This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/TA0cz_6zsJUKfNluQZhCxktBkLY.roa File: TA0cz_6zsJUKfNluQZhCxktBkLY.roa (raw, json) Hash identifier: uvzonztC0nUJaKss/c/7QmJOjzTq+4kXZeDu1iN/DMY= Subject key identifier: 4C:0D:1C:CF:FE:B3:B0:95:0A:7C:D9:6E:41:98:42:C6:4B:41:90:B6 Certificate issuer: /CN=2dece72fbbaf7bd0975edda6763b68077364e202 Certificate serial: 019B7BA34B33844CEF4F9EAEB3DA1B8CE4B0 Authority key identifier: 2D:EC:E7:2F:BB:AF:7B:D0:97:5E:DD:A6:76:3B:68:07:73:64:E2:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/TA0cz_6zsJUKfNluQZhCxktBkLY.roa Signing time: Thu 01 Jan 2026 22:17:37 +0000 ROA not before: Thu 01 Jan 2026 22:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24858 IP address blocks: 91.232.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:4b:33:84:4c:ef:4f:9e:ae:b3:da:1b:8c:e4:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dece72fbbaf7bd0975edda6763b68077364e202 Validity Not Before: Jan 1 22:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c0d1ccffeb3b0950a7cd96e419842c64b4190b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:61:bf:7a:f8:2d:e6:bb:1d:a6:51:8b:99:0e: 4a:61:09:fb:47:f1:88:6c:27:f2:35:d2:88:b0:11: d1:fa:c5:34:d2:bd:78:72:93:e5:eb:6c:d7:d4:66: aa:16:da:8d:62:fa:ef:10:55:ac:17:c0:45:50:c7: 48:0c:7c:b8:cd:5d:db:e6:06:a2:c7:57:61:5e:88: 47:e5:6f:0f:50:78:77:57:9c:94:c0:94:7c:08:05: d9:e0:bc:63:6a:3b:d9:9d:44:18:b0:1b:d0:ff:6e: 76:10:5b:e2:7d:68:40:b8:0b:86:46:76:9c:56:50: a3:16:f6:18:21:c5:7f:cf:fe:8a:b1:b9:5c:08:14: c7:cf:9d:66:df:b6:d0:ee:ba:27:6b:3b:ee:e7:46: 63:0f:a1:43:e7:aa:ff:bf:b4:34:42:21:25:61:8c: 96:f4:53:2f:79:5f:79:c6:c5:9c:1c:4b:bb:20:87: f8:02:c2:6c:96:a0:f0:85:e6:29:b8:61:89:8d:e4: d1:2d:9c:d9:bb:41:d5:28:e8:8b:d3:72:f7:59:a6: 3e:cd:90:f5:aa:47:09:4e:25:d9:97:7c:be:26:81: e5:8f:90:3e:2d:a0:7c:be:37:b7:8e:df:8a:61:76: 83:31:e3:d5:48:29:d8:e6:f7:cc:c6:13:13:fe:1b: cd:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:0D:1C:CF:FE:B3:B0:95:0A:7C:D9:6E:41:98:42:C6:4B:41:90:B6 X509v3 Authority Key Identifier: keyid:2D:EC:E7:2F:BB:AF:7B:D0:97:5E:DD:A6:76:3B:68:07:73:64:E2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/TA0cz_6zsJUKfNluQZhCxktBkLY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.232.98.