This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/TdYAourfzXro8X37Y0IoM8aZBEo.roa
File: TdYAourfzXro8X37Y0IoM8aZBEo.roa (raw, json)
Hash identifier: gZYndkQ6uGvgPeqwt5brtKCHj9NVuSxL2FUpX4xFOEs=
Subject key identifier: 4D:D6:00:A2:EA:DF:CD:7A:E8:F1:7D:FB:63:42:28:33:C6:99:04:4A
Certificate issuer: /CN=4ede4c65d735af79277ed14eb6c4cf5404c788d5
Certificate serial: 019B7910994BCA912F5D7B96104FC8CE9078
Authority key identifier: 4E:DE:4C:65:D7:35:AF:79:27:7E:D1:4E:B6:C4:CF:54:04:C7:88:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/TdYAourfzXro8X37Y0IoM8aZBEo.roa
Signing time: Thu 01 Jan 2026 10:18:09 +0000
ROA not before: Thu 01 Jan 2026 10:18:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49576
IP address blocks: 193.148.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 19:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:99:4b:ca:91:2f:5d:7b:96:10:4f:c8:ce:90:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ede4c65d735af79277ed14eb6c4cf5404c788d5
Validity
Not Before: Jan 1 10:18:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4dd600a2eadfcd7ae8f17dfb63422833c699044a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:aa:50:db:57:3b:0a:9a:be:66:53:76:e7:85:
9b:47:7e:43:1f:69:79:a4:48:78:0f:eb:fb:79:9f:
f7:14:d5:81:49:f6:fe:e5:39:f4:60:d2:4b:60:0d:
35:2a:e8:6a:0a:59:77:9c:49:10:24:61:77:ea:77:
a3:d3:87:8c:5a:7d:78:72:1f:d5:13:94:f5:cb:7e:
31:fe:aa:04:17:e5:67:ec:37:94:bf:53:20:bb:7b:
2d:cb:2e:9d:0c:e4:d8:c3:22:ee:c6:a0:1b:a5:1e:
04:7f:7f:52:6a:3f:7c:86:be:a5:1b:03:57:bd:a4:
79:38:fd:ef:c2:13:35:44:b5:c2:dd:1e:47:4e:cd:
e7:69:a2:24:71:ed:0d:3f:64:4e:5f:cd:39:52:3b:
eb:3b:0c:80:48:53:5a:f4:72:ef:5b:1d:00:d4:5b:
46:d5:02:ce:99:b1:3d:03:42:56:e6:87:2b:12:9d:
2c:a4:c6:34:dc:a2:cc:c5:d0:37:2b:7a:17:4b:10:
cd:35:a1:22:74:00:1a:dd:dc:85:1e:e4:c7:d4:28:
61:63:51:57:70:17:c4:f9:ab:f8:86:67:3b:dd:9a:
d9:a8:0e:4e:9e:a1:13:0d:0a:a5:af:5b:96:e7:2b:
d4:69:ed:88:ad:19:84:a0:3a:6d:0c:e0:21:27:0c:
73:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D6:00:A2:EA:DF:CD:7A:E8:F1:7D:FB:63:42:28:33:C6:99:04:4A
X509v3 Authority Key Identifier:
keyid:4E:DE:4C:65:D7:35:AF:79:27:7E:D1:4E:B6:C4:CF:54:04:C7:88:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/TdYAourfzXro8X37Y0IoM8aZBEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.96.0/19
Signature Algorithm: sha256WithRSAEncryption
03:b9:4a:a7:f3:a3:26:f3:be:1f:e4:e8:4b:1e:b2:dd:af:ea:
