This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/td-NlOb4bFlwywB-P4mKtEXzRI0.roa File: td-NlOb4bFlwywB-P4mKtEXzRI0.roa (raw, json) Hash identifier: 24q0c0plzrduo92mY1zavTYuQ8C/sxm4E7FFcgXlk2k= Subject key identifier: B5:DF:8D:94:E6:F8:6C:59:70:CB:00:7E:3F:89:8A:B4:45:F3:44:8D Certificate issuer: /CN=dcaa274445826e3d795c3ed18c27700eeac1ca62 Certificate serial: 019B76EB7B24ECD555EEEEA7C3CD5B17DAD5 Authority key identifier: DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/td-NlOb4bFlwywB-P4mKtEXzRI0.roa Signing time: Thu 01 Jan 2026 00:18:22 +0000 ROA not before: Thu 01 Jan 2026 00:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207040 IP address blocks: 185.163.132.0/22 maxlen: 24 185.163.134.0/24 maxlen: 24 185.163.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.crl rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:7b:24:ec:d5:55:ee:ee:a7:c3:cd:5b:17:da:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcaa274445826e3d795c3ed18c27700eeac1ca62 Validity Not Before: Jan 1 00:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5df8d94e6f86c5970cb007e3f898ab445f3448d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:19:8c:6a:cb:8b:eb:63:9e:23:03:0c:35:64: 20:d8:7f:1e:bd:7f:93:1d:fa:f0:34:da:05:2d:ed: 63:9c:65:39:8f:0e:5e:d3:49:35:d8:46:14:48:e7: 41:1b:99:40:10:18:3b:16:55:c3:a2:20:d8:81:e6: 40:2e:b1:a6:15:67:85:70:b7:d3:af:53:f0:63:e6: 2a:e2:6d:82:9b:81:35:9c:31:98:5d:9c:91:ba:4a: dc:83:f0:b4:9e:12:f4:2e:6f:41:8b:0c:67:59:a3: a1:6b:ed:c3:e0:25:54:82:4d:58:10:2d:65:c1:c3: 82:be:e4:0d:36:df:21:71:f7:df:92:3b:61:aa:d8: e0:0d:31:0f:09:fe:8a:ad:e0:a3:92:35:b3:fe:c6: 8c:2d:63:9d:fa:47:81:5f:a4:da:5a:cc:b2:27:32: 71:1e:b9:9d:2e:b6:ec:92:ea:d1:25:60:32:36:66: d7:0a:17:35:56:9c:67:6f:a9:ea:dd:8f:a0:0c:8c: 68:39:7b:a9:26:d9:c6:db:a4:46:f3:a2:48:8e:b7: e2:44:af:bc:8d:0d:20:b8:6c:1e:2c:d5:c2:a2:6d: 6b:6c:2a:1c:e6:07:91:5c:58:f9:35:d8:56:eb:cd: 57:85:9a:87:b8:6e:15:45:0f:aa:0e:fd:27:cc:d8: 65:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:DF:8D:94:E6:F8:6C:59:70:CB:00:7E:3F:89:8A:B4:45:F3:44:8D X509v3 Authority Key Identifier: keyid:DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/td-NlOb4bFlwywB-P4mKtEXzRI0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.163.132.0/22 Signature Algorithm: sha256WithRSAEncryption 47:54:08:0d:30:cf:f8:99:de:5e:50:9d:90:8c:fd:1a:6b:bc: 30:56:a8:07:5b:ab:3d:0b:01:c5:ab:37:46:7a:32:41:55:5f: