This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Tm5cB9-iR8R5OcojySoUNGQQsTA.roa File: Tm5cB9-iR8R5OcojySoUNGQQsTA.roa (raw, json) Hash identifier: jnhyNe85uijsOc1O7f1ZeUOloOUsGtJ2ManprZjDi3c= Subject key identifier: 4E:6E:5C:07:DF:A2:47:C4:79:39:CA:23:C9:2A:14:34:64:10:B1:30 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A2F6D22646AAB00949D25152CA41C6 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Tm5cB9-iR8R5OcojySoUNGQQsTA.roa Signing time: Thu 01 Jan 2026 08:18:24 +0000 ROA not before: Thu 01 Jan 2026 08:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41798 IP address blocks: 45.88.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:f6:d2:26:46:aa:b0:09:49:d2:51:52:ca:41:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e6e5c07dfa247c47939ca23c92a14346410b130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4e:d6:2c:8d:b2:92:18:96:7a:d4:be:76:b3: f9:f3:89:a3:51:28:a6:72:2c:9f:b6:a8:a5:02:fc: 96:a1:63:2c:d3:18:e5:4e:09:ef:1e:6b:28:07:15: fc:b8:05:ea:90:2b:f5:4d:b5:72:e7:77:8d:44:9d: 2b:37:fd:06:78:f1:68:53:57:f5:ea:bb:22:6a:14: bb:77:35:b1:ad:8e:da:8c:d3:83:db:da:ab:a9:2a: 87:3b:2c:ab:2f:4b:2f:08:ad:09:f0:8e:18:f1:6c: 7c:12:3a:36:fd:32:36:f9:51:fc:d5:53:4a:d0:4e: 8e:5e:fe:c0:1e:4b:19:d6:40:5b:da:7e:fa:1d:db: 97:7d:f1:19:6f:b2:28:a3:f6:4f:e6:12:d1:d9:45: 3b:e0:6d:74:64:a1:23:4f:78:14:2b:55:5b:52:9d: 97:5c:2a:ba:24:32:09:26:e2:7d:75:b8:47:0e:0a: a6:9a:53:a3:3a:df:48:25:23:2d:19:3e:43:d4:ce: bf:58:ba:5a:aa:bf:20:bb:e4:7a:aa:6b:8c:e3:fc: d1:7e:51:c5:62:29:26:01:3a:b2:d4:fa:4d:d9:66: 51:ed:9b:46:9b:86:f4:47:ea:a9:f6:db:18:86:cf: 95:23:c9:0f:71:e9:02:62:98:85:55:24:76:8a:97: 2b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:6E:5C:07:DF:A2:47:C4:79:39:CA:23:C9:2A:14:34:64:10:B1:30 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Tm5cB9-iR8R5OcojySoUNGQQsTA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.88.90.0/24 Signature Algorithm: sha256WithRSAEncryption 89:f2:03:4c:41:91:56:67:6d:7e:a3:b4:86:41:8b:c3:25:aa: 41:0c:00:05:97:ff:43:d2:a2:44:c4:6a:30:aa:03:f6:9c:5a: 22:f9:02:28:9a:dc:27:48:79:3a:6d:9c:20:f8:8d:37:e7:0d: 05:7f:37:1e:0f:0c:1e:9a:87:a3:ad:08:1b:bb:e8:c2:1d:ea: 38:6f:6d:d7:8f:7b:e4:ea:ac:ed:01:58:d8:ff:e8:70:c0:ad: 71:9e:c8:93:14:db:35:46:d0:2c:5e:af:b6:dd:09:ce:c8:39: 85:a9:e1:3a:60:51:91:c2:35:9d:87:a0:8b:6e:eb:db:a0:16: 3d:d2:b9:7d:89:60:61:bb:75:d3:40:e3:0c:d9:46:ce:c2:6d: 48:ac:7f:64:3a:5d:4a:d7:91:01:e4:6d:6d:46:a0:a1:be:d7: 4e:4f:2c:8a:e4:1b:55:7a:df:5e:63:81:76:8a:5e:55:a6:ea: 38:3b:ca:46:e6:1b:86:57:ff:cd:98:eb:ec:3c:3b:3b:15:cf: 81:b4:54:d7:9d:ac:72:51:8c:87:bb:ba:ac:18:7c:e3:53:dd: 2b:2f:ed:b3:30:24:38:0f:93:b1:54:62:43:b2:b1:87:62:72: e3:74:ef:7a:37:22:15:1d:ab:cc:f4:5d:2d:33:13:ff:bb:00: 1a:13:62:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ovbSJkaqsAlJ0lFSykHGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTZlNWMwN2RmYTI0N2M0NzkzOWNhMjNjOTJhMTQzNDY0MTBiMTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsU7WLI2ykhiWetS+drP584mjUSim ciyftqilAvyWoWMs0xjlTgnvHmsoBxX8uAXqkCv1TbVy53eNRJ0rN/0GePFoU1f1 6rsiahS7dzWxrY7ajNOD29qrqSqHOyyrL0svCK0J8I4Y8Wx8Ejo2/TI2+VH81VNK 0E6OXv7AHksZ1kBb2n76HduXffEZb7Ioo/ZP5hLR2UU74G10ZKEjT3gUK1VbUp2X XCq6JDIJJuJ9dbhHDgqmmlOjOt9IJSMtGT5D1M6/WLpaqr8gu+R6qmuM4/zRflHF YikmATqy1PpN2WZR7ZtGm4b0R+qp9tsYhs+VI8kPcekCYpiFVSR2ipcrewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE5uXAffokfEeTnKI8kqFDRkELEwMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvVG01Y0I5LWlSOFI1T2NvanlTb1VOR1FRc1RBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVhaMA0G CSqGSIb3DQEBCwUAA4IBAQCJ8gNMQZFWZ21+o7SGQYvDJapBDAAFl/9D0qJExGow qgP2nFoi+QIomtwnSHk6bZwg+I035w0FfzceDwwemoejrQgbu+jCHeo4b23Xj3vk 6qztAVjY/+hwwK1xnsiTFNs1RtAsXq+23QnOyDmFqeE6YFGRwjWdh6CLbuvboBY9 0rl9iWBhu3XTQOMM2UbOwm1IrH9kOl1K15EB5G1tRqChvtdOTyyK5BtVet9eY4F2 il5Vpuo4O8pG5huGV//NmOvsPDs7Fc+BtFTXnaxyUYyHu7qsGHzjU90rL+2zMCQ4 D5OxVGJDsrGHYnLjdO96NyIVHavM9F0tMxP/uwAaE2JS -----END CERTIFICATE-----Generated at Fri Jan 2 12:07:57 2026 by rpki-client