This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TsptNEOD2Wo0fVUqRpVwb_IktVU.roa File: TsptNEOD2Wo0fVUqRpVwb_IktVU.roa (raw, json) Hash identifier: 4DhfBdFfNZRkVgzUv82HoGY4p+PD1z9JUAGkFdPoArw= Subject key identifier: 4E:CA:6D:34:43:83:D9:6A:34:7D:55:2A:46:95:70:6F:F2:24:B5:55 Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Certificate serial: 019B7EA75EFCEE52765EA053B7E25BC1B3F7 Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TsptNEOD2Wo0fVUqRpVwb_IktVU.roa Signing time: Fri 02 Jan 2026 12:20:56 +0000 ROA not before: Fri 02 Jan 2026 12:20:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211415 IP address blocks: 185.242.108.0/22 maxlen: 22 194.15.150.0/24 maxlen: 24 212.52.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:5e:fc:ee:52:76:5e:a0:53:b7:e2:5b:c1:b3:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Validity Not Before: Jan 2 12:20:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4eca6d344383d96a347d552a4695706ff224b555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:83:64:7c:cb:39:d3:02:2b:2c:3b:ea:84:d1: a1:6c:37:46:f6:a3:cc:c1:6b:6c:c0:b9:48:61:61: 5c:10:47:60:a4:ec:6b:26:db:60:c7:53:43:cc:45: 81:8d:64:bf:07:32:ba:32:ef:22:f2:38:0b:e0:f2: 61:71:eb:c6:ba:b5:44:f4:aa:5f:8d:2b:0f:55:2d: 8b:43:74:10:2d:ab:8f:a0:31:c3:92:5d:8d:17:57: 38:49:bc:22:dc:ee:6d:4a:55:f3:4f:d4:16:fa:cc: 95:5b:be:ff:77:a6:d8:42:b6:d7:0e:ad:58:ad:24: aa:76:1b:50:92:75:73:b9:e3:f5:cd:62:be:32:ab: 22:cb:52:4b:39:70:71:98:6a:24:26:a3:b7:e4:32: 1e:93:11:b5:a3:0b:e6:55:57:bd:c3:7f:9d:4e:2e: f0:06:78:a5:1a:d4:c2:e9:d2:7c:3b:e9:a9:dd:ea: cf:8c:f2:0a:7c:4f:b9:3d:66:5e:6a:9e:b2:b1:2e: da:a3:5b:dc:c3:16:c5:fb:20:27:f0:77:c1:0f:47: a5:00:9b:81:19:84:2c:f6:2a:6d:32:d6:83:aa:a7: 1f:21:9a:5e:19:b6:9b:b5:22:55:7d:59:24:7f:79: 82:28:b9:bc:e6:7c:5d:4a:d4:f5:bf:e2:9f:19:0c: d4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:CA:6D:34:43:83:D9:6A:34:7D:55:2A:46:95:70:6F:F2:24:B5:55 X509v3 Authority Key Identifier: keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TsptNEOD2Wo0fVUqRpVwb_IktVU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.242.108.0/22 194.15.150.0/24 212.52.2.0/24 Signature Algorithm: sha256WithRSAEncryption d9:c6:10:a0:e9:f1:f2:0d:44:2c:1c:f4:15:29:13:46:44:f2: 0a:7c:da:a9:88:c0:ec:2d:45:a8:04:52:52:22:fb:1c:55:c1: f7:a4:4d:9d:5d:f3:2b:f7:a8:6d:bb:81:c2:bf:06:70:83:c8: dd:3c:b4:48:ef:19:6e:0a:3b:29:20:37:ae:c0:a3:05:bb:f7: ab:42:f5:a8:69:92:0d:ad:98:ab:05:27:c4:c5:6b:51:7c:90: 29:46:bb:63:0b:97:eb:e1:a1:ec:51:7a:83:45:da:69:0d:3d: e5:a6:03:76:65:0e:6e:29:12:29:2e:5a:51:16:bf:ae:64:30: 20:57:b7:df:73:d3:5a:f0:91:56:2e:54:8a:6b:9c:20:97:e7: 14:50:c9:eb:63:0d:15:d7:d3:6c:a4:b0:30:81:50:b9:db:fd: c7:31:66:4d:6d:f7:6b:31:52:2b:34:c8:a0:7f:48:fd:79:44: a6:5a:83:84:60:14:df:65:30:ad:33:1d:8e:2d:1e:f8:e6:3d: 7e:eb:ec:d1:5e:2c:c8:46:92:e9:4a:75:d3:60:85:d8:06:6f: 6d:18:93:0d:76:f1:1d:99:34:be:51:e7:fe:70:ca:ba:84:2d: 97:79:8d:0d:d3:b4:16:9b:66:86:2c:62:91:60:49:b8:fb:08: 96:6a:ba:32 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+p1787lJ2XqBTt+JbwbP3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0 ZGIwYTUwHhcNMjYwMTAyMTIyMDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZWNhNmQzNDQzODNkOTZhMzQ3ZDU1MmE0Njk1NzA2ZmYyMjRiNTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYNkfMs50wIrLDvqhNGhbDdG9qPM wWtswLlIYWFcEEdgpOxrJttgx1NDzEWBjWS/BzK6Mu8i8jgL4PJhcevGurVE9Kpf jSsPVS2LQ3QQLauPoDHDkl2NF1c4Sbwi3O5tSlXzT9QW+syVW77/d6bYQrbXDq1Y rSSqdhtQknVzueP1zWK+Mqsiy1JLOXBxmGokJqO35DIekxG1owvmVVe9w3+dTi7w BnilGtTC6dJ8O+mp3erPjPIKfE+5PWZeap6ysS7ao1vcwxbF+yAn8HfBD0elAJuB GYQs9iptMtaDqqcfIZpeGbabtSJVfVkkf3mCKLm85nxdStT1v+KfGQzUwQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFE7KbTRDg9lqNH1VKkaVcG/yJLVVMB8GA1UdIwQY MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt YmFmYmRmYzgxMzJhLzEvVHNwdE5FT0QyV28wZlZVcVJwVndiX0lrdFZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCufJsAwQA wg+WAwQA1DQCMA0GCSqGSIb3DQEBCwUAA4IBAQDZxhCg6fHyDUQsHPQVKRNGRPIK fNqpiMDsLUWoBFJSIvscVcH3pE2dXfMr96htu4HCvwZwg8jdPLRI7xluCjspIDeu wKMFu/erQvWoaZINrZirBSfExWtRfJApRrtjC5fr4aHsUXqDRdppDT3lpgN2ZQ5u KRIpLlpRFr+uZDAgV7ffc9Na8JFWLlSKa5wgl+cUUMnrYw0V19NspLAwgVC52/3H MWZNbfdrMVIrNMigf0j9eUSmWoOEYBTfZTCtMx2OLR745j1+6+zRXizIRpLpSnXT YIXYBm9tGJMNdvEdmTS+Uef+cMq6hC2XeY0N07QWm2aGLGKRYEm4+wiWaroy -----END CERTIFICATE-----Generated at Sat Jan 3 19:00:00 2026 by rpki-client