This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/TnxLiTU4N8IxRzgKudiN6lBfkB0.roa File: TnxLiTU4N8IxRzgKudiN6lBfkB0.roa (raw, json) Hash identifier: 84h5erlaI1tFTllY8zVF7aYQ8Di+2iwxgRfjK8j6Kko= Subject key identifier: 4E:7C:4B:89:35:38:37:C2:31:47:38:0A:B9:D8:8D:EA:50:5F:90:1D Certificate issuer: /CN=988296c50d94bbed225f2867231fa5093debea91 Certificate serial: 019B7C129716368D009D3351878C15935DA6 Authority key identifier: 98:82:96:C5:0D:94:BB:ED:22:5F:28:67:23:1F:A5:09:3D:EB:EA:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/TnxLiTU4N8IxRzgKudiN6lBfkB0.roa Signing time: Fri 02 Jan 2026 00:19:11 +0000 ROA not before: Fri 02 Jan 2026 00:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208757 IP address blocks: 45.86.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:97:16:36:8d:00:9d:33:51:87:8c:15:93:5d:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=988296c50d94bbed225f2867231fa5093debea91 Validity Not Before: Jan 2 00:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e7c4b89353837c23147380ab9d88dea505f901d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:36:31:d7:14:40:f8:35:24:5b:35:b8:57:75: 16:19:7e:6d:d2:d4:4c:d1:3c:4c:06:39:24:b3:36: 8c:fd:41:c6:8e:34:59:41:93:cc:b4:a4:e0:a4:6f: ce:b1:86:b6:fa:95:53:82:78:ae:ac:4e:f4:ea:77: 30:a9:01:c4:a2:06:a7:1d:28:19:b9:c9:61:b5:4f: eb:8c:50:e0:5a:a5:f6:3f:56:70:59:2d:4d:ea:72: c6:a9:c0:90:ae:94:a5:f1:bb:cd:70:c9:6e:33:45: 9f:a3:da:17:2b:75:40:cf:9e:27:c9:07:32:ff:51: 77:41:8b:68:64:63:45:d4:4e:ac:f9:1f:2b:e3:7f: 5d:42:38:a4:1d:dc:a9:ad:fd:0e:07:21:4c:c0:b1: f6:3c:16:99:86:47:ef:43:90:fc:48:50:bb:87:aa: 2c:28:52:aa:a2:2f:02:6d:96:0d:3c:61:29:b0:9c: 00:5c:b3:3d:20:20:04:16:fa:89:66:b3:6c:ff:e7: 97:b2:d8:18:20:64:45:15:e9:4e:78:b1:e9:89:80: 3f:1b:c6:c7:dc:03:d1:0d:95:a8:61:b2:a5:cb:b0: 19:eb:e9:13:13:36:75:1f:ab:ed:b8:6b:12:ee:a8: fa:99:ac:3d:d7:2c:a9:57:10:44:6a:76:cf:50:be: ad:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:7C:4B:89:35:38:37:C2:31:47:38:0A:B9:D8:8D:EA:50:5F:90:1D X509v3 Authority Key Identifier: keyid:98:82:96:C5:0D:94:BB:ED:22:5F:28:67:23:1F:A5:09:3D:EB:EA:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/TnxLiTU4N8IxRzgKudiN6lBfkB0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.48.0/22 Signature Algorithm: sha256WithRSAEncryption 96:be:29:ab:3e:bc:86:e8:c5:ae:57:86:fa:fb:c9:0d:1d:43: 51:dc:89:ac:77:6c:ae:ab:9c:1e:3e:e8:27:8b:e9:54:e7:a4: