This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/TSmkEZq1s4JhgnGrVpGYTe9i5hM.roa File: TSmkEZq1s4JhgnGrVpGYTe9i5hM.roa (raw, json) Hash identifier: vB+j/jUyEh0/4hWABQTMGfScyt4CG7R/SgKDOFAehts= Subject key identifier: 4D:29:A4:11:9A:B5:B3:82:61:82:71:AB:56:91:98:4D:EF:62:E6:13 Certificate issuer: /CN=b969e73de836f41ff2724340b93ec17763d69e72 Certificate serial: 019B76EAB8FDFC1066FFA142199C7290542D Authority key identifier: B9:69:E7:3D:E8:36:F4:1F:F2:72:43:40:B9:3E:C1:77:63:D6:9E:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uWnnPeg29B_yckNAuT7Bd2PWnnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/TSmkEZq1s4JhgnGrVpGYTe9i5hM.roa Signing time: Thu 01 Jan 2026 00:17:32 +0000 ROA not before: Thu 01 Jan 2026 00:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43112 IP address blocks: 193.3.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.mft rsync://rpki.ripe.net/repository/DEFAULT/uWnnPeg29B_yckNAuT7Bd2PWnnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:b8:fd:fc:10:66:ff:a1:42:19:9c:72:90:54:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b969e73de836f41ff2724340b93ec17763d69e72 Validity Not Before: Jan 1 00:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d29a4119ab5b382618271ab5691984def62e613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:98:48:ee:2b:85:8e:db:6b:b9:d6:ed:68:c5: 14:c4:fe:4d:4b:5b:66:e7:ee:8b:e8:24:4a:9b:a4: 39:f3:74:a0:ed:87:c7:3d:b5:04:08:f5:69:9d:a2: 50:b4:e7:06:73:71:18:0f:c7:2d:3e:a9:96:9e:ff: d8:55:86:95:f7:19:6c:50:ae:01:64:cd:fe:1d:72: 43:c4:6a:0c:3c:3a:73:95:85:7e:04:b4:9f:4d:1a: b8:2b:9a:c4:fb:e2:7b:85:45:cd:c7:9c:9a:9e:27: 2f:db:c0:0f:67:5d:75:e6:c2:fb:fb:c9:00:9c:77: 9b:a9:6d:be:fc:ba:fa:29:24:89:6b:69:0c:ed:61: 18:aa:d9:21:e2:1a:84:0e:05:4d:d1:1b:56:b1:cd: d9:7b:b7:48:9f:9e:e7:c5:4d:e7:22:b0:31:0d:50: 7d:55:0e:e0:9c:de:34:16:52:ac:d5:37:d1:b6:9c: 43:39:18:b8:0e:1c:5f:99:66:c4:02:3e:4b:ab:16: 4f:3c:b5:b6:f0:e6:bb:72:c3:2d:9e:b5:25:24:a6: e8:69:58:0d:d6:cd:31:9f:66:30:5b:de:59:6b:53: 91:fb:ad:c5:3c:ac:47:27:10:a9:42:94:5b:85:c6: 11:9f:1b:89:6a:2e:aa:c8:9f:1b:5c:d4:55:87:71: 07:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:29:A4:11:9A:B5:B3:82:61:82:71:AB:56:91:98:4D:EF:62:E6:13 X509v3 Authority Key Identifier: keyid:B9:69:E7:3D:E8:36:F4:1F:F2:72:43:40:B9:3E:C1:77:63:D6:9E:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWnnPeg29B_yckNAuT7Bd2PWnnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/TSmkEZq1s4JhgnGrVpGYTe9i5hM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.3.63.