This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/TmN-dr45oTfR8pksVoCNgmVOGLU.roa File: TmN-dr45oTfR8pksVoCNgmVOGLU.roa (raw, json) Hash identifier: vnALMBgUiF5Ge/N8pDhGThN8hB7OAP8KLzkie3WI7N8= Subject key identifier: 4E:63:7E:76:BE:39:A1:37:D1:F2:99:2C:56:80:8D:82:65:4E:18:B5 Certificate issuer: /CN=dc8e059d5eb77649fbf19b84af35f6891d9c5807 Certificate serial: 019B7EA62B5D165D846FB26DCFD9C442BD4C Authority key identifier: DC:8E:05:9D:5E:B7:76:49:FB:F1:9B:84:AF:35:F6:89:1D:9C:58:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/TmN-dr45oTfR8pksVoCNgmVOGLU.roa Signing time: Fri 02 Jan 2026 12:19:37 +0000 ROA not before: Fri 02 Jan 2026 12:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25081 IP address blocks: 81.89.192.0/20 maxlen: 20 2a04:c940::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:2b:5d:16:5d:84:6f:b2:6d:cf:d9:c4:42:bd:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc8e059d5eb77649fbf19b84af35f6891d9c5807 Validity Not Before: Jan 2 12:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e637e76be39a137d1f2992c56808d82654e18b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:19:65:b0:01:e0:f2:f7:f1:52:6e:12:30:18: a3:b1:1d:d4:63:6a:cf:e2:9e:28:64:4e:98:69:1e: 47:81:bf:21:b8:40:a4:23:99:1a:23:93:6b:02:8f: 6c:29:d2:bf:cf:7f:57:37:6a:de:2e:14:17:15:4a: 20:13:36:fc:e7:1b:14:b9:6a:af:7f:37:e2:ce:b7: 35:9d:22:cc:a2:2d:6e:b9:fb:31:ac:0a:56:f5:9a: 0d:1f:32:07:bf:b0:c7:96:b2:95:5f:5e:88:27:f8: 45:15:40:d6:11:db:ab:34:74:06:4b:e7:52:bb:3a: 0b:af:7d:ab:0a:b1:43:7c:a7:48:7a:de:8c:af:52: e0:1a:43:d5:37:6c:6d:4f:b5:72:51:47:b8:a1:e3: c3:37:6f:fa:35:5a:eb:73:49:da:6b:7e:df:2b:f8: 6b:3d:8a:b0:6c:5e:4e:e2:69:9c:0a:7f:54:e5:30: ea:bc:e7:79:4a:8f:63:94:15:e3:75:a0:ef:8d:d1: f8:75:7d:5a:ac:f2:7c:7f:90:61:f6:75:69:12:a3: e8:4a:e0:26:bb:15:0b:3c:9c:46:0c:72:3c:44:74: db:1d:3d:58:82:0f:8b:38:64:6a:2e:08:17:47:bb: b7:97:76:0b:08:41:b5:b3:93:24:a0:d9:24:17:5f: a3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:63:7E:76:BE:39:A1:37:D1:F2:99:2C:56:80:8D:82:65:4E:18:B5 X509v3 Authority Key Identifier: keyid:DC:8E:05:9D:5E:B7:76:49:FB:F1:9B:84:AF:35:F6:89:1D:9C:58:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/TmN-dr45oTfR8pksVoCNgmVOGLU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.89.192.0/20 IPv6: 2a04:c940::/29 Signature Algorithm: sha256WithRSAEncryption 72:35:ef:0e:2e:f2:e9:ff:a5:1b:40:d8:70:53:c4:6b:b3:e8: b3:7d:77:61:59:c2:25:14:66:07:13:6d:c1:b7:c4:63:40:76: 