This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/TRTbys13hMPw7qPZ6_zT9S6DlZU.roa File: TRTbys13hMPw7qPZ6_zT9S6DlZU.roa (raw, json) Hash identifier: UwtEWUeqSkdN9j3umwCxrdjYmKQ9n0cv0zhOxAG4uV4= Subject key identifier: 4D:14:DB:CA:CD:77:84:C3:F0:EE:A3:D9:EB:FC:D3:F5:2E:83:95:95 Certificate issuer: /CN=a22b1f4d0ab43836b2715390828d90772cc9d8da Certificate serial: 019B76EB7D344A86A188A8D41FE671BAD224 Authority key identifier: A2:2B:1F:4D:0A:B4:38:36:B2:71:53:90:82:8D:90:77:2C:C9:D8:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/TRTbys13hMPw7qPZ6_zT9S6DlZU.roa Signing time: Thu 01 Jan 2026 00:18:23 +0000 ROA not before: Thu 01 Jan 2026 00:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28995 IP address blocks: 62.140.160.0/20 maxlen: 20 2a02:2670::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft rsync://rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:7d:34:4a:86:a1:88:a8:d4:1f:e6:71:ba:d2:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a22b1f4d0ab43836b2715390828d90772cc9d8da Validity Not Before: Jan 1 00:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d14dbcacd7784c3f0eea3d9ebfcd3f52e839595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:02:66:ba:b5:a2:74:07:d2:2e:96:9e:7d:5f: a5:8f:04:30:54:e9:b0:98:af:b3:b1:00:75:28:88: ab:12:41:b8:98:9a:a4:e8:f9:5f:76:72:a5:14:31: c0:ec:ab:5f:23:12:52:d1:12:b6:6d:3a:27:57:61: ea:e3:03:3d:5b:9c:a2:d6:c4:ff:d3:ed:b3:96:2e: a5:94:ae:4a:bd:39:55:9b:09:65:3a:88:ca:77:a6: c5:21:ee:2b:7a:3d:4e:77:52:72:14:93:39:e2:25: c9:bf:e6:3b:18:cb:b6:36:98:32:a7:c1:37:c9:f5: 2a:ce:80:86:34:16:52:7f:2a:7a:7e:99:17:75:1d: da:df:4f:f1:2e:07:40:8f:ea:e9:a3:0f:31:aa:2d: 71:69:15:8c:37:07:3d:ad:88:bc:ce:81:24:e1:ae: 6e:2a:f6:5f:4a:ca:3f:1c:47:14:14:a0:5c:34:6c: 0d:db:6e:ec:b4:6f:4c:7a:32:a2:0a:92:86:7e:d8: 87:d4:3a:21:4a:04:c8:0b:6c:b3:33:97:ea:a9:11: 04:12:a6:63:d7:10:b1:dd:74:ff:e0:a6:32:ac:da: 32:01:73:09:08:ad:11:40:2b:eb:dd:8b:62:ac:a5: 37:4b:02:a8:c3:4e:e7:b9:e7:f3:25:27:64:6f:2e: fa:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:14:DB:CA:CD:77:84:C3:F0:EE:A3:D9:EB:FC:D3:F5:2E:83:95:95 X509v3 Authority Key Identifier: keyid:A2:2B:1F:4D:0A:B4:38:36:B2:71:53:90:82:8D:90:77:2C:C9:D8:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/TRTbys13hMPw7qPZ6_zT9S6DlZU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.140.160.0/20 IPv6: 2a02:2670::/32 Signature Algorithm: sha256WithRSAEncryption 1f:a0:51:0f:14:0a:c5:15:d2:58:a0:a7:21:64:a3:1c:cd:2b: 