This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TgOSFEfASWDSpD8EkyKS9nujPiY.roa File: TgOSFEfASWDSpD8EkyKS9nujPiY.roa (raw, json) Hash identifier: 0PwFXdbWv8R/ss2S++46JT4vsGX/tK0Xl7tQX+Eh9g0= Subject key identifier: 4E:03:92:14:47:C0:49:60:D2:A4:3F:04:93:22:92:F6:7B:A3:3E:26 Certificate issuer: /CN=4da4d6199aec828f6989e2e84cec17765bac5cd5 Certificate serial: 019B7F824D8A83CD6EA1A8C517385B395D17 Authority key identifier: 4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TgOSFEfASWDSpD8EkyKS9nujPiY.roa Signing time: Fri 02 Jan 2026 16:20:04 +0000 ROA not before: Fri 02 Jan 2026 16:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20776 IP address blocks: 80.243.240.0/20 maxlen: 20 80.243.240.0/21 maxlen: 21 80.243.248.0/21 maxlen: 21 82.197.96.0/19 maxlen: 23 82.197.112.0/20 maxlen: 20 82.197.126.0/24 maxlen: 24 89.16.0.0/19 maxlen: 19 89.16.0.0/20 maxlen: 20 89.16.0.0/21 maxlen: 21 89.16.8.0/21 maxlen: 21 89.16.16.0/20 maxlen: 20 89.16.16.0/21 maxlen: 21 89.16.24.0/21 maxlen: 21 92.49.64.0/19 maxlen: 19 92.49.64.0/20 maxlen: 20 92.49.64.0/21 maxlen: 21 92.49.72.0/21 maxlen: 21 92.49.80.0/20 maxlen: 20 92.49.96.0/19 maxlen: 21 92.49.96.0/20 maxlen: 21 92.49.96.0/21 maxlen: 21 92.49.104.0/24 maxlen: 24 92.49.105.0/24 maxlen: 24 92.49.106.0/24 maxlen: 24 92.49.107.0/24 maxlen: 24 92.49.108.0/22 maxlen: 22 92.49.112.0/20 maxlen: 20 92.49.112.0/21 maxlen: 21 92.49.120.0/21 maxlen: 21 92.49.125.0/24 maxlen: 24 93.176.0.0/19 maxlen: 19 93.176.0.0/20 maxlen: 20 93.176.16.0/20 maxlen: 20 93.176.32.0/20 maxlen: 20 93.176.48.0/20 maxlen: 20 109.62.0.0/17 maxlen: 24 109.62.0.0/19 maxlen: 19 109.62.0.0/21 maxlen: 21 109.62.4.0/22 maxlen: 22 109.62.8.0/24 maxlen: 24 109.62.9.0/24 maxlen: 24 109.62.10.0/23 maxlen: 23 109.62.12.0/23 maxlen: 23 109.62.14.0/24 maxlen: 24 109.62.15.0/24 maxlen: 24 109.62.16.0/21 maxlen: 21 109.62.24.0/23 maxlen: 23 109.62.26.0/24 maxlen: 24 109.62.27.0/24 maxlen: 24 109.62.28.0/22 maxlen: 22 109.62.56.0/21 maxlen: 21 109.62.56.0/22 maxlen: 22 109.62.60.0/22 maxlen: 22 109.62.64.0/24 maxlen: 24 109.62.66.0/24 maxlen: 24 109.62.67.0/24 maxlen: 24 109.62.68.0/22 maxlen: 23 109.62.68.0/23 maxlen: 23 109.62.70.0/23 maxlen: 23 109.62.72.0/21 maxlen: 21 109.62.72.0/22 maxlen: 22 109.62.76.0/22 maxlen: 22 109.62.80.0/20 maxlen: 20 109.62.80.0/21 maxlen: 21 109.62.88.0/21 maxlen: 21 109.62.96.0/20 maxlen: 20 185.13.218.0/23 maxlen: 23 188.115.64.0/18 