b2:0c:09:11:1a:b9:17:29:cc:bd:a6:af:75:39:1e:47:ab:ce: c0:22:74:58:47:83:10:12:14:9b:4f:3d:b1:a9:17:3a:81:59: 3b:e3:a1:11:0e:22:a0:3b:ec:00:6e:15:89:e6:0a:a8:51:a5: 4c:aa:5b:5c:3c:c8:5a:22:a5:ee:e4:08:55:ac:fb:dd:d6:f9: 92:96:74:76:21:72:68:f4:a6:c8:b6:ba:df:09:7d:6b:07:ce: 59:1e:e3:c0:e0:c0:48:a1:66:ce:9d:3d:cf:aa:60:b7:1d:7f: 7d:a1:dc:d0:36:99:03:57:ca:97:7e:30:fd:06:21:b4:76:2a: 84:ed:56:95:4d:b4:d8:53:ab:3f:f4:20:c3:e1:d9:35:fc:c2: 9c:56:94:dd:b4:12:37:d8:ee:a3:95:5f:aa:bb:6e:58:bf:85: a4:12:38:20:92:2d:3e:cb:76:27:ae:5a:89:28:9b:c0:e7:83: 5e:1f:de:c0:ba:da:65:10:b1:5e:dc:33:84:3e:f4:f5:9e:11: 31:44:4b:61:3c:79:79:9d:c4:6c:4b:44:f7:5d:64:46:9a:6d: bd:7d:f7:6d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EpcWNo0AnTNRh4wVk12mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4ODI5NmM1MGQ5NGJiZWQyMjVmMjg2NzIzMWZhNTA5M2Rl YmVhOTEwHhcNMjYwMTAyMDAxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTdjNGI4OTM1MzgzN2MyMzE0NzM4MGFiOWQ4OGRlYTUwNWY5MDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTYx1xRA+DUkWzW4V3UWGX5t0tRM 0TxMBjkkszaM/UHGjjRZQZPMtKTgpG/OsYa2+pVTgniurE706ncwqQHEoganHSgZ uclhtU/rjFDgWqX2P1ZwWS1N6nLGqcCQrpSl8bvNcMluM0Wfo9oXK3VAz54nyQcy /1F3QYtoZGNF1E6s+R8r439dQjikHdyprf0OByFMwLH2PBaZhkfvQ5D8SFC7h6os KFKqoi8CbZYNPGEpsJwAXLM9ICAEFvqJZrNs/+eXstgYIGRFFelOeLHpiYA/G8bH 3APRDZWoYbKly7AZ6+kTEzZ1H6vtuGsS7qj6maw91yypVxBEanbPUL6tEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE58S4k1ODfCMUc4CrnYjepQX5AdMB8GA1UdIwQY MBaAFJiClsUNlLvtIl8oZyMfpQk96+qRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUlLV3hRMlV1LTBpWHlobkl4LWxDVDNyNnBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9mNzYwZDAtMmY2Ny00MzA3LTlmMGMt Mzk5M2I1MGIyMDY0LzEvVG54TGlUVTROOEl4UnpnS3VkaU42bEJma0IwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9mNzYwZDAtMmY2Ny00MzA3LTlmMGMtMzk5M2I1MGIyMDY0 LzEvbUlLV3hRMlV1LTBpWHlobkl4LWxDVDNyNnBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVYwMA0G CSqGSIb3DQEBCwUAA4IBAQCWvimrPryG6MWuV4b6+8kNHUNR3Imsd2yuq5wePugn i+lU56SyDAkRGrkXKcy9pq91OR5Hq87AInRYR4MQEhSbTz2xqRc6gVk746ERDiKg O+wAbhWJ5gqoUaVMqltcPMhaIqXu5AhVrPvd1vmSlnR2IXJo9KbItrrfCX1rB85Z HuPA4MBIoWbOnT3PqmC3HX99odzQNpkDV8qXfjD9BiG0diqE7VaVTbTYU6s/9CDD 4dk1/MKcVpTdtBI32O6jlV+qu25Yv4WkEjggki0+y3YnrlqJKJvA54NeH97Autpl ELFe3DOEPvT1nhExREthPHl5ncRsS0T3XWRGmm29ffdt -----END CERTIFICATE-----Generated at Mon Feb 9 20:02:53 2026 by rpki-client