a5:93:4f:37:e9:82:50:a9:0a:de:c7:6f:78:81:cd:93:cd:02: ce:e4:29:3e:81:8f:4d:83:67:16:80:21:07:c7:32:3f:a9:83: 4e:4a:b7:89:99:86:a4:bc:15:af:e3:38:93:e2:30:2a:9c:da: 09:b4:b3:af:ff:f9:7b:78:40:65:01:d3:5e:5c:b3:e7:4f:98: 06:51:a1:fe:6b:da:c3:b2:3e:99:c7:ad:9b:b6:48:e3:e2:fb: 44:91:3b:50:ba:a7:76:8d:84:0a:5d:c1:03:03:4b:6d:f9:79: ce:8d:19:d0:e5:ea:06:c6:ae:59:d5:ee:3c:73:6a:47:0f:78: 28:93:61:ec:7a:c2:1f:14:ea:18:4b:59:63:d2:e4:b7:9d:42: b5:1f:d7:5f:87:f4:54:2c:ab:81:01:e3:2a:66:45:d0:0e:16: b4:6a:e7:58:ba:fd:fe:64:4b:a2:bd:84:12:ab:a4:56:65:28: 07:73:eb:58:c3:06:ca:5b:53:2e:2d:35:57:4b:6f:06:c1:cb: 21:c3:72:6c:1f:5c:6b:3f:e4:12:54:a3:fb:83:48:d2:c2:79: 94:ba:3a:50 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt263sk7NVV7u6nw81bF9rVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjYWEyNzQ0NDU4MjZlM2Q3OTVjM2VkMThjMjc3MDBlZWFj MWNhNjIwHhcNMjYwMTAxMDAxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNWRmOGQ5NGU2Zjg2YzU5NzBjYjAwN2UzZjg5OGFiNDQ1ZjM0NDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRmMasuL62OeIwMMNWQg2H8evX+T HfrwNNoFLe1jnGU5jw5e00k12EYUSOdBG5lAEBg7FlXDoiDYgeZALrGmFWeFcLfT r1PwY+Yq4m2Cm4E1nDGYXZyRukrcg/C0nhL0Lm9BiwxnWaOha+3D4CVUgk1YEC1l wcOCvuQNNt8hcfffkjthqtjgDTEPCf6KreCjkjWz/saMLWOd+keBX6TaWsyyJzJx HrmdLrbskurRJWAyNmbXChc1Vpxnb6nq3Y+gDIxoOXupJtnG26RG86JIjrfiRK+8 jQ0guGweLNXCom1rbCoc5geRXFj5NdhW681XhZqHuG4VRQ+qDv0nzNhlpQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLXfjZTm+GxZcMsAfj+JirRF80SNMB8GA1UdIwQY MBaAFNyqJ0RFgm49eVw+0YwncA7qwcpiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0tvblJFV0NiajE1WEQ3UmpDZHdEdXJCeW1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8xODgyMTgtOWVlNy00MGNjLThkMTIt OWE4MjQzZTg0ZTU0LzEvdGQtTmxPYjRiRmx3eXdCLVA0bUt0RVh6UkkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8xODgyMTgtOWVlNy00MGNjLThkMTItOWE4MjQzZTg0ZTU0 LzEvM0tvblJFV0NiajE1WEQ3UmpDZHdEdXJCeW1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaOEMA0G CSqGSIb3DQEBCwUAA4IBAQBHVAgNMM/4md5eUJ2QjP0aa7wwVqgHW6s9CwHFqzdG ejJBVV+lk0836YJQqQrex294gc2TzQLO5Ck+gY9Ng2cWgCEHxzI/qYNOSreJmYak vBWv4ziT4jAqnNoJtLOv//l7eEBlAdNeXLPnT5gGUaH+a9rDsj6Zx62btkjj4vtE kTtQuqd2jYQKXcEDA0tt+XnOjRnQ5eoGxq5Z1e48c2pHD3gok2HsesIfFOoYS1lj 0uS3nUK1H9dfh/RULKuBAeMqZkXQDha0audYuv3+ZEuivYQSq6RWZSgHc+tYwwbK W1MuLTVXS28Gwcshw3JsH1xrP+QSVKP7g0jSwnmUujpQ -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:55 2026 by rpki-client