This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TEaVNKsl7MjnFejYPaNvpPat8gA.roa File: TEaVNKsl7MjnFejYPaNvpPat8gA.roa (raw, json) Hash identifier: Jy8illR523WOvjWj2JinT5GkSk8/O2o8ysy6epHOu54= Subject key identifier: 4C:46:95:34:AB:25:EC:C8:E7:15:E8:D8:3D:A3:6F:A4:F6:AD:F2:00 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A2E663C9D9036AF6B6FD1D6341E5A9 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TEaVNKsl7MjnFejYPaNvpPat8gA.roa Signing time: Thu 01 Jan 2026 08:18:20 +0000 ROA not before: Thu 01 Jan 2026 08:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 22356 IP address blocks: 185.219.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:e6:63:c9:d9:03:6a:f6:b6:fd:1d:63:41:e5:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c469534ab25ecc8e715e8d83da36fa4f6adf200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:74:e9:87:40:3d:7a:c8:af:b8:95:a6:4a:c5: f4:b6:88:ce:bb:b3:55:91:63:1c:af:a1:51:18:13: 44:d8:90:7f:84:cc:18:f3:33:28:b0:3d:02:fd:c5: a5:4f:cb:84:fe:13:1d:03:79:3e:9d:36:3a:44:48: ae:39:ce:ea:7d:fb:c0:45:4a:2f:7e:7c:48:54:a5: 4e:cf:35:85:5d:e1:47:22:3c:37:08:71:c5:f4:25: 4b:01:2d:1f:7b:1f:58:c0:23:b9:6e:4b:98:0a:b1: ab:04:b8:0f:c1:65:92:7d:22:b5:03:54:62:0a:7a: e9:73:6e:f3:59:a1:8d:6a:f7:c5:f8:78:83:6b:56: c0:e1:e8:91:7c:ee:5b:cc:b4:4b:e1:24:cb:80:45: f1:97:2f:cf:f5:48:3c:5e:5c:46:21:6a:f4:c8:36: 5e:a6:66:26:88:23:90:cb:89:a8:e4:ff:c5:03:e2: f1:14:c1:25:fc:0e:2a:e6:2b:bf:41:4c:53:0e:ed: 80:ec:3d:51:3f:f9:0d:b5:3e:76:4f:cc:a1:e9:71: 2c:52:15:cb:1f:c4:47:f6:74:4e:8a:c0:f1:0f:3b: 34:bb:7d:c8:fa:8c:c1:f8:6e:41:36:e5:4a:db:b1: 3d:7a:3c:71:7b:26:7a:8f:8a:af:c6:a0:6e:e0:21: d9:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:46:95:34:AB:25:EC:C8:E7:15:E8:D8:3D:A3:6F:A4:F6:AD:F2:00 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TEaVNKsl7MjnFejYPaNvpPat8gA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.219.124.0/24 Signature Algorithm: sha256WithRSAEncryption 56:41:d7:ea:54:7e:bf:4e:c3:84:ab:0e:c7:53:89:6a:1d:78: 8a:1c:38:32:34:9d:ba:fc:1e:13:75:94:5d:67:60:15:ed:b5: ec:4e:fb:d6:d1:e1:28:0e:2e:d0:4f:6c:94:8a:ac:8f:0e:01: 5e:37:eb:a1:3f:df:c1:63:bf:43:8a:90:c7:f1:0d:ca:4e:98: d0:1e:3d:b2:3c:3c:7d:c8:fe:f8:16:a8:84:16:60:8e:aa:a6: 24:42:34:1f:31:fa:97:eb:32:4e:dd:e5:a2:7f:78:13:58:cb: e5:93:e7:c5:22:6a:d1:4d:51:9c:77:7c:02:5e:45:a6:36:b3: 02:d4:0e:32:66:26:cb:90:7f:2a:ae:64:96:bf:ac:e6:1e:0d: ab:6c:04:8d:35:70:3a:1c:c0:97:1f:bc:3d:62:56:99:c7:8f: b0:65:54:6c:27:39:fb:07:ab:62:d3:a9:b5:59:3c:e5:de:e5: 1c:8f:12:2e:89:34:8c:3c:d1:52:13:ef:d5:58:03:e4:44:2b: 47:01:4f:e0:a6:ac:a8:5e:7f:24:70:d3:9e:de:34:f7:a1:32: 1f:8f:ff:fb:f5:a6:35:c2:c7:22:a7:bb:d9:7a:53:eb:c5:f9: f4:97:e1:20:6c:95:c2:c7:e1:f1:50:fb:43:f6:24:13:ff:3e: a6:46:de:41 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ouZjydkDava2/R1jQeWpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzQ2OTUzNGFiMjVlY2M4ZTcxNWU4ZDgzZGEzNmZhNGY2YWRmMjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXTph0A9esivuJWmSsX0tojOu7NV kWMcr6FRGBNE2JB/hMwY8zMosD0C/cWlT8uE/hMdA3k+nTY6REiuOc7qffvARUov fnxIVKVOzzWFXeFHIjw3CHHF9CVLAS0fex9YwCO5bkuYCrGrBLgPwWWSfSK1A1Ri Cnrpc27zWaGNavfF+HiDa1bA4eiRfO5bzLRL4STLgEXxly/P9Ug8XlxGIWr0yDZe pmYmiCOQy4mo5P/FA+LxFMEl/A4q5iu/QUxTDu2A7D1RP/kNtT52T8yh6XEsUhXL H8RH9nROisDxDzs0u33I+ozB+G5BNuVK27E9ejxxeyZ6j4qvxqBu4CHZAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFExGlTSrJezI5xXo2D2jb6T2rfIAMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvVEVhVk5Lc2w3TWpuRmVqWVBhTnZwUGF0OGdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudt8MA0G CSqGSIb3DQEBCwUAA4IBAQBWQdfqVH6/TsOEqw7HU4lqHXiKHDgyNJ26/B4TdZRd Z2AV7bXsTvvW0eEoDi7QT2yUiqyPDgFeN+uhP9/BY79DipDH8Q3KTpjQHj2yPDx9 yP74FqiEFmCOqqYkQjQfMfqX6zJO3eWif3gTWMvlk+fFImrRTVGcd3wCXkWmNrMC 1A4yZibLkH8qrmSWv6zmHg2rbASNNXA6HMCXH7w9YlaZx4+wZVRsJzn7B6ti06m1 WTzl3uUcjxIuiTSMPNFSE+/VWAPkRCtHAU/gpqyoXn8kcNOe3jT3oTIfj//79aY1 wscip7vZelPrxfn0l+EgbJXCx+HxUPtD9iQT/z6mRt5B -----END CERTIFICATE-----Generated at Fri Jan 2 12:09:38 2026 by rpki-client