This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/TFVe-dXGuNawzmnfdegYq6flUl8.roa
File: TFVe-dXGuNawzmnfdegYq6flUl8.roa (raw, json)
Hash identifier: vQbZ+TX1ZBjYH0NW4eiYLXLkpBqwSOxwA5OLO5L2sYg=
Subject key identifier: 4C:55:5E:F9:D5:C6:B8:D6:B0:CE:69:DF:75:E8:18:AB:A7:E5:52:5F
Certificate issuer: /CN=cf2fcc0c4bf54d5e9cb7fa1bb1fe1a9d94610390
Certificate serial: 019B76EB3EE3F43F7660B08D3C297F0C9450
Authority key identifier: CF:2F:CC:0C:4B:F5:4D:5E:9C:B7:FA:1B:B1:FE:1A:9D:94:61:03:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zy_MDEv1TV6ct_obsf4anZRhA5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/TFVe-dXGuNawzmnfdegYq6flUl8.roa
Signing time: Thu 01 Jan 2026 00:18:07 +0000
ROA not before: Thu 01 Jan 2026 00:18:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51778
IP address blocks: 194.5.228.0/22 maxlen: 23
2a0c:e740::/32 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/zy_MDEv1TV6ct_obsf4anZRhA5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/zy_MDEv1TV6ct_obsf4anZRhA5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/zy_MDEv1TV6ct_obsf4anZRhA5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:3e:e3:f4:3f:76:60:b0:8d:3c:29:7f:0c:94:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2fcc0c4bf54d5e9cb7fa1bb1fe1a9d94610390
Validity
Not Before: Jan 1 00:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c555ef9d5c6b8d6b0ce69df75e818aba7e5525f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bd:e8:1e:03:25:2f:5b:79:f3:77:89:b6:4e:
8c:01:ec:c3:a9:85:6b:de:4e:8a:9e:10:ee:67:a0:
90:d7:b1:30:9f:31:34:f3:f0:06:7a:d9:23:74:e5:
5f:2c:aa:1e:f2:f7:17:07:0a:f3:fa:ac:7a:e4:62:
22:57:2d:3c:7a:57:f8:c1:2b:9f:26:c3:4e:fe:24:
19:95:7d:29:b6:e8:23:3c:d3:c1:0d:26:c2:23:7a:
0c:75:60:e1:52:f4:9d:ff:44:3c:dd:66:38:e2:a5:
ed:04:39:2e:df:ed:88:2d:31:1b:7c:74:39:5e:49:
fe:0f:96:b8:fa:25:34:17:f3:19:f6:8e:db:29:88:
85:fa:d8:26:ff:05:18:1b:16:9d:7b:48:a4:3d:a4:
8d:57:a9:e5:04:d0:5f:8e:b2:ce:6a:5d:13:4b:a6:
8f:a0:59:3a:fb:8e:5c:9e:83:a0:86:84:46:5b:76:
12:95:c2:0b:1e:54:ed:15:ca:c4:78:0f:57:fc:51:
7a:4c:50:44:0f:f7:ba:a6:0b:da:25:2c:82:df:8d:
bb:8a:0f:3e:71:44:4d:d2:a4:ac:50:a5:5c:ac:10:
58:a3:e1:52:23:66:f7:f8:44:8f:03:0f:6f:3c:99:
4f:e0:5d:2f:d0:77:90:ba:41:a3:35:e9:f3:a6:37:
80:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:55:5E:F9:D5:C6:B8:D6:B0:CE:69:DF:75:E8:18:AB:A7:E5:52:5F
X509v3 Authority Key Identifier:
keyid:CF:2F:CC:0C:4B:F5:4D:5E:9C:B7:FA:1B:B1:FE:1A:9D:94:61:03:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy_MDEv1TV6ct_obsf4anZRhA5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/TFVe-dXGuNawzmnfdegYq6flUl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/zy_MDEv1TV6ct_obsf4anZRhA5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.228.0/22
IPv6:
2a0c:e740::/32
Signature Algorithm: sha256WithRSAEncryption
3c:37:15:b3:20:1c:21:50:c1:0e:3b:69:22:8b:5e:9f:f7:0c:
c5:0c:6c:49:91:c2:bc:27:1f:9f:82:78:a5:43:8d:de:a4:58:
81:30:68:9f:3a:3b:c0:a2:74:bf:7e:17:e0:6c:cf:e9:e3:9a:
2e:be:a4:17:ac:12:7d:32:f4:a9:2c:9c:48:c5:e7:f2:b7:79:
b0:b6:3f:f8:ef:aa:25:53:aa:f9:52:fe:a2:dd:b8:6f:2a:de:
68:56:ad:d4:8f:9e:93:0c:b9:f5:f9:79:32:48:e4:c9:af:7c:
80:18:54:8d:e2:67:32:97:2d:b0:ef:e6:b5:f2:40:6a:ee:31:
98:38:a9:f9:db:4e:63:6a:2e:72:bf:0e:9e:d0:da:0b:cc:91:
66:02:dc:e4:f4:38:c4:35:00:e1:64:f9:d3:02:bb:a9:5f:d8:
89:26:5a:10:75:ee:23:70:24:2e:02:e9:41:b1:89:8c:7e:29:
24:90:b9:57:3d:8f:14:ce:23:60:05:bf:a9:46:c8:d5:8c:83:
9f:9e:9f:83:ad:ec:1c:52:d4:b6:4f:8a:fc:f6:21:75:e6:e0:
d4:8b:8b:0b:01:f8:1c:1a:e4:ef:d1:85:9d:3d:f6:27:30:1e:
bf:a6:96:b9:5e:14:7c:0a:53:fd:cc:e6:6a:ed:34:1c:6e:78:
a9:d0:65:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:01:54 2026 by rpki-client