This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/tEbhK49lj9A2t1UjujH2qFk6A88.roa File: tEbhK49lj9A2t1UjujH2qFk6A88.roa (raw, json) Hash identifier: 7LJLF76QvPCjlTh8Y9wGeCk9+DPapbJzwhv04lpZotk= Subject key identifier: B4:46:E1:2B:8F:65:8F:D0:36:B7:55:23:BA:31:F6:A8:59:3A:03:CF Certificate issuer: /CN=8aad9c0ce5ba3905b41970a04e51976076c67e00 Certificate serial: 019B7F1578787EDBF819C45CB13B12E530A0 Authority key identifier: 8A:AD:9C:0C:E5:BA:39:05:B4:19:70:A0:4E:51:97:60:76:C6:7E:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/tEbhK49lj9A2t1UjujH2qFk6A88.roa Signing time: Fri 02 Jan 2026 14:21:12 +0000 ROA not before: Fri 02 Jan 2026 14:21:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 193.135.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.crl rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:78:78:7e:db:f8:19:c4:5c:b1:3b:12:e5:30:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8aad9c0ce5ba3905b41970a04e51976076c67e00 Validity Not Before: Jan 2 14:21:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b446e12b8f658fd036b75523ba31f6a8593a03cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e8:bb:0f:5a:d6:0b:c5:ad:01:b5:c4:42:fe: c8:a6:2a:76:7a:a4:a3:63:35:72:26:8f:84:8e:79: f8:1a:5c:97:09:d4:80:51:3a:91:57:52:61:be:29: 69:9b:3c:c3:a3:3b:ad:b2:8f:3d:60:48:0a:57:f5: 22:98:da:23:a1:7b:04:f9:c8:05:3e:5b:f9:cd:29: b6:91:8b:2b:71:76:b9:94:04:22:d1:97:4b:81:23: dc:29:3b:b1:e8:5f:ca:3a:2d:ae:27:88:9f:15:c6: ea:36:dd:6e:34:9f:c2:f8:cd:46:23:a8:d8:b6:ef: d7:34:0a:9f:f5:04:e6:0d:f3:13:b9:7a:53:2c:58: 41:bf:f5:dd:b2:a5:ba:71:c5:14:16:54:4d:cf:dc: 35:1f:7d:4d:ca:7a:4e:df:44:97:54:89:b6:7c:00: ec:ab:a1:aa:cd:54:35:49:cb:72:74:06:36:09:ad: 07:08:fd:42:35:ed:f7:51:ec:7c:51:63:55:26:4a: 20:26:19:3c:32:95:1d:24:a7:6e:25:d6:86:17:ed: 1b:8c:26:8b:a1:0b:e5:08:10:63:f8:9d:c7:4e:a6: 52:16:ad:a8:77:79:f7:97:30:8d:c4:e7:c6:29:c4: 98:d6:c9:ff:ba:bb:73:96:6b:52:42:1f:9a:b2:c4: c9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:46:E1:2B:8F:65:8F:D0:36:B7:55:23:BA:31:F6:A8:59:3A:03:CF X509v3 Authority Key Identifier: keyid:8A:AD:9C:0C:E5:BA:39:05:B4:19:70:A0:4E:51:97:60:76:C6:7E:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/tEbhK49lj9A2t1UjujH2qFk6A88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.135.40.0/21 Signature Algorithm: sha256WithRSAEncryption 72:13:42:67:90:46:88:ad:e2:6d:5f:31:3d:b9:65:01:30:41: 