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:3e:4b:47:c4:a5:73:21:6c:25:89:78:72:6c:37:de:f8:6d: e1:0b:45:dc:6a:d2:27:f2:61:d4:0c:82:6c:b3:40:9f:b8:dc: 13:8c:27:f6:4b:a7:39:90:ff:bb:10:ca:9d:65:08:3f:6b:01: 90:8a:30:47:f9:77:2f:63:4d:82:4e:00:af:21:75:e3:89:cb: 03:25:b1:06:ad:e2:a8:90:4c:b9:17:7a:c2:f8:20:61:68:24: 9d:94:4a:1f:95:cc:66:a7:32:9e:c5:69:4d:8e:d3:b7:37:19: 48:79:5b:75:86:66:c4:5e:94:ae:6a:c2:ed:f9:6d:0c:4b:a0: 19:7e:59:83:ae:d9:9a:a8:52:71:cc:b1:0c:65:2b:99:fb:b1: 18:21:bb:32:01:86:95:51:09:07:10:9b:fe:5d:b4:9c:85:2b: 9e:69:60:33:6a:a8:90:36:52:40:76:57:83:27:cf:44:f6:b6: c4:5a:c3:5c:f7:08:23:98:0b:8b:70:b5:53:cf:e6:95:63:33: 55:03:02:4a:a6:70:42:40:4a:13:52:c1:1a:da:01:b9:fc:11: 35:8b:0f:b5:b6:79:03:e3:2c:74:b6:14:7b:6d:8c:50:2a:4f: b6:2c:02:6e:0c:bf:6b:b5:2e:4d:71:b3:e9:5c:d7:b5:f7:e5: b7:81:3d:4e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26rj9/BBm/6FCGZxykFQtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5NjllNzNkZTgzNmY0MWZmMjcyNDM0MGI5M2VjMTc3NjNk NjllNzIwHhcNMjYwMTAxMDAxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDI5YTQxMTlhYjViMzgyNjE4MjcxYWI1NjkxOTg0ZGVmNjJlNjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqphI7iuFjttrudbtaMUUxP5NS1tm 5+6L6CRKm6Q583Sg7YfHPbUECPVpnaJQtOcGc3EYD8ctPqmWnv/YVYaV9xlsUK4B ZM3+HXJDxGoMPDpzlYV+BLSfTRq4K5rE++J7hUXNx5yanicv28APZ1115sL7+8kA nHebqW2+/Lr6KSSJa2kM7WEYqtkh4hqEDgVN0RtWsc3Ze7dIn57nxU3nIrAxDVB9 VQ7gnN40FlKs1TfRtpxDORi4DhxfmWbEAj5LqxZPPLW28Oa7csMtnrUlJKboaVgN 1s0xn2YwW95Za1OR+63FPKxHJxCpQpRbhcYRnxuJai6qyJ8bXNRVh3EHnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE0ppBGatbOCYYJxq1aRmE3vYuYTMB8GA1UdIwQY MBaAFLlp5z3oNvQf8nJDQLk+wXdj1p5yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVdublBlZzI5Ql95Y2tOQXVUN0JkMlBXbm5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9iY2YzN2YtZWJlNC00YTNiLTljZDAt MDc0ZDI3ZGQ5MzBlLzEvVFNta0VacTFzNEpoZ25HclZwR1lUZTlpNWhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9iY2YzN2YtZWJlNC00YTNiLTljZDAtMDc0ZDI3ZGQ5MzBl LzEvdVdublBlZzI5Ql95Y2tOQXVUN0JkMlBXbm5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQM/MA0G CSqGSIb3DQEBCwUAA4IBAQCdPktHxKVzIWwliXhybDfe+G3hC0XcatIn8mHUDIJs s0CfuNwTjCf2S6c5kP+7EMqdZQg/awGQijBH+XcvY02CTgCvIXXjicsDJbEGreKo kEy5F3rC+CBhaCSdlEoflcxmpzKexWlNjtO3NxlIeVt1hmbEXpSuasLt+W0MS6AZ flmDrtmaqFJxzLEMZSuZ+7EYIbsyAYaVUQkHEJv+XbSchSueaWAzaqiQNlJAdleD J89E9rbEWsNc9wgjmAuLcLVTz+aVYzNVAwJKpnBCQEoTUsEa2gG5/BE1iw+1tnkD 4yx0thR7bYxQKk+2LAJuDL9rtS5NcbPpXNe19+W3gT1O -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:00 2026 by rpki-client