This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/TXmMg_cVGGk-yivLwEZ_LHOJtUg.roa File: TXmMg_cVGGk-yivLwEZ_LHOJtUg.roa (raw, json) Hash identifier: KzTtxObtY7uoA3X0JGw/wlnL+/oSWFkTWIaUDbFQNwU= Subject key identifier: 4D:79:8C:83:F7:15:18:69:3E:CA:2B:CB:C0:46:7F:2C:73:89:B5:48 Certificate issuer: /CN=27873afe6330b7ae9ee562e0c988e9fd5ea8f567 Certificate serial: 019B797F08E7FE4B9B759836FF35CB1FB27B Authority key identifier: 27:87:3A:FE:63:30:B7:AE:9E:E5:62:E0:C9:88:E9:FD:5E:A8:F5:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4c6_mMwt66e5WLgyYjp_V6o9Wc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/TXmMg_cVGGk-yivLwEZ_LHOJtUg.roa Signing time: Thu 01 Jan 2026 12:18:46 +0000 ROA not before: Thu 01 Jan 2026 12:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57087 IP address blocks: 141.8.232.0/21 maxlen: 24 141.8.232.0/24 maxlen: 24 141.8.234.0/24 maxlen: 24 141.8.236.0/23 maxlen: 24 2a13:8cc0:1f00::/48 maxlen: 48 2a13:8cc0:1f01::/48 maxlen: 48 2a13:8cc0:1f02::/48 maxlen: 48 2a13:8cc0:1f03::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.crl rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.mft rsync://rpki.ripe.net/repository/DEFAULT/J4c6_mMwt66e5WLgyYjp_V6o9Wc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:08:e7:fe:4b:9b:75:98:36:ff:35:cb:1f:b2:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27873afe6330b7ae9ee562e0c988e9fd5ea8f567 Validity Not Before: Jan 1 12:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d798c83f71518693eca2bcbc0467f2c7389b548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1e:62:77:a6:03:90:b9:90:4f:8e:3e:ca:3c: be:8c:ff:62:87:98:b2:5c:dd:f3:ff:13:ae:67:b2: 7c:8f:06:1a:57:71:88:fa:36:42:c9:c6:e7:52:a0: b6:a0:f6:f8:83:26:5a:77:75:4e:2f:72:56:0a:55: d5:f9:67:f0:9f:ad:fc:9f:06:fd:65:49:9f:b8:81: cc:c2:ad:51:0b:b7:a9:50:77:64:6e:d4:21:b8:a9: 1b:ad:c7:92:8f:b5:9f:3f:8e:3f:74:85:1d:12:5e: 8d:be:91:1d:7d:64:46:82:c3:29:4a:f9:a3:f7:fe: fb:18:3c:6c:7d:45:4c:bb:3c:ee:fa:83:e1:e9:6f: de:74:bf:41:9c:67:f7:64:27:a4:53:bc:9f:9c:f2: e3:66:d4:25:2c:69:53:26:de:ff:b2:c1:8a:66:db: 91:c4:62:ad:57:a9:e1:5f:e1:39:42:33:c5:54:2b: 4a:c2:97:9c:a8:78:68:60:4d:8f:cc:75:18:96:4e: 7a:63:77:20:09:93:5f:79:ef:1d:f3:b5:78:19:81: c5:74:b4:59:c8:d5:6d:0a:b8:21:ff:55:df:f4:51: fe:de:ec:f8:b3:6a:da:d6:43:dc:ad:ec:10:d8:4a: 1e:3e:24:e8:1b:c7:d2:06:b2:00:cd:4d:e5:fc:ec: 44:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:79:8C:83:F7:15:18:69:3E:CA:2B:CB:C0:46:7F:2C:73:89:B5:48 X509v3 Authority Key Identifier: keyid:27:87:3A:FE:63:30:B7:AE:9E:E5:62:E0:C9:88:E9:FD:5E:A8:F5:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4c6_mMwt66e5WLgyYjp_V6o9Wc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/TXmMg_cVGGk-yivLwEZ_LHOJtUg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.8.232.0/21 