maxlen: 18 188.115.64.0/19 maxlen: 19 188.115.64.0/20 maxlen: 20 188.115.80.0/20 maxlen: 20 188.115.96.0/19 maxlen: 19 188.115.96.0/21 maxlen: 21 188.115.104.0/21 maxlen: 21 188.115.112.0/20 maxlen: 20 188.115.112.0/22 maxlen: 22 188.115.116.0/22 maxlen: 22 188.115.120.0/21 maxlen: 21 217.175.160.0/19 maxlen: 24 217.175.168.0/21 maxlen: 21 217.175.168.0/24 maxlen: 24 217.175.169.0/24 maxlen: 24 217.175.170.0/24 maxlen: 24 217.175.171.0/24 maxlen: 24 217.175.172.0/24 maxlen: 24 217.175.174.0/23 maxlen: 23 217.175.176.0/21 maxlen: 21 217.175.176.0/22 maxlen: 22 217.175.180.0/22 maxlen: 22 217.175.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.crl rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:4d:8a:83:cd:6e:a1:a8:c5:17:38:5b:39:5d:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4da4d6199aec828f6989e2e84cec17765bac5cd5 Validity Not Before: Jan 2 16:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e03921447c04960d2a43f04932292f67ba33e26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2d:2c:ef:20:d7:f7:96:04:0f:06:17:c4:ea: 81:c1:6b:04:b6:6c:90:41:28:bc:96:70:85:58:a1: c3:b4:83:8c:86:6f:bd:2d:6d:ad:b5:36:e7:be:e5: 57:81:b4:0e:10:8a:28:03:98:52:98:3a:46:a4:9e: 60:10:6a:04:b0:b1:25:e8:58:42:7c:6e:da:02:11: cd:9e:0e:61:89:6b:10:4e:01:75:7e:53:bb:ca:eb: b2:b1:8c:ee:ed:e1:a9:d2:94:75:b7:20:75:b7:b9: 4c:1a:a0:cb:cd:f1:d0:6a:c8:d6:22:70:c9:79:e5: a8:85:8d:28:df:bc:58:c1:53:5c:34:c8:8a:7f:0b: 5c:94:f9:44:e2:e4:c0:c9:a8:12:7a:2f:14:a9:39: 66:dc:59:19:e1:5a:08:b0:7d:b7:2e:be:75:66:3d: 5c:0b:02:67:09:76:1b:8c:db:ea:0c:d5:27:b9:17: 5f:98:59:45:b9:3c:29:42:fd:c8:7c:ff:00:2a:a4: b1:5a:bf:d8:1b:31:d4:30:95:df:b9:fd:95:96:fb: f4:a6:92:f8:8c:42:5c:52:40:e4:b7:ef:64:67:dc: 14:f6:0d:cf:d8:49:c5:12:df:09:b9:56:50:80:72: b8:f7:2f:cc:18:fa:91:27:cb:c2:69:04:a7:7c:4a: 8e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:03:92:14:47:C0:49:60:D2:A4:3F:04:93:22:92:F6:7B:A3:3E:26 X509v3 Authority Key Identifier: keyid:4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TgOSFEfASWDSpD8EkyKS9nujPiY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.243.240.0/20 82.197.96.0/19 89.16.0.0/19 92.49.64.0/18 93.176.0.0/18 109.62.0.0/17 185.13.218.0/23 188.115.64.0/18 217.175.160.0/19 Signature Algorithm: sha256WithRSAEncryption 14:0c:64:fe:5a:31:4c:cb:8f:c5:9f:4f:ed:5e:8b:21:c4:c4: 09:55:c1:77:76:9c:60:6b:ec:de:e3:1a:d7:16:d0:e8:34:08: 04:7e:e9:b7:d1:87:51:41:5d:43:1c:e5:c8:f3:1d:5f:bf:b8: