This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/Tk-54jiMCl3pRob8Ol0GyqafcTo.roa File: Tk-54jiMCl3pRob8Ol0GyqafcTo.roa (raw, json) Hash identifier: ogGPBYJpK3ICA3MgJGI7aFtZAb3lcTgOcAes1dNC4Q8= Subject key identifier: 4E:4F:B9:E2:38:8C:0A:5D:E9:46:86:FC:3A:5D:06:CA:A6:9F:71:3A Certificate issuer: /CN=74864f5023ec6263ef9f16f90187f5f28061d115 Certificate serial: 019B7D5D3640B48C2BB119D596CB6AA1D012 Authority key identifier: 74:86:4F:50:23:EC:62:63:EF:9F:16:F9:01:87:F5:F2:80:61:D1:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIZPUCPsYmPvnxb5AYf18oBh0RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/Tk-54jiMCl3pRob8Ol0GyqafcTo.roa Signing time: Fri 02 Jan 2026 06:20:19 +0000 ROA not before: Fri 02 Jan 2026 06:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198470 IP address blocks: 91.235.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.crl rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft rsync://rpki.ripe.net/repository/DEFAULT/dIZPUCPsYmPvnxb5AYf18oBh0RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:36:40:b4:8c:2b:b1:19:d5:96:cb:6a:a1:d0:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74864f5023ec6263ef9f16f90187f5f28061d115 Validity Not Before: Jan 2 06:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e4fb9e2388c0a5de94686fc3a5d06caa69f713a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:29:67:53:a8:f4:30:93:b3:45:d7:81:02:88: 2e:55:fc:fd:30:02:0e:08:de:56:a8:22:4f:63:38: f8:9e:6e:95:1f:70:27:d2:e5:49:c2:a2:3d:93:29: 3f:ea:74:8c:8f:6f:d2:c5:00:fc:82:b7:f9:38:c2: 43:29:7c:0d:3b:86:55:e6:e0:2c:2c:58:5c:64:1e: 6e:51:bc:ed:18:ed:8b:7e:b6:37:6f:96:c0:1b:a9: d1:2e:72:4d:a8:7e:b9:00:45:38:9c:00:08:42:0b: a2:80:bd:9a:2f:f5:b3:30:48:56:0c:cf:83:20:b4: b7:19:52:39:04:b2:4f:19:4e:20:9a:a8:cc:64:78: 50:3b:82:f7:f0:93:e7:35:54:b6:11:a2:b6:d1:e0: 9d:9a:bf:21:8c:72:a3:31:be:54:57:a6:82:fa:ab: 6d:7a:54:ef:8b:1a:ee:c9:b0:13:a8:b5:7c:0c:df: 12:7d:58:e2:60:1e:f1:e5:c6:a0:d8:f6:b9:f4:fa: 17:80:51:60:11:23:ed:23:ee:a4:5b:60:95:b3:aa: 74:3f:c7:85:0d:13:14:84:0c:3e:08:05:57:51:38: 7f:c9:81:21:15:ad:23:bf:c1:c9:41:c0:b4:8e:ef: 5e:fa:b9:00:2b:00:e2:c5:52:4c:dd:30:58:4d:b0: 52:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:4F:B9:E2:38:8C:0A:5D:E9:46:86:FC:3A:5D:06:CA:A6:9F:71:3A X509v3 Authority Key Identifier: keyid:74:86:4F:50:23:EC:62:63:EF:9F:16:F9:01:87:F5:F2:80:61:D1:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIZPUCPsYmPvnxb5AYf18oBh0RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/Tk-54jiMCl3pRob8Ol0GyqafcTo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.235.82.