This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/TKCZS17z2Z4-KPE6PS7PcFq_qc4.roa File: TKCZS17z2Z4-KPE6PS7PcFq_qc4.roa (raw, json) Hash identifier: i3wV4BpIXbuGFetoFwKcV2sjHWkZ2lMyrffLHYfSnic= Subject key identifier: 4C:A0:99:4B:5E:F3:D9:9E:3E:28:F1:3A:3D:2E:CF:70:5A:BF:A9:CE Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8 Certificate serial: 019B7D5AA9AEA63B38DE7C01A34528E1F38B Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/TKCZS17z2Z4-KPE6PS7PcFq_qc4.roa Signing time: Fri 02 Jan 2026 06:17:32 +0000 ROA not before: Fri 02 Jan 2026 06:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215540 IP address blocks: 62.60.232.0/23 maxlen: 24 62.60.234.0/24 maxlen: 24 213.176.16.0/24 maxlen: 24 213.176.17.0/24 maxlen: 24 213.176.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 07:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:a9:ae:a6:3b:38:de:7c:01:a3:45:28:e1:f3:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8 Validity Not Before: Jan 2 06:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ca0994b5ef3d99e3e28f13a3d2ecf705abfa9ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d7:a8:9d:44:9b:36:c2:45:b9:6a:c7:d4:c5: c6:18:05:82:5d:98:44:f4:02:ed:62:47:3b:6a:92: ba:87:bb:90:96:db:f9:bf:9b:8f:ed:b3:57:ac:16: a0:9a:b6:11:4f:3f:56:43:3f:c3:79:b2:c0:5f:93: 53:94:ac:f0:90:06:0b:2c:bf:88:3a:db:12:9b:b0: 86:40:df:02:46:99:9e:ea:67:ff:28:72:68:b4:a7: c6:a9:1d:b2:45:fc:84:c0:fa:d7:36:93:f8:df:c0: f2:b8:76:ac:06:c4:c6:40:ba:cf:a3:ed:b6:3d:8e: c3:4a:3a:62:e9:69:a6:8a:53:6d:a8:fd:e2:da:42: 6e:91:5f:b3:ca:64:5b:ca:43:44:39:74:69:b1:90: ec:71:1d:9a:2c:73:e6:7b:20:7d:08:3c:be:ec:01: 56:8b:ab:6a:b8:7b:66:75:5f:bd:37:07:00:0b:20: 02:32:e7:48:54:15:d5:89:98:46:56:6c:54:42:bb: dd:13:70:2f:49:b9:0a:d5:31:6d:a9:5b:66:36:ea: e1:fa:e1:61:75:96:33:7d:92:ec:9d:e2:4c:d2:83: 22:14:80:e9:d5:8b:2b:8f:f9:64:0a:97:a9:2b:fe: ff:9a:b8:2a:ec:ab:2b:ab:e6:3b:ff:71:03:de:33: 1a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:A0:99:4B:5E:F3:D9:9E:3E:28:F1:3A:3D:2E:CF:70:5A:BF:A9:CE X509v3 Authority Key Identifier: keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/TKCZS17z2Z4-KPE6PS7PcFq_qc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.60.232.0-62.60.234.255 213.176.16.0-213.176.18.255 Signature Algorithm: sha256WithRSAEncryption a3:2d:3d:79:50:34:bc:7a:57:0f:85:7a:3e:58:e7:b6:d2:a8: bf:c2:3d:aa:7a:b9:0e:f8:02:cc:5d:9b:f2:cb:4d:b0:56:0d: e0:b2:f2:a5:36:e9:b7:a8:9d:5d:34:93:9d:f8:e4:2e:b8:3d: 4e:9f:c0:f5:7f:e3:3a:ee:31:4e:ad:0b:ff:ef:8a:54:bc:fb: 22:90:91:f0:e7:fc:09:9f:77:62:d2:85:c5:29:cb:df:4d:07: c3:19:1e:01:ee:17:ce:56:3a:0e:d9:dc:53:97:07:cb:08:b3: ad:92:1c:4b:89:fd:a1:73:13:4f:a7:e3:c5:46:c3:a9:37:c9: ec:e3:a0:29:84:6e:36:5b:25:7b:74:60:9d:9a:33:06:bb:69: 37:69:83:63:bb:62:20:ee:9e:bb:b7:64:1d:a1:21:a8:15:63: 41:27:a9:0d:84:2d:46:92:8b:05:d4:10:d6:36:93:bd:92:29: 70:12:02:f1:71:72:11:6e:93:46:54:f4:08:06:1c:e2:19:84: f8:43:43:65:a4:f1:ee:0c:ce:16:65:37:0c:1f:e7:df:c3:32: 13:e4:b1:c7:a3:da:12:68:c2:98:04:3d:a4:5d:4d:6d:37:c4: c3:3c:61:4c:9d:b6:17:8e:7b:26:d4:39:7e:4d:67:36:93:82: 78:42:3c:36 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt9Wqmupjs43nwBo0Uo4fOLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl OGRhZjgwHhcNMjYwMTAyMDYxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Y2EwOTk0YjVlZjNkOTllM2UyOGYxM2EzZDJlY2Y3MDVhYmZhOWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdeonUSbNsJFuWrH1MXGGAWCXZhE 9ALtYkc7apK6h7uQltv5v5uP7bNXrBagmrYRTz9WQz/DebLAX5NTlKzwkAYLLL+I OtsSm7CGQN8CRpme6mf/KHJotKfGqR2yRfyEwPrXNpP438DyuHasBsTGQLrPo+22 PY7DSjpi6WmmilNtqP3i2kJukV+zymRbykNEOXRpsZDscR2aLHPmeyB9CDy+7AFW i6tquHtmdV+9NwcACyACMudIVBXViZhGVmxUQrvdE3AvSbkK1TFtqVtmNurh+uFh dZYzfZLsneJM0oMiFIDp1Ysrj/lkCpepK/7/mrgq7Ksrq+Y7/3ED3jMaAQIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFEygmUte89mePijxOj0uz3Bav6nOMB8GA1UdIwQY MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt MGNiYTMzZWZjNWJiLzEvVEtDWlMxN3oyWjQtS1BFNlBTN1BjRnFfcWM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAM+POgD BAA+POowDAMEBNWwEAMEANWwEjANBgkqhkiG9w0BAQsFAAOCAQEAoy09eVA0vHpX D4V6PljnttKov8I9qnq5DvgCzF2b8stNsFYN4LLypTbpt6idXTSTnfjkLrg9Tp/A 9X/jOu4xTq0L/++KVLz7IpCR8Of8CZ93YtKFxSnL300HwxkeAe4XzlY6DtncU5cH ywizrZIcS4n9oXMTT6fjxUbDqTfJ7OOgKYRuNlsle3RgnZozBrtpN2mDY7tiIO6e u7dkHaEhqBVjQSepDYQtRpKLBdQQ1jaTvZIpcBIC8XFyEW6TRlT0CAYc4hmE+END ZaTx7gzOFmU3DB/n38MyE+Sxx6PaEmjCmAQ9pF1NbTfEwzxhTJ22F457JtQ5fk1n NpOCeEI8Ng== -----END CERTIFICATE-----Generated at Wed Jan 21 10:47:23 2026 by rpki-client