ef:73:33:e0:17:cf:17:9c:cd:fc:7d:87:54:91:56:23:e2:d2: 45:01:93:5e:45:ea:16:e3:e3:da:1a:75:18:ca:92:b8:61:4f: 3b:9c:b0:e0:67:f8:ed:dd:ff:d8:7c:8d:28:de:6d:4a:df:28: c9:4f:8b:0e:3c:a4:94:5d:fd:04:38:0b:60:92:98:ee:48:46: ae:fb:fc:7b:a0:ad:6f:e8:ec:3b:59:e2:82:1c:47:08:4f:a5: 55:b9:62:27:90:4a:93:35:bd:44:d0:c3:19:6b:3d:fe:97:47: f2:ad:ab:d2:aa:1d:81:32:2f:4b:f6:1f:26:b1:80:ee:e5:af: 5a:cf:36:f8:02:d9:46:16:30:e5:34:42:22:99:96:9f:1c:8f: fe:ac:68:b8:52:04:bc:fc:65:9a:ab:f0:e3:64:b0:08:f7:e7: ce:94:35:87:b0:b8:b7:fd:67:58:b7:8e:bf:b1:07:2b:a2:02: 6d:5d:9e:59:d4:a3:54:16:60:a3:31:67:67:cd:18:7e:2d:8c: e3:97:fe:34 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt/gk2Kg81uoajFFzhbOV0XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkYTRkNjE5OWFlYzgyOGY2OTg5ZTJlODRjZWMxNzc2NWJh YzVjZDUwHhcNMjYwMTAyMTYyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTAzOTIxNDQ3YzA0OTYwZDJhNDNmMDQ5MzIyOTJmNjdiYTMzZTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiC0s7yDX95YEDwYXxOqBwWsEtmyQ QSi8lnCFWKHDtIOMhm+9LW2ttTbnvuVXgbQOEIooA5hSmDpGpJ5gEGoEsLEl6FhC fG7aAhHNng5hiWsQTgF1flO7yuuysYzu7eGp0pR1tyB1t7lMGqDLzfHQasjWInDJ eeWohY0o37xYwVNcNMiKfwtclPlE4uTAyagSei8UqTlm3FkZ4VoIsH23Lr51Zj1c CwJnCXYbjNvqDNUnuRdfmFlFuTwpQv3IfP8AKqSxWr/YGzHUMJXfuf2Vlvv0ppL4 jEJcUkDkt+9kZ9wU9g3P2EnFEt8JuVZQgHK49y/MGPqRJ8vCaQSnfEqOzQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFE4DkhRHwElg0qQ/BJMikvZ7oz4mMB8GA1UdIwQY MBaAFE2k1hma7IKPaYni6EzsF3ZbrFzVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGFUV0dacnNnbzlwaWVMb1RPd1hkbHVzWE5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yYzg0ODItNTMzMS00ZTU3LTk5NzQt NDA4MzdkNDg0NzNkLzEvVGdPU0ZFZkFTV0RTcEQ4RWt5S1M5bnVqUGlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8yYzg0ODItNTMzMS00ZTU3LTk5NzQtNDA4MzdkNDg0NzNk LzEvVGFUV0dacnNnbzlwaWVMb1RPd1hkbHVzWE5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQEUPPwAwQF UsVgAwQFWRAAAwQGXDFAAwQGXbAAAwQHbT4AAwQBuQ3aAwQGvHNAAwQF2a+gMA0G CSqGSIb3DQEBCwUAA4IBAQAUDGT+WjFMy4/Fn0/tXoshxMQJVcF3dpxga+ze4xrX FtDoNAgEfum30YdRQV1DHOXI8x1fv7jvczPgF88XnM38fYdUkVYj4tJFAZNeReoW 4+PaGnUYypK4YU87nLDgZ/jt3f/YfI0o3m1K3yjJT4sOPKSUXf0EOAtgkpjuSEau +/x7oK1v6Ow7WeKCHEcIT6VVuWInkEqTNb1E0MMZaz3+l0fyravSqh2BMi9L9h8m sYDu5a9azzb4AtlGFjDlNEIimZafHI/+rGi4UgS8/GWaq/DjZLAI9+fOlDWHsLi3 /WdYt46/sQcrogJtXZ5Z1KNUFmCjMWdnzRh+LYzjl/40 -----END CERTIFICATE-----Generated at Mon Jan 26 20:58:14 2026 by rpki-client