E:D3:6B:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/TUtT-E6R6aqfPD_ccshhdr0R_dA.roa Signing time: Thu 01 Jan 2026 20:19:00 +0000 ROA not before: Thu 01 Jan 2026 20:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34984 IP address blocks: 185.131.48.0/24 maxlen: 24 185.131.49.0/24 maxlen: 24 185.131.50.0/24 maxlen: 24 185.131.51.0/24 maxlen: 24 185.241.136.0/24 maxlen: 24 185.241.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:b1:28:04:34:1e:ad:b5:c6:dd:86:19:95:1f:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3e2161d7f01fa6fd0842c211080633f3ed36ba5 Validity Not Before: Jan 1 20:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d4b53f84e91e9aa9f3c3fdc72c86176bd11fdd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ab:28:77:fb:62:92:ec:7f:19:ed:bd:41:1e: e4:07:06:0e:d2:d3:85:91:6d:c4:43:10:c6:c6:33: 7a:b8:77:06:28:7d:12:4c:44:04:89:2a:03:7a:e7: 73:f0:77:0c:78:ff:9b:ed:dc:77:6c:c4:e7:00:58: 1b:6c:7f:92:98:01:cd:7b:7e:3e:30:7f:10:5f:16: 62:2e:ba:3d:cf:f2:ac:a6:65:93:a7:dc:b5:70:23: 96:2a:ca:7c:85:60:b4:61:37:5f:91:55:2e:c4:2c: 77:06:af:9f:2a:76:3f:d1:84:d7:d3:69:65:7b:02: f3:55:23:7b:41:63:97:ab:1c:44:95:9e:40:bf:23: 49:80:a1:c1:07:3d:be:15:59:d7:0a:6a:d7:21:57: e4:7e:4e:c4:22:b3:1e:a5:26:b6:13:32:14:69:ae: da:bb:cc:00:80:41:ca:48:6b:bd:01:09:85:cf:34: 10:3d:9c:7c:b3:84:ee:3a:4e:2c:b2:50:2f:43:eb: 11:02:70:62:5a:a2:5b:41:95:95:0f:3b:fa:f8:c6: 11:59:3e:f8:bc:b6:56:67:bc:7b:4f:25:6a:74:34: a1:ba:3f:f9:1b:e0:4b:28:07:0e:a9:b1:8c:4a:1f: ee:6f:4f:8e:2b:89:9d:2d:7a:23:bc:ed:c6:f3:ad: 4d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:4B:53:F8:4E:91:E9:AA:9F:3C:3F:DC:72:C8:61:76:BD:11:FD:D0 X509v3 Authority Key Identifier: keyid:A3:E2:16:1D:7F:01:FA:6F:D0:84:2C:21:10:80:63:3F:3E:D3:6B:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/TUtT-E6R6aqfPD_ccshhdr0R_dA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.131.48.0/22 185.241.136.0/23 Signature Algorithm: sha256WithRSAEncryption 44:ae:b3:6d:8c:67:2a:80:58:90:0b:74:97:0e:d9:75:98:d9: 35:49:f2:39:aa:c6:cb:04:41:a9:6e:18:dd:20:4f:5a:da:bf: 28:5f:ea:c3:2c:35:83:69:a4:0a:02:98:2a:02:ea:17:b1:70: aa:cd:1d:50:a0:0d:f7:41:0a:2e:01:dd:0d:6a:fe:f3:47:8d: 23:84:11:57:c3:e0:58:40:89:fb:d1:95:86:80:a5:a2:0b:13: ca:66:93:82:ba:c7:86:ee:6f:4a:f6:81:84:28:30:22:5e:9d: e3:35:b6:69:99:a6:48:8c:89:fd:bd:15:89:98:69:46:48:c5: b8:dd:98:60:02:00:0c:61:00:24:5f:73:87:4d:c4:01:f6:e5: 9c:32:d2:04:3d:19:a8:7f:fe:86:b9:17:59:54:8c:12:63:d7: d3:7d:72:14:de:6d:8b:82:b9:71:b3:bd:1e:c3:7f:62:75:8e: 39:84:5d:2d:6f:58:58:83:3d:0b:92:54:83:ec:af:01:09:bd: b3:31:46:50:5d:72:5c:f6:60:f1:6d:df:6b:ec:10:7b:c1:70: c2:96:ec:75:74:5b:22:96:c2:9c:8b:41:96:59:5e:5a:81:9d: 0e:37:6a:cd:40:91:93:b5:94:d3:cb:92:7f:f9:1d:2b:4a:2b: a9:ac:9b:cd -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NrEoBDQerbXG3YYZlR/uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzZTIxNjFkN2YwMWZhNmZkMDg0MmMyMTEwODA2MzNmM2Vk MzZiYTUwHhcNMjYwMTAxMjAxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDRiNTNmODRlOTFlOWFhOWYzYzNmZGM3MmM4NjE3NmJkMTFmZGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6sod/tikux/Ge29QR7kBwYO0tOF kW3EQxDGxjN6uHcGKH0STEQEiSoDeudz8HcMeP+b7dx3bMTnAFgbbH+SmAHNe34+ MH8QXxZiLro9z/KspmWTp9y1cCOWKsp8hWC0YTdfkVUuxCx3Bq+fKnY/0YTX02ll ewLzVSN7QWOXqxxElZ5AvyNJgKHBBz2+FVnXCmrXIVfkfk7EIrMepSa2EzIUaa7a u8wAgEHKSGu9AQmFzzQQPZx8s4TuOk4sslAvQ+sRAnBiWqJbQZWVDzv6+MYRWT74 vLZWZ7x7TyVqdDShuj/5G+BLKAcOqbGMSh/ub0+OK4mdLXojvO3G861NFQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFE1LU/hOkemqnzw/3HLIYXa9Ef3QMB8GA1UdIwQY MBaAFKPiFh1/Afpv0IQsIRCAYz8+02ulMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvby1JV0hYOEItbV9RaEN3aEVJQmpQejdUYTZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82YTY0ZWEtOWYxZS00YjQzLWJmMmEt N2UwMzQwZWM5NjY3LzEvVFV0VC1FNlI2YXFmUERfY2NzaGhkcjBSX2RBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi82YTY0ZWEtOWYxZS00YjQzLWJmMmEtN2UwMzQwZWM5NjY3 LzEvby1JV0hYOEItbV9RaEN3aEVJQmpQejdUYTZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuYMwAwQB ufGIMA0GCSqGSIb3DQEBCwUAA4IBAQBErrNtjGcqgFiQC3SXDtl1mNk1SfI5qsbL BEGpbhjdIE9a2r8oX+rDLDWDaaQKApgqAuoXsXCqzR1QoA33QQouAd0Nav7zR40j hBFXw+BYQIn70ZWGgKWiCxPKZpOCuseG7m9K9oGEKDAiXp3jNbZpmaZIjIn9vRWJ mGlGSMW43ZhgAgAMYQAkX3OHTcQB9uWcMtIEPRmof/6GuRdZVIwSY9fTfXIU3m2L grlxs70ew39idY45hF0tb1hYgz0LklSD7K8BCb2zMUZQXXJc9mDxbd9r7BB7wXDC lux1dFsilsKci0GWWV5agZ0ON2rNQJGTtZTTy5J/+R0rSiuprJvN -----END CERTIFICATE-----Generated at Mon Jan 26 05:30:30 2026 by rpki-client