This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/tcbkNHlV278WuPIHWR3nno0tNIU.roa File: tcbkNHlV278WuPIHWR3nno0tNIU.roa (raw, json) Hash identifier: 06lnHiwHQVCyQQPbik2oG2DAxVKNgLZC3M/2kyqLgGA= Subject key identifier: B5:C6:E4:34:79:55:DB:BF:16:B8:F2:07:59:1D:E7:9E:8D:2D:34:85 Certificate issuer: /CN=04feaefea82b6103dc2b8971e9bdda01669a1357 Certificate serial: 019B7910A7369C7FFBAC870D31B4EE26988E Authority key identifier: 04:FE:AE:FE:A8:2B:61:03:DC:2B:89:71:E9:BD:DA:01:66:9A:13:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/tcbkNHlV278WuPIHWR3nno0tNIU.roa Signing time: Thu 01 Jan 2026 10:18:13 +0000 ROA not before: Thu 01 Jan 2026 10:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198792 IP address blocks: 5.39.224.0/21 maxlen: 21 2a00:fb40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft rsync://rpki.ripe.net/repository/DEFAULT/BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:a7:36:9c:7f:fb:ac:87:0d:31:b4:ee:26:98:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04feaefea82b6103dc2b8971e9bdda01669a1357 Validity Not Before: Jan 1 10:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5c6e4347955dbbf16b8f207591de79e8d2d3485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:82:da:5f:37:73:52:31:f6:40:c5:27:8c:b3: 60:85:f4:cc:e1:11:96:c3:39:36:14:73:24:91:7f: 8c:5e:ca:83:02:e3:70:49:44:16:ce:58:25:da:ad: f2:95:ec:a3:b6:b3:c2:e8:84:34:18:18:d1:58:1d: 96:c8:6f:06:f6:7d:89:3c:31:0f:5a:f7:1a:c8:86: 05:f8:74:c4:67:8f:b4:ca:ee:42:12:a8:98:22:5c: 66:7b:86:f5:fa:5d:f0:7f:d8:0c:66:a3:d1:6c:7a: 73:af:c2:e0:d5:6f:90:be:ed:c0:e9:97:2d:ea:2a: ef:a7:89:bc:fd:40:a0:30:54:9e:01:d5:04:34:f4: a8:2d:02:67:1b:be:d3:e2:3a:ad:73:ec:f9:d2:68: a5:28:09:9b:f9:d9:3e:da:12:18:c0:ed:36:a8:4a: d5:f6:15:ee:4a:6e:a6:fa:7e:ab:26:e1:2c:9e:d9: 9e:f5:8d:75:ac:32:76:5f:44:26:e7:44:c4:f7:41: 98:95:51:72:db:f2:54:ea:5a:5b:70:de:42:de:d6: 06:ec:45:11:87:1d:0f:d8:70:11:93:f8:36:68:b9: c3:05:75:87:d9:8c:25:a7:be:9e:fa:12:a8:e2:6f: 5a:c2:6b:ae:37:c2:65:bf:be:30:e7:1d:c2:57:91: 26:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:C6:E4:34:79:55:DB:BF:16:B8:F2:07:59:1D:E7:9E:8D:2D:34:85 X509v3 Authority Key Identifier: keyid:04:FE:AE:FE:A8:2B:61:03:DC:2B:89:71:E9:BD:DA:01:66:9A:13:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/tcbkNHlV278WuPIHWR3nno0tNIU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.39.224.0/21 IPv6: 2a00:fb40::/32 Signature Algorithm: sha256WithRSAEncryption 56:34:41:09:cd:31:bc:c9:9f:a4:d3:7f:45:44:b1:95:4e:d9: