This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/TOVytZLtGiR_loWDvv77N1q9Wfs.roa File: TOVytZLtGiR_loWDvv77N1q9Wfs.roa (raw, json) Hash identifier: Sv4e/TvtoYqQVyB6uh9qVYGBsdkIHsts6lbRC1DO+ec= Subject key identifier: 4C:E5:72:B5:92:ED:1A:24:7F:96:85:83:BE:FE:FB:37:5A:BD:59:FB Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24 Certificate serial: 019C1B23B310EC0DED218477807B3405DF94 Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/TOVytZLtGiR_loWDvv77N1q9Wfs.roa Signing time: Sun 01 Feb 2026 21:37:30 +0000 ROA not before: Sun 01 Feb 2026 21:37:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48407 IP address blocks: 81.90.18.0/24 maxlen: 24 81.90.19.0/24 maxlen: 24 81.90.20.0/24 maxlen: 24 81.90.21.0/24 maxlen: 24 81.90.22.0/24 maxlen: 24 81.90.23.0/24 maxlen: 24 81.90.24.0/24 maxlen: 24 81.90.25.0/24 maxlen: 24 81.90.26.0/24 maxlen: 24 81.90.27.0/24 maxlen: 24 93.94.50.0/24 maxlen: 24 93.94.53.0/24 maxlen: 24 93.94.54.0/24 maxlen: 24 93.94.55.0/24 maxlen: 24 2a00:8b20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1b:23:b3:10:ec:0d:ed:21:84:77:80:7b:34:05:df:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24 Validity Not Before: Feb 1 21:37:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ce572b592ed1a247f968583befefb375abd59fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:20:9a:b7:3a:e4:af:41:99:b1:16:4d:33:6c: 18:5b:aa:cb:7f:27:43:50:41:6d:e8:8c:bd:06:37: 9d:3e:4e:b9:cc:3c:35:9d:b2:67:df:6d:be:73:8b: 0c:ff:2a:f1:65:af:7b:77:69:45:2e:f4:07:8a:96: 28:c4:21:f6:c0:aa:e5:db:0a:d4:6f:48:a3:af:05: ac:95:ac:c7:18:1e:e5:63:05:d6:96:8e:f0:00:69: 69:8b:89:d7:f0:f7:ab:03:28:9b:b6:b9:a3:e5:ad: 91:3b:f6:c0:18:7c:e4:fb:82:55:24:56:cf:f0:38: 3f:ba:72:ce:c9:95:c6:9b:f2:2f:f3:63:08:ef:f5: eb:0b:74:8b:61:72:8a:af:26:2d:6f:9a:f8:c7:27: 9f:87:5a:af:c8:1b:c8:40:2f:a0:c0:6d:bf:b4:2f: a9:bf:42:38:a5:4e:ed:13:4a:66:dc:ed:ad:26:67: e8:4d:5b:31:17:30:ed:f4:3f:42:0b:c6:dc:da:8c: 4a:cf:d4:88:ca:06:59:c5:39:e6:63:c0:3d:32:26: 07:71:c7:c5:d3:65:c6:0c:23:06:1d:cc:43:15:e0: 63:b8:d7:20:0a:d7:71:aa:83:02:0c:24:8d:30:41: 7c:a3:0a:e1:9c:a8:dc:78:03:02:2a:ba:6c:e2:98: f5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:E5:72:B5:92:ED:1A:24:7F:96:85:83:BE:FE:FB:37:5A:BD:59:FB X509v3 Authority Key Identifier: keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/TOVytZLtGiR_loWDvv77N1q9Wfs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.90.18.0-81.90.27.255 93.94.50.0/24 