This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/tpMg5UeKcHBhxbeR_lsbFIf6TpY.roa File: tpMg5UeKcHBhxbeR_lsbFIf6TpY.roa (raw, json) Hash identifier: gPM2KsHesVdn93OQ4gl5JtsudH1nEUUMY8CifbgfdAQ= Subject key identifier: B6:93:20:E5:47:8A:70:70:61:C5:B7:91:FE:5B:1B:14:87:FA:4E:96 Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019B7B3590DA6BB7B602675B1DF847FC103B Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/tpMg5UeKcHBhxbeR_lsbFIf6TpY.roa Signing time: Thu 01 Jan 2026 20:17:46 +0000 ROA not before: Thu 01 Jan 2026 20:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205275 IP address blocks: 81.181.66.0/23 maxlen: 24 194.102.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:90:da:6b:b7:b6:02:67:5b:1d:f8:47:fc:10:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Jan 1 20:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b69320e5478a707061c5b791fe5b1b1487fa4e96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:9d:3a:72:1c:ff:fe:cc:93:ed:04:43:00:5a: 30:68:96:ff:3d:71:15:0f:fa:99:d8:e0:58:34:fb: d7:7d:6f:96:05:c6:62:b9:9e:99:59:1f:09:3a:0b: be:50:57:4c:1a:e1:fc:f5:df:e7:6e:fc:83:d0:99: d9:e3:d2:72:e9:ba:2a:03:41:31:ef:c1:3b:be:17: fa:1d:a6:5f:e0:60:fc:c7:c8:b3:d9:9c:31:2b:5f: 75:dd:22:e7:ad:ed:95:97:88:7b:1e:36:72:43:c0: 65:8e:4e:ba:7b:f8:cc:48:97:f1:dc:81:2b:6e:99: 06:e0:43:88:16:5f:45:9e:8b:24:20:79:6d:3e:08: b4:69:9b:b5:b5:8f:8f:63:ab:3e:e8:d5:72:41:58: 5e:4b:8c:fd:6d:e2:f4:ea:3a:f7:17:49:62:27:18: 10:6d:d9:33:81:14:16:cd:59:e6:07:94:b1:49:85: 25:49:a7:f8:cf:6a:17:2c:7b:a4:17:dc:b4:ae:10: dc:91:9f:f6:60:9d:e9:f1:2e:16:7c:92:16:7a:a7: 0f:54:5b:f3:b3:fc:0e:8c:72:e4:51:5e:56:76:7e: 01:1b:99:fc:12:38:fa:e3:c6:eb:8a:26:2c:52:45: 60:ef:48:1f:55:02:f6:29:6d:ce:57:b5:29:2b:05: bb:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:93:20:E5:47:8A:70:70:61:C5:B7:91:FE:5B:1B:14:87:FA:4E:96 X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/tpMg5UeKcHBhxbeR_lsbFIf6TpY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.181.66.0/23 194.102.33.0/24 Signature Algorithm: sha256WithRSAEncryption aa:a4:54:53:11:e6:c9:2b:6a:a1:57:17:5f:23:b3:e9:ac:e6: 37:30:78:60:f0:cc:54:be:91:e6:e3:cf:1c:91:1b:c7:68:a5: 4c:ad:a3:62:d5:80:f3:d8:13:7d:c7:7c:de:79:79:bf:de:be: fc:ed:96:18:8c:e3:ee:c9:b9:8e:01:f8:da:6f:e8:45:9c:05: ee:4b:fe:64:25:08:ac:b1:bd:91:6f:03:7b:50:c1:15:af:95: 40:a8:7b:73:00:41:b3:96:3f:11:a2:27:41:8a:ae:e5:e3:12: 5b:14:5d:d0:3c:a7:71:da:82:b8:69:86:8f:3a:ce:8d:60:90: a1:2e:23:fc:39:ee:37:87:22:62:21:25:61:c9:da:fa:8a:81: 4f:94:46:60:30:5f:5e:20:c8:35:4a:56:47:21:91:0e:7d:17: d8:0c:5b:d7:73:05:7f:63:7e:ce:2b:c3:40:e9:6f:07:7e:5e: 0b:b6:94:8a:10:75:55:d5:1c:a8:b2:33:a9:5d:b7:b7:0b:5f: 9c:88:1f:28:63:56:fd:9d:ae:8b:44:a3:e9:06:9a:ba:9f:0a: 5c:ad:81:9a:0e:12:67:ba:bf:63:13:58:78:bc:c0:1c:5e:83: da:44:56:3f:c0:b4:41:f5:91:3d:92:56:f8:c5:bd:4f:07:6d: f0:43:38:67 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NZDaa7e2AmdbHfhH/BA7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjYwMTAxMjAxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjkzMjBlNTQ3OGE3MDcwNjFjNWI3OTFmZTViMWIxNDg3ZmE0ZTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Z06chz//syT7QRDAFowaJb/PXEV D/qZ2OBYNPvXfW+WBcZiuZ6ZWR8JOgu+UFdMGuH89d/nbvyD0JnZ49Jy6boqA0Ex 78E7vhf6HaZf4GD8x8iz2ZwxK1913SLnre2Vl4h7HjZyQ8Bljk66e/jMSJfx3IEr bpkG4EOIFl9FnoskIHltPgi0aZu1tY+PY6s+6NVyQVheS4z9beL06jr3F0liJxgQ bdkzgRQWzVnmB5SxSYUlSaf4z2oXLHukF9y0rhDckZ/2YJ3p8S4WfJIWeqcPVFvz s/wOjHLkUV5Wdn4BG5n8Ejj648briiYsUkVg70gfVQL2KW3OV7UpKwW7bQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLaTIOVHinBwYcW3kf5bGxSH+k6WMB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEvdHBNZzVVZUtjSEJoeGJlUl9sc2JGSWY2VHBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBUbVCAwQA wmYhMA0GCSqGSIb3DQEBCwUAA4IBAQCqpFRTEebJK2qhVxdfI7PprOY3MHhg8MxU vpHm488ckRvHaKVMraNi1YDz2BN9x3zeeXm/3r787ZYYjOPuybmOAfjab+hFnAXu S/5kJQissb2RbwN7UMEVr5VAqHtzAEGzlj8RoidBiq7l4xJbFF3QPKdx2oK4aYaP Os6NYJChLiP8Oe43hyJiISVhydr6ioFPlEZgMF9eIMg1SlZHIZEOfRfYDFvXcwV/ Y37OK8NA6W8Hfl4LtpSKEHVV1RyosjOpXbe3C1+ciB8oY1b9na6LRKPpBpq6nwpc rYGaDhJnur9jE1h4vMAcXoPaRFY/wLRB9ZE9klb4xb1PB23wQzhn -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:21 2026 by rpki-client