This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/Tpnn_X7VyFf1WQd2dgcX11FMSeA.roa File: Tpnn_X7VyFf1WQd2dgcX11FMSeA.roa (raw, json) Hash identifier: VY37QhdWY9yg2WVN2p0fzv72YkFSdIa8Kw0OXyc4RSk= Subject key identifier: 4E:99:E7:FD:7E:D5:C8:57:F5:59:07:76:76:07:17:D7:51:4C:49:E0 Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec Certificate serial: 019B797EC77122EF9F4DC7DFB1DCDDCEC80C Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/Tpnn_X7VyFf1WQd2dgcX11FMSeA.roa Signing time: Thu 01 Jan 2026 12:18:30 +0000 ROA not before: Thu 01 Jan 2026 12:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197050 IP address blocks: 85.118.91.0/24 maxlen: 24 151.251.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c7:71:22:ef:9f:4d:c7:df:b1:dc:dd:ce:c8:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec Validity Not Before: Jan 1 12:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e99e7fd7ed5c857f5590776760717d7514c49e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:88:da:65:3f:23:a5:20:fe:46:20:d1:ae:39: c9:dc:94:54:6f:5c:c6:63:68:22:6b:b1:f7:4e:b5: e0:6e:37:50:f9:dd:b4:ef:0f:c2:8c:3b:ee:80:2c: a7:25:48:1c:4c:eb:f6:50:f7:12:07:99:82:10:3f: 89:93:81:f4:72:05:75:54:58:92:1e:e1:5a:2c:79: 06:b9:ca:f1:60:18:db:f9:38:b9:75:26:ba:ad:29: 6a:37:c8:54:6c:04:9a:88:9d:9c:95:00:c6:fc:91: 62:09:85:7c:21:54:db:b9:0f:72:37:4d:3a:af:c3: 1f:36:67:c2:e8:bc:55:b3:f9:1e:2f:5f:8e:20:8c: 14:e5:b0:9d:aa:4d:71:f9:87:9e:04:2f:52:50:b2: 7c:9a:bc:d9:e1:f4:77:11:eb:c6:97:24:be:fd:49: 65:af:04:b1:fa:a4:8e:93:55:b2:68:e7:c4:c6:f4: f1:4a:18:91:87:98:6b:04:9c:41:01:12:53:bc:d1: a3:0e:ed:94:d4:53:60:0b:ab:d3:a6:17:58:1b:a8: 15:a3:57:77:52:54:65:19:c1:de:4b:b4:47:50:1a: 16:b3:6c:7b:c6:73:e6:13:a6:c9:76:be:26:bc:41: 5b:15:95:a0:46:5f:9a:f9:03:40:18:ba:2f:d7:e0: 21:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:99:E7:FD:7E:D5:C8:57:F5:59:07:76:76:07:17:D7:51:4C:49:E0 X509v3 Authority Key Identifier: keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/Tpnn_X7VyFf1WQd2dgcX11FMSeA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.118.91.0/24 151.251.56.0/22 Signature Algorithm: sha256WithRSAEncryption 0c:75:5d:10:db:9e:c2:be:6a:a0:d1:23:76:c1:ec:bf:a7:94: c1:64:91:da:6f:c8:72:3f:02:36:37:16:16:ca:34:26:a8:66: 58:dd:1c:82:b3:18:25:c5:68:55:07:32:7d:c4:ea:44:f8:b6: 0a:e6:a0:8e:5a:8e:82:af:02:f7:1d:b0:c8:0a:7a:1b:7e:ac: f8:3d:fc:07:83:a8:ff:71:e8:66:84:2f:d2:c1:9b:7f:6a:cb: 7d:4a:06:1b:06:35:b6:d3:5b:41:a7:c6:88:ec:34:f4:5e:18: 3a:74:55:c2:7e:f6:fa:2e:f9:85:99:75:10:a3:7c:71:70:7c: 69:3d:b8:d6:80:1c:c9:37:f2:25:a8:0e:5e:e8:a3:98:ea:12: b8:62:2c:09:d1:3c:e2:06:ac:2e:f6:34:4f:75:11:19:fc:f2: 9c:08:b1:0c:3e:91:ef:9b:1f:ae:6d:0f:fb:82:53:ca:58:80: 28:0b:d2:c2:8e:1f:96:28:e9:f9:e2:cf:ff:b3:09:38:4f:bc: 42:95:ec:5a:bc:2c:ab:ec:d9:e7:25:e0:59:19:4a:e0:ff:3b: a7:58:07:92:85:3a:ad:f5:13:de:ed:d6:f7:05:61:97:c8:aa: 16:2c:b6:e7:7a:b0:c3:96:7f:13:2a:7e:61:4e:c7:ed:8e:81: 2f:6c:f5:0b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fsdxIu+fTcffsdzdzsgMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj ZDgyZWMwHhcNMjYwMTAxMTIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTk5ZTdmZDdlZDVjODU3ZjU1OTA3NzY3NjA3MTdkNzUxNGM0OWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24jaZT8jpSD+RiDRrjnJ3JRUb1zG Y2gia7H3TrXgbjdQ+d207w/CjDvugCynJUgcTOv2UPcSB5mCED+Jk4H0cgV1VFiS HuFaLHkGucrxYBjb+Ti5dSa6rSlqN8hUbASaiJ2clQDG/JFiCYV8IVTbuQ9yN006 r8MfNmfC6LxVs/keL1+OIIwU5bCdqk1x+YeeBC9SULJ8mrzZ4fR3EevGlyS+/Ull rwSx+qSOk1WyaOfExvTxShiRh5hrBJxBARJTvNGjDu2U1FNgC6vTphdYG6gVo1d3 UlRlGcHeS7RHUBoWs2x7xnPmE6bJdr4mvEFbFZWgRl+a+QNAGLov1+AhOwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFE6Z5/1+1chX9VkHdnYHF9dRTEngMB8GA1UdIwQY MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt N2ZiYmFlNmY5NDM3LzEvVHBubl9YN1Z5RmYxV1FkMmRnY1gxMUZNU2VBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3 LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVXZbAwQC l/s4MA0GCSqGSIb3DQEBCwUAA4IBAQAMdV0Q257Cvmqg0SN2wey/p5TBZJHab8hy PwI2NxYWyjQmqGZY3RyCsxglxWhVBzJ9xOpE+LYK5qCOWo6CrwL3HbDICnobfqz4 PfwHg6j/cehmhC/SwZt/ast9SgYbBjW201tBp8aI7DT0Xhg6dFXCfvb6LvmFmXUQ o3xxcHxpPbjWgBzJN/IlqA5e6KOY6hK4YiwJ0TziBqwu9jRPdREZ/PKcCLEMPpHv mx+ubQ/7glPKWIAoC9LCjh+WKOn54s//swk4T7xClexavCyr7NnnJeBZGUrg/zun WAeShTqt9RPe7db3BWGXyKoWLLbnerDDln8TKn5hTsftjoEvbPUL -----END CERTIFICATE-----Generated at Mon Jan 26 17:24:31 2026 by rpki-client