06:39:d1:13:5e:0f:18:2f:17:63:8d:dc:92:c1:2d:8b:31:26:
5b:df:7b:a7:12:ce:f5:df:65:1e:8c:5d:38:fa:1c:de:cc:f1:
d6:84:94:7f:13:93:7a:e2:e4:73:5f:52:11:f1:67:fe:55:a6:
e8:d7:a1:86:ea:0a:0b:ae:94:25:a8:85:27:db:05:88:45:ec:
4e:11:15:53:03:96:bc:aa:b7:aa:a4:db:d6:af:4d:87:b8:51:
e9:e5:b7:da:fe:c7:15:ef:39:29:3a:d0:36:0b:55:e1:74:80:
00:90:0a:d0:75:b9:47:57:24:7e:8a:8b:db:7f:e7:00:0f:c7:
02:8e:51:95:f4:da:a8:b6:01:3e:55:e3:06:40:da:45:c6:4f:
d0:05:31:f8:11:92:e3:a4:83:8e:20:62:a4:fd:a2:67:3c:8a:
d2:2e:78:0f:26:77:89:1f:04:8c:c8:74:e6:7f:b5:26:63:68:
92:f4:9e:a1:35:d8:60:9c:ee:55:02:40:27:0f:f1:4e:32:ad:
0a:91:11:a7:8a:ef:d5:e2:03:bc:ab:02:da:d3:84:5a:a0:53:
6e:ad:1e:99:c7:d9:1f:19:6c:78:59:bd:8a:6a:aa:0f:6c:e0:
b4:85:b8:3e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt5EJlLypEvXXuWEE/IzpB4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZGU0YzY1ZDczNWFmNzkyNzdlZDE0ZWI2YzRjZjU0MDRj
Nzg4ZDUwHhcNMjYwMTAxMTAxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZGQ2MDBhMmVhZGZjZDdhZThmMTdkZmI2MzQyMjgzM2M2OTkwNDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6qpQ21c7Cpq+ZlN254WbR35DH2l5
pEh4D+v7eZ/3FNWBSfb+5Tn0YNJLYA01KuhqCll3nEkQJGF36nej04eMWn14ch/V
E5T1y34x/qoEF+Vn7DeUv1Mgu3styy6dDOTYwyLuxqAbpR4Ef39Saj98hr6lGwNX
vaR5OP3vwhM1RLXC3R5HTs3naaIkce0NP2ROX805UjvrOwyASFNa9HLvWx0A1FtG
1QLOmbE9A0JW5ocrEp0spMY03KLMxdA3K3oXSxDNNaEidAAa3dyFHuTH1ChhY1FX
cBfE+av4hmc73ZrZqA5OnqETDQqlr1uW5yvUae2IrRmEoDptDOAhJwxzRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE3WAKLq38166PF9+2NCKDPGmQRKMB8GA1UdIwQY
MBaAFE7eTGXXNa95J37RTrbEz1QEx4jVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHQ1TVpkYzFyM2tuZnRGT3RzVFBWQVRIaU5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8zNWJlZTktODQzZi00ZDM4LTkyODYt
N2FhNDliZWNmNDY3LzEvVGRZQW91cmZ6WHJvOFgzN1kwSW9NOGFaQkVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8zNWJlZTktODQzZi00ZDM4LTkyODYtN2FhNDliZWNmNDY3
LzEvVHQ1TVpkYzFyM2tuZnRGT3RzVFBWQVRIaU5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFwZRgMA0G
CSqGSIb3DQEBCwUAA4IBAQADuUqn86Mm874f5OhLHrLdr+oGOdETXg8YLxdjjdyS
wS2LMSZb33unEs7132UejF04+hzezPHWhJR/E5N64uRzX1IR8Wf+Vabo16GG6goL
rpQlqIUn2wWIRexOERVTA5a8qreqpNvWr02HuFHp5bfa/scV7zkpOtA2C1XhdIAA
kArQdblHVyR+iovbf+cAD8cCjlGV9NqotgE+VeMGQNpFxk/QBTH4EZLjpIOOIGKk
/aJnPIrSLngPJneJHwSMyHTmf7UmY2iS9J6hNdhgnO5VAkAnD/FOMq0KkRGniu/V
4gO8qwLa04RaoFNurR6Zx9kfGWx4Wb2KaqoPbOC0hbg+
-----END CERTIFICATE-----
Generated at Tue Feb 10 03:06:13 2026 by rpki-client