This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/TAemyk33p1zXgyxiSJqWPeQVynw.roa File: TAemyk33p1zXgyxiSJqWPeQVynw.roa (raw, json) Hash identifier: qzyHhOuBo7tPm0yMPXt6srTNFtIZysUY2o24I/uqBiU= Subject key identifier: 4C:07:A6:CA:4D:F7:A7:5C:D7:83:2C:62:48:9A:96:3D:E4:15:CA:7C Certificate issuer: /CN=cea02c07797fa203a1e2493ba0dd80199ed9be05 Certificate serial: 019B791074F07734C601F97346CF35D5CCBD Authority key identifier: CE:A0:2C:07:79:7F:A2:03:A1:E2:49:3B:A0:DD:80:19:9E:D9:BE:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/TAemyk33p1zXgyxiSJqWPeQVynw.roa Signing time: Thu 01 Jan 2026 10:18:00 +0000 ROA not before: Thu 01 Jan 2026 10:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33915 IP address blocks: 185.72.164.0/22 maxlen: 22 2a05:3b80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:74:f0:77:34:c6:01:f9:73:46:cf:35:d5:cc:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cea02c07797fa203a1e2493ba0dd80199ed9be05 Validity Not Before: Jan 1 10:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c07a6ca4df7a75cd7832c62489a963de415ca7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c0:93:36:de:55:d7:bf:96:01:ea:4e:61:7b: e0:6f:b6:85:33:17:9a:c4:e9:93:a7:0b:8f:1a:2a: a6:d9:ab:2d:98:6b:63:4e:84:c8:a0:a4:85:a6:3b: 3f:9c:35:79:93:34:4e:8f:52:26:69:24:b5:81:2b: b7:1e:10:61:18:88:00:11:ee:53:d0:6a:ab:82:a9: b4:c3:32:fa:2e:53:8f:81:d7:56:f9:90:dc:d8:bc: a6:f7:61:80:d2:8c:e9:8c:9f:9a:1f:fe:f4:ba:bf: bd:33:a2:2c:78:50:a3:97:2b:d5:3d:1a:6d:73:e7: bd:9d:4e:a1:e2:1a:ef:74:a8:cf:1f:c9:9f:1f:71: a2:79:e4:fd:6a:4d:a4:f0:9e:c3:c8:f2:51:d7:eb: e7:8e:31:c8:86:0d:f5:51:d0:11:5f:cc:0d:f2:b5: 54:b2:04:dd:b6:92:ee:8c:02:16:9f:65:e6:a4:b6: 96:5a:52:54:c8:26:8b:0e:a6:ac:5f:c4:ad:f4:7c: 6a:a5:4c:c0:13:78:9d:a7:a3:ea:5a:07:22:db:aa: 4e:bd:a1:4d:3a:de:e5:aa:f5:5a:96:ff:67:1a:f0: 04:22:32:4f:e5:b7:49:28:5d:4a:a6:3c:e6:24:ae: 4f:5e:6e:92:f5:a7:eb:be:82:6f:9e:36:82:50:a7: e3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:07:A6:CA:4D:F7:A7:5C:D7:83:2C:62:48:9A:96:3D:E4:15:CA:7C X509v3 Authority Key Identifier: keyid:CE:A0:2C:07:79:7F:A2:03:A1:E2:49:3B:A0:DD:80:19:9E:D9:BE:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/TAemyk33p1zXgyxiSJqWPeQVynw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.72.164.0/22 IPv6: 2a05:3b80::/29 Signature Algorithm: sha256WithRSAEncryption 0a:77:02:3b:a5:f3:a1:e3:08:fe:28:c4:aa:69:8c:99:24:62: 50:1f:2f:59:1f:ab:0b:44:d8:8b:24:b6:82:75:94:d3:7e:19: c8:db:34:e0:68:b3:8f:44:b7:59:32:bc:b0:16:92:b2:6d:25: e3:67:b2:e3:44:f0:9a:52:36:f2:87:a5:b4:f5:1f:33:21:b7: d4:d7:a6:e8:8f:44:09:40:2d:c3:0f:49:ac:58:11:08:61:65: 66:a9:54:ae:1f:a2:8e:ef:27:de:2c:c4:92:5a:77:87:c1:4b: 6e:c7:d0:a1:a2:ad:db:cc:6c:71:53:39:da:72:cc:bd:74:9a: 5f:55:fc:d1:d1:77:6c:b5:3a:1c:a4:39:58:12:d1:c8:a2:e7: 00:5e:bb:4f:1b:77:f7:5b:c6:3a:15:cf:58:21:9b:42:ad:28: 55:15:ec:dd:1b:c7:a7:fe:b6:c1:b8:c8:e0:c0:24:c5:44:cd: d0:55:4a:22:05:a5:7f:41:d2:9c:b3:e9:4c:15:a5:e8:a7:dc: 1e:95:f5:98:49:d2:a6:f4:47:a0:79:9a:3c:e8:44:85:a5:94: ba:95:00:da:ce:6a:cc:23:19:49:f8:3a:cd:96:d8:63:3b:de: 83:3f:3c:f0:f8:15:79:d5:67:98:04:19:30:f0:d4:74:8a:d2: 58:78:5c:ce -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5EHTwdzTGAflzRs811cy9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYTAyYzA3Nzk3ZmEyMDNhMWUyNDkzYmEwZGQ4MDE5OWVk OWJlMDUwHhcNMjYwMTAxMTAxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzA3YTZjYTRkZjdhNzVjZDc4MzJjNjI0ODlhOTYzZGU0MTVjYTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcCTNt5V17+WAepOYXvgb7aFMxea xOmTpwuPGiqm2astmGtjToTIoKSFpjs/nDV5kzROj1ImaSS1gSu3HhBhGIgAEe5T 0Gqrgqm0wzL6LlOPgddW+ZDc2Lym92GA0ozpjJ+aH/70ur+9M6IseFCjlyvVPRpt c+e9nU6h4hrvdKjPH8mfH3GieeT9ak2k8J7DyPJR1+vnjjHIhg31UdARX8wN8rVU sgTdtpLujAIWn2XmpLaWWlJUyCaLDqasX8St9HxqpUzAE3idp6PqWgci26pOvaFN Ot7lqvValv9nGvAEIjJP5bdJKF1KpjzmJK5PXm6S9afrvoJvnjaCUKfj3wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEwHpspN96dc14MsYkialj3kFcp8MB8GA1UdIwQY MBaAFM6gLAd5f6IDoeJJO6DdgBme2b4FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenFBc0IzbF9vZ09oNGtrN29OMkFHWjdadmdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9lMmRjNWItY2ViMi00MzVjLWFiYTQt N2VmMWI5MTU5ZWI2LzEvVEFlbXlrMzNwMXpYZ3l4aVNKcVdQZVFWeW53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9lMmRjNWItY2ViMi00MzVjLWFiYTQtN2VmMWI5MTU5ZWI2 LzEvenFBc0IzbF9vZ09oNGtrN29OMkFHWjdadmdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuUikMA0E AgACMAcDBQMqBTuAMA0GCSqGSIb3DQEBCwUAA4IBAQAKdwI7pfOh4wj+KMSqaYyZ JGJQHy9ZH6sLRNiLJLaCdZTTfhnI2zTgaLOPRLdZMrywFpKybSXjZ7LjRPCaUjby h6W09R8zIbfU16boj0QJQC3DD0msWBEIYWVmqVSuH6KO7yfeLMSSWneHwUtux9Ch oq3bzGxxUznacsy9dJpfVfzR0XdstTocpDlYEtHIoucAXrtPG3f3W8Y6Fc9YIZtC rShVFezdG8en/rbBuMjgwCTFRM3QVUoiBaV/QdKcs+lMFaXop9welfWYSdKm9Eeg eZo86ESFpZS6lQDazmrMIxlJ+DrNlthjO96DPzzw+BV51WeYBBkw8NR0itJYeFzO -----END CERTIFICATE-----Generated at Mon Jan 26 22:36:19 2026 by rpki-client