This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TknJkmvzG8YhZtluEmk6_ght3O0.roa File: TknJkmvzG8YhZtluEmk6_ght3O0.roa (raw, json) Hash identifier: B33bezM0KMWOQmLJLJFWWvp47uN0bahJpyMZqKV6Mi8= Subject key identifier: 4E:49:C9:92:6B:F3:1B:C6:21:66:D9:6E:12:69:3A:FE:08:6D:DC:ED Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd Certificate serial: 019B791084D5DB15012A54F78C5E8F8E4C3B Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TknJkmvzG8YhZtluEmk6_ght3O0.roa Signing time: Thu 01 Jan 2026 10:18:04 +0000 ROA not before: Thu 01 Jan 2026 10:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48851 IP address blocks: 62.73.169.40/29 maxlen: 29 82.112.107.136/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:84:d5:db:15:01:2a:54:f7:8c:5e:8f:8e:4c:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd Validity Not Before: Jan 1 10:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e49c9926bf31bc62166d96e12693afe086ddced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bf:7a:26:f6:fd:bd:47:00:3e:c8:30:77:71: 96:1d:e4:73:8f:f1:d0:45:62:b0:fb:1b:f7:29:ce: cb:e0:15:cf:cf:e8:45:73:2b:81:8c:2d:a1:12:60: 18:f0:3e:d4:6f:7d:7d:14:71:a0:11:38:84:8e:ed: b6:a7:19:4a:ca:a8:e8:96:68:06:ae:c4:3a:ab:9a: dd:2a:98:9a:8f:92:67:e7:b0:dd:df:ed:95:6f:09: 26:7e:17:e8:9c:3d:94:e1:71:d5:c2:6c:22:d3:78: 0e:cf:fd:f8:b2:5d:1a:cf:73:a9:d8:fb:47:15:de: fe:a8:6e:58:f8:3a:89:06:a4:5e:00:05:60:1f:d6: 9d:15:19:5d:c5:c2:eb:39:eb:d8:cf:7b:37:72:b4: a2:b3:5a:03:40:5e:59:ed:a5:96:18:bb:29:8f:95: 9d:4e:a0:b3:d2:7b:32:c3:5b:c3:4c:99:e9:e1:71: c6:51:af:2e:be:91:36:c5:a2:af:34:d4:9c:16:82: 7f:0f:31:32:7b:ff:8f:be:d2:82:61:d5:36:63:f2: 9e:09:92:33:f4:93:a6:cb:e3:70:30:36:e4:89:7f: 4e:82:ef:69:84:d1:1b:ae:f4:85:5a:59:00:c4:1d: e9:d8:cb:69:99:5e:5b:d2:5e:f6:de:35:c1:2d:b7: c2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:49:C9:92:6B:F3:1B:C6:21:66:D9:6E:12:69:3A:FE:08:6D:DC:ED X509v3 Authority Key Identifier: keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TknJkmvzG8YhZtluEmk6_ght3O0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.73.169.40/29 82.112.107.136/29 Signature Algorithm: sha256WithRSAEncryption b9:66:ae:3a:41:61:e1:3e:8c:42:6c:3a:f0:33:83:ff:d1:8b: f8:93:2e:e6:30:51:ec:93:86:e5:ff:95:8d:58:5d:be:b2:8d: a7:c5:2e:a2:15:70:ad:1a:98:97:82:31:0b:50:eb:e6:78:6b: c3:32:bf:e7:74:72:a6:66:76:f9:4e:1c:be:63:62:79:a4:97: e7:7d:ca:94:78:1f:13:05:6c:ae:c0:9e:06:d7:95:22:e2:ee: aa:ee:71:2b:d3:31:09:59:23:56:4c:65:cb:a5:5d:23:d2:6f: 2a:6e:fb:51:ac:51:0e:45:00:56:d6:82:e5:93:29:1e:82:f3: 36:60:49:f3:e1:85:fd:c2:60:d7:f0:9d:a6:ac:30:db:60:f8: dc:f2:8c:f0:56:02:3b:b9:8c:f6:92:56:37:17:dd:9e:ce:7c: 45:0a:0b:a7:59:7b:7d:d3:0e:f0:0f:fd:35:65:f7:86:fb:43: 81:d0:84:f5:07:31:11:4d:1e:0f:53:cf:37:be:14:f1:a1:d9: 10:89:0a:23:bc:63:44:0f:e4:53:14:47:aa:5f:3d:c2:f6:b3: db:b4:64:0d:56:6f:5e:bf:ad:7a:bc:9d:a8:b8:77:7c:6b:44: a3:82:6a:b6:cf:33:c7:6e:d5:25:db:bc:f4:d6:9c:b3:d3:77: 94:ff:f0:27 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt5EITV2xUBKlT3jF6Pjkw7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkNWEyOTIxZmJlYjhhNDQ4ZTdhZTFlYzVhMTFiOGFiODk4 ZDIyZmQwHhcNMjYwMTAxMTAxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTQ5Yzk5MjZiZjMxYmM2MjE2NmQ5NmUxMjY5M2FmZTA4NmRkY2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp796Jvb9vUcAPsgwd3GWHeRzj/HQ RWKw+xv3Kc7L4BXPz+hFcyuBjC2hEmAY8D7Ub319FHGgETiEju22pxlKyqjolmgG rsQ6q5rdKpiaj5Jn57Dd3+2VbwkmfhfonD2U4XHVwmwi03gOz/34sl0az3Op2PtH Fd7+qG5Y+DqJBqReAAVgH9adFRldxcLrOevYz3s3crSis1oDQF5Z7aWWGLspj5Wd TqCz0nsyw1vDTJnp4XHGUa8uvpE2xaKvNNScFoJ/DzEye/+PvtKCYdU2Y/KeCZIz 9JOmy+NwMDbkiX9Ogu9phNEbrvSFWlkAxB3p2MtpmV5b0l723jXBLbfCmQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFE5JyZJr8xvGIWbZbhJpOv4IbdztMB8GA1UdIwQY MBaAFE1aKSH764pEjnrh7FoRuKuJjSL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUt NzgwYTI1Y2QwZGQ5LzEvVGtuSmttdnpHOFloWnRsdUVtazZfZ2h0M08wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUtNzgwYTI1Y2QwZGQ5 LzEvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUDPkmpKAMF A1Jwa4gwDQYJKoZIhvcNAQELBQADggEBALlmrjpBYeE+jEJsOvAzg//Ri/iTLuYw UeyThuX/lY1YXb6yjafFLqIVcK0amJeCMQtQ6+Z4a8Myv+d0cqZmdvlOHL5jYnmk l+d9ypR4HxMFbK7AngbXlSLi7qrucSvTMQlZI1ZMZculXSPSbypu+1GsUQ5FAFbW guWTKR6C8zZgSfPhhf3CYNfwnaasMNtg+NzyjPBWAju5jPaSVjcX3Z7OfEUKC6dZ e33TDvAP/TVl94b7Q4HQhPUHMRFNHg9Tzze+FPGh2RCJCiO8Y0QP5FMUR6pfPcL2 s9u0ZA1Wb16/rXq8nai4d3xrRKOCarbPM8du1SXbvPTWnLPTd5T/8Cc= -----END CERTIFICATE-----Generated at Mon Jan 12 12:27:28 2026 by rpki-client