This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/TVtd-36c8oiGTufurdgHvbsUtAw.roa
File: TVtd-36c8oiGTufurdgHvbsUtAw.roa (raw, json)
Hash identifier: pg6koiFWGn1YpEbLIfs1EoERDaBdSlA3wP080cVSVAo=
Subject key identifier: 4D:5B:5D:FB:7E:9C:F2:88:86:4E:E7:EE:AD:D8:07:BD:BB:14:B4:0C
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019B7B3614AFBD6C0680F0ACCD66D9FAC8DF
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/TVtd-36c8oiGTufurdgHvbsUtAw.roa
Signing time: Thu 01 Jan 2026 20:18:20 +0000
ROA not before: Thu 01 Jan 2026 20:18:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206728
IP address blocks: 92.119.194.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Jan 2026 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:14:af:bd:6c:06:80:f0:ac:cd:66:d9:fa:c8:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jan 1 20:18:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d5b5dfb7e9cf288864ee7eeadd807bdbb14b40c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:0d:5f:12:43:28:57:ad:38:0c:b9:f6:d5:fc:
0d:43:61:05:40:43:e2:e8:41:f4:70:48:cc:7d:e1:
8e:70:e8:21:04:13:c5:53:47:3a:17:fe:fb:e8:31:
e5:35:89:19:a4:e1:58:aa:15:e0:d7:2f:58:dc:7e:
10:ca:48:3c:47:2d:9e:d5:22:2d:c8:30:15:06:9e:
45:70:5a:db:68:f6:05:41:9b:f0:bd:7d:3b:b8:12:
c6:ef:41:de:8c:ee:17:2b:3b:16:a2:71:41:0f:5a:
c3:d0:94:b1:84:af:69:ef:1b:54:13:bb:08:61:ed:
57:64:0a:48:43:4f:b8:c4:41:2c:2f:0f:d4:c1:33:
2b:89:c9:37:92:03:aa:8a:f7:6d:e9:ea:6e:61:58:
6a:0c:7d:9a:b3:4a:56:40:c3:fd:7a:74:20:3b:2c:
28:95:bf:73:15:e9:a3:e0:fe:0a:f8:2a:b4:f2:8a:
cc:6f:3e:33:4c:43:c8:29:11:cb:c3:77:13:da:0c:
f6:81:26:65:d4:af:04:9f:c8:a8:93:2d:1d:f1:2c:
e9:72:02:1e:b3:c2:aa:fc:3b:c2:1e:2d:71:7a:cb:
f6:a9:2e:65:9f:d8:f3:99:db:e4:5a:72:47:10:ff:
f2:f6:3c:59:b0:3f:1d:5f:a7:d1:77:8a:3c:b9:ad:
7d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:5B:5D:FB:7E:9C:F2:88:86:4E:E7:EE:AD:D8:07:BD:BB:14:B4:0C
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/TVtd-36c8oiGTufurdgHvbsUtAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.194.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:02:08:69:65:2e:db:bb:2b:27:bd:1e:61:70:c5:77:65:81:
1e:9e:ea:0d:f2:f3:a9:e3:24:8b:6f:db:37:de:91:32:9b:8f:
e4:e0:25:c5:20:7b:de:21:93:10:2f:3a:73:c3:28:07:05:04:
9c:b6:2c:6f:74:ed:6c:62:b7:cb:5b:5f:87:bb:5c:22:11:2d:
84:e2:66:cd:71:0d:47:10:83:0b:cf:c6:39:70:20:55:3b:5b:
58:3f:2f:c5:2c:23:5d:48:99:b0:e7:a0:60:4c:49:07:90:08:
2a:74:c3:38:cc:f9:c5:bb:8b:d9:7f:da:f9:8e:50:f1:1a:03:
88:29:ac:bd:4d:a4:07:ca:69:31:5c:53:cf:b3:e7:7b:bd:fa:
d2:15:d1:a3:7c:5e:18:a2:1c:4f:db:9c:67:b5:b9:23:42:4c:
41:0e:db:af:43:97:6c:45:64:a6:17:7b:10:64:3a:b1:16:96:
d7:93:d0:38:ef:db:2d:fb:27:20:bd:3d:6c:48:fd:4c:fc:42:
46:eb:18:31:e4:55:3a:99:cf:5a:c7:d8:32:ad:d8:af:9e:27:
9d:7d:1a:56:e2:36:9b:ba:72:78:1a:eb:ce:1f:cd:2a:1a:c3:
53:a3:90:08:d6:c9:e3:91:fc:62:3f:46:fe:25:6d:7c:2d:8b:
8e:c5:b7:38
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt7NhSvvWwGgPCszWbZ+sjfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw
N2VlNTYwHhcNMjYwMTAxMjAxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDViNWRmYjdlOWNmMjg4ODY0ZWU3ZWVhZGQ4MDdiZGJiMTRiNDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Q1fEkMoV604DLn21fwNQ2EFQEPi
6EH0cEjMfeGOcOghBBPFU0c6F/776DHlNYkZpOFYqhXg1y9Y3H4Qykg8Ry2e1SIt
yDAVBp5FcFrbaPYFQZvwvX07uBLG70HejO4XKzsWonFBD1rD0JSxhK9p7xtUE7sI
Ye1XZApIQ0+4xEEsLw/UwTMrick3kgOqivdt6epuYVhqDH2as0pWQMP9enQgOywo
lb9zFemj4P4K+Cq08orMbz4zTEPIKRHLw3cT2gz2gSZl1K8En8ioky0d8SzpcgIe
s8Kq/DvCHi1xesv2qS5ln9jzmdvkWnJHEP/y9jxZsD8dX6fRd4o8ua196QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE1bXft+nPKIhk7n7q3YB727FLQMMB8GA1UdIwQY
MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt
OGJmYmRkNDVjYjYyLzEvVFZ0ZC0zNmM4b2lHVHVmdXJkZ0h2YnNVdEF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy
LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXHfCMA0G
CSqGSIb3DQEBCwUAA4IBAQB6AghpZS7buysnvR5hcMV3ZYEenuoN8vOp4ySLb9s3
3pEym4/k4CXFIHveIZMQLzpzwygHBQSctixvdO1sYrfLW1+Hu1wiES2E4mbNcQ1H
EIMLz8Y5cCBVO1tYPy/FLCNdSJmw56BgTEkHkAgqdMM4zPnFu4vZf9r5jlDxGgOI
Kay9TaQHymkxXFPPs+d7vfrSFdGjfF4YohxP25xntbkjQkxBDtuvQ5dsRWSmF3sQ
ZDqxFpbXk9A479st+ycgvT1sSP1M/EJG6xgx5FU6mc9ax9gyrdivniedfRpW4jab
unJ4GuvOH80qGsNTo5AI1snjkfxiP0b+JW18LYuOxbc4
-----END CERTIFICATE-----
Generated at Thu Jan 15 13:16:49 2026 by rpki-client