17:1c:fa:20:1b:54:26:9e:85:e9:b3:08:7e:80:02:68:0a:49: a0:12:2c:2f:06:4f:b7:e7:81:4b:9a:f3:d6:02:df:a8:61:0c: 24:ff:25:e4:a1:38:9c:5c:31:81:73:fe:34:81:c9:24:9d:02: 90:03:85:98:13:ba:7d:98:d2:21:be:55:34:0a:19:f1:a6:47: 00:9c:f6:f9:94:49:f1:54:5e:95:6d:84:5d:52:a4:04:59:df: 89:a0:0a:63:45:54:a1:98:01:67:6e:29:a5:e2:94:2a:35:92: f5:65:49:83:c1:ff:48:e4:95:79:c6:62:20:95:61:fd:35:da: ee:2e:57:0a:9c:e9:9c:8c:0a:94:a4:97:9d:2f:ce:59:d2:2f: 73:92:be:62:8f:fa:0a:6f:4d:74:78:31:a4:df:40:eb:f5:99: 44:41:38:9b:7e:71:f5:f9:c8:8b:4a:f0:ca:67:05:7b:ca:5c: a4:1a:7a:21:3c:e5:d7:55:08:db:31:a2:0f:e1:a9:30:0a:ed: e4:96:6b:7a:81:eb:b3:60:ad:e4:04:41:83:dd:30:20:e6:23: 55:bf:4c:87:df:d6:80:27:f0:7f:35:40:87:3d:40:97:0e:72: 87:2e:32:0e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FXh4ftv4GcRcsTsS5TCgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhYWQ5YzBjZTViYTM5MDViNDE5NzBhMDRlNTE5NzYwNzZj NjdlMDAwHhcNMjYwMTAyMTQyMTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDQ2ZTEyYjhmNjU4ZmQwMzZiNzU1MjNiYTMxZjZhODU5M2EwM2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+i7D1rWC8WtAbXEQv7Ipip2eqSj YzVyJo+Ejnn4GlyXCdSAUTqRV1JhvilpmzzDozutso89YEgKV/UimNojoXsE+cgF Plv5zSm2kYsrcXa5lAQi0ZdLgSPcKTux6F/KOi2uJ4ifFcbqNt1uNJ/C+M1GI6jY tu/XNAqf9QTmDfMTuXpTLFhBv/XdsqW6ccUUFlRNz9w1H31NynpO30SXVIm2fADs q6GqzVQ1SctydAY2Ca0HCP1CNe33Uex8UWNVJkogJhk8MpUdJKduJdaGF+0bjCaL oQvlCBBj+J3HTqZSFq2od3n3lzCNxOfGKcSY1sn/urtzlmtSQh+assTJ9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLRG4SuPZY/QNrdVI7ox9qhZOgPPMB8GA1UdIwQY MBaAFIqtnAzlujkFtBlwoE5Rl2B2xn4AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXEyY0RPVzZPUVcwR1hDZ1RsR1hZSGJHZmdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lNDQ1ZTQtMjZiZC00OGM5LTgzZGIt N2EwZWNlOWMwYWY4LzEvdEViaEs0OWxqOUEydDFVanVqSDJxRms2QTg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9lNDQ1ZTQtMjZiZC00OGM5LTgzZGItN2EwZWNlOWMwYWY4 LzEvaXEyY0RPVzZPUVcwR1hDZ1RsR1hZSGJHZmdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwYcoMA0G CSqGSIb3DQEBCwUAA4IBAQByE0JnkEaIreJtXzE9uWUBMEEXHPogG1QmnoXpswh+ gAJoCkmgEiwvBk+354FLmvPWAt+oYQwk/yXkoTicXDGBc/40gckknQKQA4WYE7p9 mNIhvlU0ChnxpkcAnPb5lEnxVF6VbYRdUqQEWd+JoApjRVShmAFnbiml4pQqNZL1 ZUmDwf9I5JV5xmIglWH9NdruLlcKnOmcjAqUpJedL85Z0i9zkr5ij/oKb010eDGk 30Dr9ZlEQTibfnH1+ciLSvDKZwV7ylykGnohPOXXVQjbMaIP4akwCu3klmt6geuz YK3kBEGD3TAg5iNVv0yH39aAJ/B/NUCHPUCXDnKHLjIO -----END CERTIFICATE-----Generated at Fri Jan 9 06:22:18 2026 by rpki-client