3c:52:d4:36:89:d0:e4:7e:48:63:bd:08:4b:ae:5b:e1:fe:3c: bc:a3:d1:07:22:09:f0:e6:4f:af:35:3d:86:db:b1:4e:cf:36: 02:25:73:ff:bc:28:bf:75:36:c4:47:f7:d9:b8:71:6a:3f:94: e5:bf:d4:f2:ab:a8:b7:a8:db:92:55:6a:a3:fd:75:29:df:e0: 27:7c:86:43:60:7f:46:c4:b2:bf:c3:d4:8e:f1:ad:37:e7:b9: 07:d3:f7:86:67:4a:5e:9b:95:19:14:0e:08:f4:85:92:1d:11: 02:0e:96:cc:7e:5e:02:34:78:68:0a:db:3c:7e:8b:61:eb:b3: 06:4e:2e:e1:5b:b2:22:14:55:40:c9:4e:45:cf:8c:1f:de:d5: fa:7c:fe:d8:90:85:90:f3:94:7c:5b:9d:4e:90:02:bf:49:d8: 93:13:d6:c4:e5:32:77:9e:9d:04:20:ee:4d:59:d0:09:8d:1a: 89:3c:c9:fc:d3:fa:17:a0:4d:14:5a:55:5b:1f:43:25:bd:d6: 4a:6a:92:5e:6c:6b:53:8e:ed:bc:68:d9:c3:8d:84:e0:c8:11: f9:1e:7f:fd:40:73:1c:0e:cb:9a:67:87:9f:34:ab:57:a9:d8: ea:6d:f3:b1 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt26300SoahiKjUH+ZxutIkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMmIxZjRkMGFiNDM4MzZiMjcxNTM5MDgyOGQ5MDc3MmNj OWQ4ZGEwHhcNMjYwMTAxMDAxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDE0ZGJjYWNkNzc4NGMzZjBlZWEzZDllYmZjZDNmNTJlODM5NTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wJmurWidAfSLpaefV+ljwQwVOmw mK+zsQB1KIirEkG4mJqk6PlfdnKlFDHA7KtfIxJS0RK2bTonV2Hq4wM9W5yi1sT/ 0+2zli6llK5KvTlVmwllOojKd6bFIe4rej1Od1JyFJM54iXJv+Y7GMu2Npgyp8E3 yfUqzoCGNBZSfyp6fpkXdR3a30/xLgdAj+rpow8xqi1xaRWMNwc9rYi8zoEk4a5u KvZfSso/HEcUFKBcNGwN227stG9MejKiCpKGftiH1DohSgTIC2yzM5fqqREEEqZj 1xCx3XT/4KYyrNoyAXMJCK0RQCvr3YtirKU3SwKow07nuefzJSdkby761wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFE0U28rNd4TD8O6j2ev80/Uug5WVMB8GA1UdIwQY MBaAFKIrH00KtDg2snFTkIKNkHcsydjaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2lzZlRRcTBPRGF5Y1ZPUWdvMlFkeXpKMk5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wZWY0MDMtOWVmZi00MDQ4LTg3MmUt NGY0MzE5NWQxOTZmLzEvVFJUYnlzMTNoTVB3N3FQWjZfelQ5UzZEbFpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8wZWY0MDMtOWVmZi00MDQ4LTg3MmUtNGY0MzE5NWQxOTZm LzEvb2lzZlRRcTBPRGF5Y1ZPUWdvMlFkeXpKMk5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQEPoygMA0E AgACMAcDBQAqAiZwMA0GCSqGSIb3DQEBCwUAA4IBAQAfoFEPFArFFdJYoKchZKMc zSs8UtQ2idDkfkhjvQhLrlvh/jy8o9EHIgnw5k+vNT2G27FOzzYCJXP/vCi/dTbE R/fZuHFqP5Tlv9Tyq6i3qNuSVWqj/XUp3+AnfIZDYH9GxLK/w9SO8a0357kH0/eG Z0pem5UZFA4I9IWSHRECDpbMfl4CNHhoCts8foth67MGTi7hW7IiFFVAyU5Fz4wf 3tX6fP7YkIWQ85R8W51OkAK/SdiTE9bE5TJ3np0EIO5NWdAJjRqJPMn80/oXoE0U WlVbH0MlvdZKapJebGtTju28aNnDjYTgyBH5Hn/9QHMcDsuaZ4efNKtXqdjqbfOx -----END CERTIFICATE-----Generated at Mon Feb 9 20:11:27 2026 by rpki-client