ad:6d:ba:da:25:3c:83:be:2c:c5:b0:b1:a8:70:6d:5d:16:8c: 68:2f:79:61:f8:57:78:07:b9:3f:5b:f0:5c:20:6d:cf:9b:1c: b8:54:4f:f4:4c:d8:76:b9:0e:a6:b1:8d:81:24:b5:30:3c:bf: a7:e7:2f:71:3d:c2:2b:af:d1:70:69:b4:02:39:3c:38:73:6c: f5:12:38:c3:70:6f:ae:05:e8:e7:7d:da:72:17:d1:78:67:21: a5:84:bf:80:3a:6b:90:7e:0a:48:2b:db:25:06:d4:e7:6a:7d: b4:1a:36:76:a1:88:f0:c1:3c:af:62:b2:08:1a:44:4e:7d:95: 4a:7a:36:0b:2f:84:c8:7a:dc:72:a4:63:2d:35:64:47:f3:8d: 71:31:55:08:47:73:ee:fa:0d:13:8b:3b:79:d1:f6:7a:e3:68: 23:9b:90:08:8d:29:54:da:84:b2:b2:79:3f:37:25:92:62:a5: b8:ed:bf:d1:f3:71:ad:0c:96:a1:bc:84:0c:80:9c:53:a5:21: 2c:f3:61:30:ac:07:99:11:96:86:2d:a0:2e:eb:88:0c:49:f6: d1:d1:cc:54:45:9b:87:b4:6c:72:15:fc:05:be:fa:d6:6d:32: 8c:7a:a0:00 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5EKc2nH/7rIcNMbTuJpiOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0ZmVhZWZlYTgyYjYxMDNkYzJiODk3MWU5YmRkYTAxNjY5 YTEzNTcwHhcNMjYwMTAxMTAxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNWM2ZTQzNDc5NTVkYmJmMTZiOGYyMDc1OTFkZTc5ZThkMmQzNDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYLaXzdzUjH2QMUnjLNghfTM4RGW wzk2FHMkkX+MXsqDAuNwSUQWzlgl2q3yleyjtrPC6IQ0GBjRWB2WyG8G9n2JPDEP WvcayIYF+HTEZ4+0yu5CEqiYIlxme4b1+l3wf9gMZqPRbHpzr8Lg1W+Qvu3A6Zct 6irvp4m8/UCgMFSeAdUENPSoLQJnG77T4jqtc+z50milKAmb+dk+2hIYwO02qErV 9hXuSm6m+n6rJuEsntme9Y11rDJ2X0Qm50TE90GYlVFy2/JU6lpbcN5C3tYG7EUR hx0P2HARk/g2aLnDBXWH2Ywlp76e+hKo4m9awmuuN8Jlv74w5x3CV5EmiQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLXG5DR5Vdu/FrjyB1kd556NLTSFMB8GA1UdIwQY MBaAFAT+rv6oK2ED3CuJcem92gFmmhNXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlA2dV9xZ3JZUVBjSzRseDZiM2FBV2FhRTFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8zZjk1MjktNzE3Mi00M2Y4LTg5NWQt OGVlYjA4OWI1Y2FmLzEvdGNia05IbFYyNzhXdVBJSFdSM25ubzB0TklVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8zZjk1MjktNzE3Mi00M2Y4LTg5NWQtOGVlYjA4OWI1Y2Fm LzEvQlA2dV9xZ3JZUVBjSzRseDZiM2FBV2FhRTFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDBSfgMA0E AgACMAcDBQAqAPtAMA0GCSqGSIb3DQEBCwUAA4IBAQBWNEEJzTG8yZ+k039FRLGV TtmtbbraJTyDvizFsLGocG1dFoxoL3lh+Fd4B7k/W/BcIG3Pmxy4VE/0TNh2uQ6m sY2BJLUwPL+n5y9xPcIrr9FwabQCOTw4c2z1EjjDcG+uBejnfdpyF9F4ZyGlhL+A OmuQfgpIK9slBtTnan20GjZ2oYjwwTyvYrIIGkROfZVKejYLL4TIetxypGMtNWRH 841xMVUIR3Pu+g0Tizt50fZ642gjm5AIjSlU2oSysnk/NyWSYqW47b/R83GtDJah vIQMgJxTpSEs82EwrAeZEZaGLaAu64gMSfbR0cxURZuHtGxyFfwFvvrWbTKMeqAA -----END CERTIFICATE-----Generated at Tue Feb 10 03:02:15 2026 by rpki-client