This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/TTkmvvK-JdTZC6C7UNOuEGH0KnY.roa File: TTkmvvK-JdTZC6C7UNOuEGH0KnY.roa (raw, json) Hash identifier: 8l6xkNYUvsiiGkoEUdLgLlUC3G7J5Ykm9qCMqOzTgnQ= Subject key identifier: 4D:39:26:BE:F2:BE:25:D4:D9:0B:A0:BB:50:D3:AE:10:61:F4:2A:76 Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d Certificate serial: 019AE98E4F8D3335E7AAF468A8DC01A8D810 Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/TTkmvvK-JdTZC6C7UNOuEGH0KnY.roa Signing time: Thu 04 Dec 2025 13:30:09 +0000 ROA not before: Thu 04 Dec 2025 13:30:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48678 IP address blocks: 109.236.49.0/24 maxlen: 24 109.236.51.0/24 maxlen: 24 185.254.28.0/24 maxlen: 24 185.254.29.0/24 maxlen: 24 193.35.152.0/24 maxlen: 24 193.35.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e9:8e:4f:8d:33:35:e7:aa:f4:68:a8:dc:01:a8:d8:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d Validity Not Before: Dec 4 13:30:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4d3926bef2be25d4d90ba0bb50d3ae1061f42a76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ae:69:f3:13:f4:db:7d:b9:76:18:9f:62:ca: e5:c2:01:cf:37:0a:f1:a7:39:25:e7:1a:bf:85:34: 9e:6b:45:81:c5:72:99:b5:6d:e7:8a:17:20:2b:8e: c5:a8:11:4b:b5:6f:f8:59:7e:91:10:f2:5e:ad:b0: 0f:27:ff:3f:75:3b:c6:95:a7:4a:9e:59:0f:7e:7b: c9:06:98:17:ce:2f:69:2e:09:7b:73:df:95:a4:72: 4a:bd:e1:f4:68:54:ab:11:b6:88:a2:78:69:60:c7: f3:e5:35:87:ad:ae:4c:4e:3c:34:18:83:3d:c1:d3: 16:7b:4a:cb:80:12:eb:78:2b:0d:44:9e:12:93:02: 24:3d:59:ff:c2:2e:dc:b8:d1:b1:15:1c:a7:7e:6c: a7:47:7c:19:a1:ad:3e:19:38:9f:36:5b:a9:72:d5: c8:aa:b9:02:c4:1d:08:d6:e7:4c:65:46:73:0f:1e: e6:1d:05:b6:42:e6:60:af:18:2d:14:68:cd:8b:b4: c0:99:fc:ab:3a:82:ce:28:6a:b4:cb:e6:3a:2b:71: cb:e8:d7:9e:3e:4d:63:24:2a:b4:a6:b4:9e:df:dc: 5a:08:03:30:74:3c:db:a6:54:d2:7f:37:89:7e:56: ce:7a:f7:3f:4a:2c:c9:cc:14:85:f3:f5:f9:42:5d: 21:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:39:26:BE:F2:BE:25:D4:D9:0B:A0:BB:50:D3:AE:10:61:F4:2A:76 X509v3 Authority Key Identifier: keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/TTkmvvK-JdTZC6C7UNOuEGH0KnY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.236.49.0/24 109.236.51.0/24 185.254.28.0/23 193.35.152.0/24 193.35.155.0/24 Signature Algorithm: sha256WithRSAEncryption 84:d1:28:c3:26:69:6f:6a:d0:bc:c6:dc:91:be:7d:c4:42:8a: d9:db:42:1a:f4:14:92:e7:70:30:b2:c9:96:1d:8b:9b:a4:4a: 73:76:43:d6:1f:78:ac:8c:a7:a1:b4:49:d9:f1:91:2f:c8:47: 4b:00:69:91:8e:a0:8a:a0:10:63:b5:da:e2:7f:96:fa:6d:45: d3:b0:74:d8:36:c1:b7:a6:d8:45:42:52:8a:41:d7:d4:83:77: de:5c:f4:ab:6e:3b:b6:10:44:aa:fe:e2:6e:f0:59:ce:e0:af: 4f:30:47:5c:f3:63:2a:f8:e6:f7:4f:b6:d0:b5:64:9d:45:c5: 0f:a5:5d:8c:f0:83:ad:e2:36:cb:6c:79:32:bd:f0:f3:da:a2: c4:8a:b2:10:ef:4a:39:51:66:39:00:82:bc:b9:23:23:ab:77: 99:17:2d:8e:0f:70:a2:79:16:69:79:b5:4c:4e:7a:bd:e7:31: 3f:72:e1:5f:85:b5:e0:b8:ed:76:0a:90:a5:12:16:2f:3b:7f: e8:cf:be:27:e4:c0:8b:85:c2:71:b1:e3:3d:b9:3f:16:64:ab: 6f:46:bf:12:64:bd:df:db:cd:51:50:ab:ae:70:6e:79:2b:d7: 78:53:5e:65:29:3c:1d:9d:72:4b:8d:5a:3a:45:7d:5f:be:09: 6d:01:96:d2 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZrpjk+NMzXnqvRoqNwBqNgQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw OTBlNGQwHhcNMjUxMjA0MTMzMDA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDM5MjZiZWYyYmUyNWQ0ZDkwYmEwYmI1MGQzYWUxMDYxZjQyYTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0q5p8xP02325dhifYsrlwgHPNwrx pzkl5xq/hTSea0WBxXKZtW3nihcgK47FqBFLtW/4WX6REPJerbAPJ/8/dTvGladK nlkPfnvJBpgXzi9pLgl7c9+VpHJKveH0aFSrEbaIonhpYMfz5TWHra5MTjw0GIM9 wdMWe0rLgBLreCsNRJ4SkwIkPVn/wi7cuNGxFRynfmynR3wZoa0+GTifNlupctXI qrkCxB0I1udMZUZzDx7mHQW2QuZgrxgtFGjNi7TAmfyrOoLOKGq0y+Y6K3HL6Nee Pk1jJCq0prSe39xaCAMwdDzbplTSfzeJflbOevc/SizJzBSF8/X5Ql0hLQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFE05Jr7yviXU2Qugu1DTrhBh9Cp2MB8GA1UdIwQY MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt MzlmZGI5ODZmMDU5LzEvVFRrbXZ2Sy1KZFRaQzZDN1VOT3VFR0gwS25ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5 LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAbewxAwQA bewzAwQBuf4cAwQAwSOYAwQAwSObMA0GCSqGSIb3DQEBCwUAA4IBAQCE0SjDJmlv atC8xtyRvn3EQorZ20Ia9BSS53AwssmWHYubpEpzdkPWH3isjKehtEnZ8ZEvyEdL AGmRjqCKoBBjtdrif5b6bUXTsHTYNsG3pthFQlKKQdfUg3feXPSrbju2EESq/uJu 8FnO4K9PMEdc82Mq+Ob3T7bQtWSdRcUPpV2M8IOt4jbLbHkyvfDz2qLEirIQ70o5 UWY5AIK8uSMjq3eZFy2OD3CieRZpebVMTnq95zE/cuFfhbXguO12CpClEhYvO3/o z74n5MCLhcJxseM9uT8WZKtvRr8SZL3f281RUKuucG55K9d4U15lKTwdnXJLjVo6 RX1fvgltAZbS -----END CERTIFICATE-----Generated at Fri Dec 5 09:28:43 2025 by rpki-client