This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/TZEmLmroEs6IRm7BIRkKTFCJTnA.roa File: TZEmLmroEs6IRm7BIRkKTFCJTnA.roa (raw, json) Hash identifier: QhC3msm1fXEe5FbZInDyO6caWrevlSV8+0GhYVm+mSE= Subject key identifier: 4D:91:26:2E:6A:E8:12:CE:88:46:6E:C1:21:19:0A:4C:50:89:4E:70 Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21 Certificate serial: 019B7CEE202A468583B3FF9A812707975D84 Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/TZEmLmroEs6IRm7BIRkKTFCJTnA.roa Signing time: Fri 02 Jan 2026 04:18:59 +0000 ROA not before: Fri 02 Jan 2026 04:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12390 IP address blocks: 185.199.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:20:2a:46:85:83:b3:ff:9a:81:27:07:97:5d:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21 Validity Not Before: Jan 2 04:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d91262e6ae812ce88466ec121190a4c50894e70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:76:8e:dd:fb:2f:14:f4:16:48:bb:28:22:42: a0:2a:93:02:02:9f:a5:52:91:5f:50:4b:0b:2c:5b: 9a:75:a1:62:1f:fa:99:94:ac:56:73:87:5a:b5:a3: 6d:b2:b4:2f:9b:23:cb:97:50:cd:24:c9:f4:2d:10: 6f:2b:c5:47:d0:6a:e2:8e:55:b9:28:59:02:38:50: b7:0b:82:17:b2:bc:12:19:a6:b7:c1:0d:ba:54:bf: e7:c4:f4:22:cc:c9:aa:9f:b5:15:5e:b8:1e:a8:58: a7:9b:c6:29:f4:9d:47:f1:6b:a1:9f:17:e2:e0:56: 97:a2:ff:c0:9f:ac:9b:13:39:ca:88:6c:46:3a:9d: be:29:c7:23:92:92:6b:3a:b3:f7:00:30:7a:2d:c4: 04:e4:b0:a8:73:c0:e5:f4:75:66:4d:ca:51:b6:8e: b7:bf:df:c6:89:08:08:fc:b2:b2:10:06:09:bb:18: 87:2f:64:64:71:6e:a5:28:17:67:a2:a9:1c:47:86: a5:b8:13:12:2c:10:b3:c3:a9:3c:c0:ba:36:94:e9: 45:24:61:a0:71:0f:33:62:06:dc:94:f1:97:4b:49: 7d:99:5f:a7:1f:8f:15:3a:5f:ed:39:26:8b:85:d2: 2d:84:63:30:ec:38:84:f7:28:27:c5:f6:9c:94:34: 78:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:91:26:2E:6A:E8:12:CE:88:46:6E:C1:21:19:0A:4C:50:89:4E:70 X509v3 Authority Key Identifier: keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/TZEmLmroEs6IRm7BIRkKTFCJTnA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.199.56.0/22 Signature Algorithm: sha256WithRSAEncryption 8a:da:63:6f:4f:17:7f:13:d5:c8:70:09:2d:c4:7b:f7:5d:2d: a6:61:2f:e4:cf:9b:d3:65:79:a6:96:de:6f:e1:f8:91:da:65: bb:6e:e6:e4:c6:67:e9:e3:dd:52:77:ea:7c:8c:69:49:c2:99: f0:65:5e:29:02:00:ca:d9:f0:d8:c6:b2:e0:11:a6:e0:35:26: d4:54:55:cc:93:09:4e:53:c7:07:0c:ef:85:b6:29:4c:fc:88: 68:07:57:3b:a1:65:a6:65:89:49:99:11:4a:0b:c4:ac:20:25: ce:5d:c2:a3:a8:de:5a:67:c3:b5:19:55:ca:5f:a7:e6:19:4f: 8e:b6:ba:66:2b:d7:26:2f:39:bc:05:81:16:07:c1:f3:21:42: cc:4f:a9:78:53:6c:34:eb:20:a5:9b:d7:e4:70:b5:e1:35:59: 1d:e0:2a:92:de:c7:61:9d:f4:b6:2a:31:1b:cd:cc:30:37:cf: 65:77:c6:8b:c4:83:e8:eb:76:79:e0:61:5d:a5:21:ad:08:73: 96:cf:be:d6:48:56:8c:67:09:63:d3:e2:67:a5:95:d1:1a:47: da:5c:36:c8:13:a7:8c:7b:0d:7a:8c:20:69:67:16:6d:21:8f: a1:30:17:b7:80:d8:8d:24:6d:fb:41:5a:c9:86:14:53:01:38: f7:56:37:f9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87iAqRoWDs/+agScHl12EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NWEwNTY2ZDBiNjNhMWY4NjJkODM0NThlNGYyZWE2ZmQ4 ZjdkMjEwHhcNMjYwMTAyMDQxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDkxMjYyZTZhZTgxMmNlODg0NjZlYzEyMTE5MGE0YzUwODk0ZTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3aO3fsvFPQWSLsoIkKgKpMCAp+l UpFfUEsLLFuadaFiH/qZlKxWc4dataNtsrQvmyPLl1DNJMn0LRBvK8VH0GrijlW5 KFkCOFC3C4IXsrwSGaa3wQ26VL/nxPQizMmqn7UVXrgeqFinm8Yp9J1H8Wuhnxfi 4FaXov/An6ybEznKiGxGOp2+KccjkpJrOrP3ADB6LcQE5LCoc8Dl9HVmTcpRto63 v9/GiQgI/LKyEAYJuxiHL2RkcW6lKBdnoqkcR4aluBMSLBCzw6k8wLo2lOlFJGGg cQ8zYgbclPGXS0l9mV+nH48VOl/tOSaLhdIthGMw7DiE9ygnxfaclDR4WwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE2RJi5q6BLOiEZuwSEZCkxQiU5wMB8GA1UdIwQY MBaAFLdaBWbQtjofhi2DRY5PLqb9j30hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQt ODNmNjAxYzNmYjU5LzEvVFpFbUxtcm9FczZJUm03QklSa0tURkNKVG5BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQtODNmNjAxYzNmYjU5 LzEvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucc4MA0G CSqGSIb3DQEBCwUAA4IBAQCK2mNvTxd/E9XIcAktxHv3XS2mYS/kz5vTZXmmlt5v 4fiR2mW7bubkxmfp491Sd+p8jGlJwpnwZV4pAgDK2fDYxrLgEabgNSbUVFXMkwlO U8cHDO+FtilM/IhoB1c7oWWmZYlJmRFKC8SsICXOXcKjqN5aZ8O1GVXKX6fmGU+O trpmK9cmLzm8BYEWB8HzIULMT6l4U2w06yClm9fkcLXhNVkd4CqS3sdhnfS2KjEb zcwwN89ld8aLxIPo63Z54GFdpSGtCHOWz77WSFaMZwlj0+JnpZXRGkfaXDbIE6eM ew16jCBpZxZtIY+hMBe3gNiNJG37QVrJhhRTATj3Vjf5 -----END CERTIFICATE-----Generated at Fri Jan 2 23:49:04 2026 by rpki-client