This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/tpKBXwzKN2mHCmBOzrBx0WRWZGY.roa File: tpKBXwzKN2mHCmBOzrBx0WRWZGY.roa (raw, json) Hash identifier: 7rikcS4Ls1HmHeVnsKZgA/s/j4eis9rsmH9qENfz2po= Subject key identifier: B6:92:81:5F:0C:CA:37:69:87:0A:60:4E:CE:B0:71:D1:64:56:64:66 Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Certificate serial: 019B7AC7EAD0026237C82AE0AA64514DCB42 Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/tpKBXwzKN2mHCmBOzrBx0WRWZGY.roa Signing time: Thu 01 Jan 2026 18:18:00 +0000 ROA not before: Thu 01 Jan 2026 18:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207713 IP address blocks: 81.19.139.0/24 maxlen: 32 81.19.140.0/24 maxlen: 32 81.19.141.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:ea:d0:02:62:37:c8:2a:e0:aa:64:51:4d:cb:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Validity Not Before: Jan 1 18:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b692815f0cca3769870a604eceb071d164566466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9f:00:b7:e1:07:ae:54:af:93:b6:64:91:8f: 24:e1:b6:c0:79:73:aa:61:b6:29:8e:a7:2f:ba:23: 57:cb:d9:d7:39:3e:cd:4d:6c:b7:b9:01:7b:53:20: af:3e:a4:31:ff:9b:2d:6d:05:1e:34:a0:68:f7:b8: 82:c7:14:dd:54:ba:b1:ec:04:1e:cf:d9:0c:a4:32: 3a:fe:62:4c:5b:66:26:1f:2d:ed:2f:27:e9:e9:97: 6c:78:4f:ff:28:de:f1:6d:c2:df:94:e7:23:64:82: 99:43:24:dd:37:e7:7d:86:a5:f2:ae:db:13:34:39: 05:a4:31:c3:29:10:c2:b2:e0:b0:44:20:f9:06:ee: 97:be:cd:0f:f2:c1:40:17:db:48:cc:df:0f:73:95: 8d:52:b9:f8:c7:94:5b:69:95:b0:db:47:e7:cc:0d: 19:fb:fa:a6:34:05:b4:bf:b8:2b:56:8c:c5:ab:e4: 01:15:c9:48:63:49:cc:c4:54:2d:65:62:35:4e:c1: c0:48:f5:64:34:93:5a:80:a5:ca:aa:03:29:13:26: 19:91:db:b1:61:a5:23:5f:52:64:b8:97:63:62:60: 0b:b8:70:ba:94:76:57:f7:3a:c6:04:c9:b5:5d:bd: 85:94:da:91:bf:2a:b8:7a:f9:40:3f:3f:e7:5d:0c: ae:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:92:81:5F:0C:CA:37:69:87:0A:60:4E:CE:B0:71:D1:64:56:64:66 X509v3 Authority Key Identifier: keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/tpKBXwzKN2mHCmBOzrBx0WRWZGY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.139.0-81.19.141.255 Signature Algorithm: sha256WithRSAEncryption c0:6a:25:47:61:3d:d2:02:65:84:93:49:3d:d8:8d:6f:80:c1: d3:47:d4:78:cb:ee:22:53:d9:e2:60:34:c2:33:64:1f:11:fb: 79:f3:ce:a6:1d:f9:a2:31:7b:f5:87:0d:48:3f:c5:3f:b2:c0: 28:31:00:b7:fc:0d:fa:ef:24:34:19:1e:c8:92:1e:e8:fd:bc: bd:40:11:9d:68:e7:7a:a8:a3:6d:72:ae:d4:9a:38:da:9e:62: e4:ec:6f:55:b4:08:ba:2f:1f:5a:f3:e2:38:b3:e8:43:f1:df: 5b:08:42:9c:49:83:b0:3c:98:bc:ac:ff:93:14:0e:ad:c0:fc: a3:c5:8a:bb:bb:20:d6:92:8b:99:aa:e5:07:42:f4:16:83:d4: c5:8a:be:5b:4b:27:6a:a8:0f:f0:b2:e7:fb:0a:21:b5:1a:f7: f2:da:3b:bb:98:c6:ae:a2:78:db:db:fb:99:15:8f:32:cc:d8: fe:da:2c:c5:7e:46:48:e2:c0:a0:2d:69:d0:21:1f:ee:9d:ac: 9f:aa:ab:48:05:7e:c4:3a:93:45:fb:f6:df:9c:d6:05:a5:fe: d2:d1:20:c8:fd:a8:03:4d:fb:78:df:3e:90:46:10:a2:73:b0: 17:a7:5b:26:53:7d:3c:e0:51:19:aa:7c:3b:3d:f1:d6:9a:c6: c1:f8:b6:d0 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt6x+rQAmI3yCrgqmRRTctCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0Y2U5NjQwYTNlZjJmZWExOTM3NGFkOGY5OWY0MjNkN2Fh N2M3NmIwHhcNMjYwMTAxMTgxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjkyODE1ZjBjY2EzNzY5ODcwYTYwNGVjZWIwNzFkMTY0NTY2NDY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxp8At+EHrlSvk7ZkkY8k4bbAeXOq YbYpjqcvuiNXy9nXOT7NTWy3uQF7UyCvPqQx/5stbQUeNKBo97iCxxTdVLqx7AQe z9kMpDI6/mJMW2YmHy3tLyfp6ZdseE//KN7xbcLflOcjZIKZQyTdN+d9hqXyrtsT NDkFpDHDKRDCsuCwRCD5Bu6Xvs0P8sFAF9tIzN8Pc5WNUrn4x5RbaZWw20fnzA0Z +/qmNAW0v7grVozFq+QBFclIY0nMxFQtZWI1TsHASPVkNJNagKXKqgMpEyYZkdux YaUjX1JkuJdjYmALuHC6lHZX9zrGBMm1Xb2FlNqRvyq4evlAPz/nXQyuYwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFLaSgV8MyjdphwpgTs6wcdFkVmRmMB8GA1UdIwQY MBaAFKTOlkCj7y/qGTdK2PmfQj16p8drMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQt MjgzZmU1NGE2ZjJmLzEvdHBLQlh3ektOMm1IQ21CT3pyQngwV1JXWkdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQtMjgzZmU1NGE2ZjJm LzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABRE4sD BAFRE4wwDQYJKoZIhvcNAQELBQADggEBAMBqJUdhPdICZYSTST3YjW+AwdNH1HjL 7iJT2eJgNMIzZB8R+3nzzqYd+aIxe/WHDUg/xT+ywCgxALf8DfrvJDQZHsiSHuj9 vL1AEZ1o53qoo21yrtSaONqeYuTsb1W0CLovH1rz4jiz6EPx31sIQpxJg7A8mLys /5MUDq3A/KPFiru7INaSi5mq5QdC9BaD1MWKvltLJ2qoD/Cy5/sKIbUa9/LaO7uY xq6ieNvb+5kVjzLM2P7aLMV+RkjiwKAtadAhH+6drJ+qq0gFfsQ6k0X79t+c1gWl /tLRIMj9qANN+3jfPpBGEKJzsBenWyZTfTzgURmqfDs98daaxsH4ttA= -----END CERTIFICATE-----Generated at Sat Jan 10 03:15:15 2026 by rpki-client