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:5e:83:d5:54:bb:39:46:52:b6:71:79:98:3a:5d:19:15:29: 33:80:5d:b2:fb:42:e8:6e:8e:4e:54:c9:bd:8c:47:36:79:87: f2:2f:48:54:a5:2a:8e:75:03:33:55:21:47:ca:bc:32:01:77: 50:89:f0:ba:88:a4:4d:e9:c3:1a:2f:e7:4c:7f:f3:b6:82:28: 1d:19:28:96:a3:6c:1a:bd:bf:21:59:9e:44:e0:c3:60:96:b9: 24:25:9c:aa:5d:1a:98:84:cb:5f:85:34:cb:46:59:da:05:9f: 7c:75:17:5c:89:0b:2d:7e:79:fd:f5:7e:06:8c:da:06:57:00: 22:e2:8a:1a:40:5c:b8:cb:2f:ed:68:c1:68:64:a4:97:2b:a9: be:46:58:01:f2:8f:da:07:7f:c5:b7:88:1f:c0:96:ae:a5:ef: 5b:6a:f2:09:47:d6:e7:7a:4d:5d:76:65:93:c5:b9:6a:5a:ca: e5:af:23:30:3b:c5:b7:2d:8c:21:6d:25:73:27:f4:c7:59:9b: cc:4b:c0:7e:5e:e3:05:44:6b:63:7b:8d:b6:70:21:10:af:06: 23:9f:74:bc:4f:19:c0:f8:f9:57:e8:dc:f2:51:70:01:b5:2a: 2a:f6:d8:37:75:13:d6:93:b6:58:2f:69:06:74:3a:a9:18:79: 92:3c:2d:85 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XTZAtIwrsRnVlstqodASMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ODY0ZjUwMjNlYzYyNjNlZjlmMTZmOTAxODdmNWYyODA2 MWQxMTUwHhcNMjYwMTAyMDYyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTRmYjllMjM4OGMwYTVkZTk0Njg2ZmMzYTVkMDZjYWE2OWY3MTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSlnU6j0MJOzRdeBAoguVfz9MAIO CN5WqCJPYzj4nm6VH3An0uVJwqI9kyk/6nSMj2/SxQD8grf5OMJDKXwNO4ZV5uAs LFhcZB5uUbztGO2LfrY3b5bAG6nRLnJNqH65AEU4nAAIQguigL2aL/WzMEhWDM+D ILS3GVI5BLJPGU4gmqjMZHhQO4L38JPnNVS2EaK20eCdmr8hjHKjMb5UV6aC+qtt elTvixruybATqLV8DN8SfVjiYB7x5cag2Pa59PoXgFFgESPtI+6kW2CVs6p0P8eF DRMUhAw+CAVXUTh/yYEhFa0jv8HJQcC0ju9e+rkAKwDixVJM3TBYTbBSkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE5PueI4jApd6UaG/DpdBsqmn3E6MB8GA1UdIwQY MBaAFHSGT1Aj7GJj758W+QGH9fKAYdEVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZElaUFVDUHNZbVB2bnhiNUFZZjE4b0JoMFJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8wY2E0ZGYtMmUwNi00NDA2LTk2ODgt NzhmMDI4MDVjNzA5LzEvVGstNTRqaU1DbDNwUm9iOE9sMEd5cWFmY1RvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS8wY2E0ZGYtMmUwNi00NDA2LTk2ODgtNzhmMDI4MDVjNzA5 LzEvZElaUFVDUHNZbVB2bnhiNUFZZjE4b0JoMFJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+tSMA0G CSqGSIb3DQEBCwUAA4IBAQA7XoPVVLs5RlK2cXmYOl0ZFSkzgF2y+0Lobo5OVMm9 jEc2eYfyL0hUpSqOdQMzVSFHyrwyAXdQifC6iKRN6cMaL+dMf/O2gigdGSiWo2wa vb8hWZ5E4MNglrkkJZyqXRqYhMtfhTTLRlnaBZ98dRdciQstfnn99X4GjNoGVwAi 4ooaQFy4yy/taMFoZKSXK6m+RlgB8o/aB3/Ft4gfwJaupe9bavIJR9bnek1ddmWT xblqWsrlryMwO8W3LYwhbSVzJ/THWZvMS8B+XuMFRGtje422cCEQrwYjn3S8TxnA +PlX6NzyUXABtSoq9tg3dRPWk7ZYL2kGdDqpGHmSPC2F -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:59 2026 by rpki-client