This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/TMAMHptU5L3vkBv93_ALuUDlqmI.roa File: TMAMHptU5L3vkBv93_ALuUDlqmI.roa (raw, json) Hash identifier: vr74guYNZJJo+nJwNDEaeFbfZdAmyE3APxi/3PH5FOw= Subject key identifier: 4C:C0:0C:1E:9B:54:E4:BD:EF:90:1B:FD:DF:F0:0B:B9:40:E5:AA:62 Certificate issuer: /CN=3de2681dda00702a7597a71257e14f7a725e890e Certificate serial: 019B7AC78C6B47FB5E9EF7E770BAEFD4FB76 Authority key identifier: 3D:E2:68:1D:DA:00:70:2A:75:97:A7:12:57:E1:4F:7A:72:5E:89:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/TMAMHptU5L3vkBv93_ALuUDlqmI.roa Signing time: Thu 01 Jan 2026 18:17:36 +0000 ROA not before: Thu 01 Jan 2026 18:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15830 IP address blocks: 145.43.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:8c:6b:47:fb:5e:9e:f7:e7:70:ba:ef:d4:fb:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3de2681dda00702a7597a71257e14f7a725e890e Validity Not Before: Jan 1 18:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4cc00c1e9b54e4bdef901bfddff00bb940e5aa62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:69:43:5f:8c:18:72:b9:f7:0c:bd:97:c9:be: a2:61:2d:1f:8d:2a:df:5e:8f:f9:20:16:0e:6b:d1: 00:3d:c3:94:3e:cd:ce:ac:39:87:de:9d:12:13:ba: e8:65:9c:00:e6:0a:f3:84:a9:06:55:7f:c8:9d:5a: 6b:72:d7:5d:59:5d:c9:73:f3:2c:12:02:84:bc:4c: f6:a1:3e:98:20:91:f2:58:ed:95:dd:40:3d:ab:14: 0f:c4:c3:04:ef:c7:06:bd:94:14:05:41:cf:27:a6: c8:65:1c:09:2e:fb:20:0a:15:fc:75:c5:a0:be:ba: c2:c2:89:bb:d1:9d:ba:b3:00:78:96:93:cd:11:28: f2:d4:b4:f9:4c:24:33:30:d0:a5:cc:a8:a7:db:4c: 4b:6f:19:27:2c:99:b6:98:6a:36:7d:42:bd:03:63: 56:0e:d4:ac:78:81:19:c7:f4:32:3c:53:8f:86:68: ff:10:b6:19:5c:1d:10:38:5a:1c:c2:56:6a:64:68: aa:6d:0a:4d:04:b5:74:c6:e8:ef:2d:bd:34:d3:79: 8f:02:d7:ca:9c:ad:e9:bd:d4:71:b8:ca:8d:2e:24: 19:5b:2e:81:6f:ee:1c:65:98:f9:72:83:60:78:06: 47:57:27:47:ae:78:a5:50:53:23:b9:4d:81:20:c1: 47:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:C0:0C:1E:9B:54:E4:BD:EF:90:1B:FD:DF:F0:0B:B9:40:E5:AA:62 X509v3 Authority Key Identifier: keyid:3D:E2:68:1D:DA:00:70:2A:75:97:A7:12:57:E1:4F:7A:72:5E:89:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/TMAMHptU5L3vkBv93_ALuUDlqmI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.43.244.0/22 Signature Algorithm: sha256WithRSAEncryption 5c:75:0e:58:d7:a6:cc:ad:24:3d:28:45:a0:a3:bd:5b:85:7a: 31:bc:4f:41:e4:78:ae:70:e6:77:67:45:0c:91:b5:47:0a:fd: 