93.94.53.0-93.94.55.255 IPv6: 2a00:8b20::/32 Signature Algorithm: sha256WithRSAEncryption 53:99:41:bf:fc:08:d0:63:e9:e2:11:00:ac:bc:6c:5e:a3:81: d3:01:1b:b5:5a:e8:b1:7a:bf:ed:95:0d:3d:aa:9f:b9:a6:f6: 81:e6:2c:1b:5a:42:6f:06:c8:95:78:51:f2:27:1e:17:6a:3a: 35:b3:5c:79:c8:84:04:26:d3:e1:e2:22:a6:b0:d5:90:a3:7c: 97:77:13:ff:f1:8f:c6:01:c1:a0:97:5d:20:1c:0f:e2:70:95: 8c:06:cc:6e:bf:7b:79:ff:70:c7:50:e4:e0:4a:f3:bd:41:89: e7:22:f8:6f:c0:d2:b1:8e:37:ee:ff:4d:c4:f7:4b:59:9b:76: 7c:a2:14:9a:3e:7a:96:bb:75:ed:1c:64:c8:e3:70:f0:41:f0: af:f9:33:7c:b3:3e:34:33:50:42:58:66:d2:d3:3b:62:c9:41: 43:70:8a:0d:16:a4:6c:ad:fe:61:aa:de:e8:a6:c1:d6:03:53: 4e:6b:06:b0:57:f2:8d:21:e4:74:e5:b4:2c:9a:a0:19:f4:30: 34:34:99:ec:2d:17:ca:99:9c:4a:1c:51:e1:fe:e5:be:27:90: eb:a3:ff:35:a8:0c:9c:03:7e:3f:b2:97:83:df:20:2f:8c:d8: f2:f3:d5:af:a3:1c:e6:0c:c9:1c:40:c6:16:f7:d8:91:88:f1: 99:ee:a7:25 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgISAZwbI7MQ7A3tIYR3gHs0Bd+UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MjE2ZjVjMTY1YjgyN2E3ZmQ3M2Q4MTA3YWViZDJmNjNj NjNlMjQwHhcNMjYwMjAxMjEzNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Y2U1NzJiNTkyZWQxYTI0N2Y5Njg1ODNiZWZlZmIzNzVhYmQ1OWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CCatzrkr0GZsRZNM2wYW6rLfydD UEFt6Iy9BjedPk65zDw1nbJn322+c4sM/yrxZa97d2lFLvQHipYoxCH2wKrl2wrU b0ijrwWslazHGB7lYwXWlo7wAGlpi4nX8PerAyibtrmj5a2RO/bAGHzk+4JVJFbP 8Dg/unLOyZXGm/Iv82MI7/XrC3SLYXKKryYtb5r4xyefh1qvyBvIQC+gwG2/tC+p v0I4pU7tE0pm3O2tJmfoTVsxFzDt9D9CC8bc2oxKz9SIygZZxTnmY8A9MiYHccfF 02XGDCMGHcxDFeBjuNcgCtdxqoMCDCSNMEF8owrhnKjceAMCKrps4pj14wIDAQAB o4ICNDCCAjAwHQYDVR0OBBYEFEzlcrWS7Rokf5aFg77++zdavVn7MB8GA1UdIwQY MBaAFEkhb1wWW4J6f9c9gQeuvS9jxj4kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQt MGRiYmMyNDllNjU3LzEvVE9WeXRaTHRHaVJfbG9XRHZ2NzdOMXE5V2ZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQtMGRiYmMyNDllNjU3 LzEvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTAoBAIAATAiMAwDBAFRWhID BAJRWhgDBABdXjIwDAMEAF1eNQMEA11eMDANBAIAAjAHAwUAKgCLIDANBgkqhkiG 9w0BAQsFAAOCAQEAU5lBv/wI0GPp4hEArLxsXqOB0wEbtVrosXq/7ZUNPaqfuab2 geYsG1pCbwbIlXhR8iceF2o6NbNceciEBCbT4eIiprDVkKN8l3cT//GPxgHBoJdd IBwP4nCVjAbMbr97ef9wx1Dk4ErzvUGJ5yL4b8DSsY437v9NxPdLWZt2fKIUmj56 lrt17RxkyONw8EHwr/kzfLM+NDNQQlhm0tM7YslBQ3CKDRakbK3+Yare6KbB1gNT TmsGsFfyjSHkdOW0LJqgGfQwNDSZ7C0XypmcShxR4f7lvieQ66P/NagMnAN+P7KX g98gL4zY8vPVr6Mc5gzJHEDGFvfYkYjxme6nJQ== -----END CERTIFICATE-----Generated at Mon Feb 2 17:17:24 2026 by rpki-client