This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/TUvmrgBE44ev_WdD8HZ7-Tqrsvk.roa File: TUvmrgBE44ev_WdD8HZ7-Tqrsvk.roa (raw, json) Hash identifier: eGtgmPAMsFLuXajQP6UacgNI2KT3PlnsWKJ/DF91EtU= Subject key identifier: 4D:4B:E6:AE:00:44:E3:87:AF:FD:67:43:F0:76:7B:F9:3A:AB:B2:F9 Certificate issuer: /CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f Certificate serial: 019B7CED9990D6B0D8360D64F1C7C561AACA Authority key identifier: CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/TUvmrgBE44ev_WdD8HZ7-Tqrsvk.roa Signing time: Fri 02 Jan 2026 04:18:24 +0000 ROA not before: Fri 02 Jan 2026 04:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 193.47.187.0/24 maxlen: 24 193.200.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:99:90:d6:b0:d8:36:0d:64:f1:c7:c5:61:aa:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f Validity Not Before: Jan 2 04:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d4be6ae0044e387affd6743f0767bf93aabb2f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:51:8e:4f:be:f2:27:55:45:dc:68:ae:75:21: b6:e3:9d:5f:89:86:e6:40:57:90:e5:ea:08:40:b3: 3f:4b:e8:1d:a9:d2:d3:1f:ca:92:44:c7:aa:ff:8d: c5:26:66:fe:de:84:2c:ec:83:7e:77:fb:15:52:86: 14:9b:e5:f6:ad:4c:60:23:07:ea:07:16:51:63:05: 95:ad:25:6a:59:a7:be:0b:9a:a1:22:9c:cf:8e:41: ba:65:30:2f:b1:b7:88:37:95:79:12:40:cc:2e:70: 68:6b:91:a3:e1:a7:3a:a4:ac:70:1b:72:fe:07:1e: d6:e3:75:a4:a3:91:01:a8:83:d9:99:2b:2b:50:5c: 30:f1:9e:c7:a5:3b:99:93:9b:58:58:ce:d2:48:8a: a3:1b:f6:9c:1c:ce:e2:b5:54:1a:59:4a:01:51:ab: e4:b1:14:99:d4:c4:ee:ab:ee:9f:a6:3b:60:5b:88: 1c:5a:92:d1:5f:26:4e:50:d9:8b:d3:6b:c1:4f:88: 22:0a:c1:84:51:13:31:c0:05:11:f2:3c:f2:45:37: 0d:1a:c5:b7:0b:ed:17:79:25:48:44:00:c0:2a:0a: 51:6e:6c:00:1e:c6:c6:38:b9:09:3e:00:07:ca:ec: 9e:56:f2:ba:0f:3b:c4:5a:d2:03:29:3d:27:e2:bf: 97:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:4B:E6:AE:00:44:E3:87:AF:FD:67:43:F0:76:7B:F9:3A:AB:B2:F9 X509v3 Authority Key Identifier: keyid:CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/TUvmrgBE44ev_WdD8HZ7-Tqrsvk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.47.187.0/24 193.200.156.0/24 Signature Algorithm: sha256WithRSAEncryption 58:53:82:c8:65:db:10:6b:92:98:75:1b:0b:f3:e2:d1:58:1b: 86:4f:5f:39:74:6a:3f:2f:cb:9b:22:98:6e:70:46:e9:41:e2: e3:8d:73:8f:86:53:d1:82:ae:99:01:d8:2e:0a:9a:0d:54:fa: 02:c8:31:f0:3e:17:b8:8e:71:a6:85:74:77:ef:b3:3d:a2:13: ab:87:b8:ac:72:84:4b:8f:17:2b:d4:87:d8:86:b7:a5:7a:06: 9e:e6:bd:37:a0:5a:43:71:5e:35:33:69:67:61:3d:ba:a4:ae: 7c:95:c0:25:d6:9d:b5:92:2a:df:86:da:18:25:1d:44:f0:4f: 21:44:c2:16:86:48:b6:31:2a:d4:6e:cb:70:49:77:74:7f:fc: 4f:d9:3c:15:da:a2:1a:f2:1c:1f:16:b2:c5:31:70:aa:28:b9: b2:b9:97:43:d7:97:49:ef:3f:e8:18:9a:f8:2d:70:83:30:06: 27:de:89:63:75:69:02:09:ef:1d:b1:ca:4e:20:51:a9:28:00: 6b:88:9a:cc:c0:15:92:39:0d:e1:5b:d5:7f:87:1a:3d:48:e4: 7a:ba:a3:78:a8:13:06:98:7c:83:91:80:ad:f7:fa:14:b4:ff: 45:af:ae:fe:88:50:34:2f:6b:78:9c:87:5d:49:3d:0e:4a:1c: 00:9e:ac:d7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87ZmQ1rDYNg1k8cfFYarKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjZDM1NzkwODMwY2U3NDY5YTk0YzU5YjJlMmNjYmJmNWUz NmQxM2YwHhcNMjYwMTAyMDQxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDRiZTZhZTAwNDRlMzg3YWZmZDY3NDNmMDc2N2JmOTNhYWJiMmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFGOT77yJ1VF3GiudSG2451fiYbm QFeQ5eoIQLM/S+gdqdLTH8qSRMeq/43FJmb+3oQs7IN+d/sVUoYUm+X2rUxgIwfq BxZRYwWVrSVqWae+C5qhIpzPjkG6ZTAvsbeIN5V5EkDMLnBoa5Gj4ac6pKxwG3L+ Bx7W43Wko5EBqIPZmSsrUFww8Z7HpTuZk5tYWM7SSIqjG/acHM7itVQaWUoBUavk sRSZ1MTuq+6fpjtgW4gcWpLRXyZOUNmL02vBT4giCsGEURMxwAUR8jzyRTcNGsW3 C+0XeSVIRADAKgpRbmwAHsbGOLkJPgAHyuyeVvK6DzvEWtIDKT0n4r+XmQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFE1L5q4AROOHr/1nQ/B2e/k6q7L5MB8GA1UdIwQY MBaAFMzTV5CDDOdGmpTFmy4sy79eNtE/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek5OWGtJTU01MGFhbE1XYkxpekx2MTQyMFQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8xZmNiNTktNDA1ZS00MGMzLWE2MzAt YzVkMTNlODhlNGRlLzEvVFV2bXJnQkU0NGV2X1dkRDhIWjctVHFyc3ZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8xZmNiNTktNDA1ZS00MGMzLWE2MzAtYzVkMTNlODhlNGRl LzEvek5OWGtJTU01MGFhbE1XYkxpekx2MTQyMFQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwS+7AwQA wcicMA0GCSqGSIb3DQEBCwUAA4IBAQBYU4LIZdsQa5KYdRsL8+LRWBuGT185dGo/ L8ubIphucEbpQeLjjXOPhlPRgq6ZAdguCpoNVPoCyDHwPhe4jnGmhXR377M9ohOr h7iscoRLjxcr1IfYhrelegae5r03oFpDcV41M2lnYT26pK58lcAl1p21kirfhtoY JR1E8E8hRMIWhki2MSrUbstwSXd0f/xP2TwV2qIa8hwfFrLFMXCqKLmyuZdD15dJ 7z/oGJr4LXCDMAYn3oljdWkCCe8dscpOIFGpKABriJrMwBWSOQ3hW9V/hxo9SOR6 uqN4qBMGmHyDkYCt9/oUtP9Fr67+iFA0L2t4nIddST0OShwAnqzX -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:50 2026 by rpki-client