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:b9:26:53:2d:59:0c:5b:43:6e:f3:eb:d9:72:4a:c8:78:e4: d0:13:76:72:c6:b0:b4:10:0a:c3:c1:82:cc:76:1e:f7:26:eb: 64:d8:a4:d5:b0:59:ce:89:66:65:15:55:43:cd:8d:c9:b5:a8: 3d:f6:c1:13:0f:47:94:cc:03:fb:6b:e2:86:ce:b2:0c:71:c1: ed:6d:d1:ae:a7:c6:ad:2b:05:f6:d3:75:c8:e9:3f:7f:7e:5d: 11:12:f4:df:11:29:8a:da:8d:32:a9:de:68:b0:29:31:5f:0e: ea:02:e5:17:df:f7:3c:5a:84:62:e4:8e:30:5f:02:6b:0a:a6: ef:b6:37:bc:91:8c:ad:99:3e:85:0f:78:b4:b3:00:95:54:90: 59:d9:5f:c4:dc:bd:2b:06:3c:4c:e0:c9:66:98:84:04:37:98: 67:11:88:5e:36:63:6c:94:63:48:c3:87:21:53:43:d7:8c:32: 84:e7:03:3b:74:38:e8:89:90:16:9b:c6:1b:4d:6d:fc:15:f7: b5:f2:68:c1:2e:ce:9c:f4:5b:ca:39:f0:4a:42:a6:d4:86:9b: 03:a5:62:82:72:1a:8d:fd:32:be:31:f4:d9:53:3d:f9:96:2a: 10:30:4b:1b:ff:a6:39:ee:e7:08:80:68:c1:0b:1d:e0:c1:0c: a2:ec:e4:a0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o0szhEzvT56us9objOSwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkZWNlNzJmYmJhZjdiZDA5NzVlZGRhNjc2M2I2ODA3NzM2 NGUyMDIwHhcNMjYwMTAxMjIxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzBkMWNjZmZlYjNiMDk1MGE3Y2Q5NmU0MTk4NDJjNjRiNDE5MGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGG/evgt5rsdplGLmQ5KYQn7R/GI bCfyNdKIsBHR+sU00r14cpPl62zX1GaqFtqNYvrvEFWsF8BFUMdIDHy4zV3b5gai x1dhXohH5W8PUHh3V5yUwJR8CAXZ4LxjajvZnUQYsBvQ/252EFvifWhAuAuGRnac VlCjFvYYIcV/z/6KsblcCBTHz51m37bQ7ronazvu50ZjD6FD56r/v7Q0QiElYYyW 9FMveV95xsWcHEu7IIf4AsJslqDwheYpuGGJjeTRLZzZu0HVKOiL03L3WaY+zZD1 qkcJTiXZl3y+JoHlj5A+LaB8vje3jt+KYXaDMePVSCnY5vfMxhMT/hvNgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEwNHM/+s7CVCnzZbkGYQsZLQZC2MB8GA1UdIwQY MBaAFC3s5y+7r3vQl17dpnY7aAdzZOICMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGV6bkw3dXZlOUNYWHQybWRqdG9CM05rNGdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wMjZjYjEtNGMwZi00N2Q4LWI3MDAt ZDUxYWU0YWExMjdiLzEvVEEwY3pfNnpzSlVLZk5sdVFaaEN4a3RCa0xZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8wMjZjYjEtNGMwZi00N2Q4LWI3MDAtZDUxYWU0YWExMjdi LzEvTGV6bkw3dXZlOUNYWHQybWRqdG9CM05rNGdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+hiMA0G CSqGSIb3DQEBCwUAA4IBAQAKuSZTLVkMW0Nu8+vZckrIeOTQE3ZyxrC0EArDwYLM dh73Jutk2KTVsFnOiWZlFVVDzY3Jtag99sETD0eUzAP7a+KGzrIMccHtbdGup8at KwX203XI6T9/fl0REvTfESmK2o0yqd5osCkxXw7qAuUX3/c8WoRi5I4wXwJrCqbv tje8kYytmT6FD3i0swCVVJBZ2V/E3L0rBjxM4MlmmIQEN5hnEYheNmNslGNIw4ch U0PXjDKE5wM7dDjoiZAWm8YbTW38Ffe18mjBLs6c9FvKOfBKQqbUhpsDpWKCchqN /TK+MfTZUz35lioQMEsb/6Y57ucIgGjBCx3gwQyi7OSg -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:22 2026 by rpki-client