9f:2b:1e:16:99:a4:e3:06:c6:78:a4:61:99:ba:62:f7:8f:90: 0a:1a:a1:a4:09:c6:9a:7f:a4:6f:b9:57:14:1c:ce:4c:dd:40: 17:70:46:0f:7f:e1:9e:51:70:c8:5b:8c:c1:f6:7d:8e:e7:68: 2e:07:c5:90:d3:92:d8:83:ca:5c:08:a1:a2:ec:c7:37:61:48: e5:2d:1f:c8:a4:f7:b2:d0:30:31:1a:1a:70:a0:49:33:0b:ec: d9:d1:e3:b7:bb:b6:d7:89:74:71:3b:94:89:9b:3c:08:84:4d: 98:48:59:da:44:cc:62:b6:f1:80:10:fd:fd:ab:79:90:25:58: 6a:fa:6e:09:c4:a7:e2:51:99:c3:cb:47:9a:99:b8:b0:2c:8d: ee:46:e5:d6:76:31:5c:a0:c5:03:ad:ae:df:60:65:6e:bc:15: f9:7a:a8:96:a9:ac:04:11:ae:27:da:29:8e:14:9b:ce:db:bb: ef:d9:18:87:30:57:a2:f7:b5:e2:a7:9e:e2:e1:11:f8:16:4b: 98:fb:fa:14:e6:12:0c:20:6a:f0:bc:fc:34:b5:ce:2e:9e:19: 2f:ec:08:4e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pitdFl2Eb7Jtz9nEQr1MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjOGUwNTlkNWViNzc2NDlmYmYxOWI4NGFmMzVmNjg5MWQ5 YzU4MDcwHhcNMjYwMTAyMTIxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTYzN2U3NmJlMzlhMTM3ZDFmMjk5MmM1NjgwOGQ4MjY1NGUxOGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxllsAHg8vfxUm4SMBijsR3UY2rP 4p4oZE6YaR5Hgb8huECkI5kaI5NrAo9sKdK/z39XN2reLhQXFUogEzb85xsUuWqv fzfizrc1nSLMoi1uufsxrApW9ZoNHzIHv7DHlrKVX16IJ/hFFUDWEdurNHQGS+dS uzoLr32rCrFDfKdIet6Mr1LgGkPVN2xtT7VyUUe4oePDN2/6NVrrc0naa37fK/hr PYqwbF5O4mmcCn9U5TDqvOd5So9jlBXjdaDvjdH4dX1arPJ8f5Bh9nVpEqPoSuAm uxULPJxGDHI8RHTbHT1Ygg+LOGRqLggXR7u3l3YLCEG1s5MkoNkkF1+jwQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFE5jfna+OaE30fKZLFaAjYJlThi1MB8GA1UdIwQY MBaAFNyOBZ1et3ZJ+/GbhK819okdnFgHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0k0Rm5WNjNka243OFp1RXJ6WDJpUjJjV0FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80ZjZlZTQtZmE2ZS00MzZlLWIzNDkt NmVmN2UxMTk5Njk4LzEvVG1OLWRyNDVvVGZSOHBrc1ZvQ05nbVZPR0xVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS80ZjZlZTQtZmE2ZS00MzZlLWIzNDktNmVmN2UxMTk5Njk4 LzEvM0k0Rm5WNjNka243OFp1RXJ6WDJpUjJjV0FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQEUVnAMA0E AgACMAcDBQMqBMlAMA0GCSqGSIb3DQEBCwUAA4IBAQByNe8OLvLp/6UbQNhwU8Rr s+izfXdhWcIlFGYHE23Bt8RjQHafKx4WmaTjBsZ4pGGZumL3j5AKGqGkCcaaf6Rv uVcUHM5M3UAXcEYPf+GeUXDIW4zB9n2O52guB8WQ05LYg8pcCKGi7Mc3YUjlLR/I pPey0DAxGhpwoEkzC+zZ0eO3u7bXiXRxO5SJmzwIhE2YSFnaRMxitvGAEP39q3mQ JVhq+m4JxKfiUZnDy0eambiwLI3uRuXWdjFcoMUDra7fYGVuvBX5eqiWqawEEa4n 2imOFJvO27vv2RiHMFei97Xip57i4RH4FkuY+/oU5hIMIGrwvPw0tc4unhkv7AhO -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:20 2026 by rpki-client