1c:1d:ac:36:01:fb:d5:e4:31:cb:f1:fe:6d:f9:5f:c6:7b:0b: 8b:5f:dc:6b:13:33:61:90:a8:ef:bf:5d:a0:98:e6:7c:d4:2c: 11:3d:3f:1a:95:cf:42:cf:72:0a:23:86:ef:86:06:77:03:a8: 91:fb:4f:91:db:76:96:c1:67:4c:fa:d5:e1:0c:49:22:d6:0a: 20:18:a5:03:72:7e:ff:bc:41:fd:3c:29:26:c9:47:ea:85:cb: 0c:26:95:5c:a3:7b:21:c3:08:d5:5a:97:51:4f:a9:76:ce:6f: bf:c4:b7:c6:18:8d:71:7b:b2:c7:b8:89:68:a7:d0:dd:bd:cd: 4f:af:d0:89:8b:ca:08:00:79:1c:8e:8a:e1:79:11:af:29:96: ff:2e:0e:76:46:e5:82:da:fc:ad:34:4a:cf:2d:5b:6a:cc:ea: 8d:0d:0f:8d:84:a5:45:94:46:8e:d5:88:aa:96:69:d0:68:af: b2:27:5a:87:22:62:3e:e0:98:7e:b4:50:8d:9d:ce:e1:29:32: ad:54:cc:ad:31:ee:46:a0:b6:bb:2a:40:93:89:ab:31:25:1c: bc:0e:8c:99 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x4xrR/tenvfncLrv1Pt2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkZTI2ODFkZGEwMDcwMmE3NTk3YTcxMjU3ZTE0ZjdhNzI1 ZTg5MGUwHhcNMjYwMTAxMTgxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Y2MwMGMxZTliNTRlNGJkZWY5MDFiZmRkZmYwMGJiOTQwZTVhYTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWlDX4wYcrn3DL2Xyb6iYS0fjSrf Xo/5IBYOa9EAPcOUPs3OrDmH3p0SE7roZZwA5grzhKkGVX/InVprctddWV3Jc/Ms EgKEvEz2oT6YIJHyWO2V3UA9qxQPxMME78cGvZQUBUHPJ6bIZRwJLvsgChX8dcWg vrrCwom70Z26swB4lpPNESjy1LT5TCQzMNClzKin20xLbxknLJm2mGo2fUK9A2NW DtSseIEZx/QyPFOPhmj/ELYZXB0QOFocwlZqZGiqbQpNBLV0xujvLb0003mPAtfK nK3pvdRxuMqNLiQZWy6Bb+4cZZj5coNgeAZHVydHrnilUFMjuU2BIMFHiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEzADB6bVOS975Ab/d/wC7lA5apiMB8GA1UdIwQY MBaAFD3iaB3aAHAqdZenElfhT3pyXokOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGVKb0hkb0FjQ3AxbDZjU1YtRlBlbkplaVE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8zNmQ2ZTQtOGQ3Ny00OGQ1LWFmYjYt ZTBhYzcyNjNkYjEyLzEvVE1BTUhwdFU1TDN2a0J2OTNfQUx1VURscW1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8zNmQ2ZTQtOGQ3Ny00OGQ1LWFmYjYtZTBhYzcyNjNkYjEy LzEvUGVKb0hkb0FjQ3AxbDZjU1YtRlBlbkplaVE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkSv0MA0G CSqGSIb3DQEBCwUAA4IBAQBcdQ5Y16bMrSQ9KEWgo71bhXoxvE9B5HiucOZ3Z0UM kbVHCv0cHaw2AfvV5DHL8f5t+V/GewuLX9xrEzNhkKjvv12gmOZ81CwRPT8alc9C z3IKI4bvhgZ3A6iR+0+R23aWwWdM+tXhDEki1gogGKUDcn7/vEH9PCkmyUfqhcsM JpVco3shwwjVWpdRT6l2zm+/xLfGGI1xe7LHuIlop9Ddvc1Pr9CJi8oIAHkcjorh eRGvKZb/Lg52RuWC2vytNErPLVtqzOqNDQ+NhKVFlEaO1YiqlmnQaK+yJ1qHImI+ 4Jh+tFCNnc7hKTKtVMytMe5GoLa7KkCTiasxJRy8DoyZ -----END CERTIFICATE-----Generated at Sat Jan 3 04:53:31 2026 by rpki-client