This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/tv3k8_tkXaxqUisHZsrZ24FV1-U.roa
File: tv3k8_tkXaxqUisHZsrZ24FV1-U.roa (raw, json)
Hash identifier: +j2LkHTfDUaDhQsNd6JulSvZcuxXP5xrCRRkIe7nNyI=
Subject key identifier: B6:FD:E4:F3:FB:64:5D:AC:6A:52:2B:07:66:CA:D9:DB:81:55:D7:E5
Certificate issuer: /CN=13f8496b79d1c04d082af83f1be6a5eab0c66089
Certificate serial: 019B7910541FF0E84BD993DC800D116C2996
Authority key identifier: 13:F8:49:6B:79:D1:C0:4D:08:2A:F8:3F:1B:E6:A5:EA:B0:C6:60:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/tv3k8_tkXaxqUisHZsrZ24FV1-U.roa
Signing time: Thu 01 Jan 2026 10:17:51 +0000
ROA not before: Thu 01 Jan 2026 10:17:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42831
IP address blocks: 37.75.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:54:1f:f0:e8:4b:d9:93:dc:80:0d:11:6c:29:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13f8496b79d1c04d082af83f1be6a5eab0c66089
Validity
Not Before: Jan 1 10:17:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b6fde4f3fb645dac6a522b0766cad9db8155d7e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9a:20:43:51:3a:a2:7d:ef:b8:4f:16:cf:b6:
0c:b3:f2:07:b8:47:ed:bb:e4:82:1d:63:b5:c9:dc:
49:86:b5:26:1d:e1:c9:70:7b:2b:73:69:78:9d:21:
ca:62:af:cd:31:ab:50:0b:1a:ff:b8:e4:74:45:38:
4c:91:00:2a:2a:22:d8:cb:8a:a2:3a:f6:f8:ee:c4:
51:d9:78:04:50:25:d2:a8:90:06:f1:a0:3a:d8:33:
dd:08:6b:f8:d8:a5:67:6e:53:0d:f0:74:b2:42:2a:
84:40:0d:cd:9c:11:8a:1a:2e:05:59:89:6b:08:b9:
2c:2e:b4:5f:b6:8b:41:86:d2:63:84:4f:77:01:6b:
42:21:90:e6:7d:6b:ef:c2:3a:f7:94:f4:05:ba:cd:
e8:a9:1f:46:74:06:1e:89:4f:95:d4:2f:90:b2:b8:
0e:f8:67:36:11:0e:17:74:82:53:24:e6:41:00:d7:
03:3d:31:bd:36:5d:6e:1a:01:fc:4e:87:ce:ab:fb:
12:3a:17:fb:f5:4a:4c:8a:75:5d:3f:80:2b:d9:11:
5e:e4:19:c6:f7:46:1e:0d:de:2c:f6:b4:a8:f0:c8:
ed:3c:6f:e9:33:e2:c7:a9:1c:a5:a4:b6:9e:70:45:
42:a9:ca:0a:e7:c5:26:98:3c:93:b7:5b:83:74:4a:
9b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FD:E4:F3:FB:64:5D:AC:6A:52:2B:07:66:CA:D9:DB:81:55:D7:E5
X509v3 Authority Key Identifier:
keyid:13:F8:49:6B:79:D1:C0:4D:08:2A:F8:3F:1B:E6:A5:EA:B0:C6:60:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/tv3k8_tkXaxqUisHZsrZ24FV1-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.75.235.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:f0:0a:f2:b8:64:b6:ae:f0:e7:08:89:03:a0:60:41:ac:8a:
1e:3d:e6:36:d9:c4:fa:c5:fa:b7:93:2d:f3:ac:26:b9:de:ac:
36:a4:fc:bb:8e:20:41:1e:ba:e0:65:ce:af:db:e8:fa:2b:7c:
0c:24:3e:12:29:7d:7f:91:aa:7d:c7:5f:f1:5f:fa:7e:34:71:
8f:44:45:f5:b9:a3:0a:c6:c6:f0:20:5e:4b:6b:a2:e8:93:c0:
60:d1:a2:70:91:35:62:b6:71:4b:8d:0c:2b:e8:85:bb:00:ef:
37:e7:0d:a7:a8:0b:f5:0b:c4:17:ff:5f:3e:9a:7b:1e:d5:37:
b1:c8:b7:77:e7:77:df:7c:0b:25:58:b8:cb:cc:85:31:8c:3d:
bf:80:a8:07:74:da:4d:3e:d5:c7:b6:df:9a:36:7b:9d:5a:0d:
20:3d:3c:28:4f:e7:96:50:e1:d1:4e:96:4b:6d:01:1c:dc:d5:
cb:06:5f:a6:99:82:16:41:c7:a1:44:7c:a7:fc:3c:88:b6:c7:
23:53:07:be:b2:d9:18:31:b3:e8:b3:70:0f:cb:34:56:9e:cb:
b1:e6:b1:c7:44:66:cd:a8:e1:2c:06:54:23:c0:42:3c:96:e1:
80:70:d8:47:4b:4c:71:bf:99:ab:09:2e:19:f7:64:bb:ff:30:
fd:b4:9e:ad
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt5EFQf8OhL2ZPcgA0RbCmWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZjg0OTZiNzlkMWMwNGQwODJhZjgzZjFiZTZhNWVhYjBj
NjYwODkwHhcNMjYwMTAxMTAxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNmZkZTRmM2ZiNjQ1ZGFjNmE1MjJiMDc2NmNhZDlkYjgxNTVkN2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JogQ1E6on3vuE8Wz7YMs/IHuEft
u+SCHWO1ydxJhrUmHeHJcHsrc2l4nSHKYq/NMatQCxr/uOR0RThMkQAqKiLYy4qi
Ovb47sRR2XgEUCXSqJAG8aA62DPdCGv42KVnblMN8HSyQiqEQA3NnBGKGi4FWYlr
CLksLrRftotBhtJjhE93AWtCIZDmfWvvwjr3lPQFus3oqR9GdAYeiU+V1C+QsrgO
+Gc2EQ4XdIJTJOZBANcDPTG9Nl1uGgH8TofOq/sSOhf79UpMinVdP4Ar2RFe5BnG
90YeDd4s9rSo8MjtPG/pM+LHqRylpLaecEVCqcoK58UmmDyTt1uDdEqbmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLb95PP7ZF2salIrB2bK2duBVdflMB8GA1UdIwQY
MBaAFBP4SWt50cBNCCr4PxvmpeqwxmCJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRV9oSmEzblJ3RTBJS3ZnX0ctYWw2ckRHWUlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9lZWIyNmYtNjc5MC00MmNlLThjY2Mt
NTRhMjVlMmNkYWE5LzEvdHYzazhfdGtYYXhxVWlzSFpzcloyNEZWMS1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9lZWIyNmYtNjc5MC00MmNlLThjY2MtNTRhMjVlMmNkYWE5
LzEvRV9oSmEzblJ3RTBJS3ZnX0ctYWw2ckRHWUlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJUvrMA0G
CSqGSIb3DQEBCwUAA4IBAQBt8AryuGS2rvDnCIkDoGBBrIoePeY22cT6xfq3ky3z
rCa53qw2pPy7jiBBHrrgZc6v2+j6K3wMJD4SKX1/kap9x1/xX/p+NHGPREX1uaMK
xsbwIF5La6Lok8Bg0aJwkTVitnFLjQwr6IW7AO835w2nqAv1C8QX/18+mnse1Tex
yLd353fffAslWLjLzIUxjD2/gKgHdNpNPtXHtt+aNnudWg0gPTwoT+eWUOHRTpZL
bQEc3NXLBl+mmYIWQcehRHyn/DyItscjUwe+stkYMbPos3APyzRWnsux5rHHRGbN
qOEsBlQjwEI8luGAcNhHS0xxv5mrCS4Z92S7/zD9tJ6t
-----END CERTIFICATE-----
Generated at Mon Jan 19 23:20:50 2026 by rpki-client