IPv6: 2a13:8cc0:1f00::/46 Signature Algorithm: sha256WithRSAEncryption 29:a3:71:93:5e:78:e1:1f:4f:de:b6:4f:27:ca:64:a5:b2:b7: 77:a7:31:09:69:03:89:46:b0:fa:d5:85:92:fa:a8:69:9f:90: 9e:a8:53:f4:0b:35:34:a0:20:01:53:b7:66:3b:9b:b5:a0:95: 64:cf:81:6a:42:5c:63:d7:78:22:92:19:d0:c0:86:18:41:c7: 54:18:32:37:8c:60:1d:be:75:9c:19:2b:aa:42:2d:9d:9e:9a: 7e:d4:dc:d3:f4:21:5d:d7:f4:21:ad:0f:49:30:08:25:e7:bb: f9:2b:58:af:be:ea:06:c6:fa:92:3e:bc:47:04:64:8c:d2:69: 22:a1:4a:47:f2:70:da:90:79:f1:e0:08:32:9a:64:70:92:35: 18:93:90:ba:a6:c8:1f:df:c1:de:4f:83:15:ee:6e:a6:bd:81: 7c:ee:db:42:b8:5a:f7:32:f2:f0:40:4d:02:19:e7:7a:16:09: 84:c0:5e:4c:0d:f8:8f:4c:f2:13:56:1c:05:bc:2d:ea:da:55: b0:46:17:02:9a:73:cd:ec:da:db:ac:2e:88:68:e4:63:bf:ac: db:e7:84:ac:e9:1c:88:15:c3:b4:6b:1c:6f:f3:69:f4:aa:71: 1f:06:8c:fc:a1:32:6f:53:f6:99:0e:d4:77:a8:a6:df:b2:12: 1d:e9:36:24 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5fwjn/kubdZg2/zXLH7J7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ODczYWZlNjMzMGI3YWU5ZWU1NjJlMGM5ODhlOWZkNWVh OGY1NjcwHhcNMjYwMTAxMTIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDc5OGM4M2Y3MTUxODY5M2VjYTJiY2JjMDQ2N2YyYzczODliNTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnx5id6YDkLmQT44+yjy+jP9ih5iy XN3z/xOuZ7J8jwYaV3GI+jZCycbnUqC2oPb4gyZad3VOL3JWClXV+Wfwn638nwb9 ZUmfuIHMwq1RC7epUHdkbtQhuKkbrceSj7WfP44/dIUdEl6NvpEdfWRGgsMpSvmj 9/77GDxsfUVMuzzu+oPh6W/edL9BnGf3ZCekU7yfnPLjZtQlLGlTJt7/ssGKZtuR xGKtV6nhX+E5QjPFVCtKwpecqHhoYE2PzHUYlk56Y3cgCZNfee8d87V4GYHFdLRZ yNVtCrgh/1Xf9FH+3uz4s2ra1kPcrewQ2EoePiToG8fSBrIAzU3l/OxEGwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFE15jIP3FRhpPsory8BGfyxzibVIMB8GA1UdIwQY MBaAFCeHOv5jMLeunuVi4MmI6f1eqPVnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjRjNl9tTXd0NjZlNVdMZ3lZanBfVjZvOVdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kMzk0MTYtZjQ2YS00ZjgyLWIxZTEt ZTBkMWY3Y2FjZmYxLzEvVFhtTWdfY1ZHR2steWl2THdFWl9MSE9KdFVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9kMzk0MTYtZjQ2YS00ZjgyLWIxZTEtZTBkMWY3Y2FjZmYx LzEvSjRjNl9tTXd0NjZlNVdMZ3lZanBfVjZvOVdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDjQjoMA8E AgACMAkDBwIqE4zAHwAwDQYJKoZIhvcNAQELBQADggEBACmjcZNeeOEfT962TyfK ZKWyt3enMQlpA4lGsPrVhZL6qGmfkJ6oU/QLNTSgIAFTt2Y7m7WglWTPgWpCXGPX eCKSGdDAhhhBx1QYMjeMYB2+dZwZK6pCLZ2emn7U3NP0IV3X9CGtD0kwCCXnu/kr WK++6gbG+pI+vEcEZIzSaSKhSkfycNqQefHgCDKaZHCSNRiTkLqmyB/fwd5PgxXu bqa9gXzu20K4Wvcy8vBATQIZ53oWCYTAXkwN+I9M8hNWHAW8LeraVbBGFwKac83s 2tusLoho5GO/rNvnhKzpHIgVw7RrHG/zafSqcR8GjPyhMm9T9pkO1Heopt+yEh3p NiQ= -----END CERTIFICATE-----Generated at Tue Feb 10 02:47:02 2026 by rpki-client