This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/tSEZjU-vS57hTqP83y9FF4MrWAs.roa File: tSEZjU-vS57hTqP83y9FF4MrWAs.roa (raw, json) Hash identifier: ozjgCaqpcyjXz1n6hccmETcyoNzECahsGI6im8BxTac= Subject key identifier: B5:21:19:8D:4F:AF:4B:9E:E1:4E:A3:FC:DF:2F:45:17:83:2B:58:0B Certificate issuer: /CN=7654b0cc2c3f6b757ff52cba165d9ffa88ced30f Certificate serial: 019B7F820FA84E7A7259933CC1D58A66E60D Authority key identifier: 76:54:B0:CC:2C:3F:6B:75:7F:F5:2C:BA:16:5D:9F:FA:88:CE:D3:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/tSEZjU-vS57hTqP83y9FF4MrWAs.roa Signing time: Fri 02 Jan 2026 16:19:48 +0000 ROA not before: Fri 02 Jan 2026 16:19:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12843 IP address blocks: 194.24.242.0/24 maxlen: 24 194.24.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.crl rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:0f:a8:4e:7a:72:59:93:3c:c1:d5:8a:66:e6:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7654b0cc2c3f6b757ff52cba165d9ffa88ced30f Validity Not Before: Jan 2 16:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b521198d4faf4b9ee14ea3fcdf2f4517832b580b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9c:33:a8:71:0a:4a:8f:99:06:73:78:14:33: ac:fe:26:69:f5:d6:44:ce:3e:0d:bb:39:6a:08:c1: f9:40:d1:49:45:48:92:0e:f1:cf:fc:db:42:bc:65: 69:04:63:dc:b7:35:90:95:32:ef:90:34:38:00:aa: db:fc:31:33:17:12:62:46:55:6e:16:df:53:44:e1: 2d:7a:c1:89:9f:df:99:72:7e:f7:2c:f3:cd:7b:ef: a5:d0:2c:2d:0b:37:2b:00:c1:f7:1b:32:b5:e7:7e: 82:9d:dd:10:67:75:20:c1:21:f1:9e:8a:c6:d6:0b: 6e:86:6f:ff:c2:be:62:5c:b6:b5:da:02:8a:33:06: 48:50:09:0e:58:c3:98:c3:6f:a5:fc:55:eb:3a:23: e6:d4:73:6c:74:1a:87:ab:12:fe:17:a3:2a:2f:20: 39:21:83:83:6f:b4:af:8e:b1:26:56:45:b9:56:0d: 4c:f5:18:10:99:38:23:72:2f:f5:39:97:4f:4f:9b: 71:46:ab:5b:1a:29:b6:97:d5:c9:89:17:27:41:1d: 98:b1:a7:43:4d:4a:f3:20:e5:8e:1a:c2:33:ac:2e: 6e:21:d8:93:b4:da:74:5f:55:c1:74:81:b7:d5:24: f4:45:a1:c5:a9:bb:41:87:37:ae:da:10:4b:59:32: 86:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:21:19:8D:4F:AF:4B:9E:E1:4E:A3:FC:DF:2F:45:17:83:2B:58:0B X509v3 Authority Key Identifier: keyid:76:54:B0:CC:2C:3F:6B:75:7F:F5:2C:BA:16:5D:9F:FA:88:CE:D3:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/tSEZjU-vS57hTqP83y9FF4MrWAs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.24.242.0/23 Signature Algorithm: sha256WithRSAEncryption 33:7a:ce:61:92:8a:bc:4e:3a:f8:bb:f6:28:74:1c:3e:c7:f8: 94:68:5c:07:09:5a:05:45:4a:75:2b:a0:ef:48:83:fb:cd:87: 55:7b:9b:42:a4:6b:fc:9e:12:5f:f1:35:66:1b:69:a2:c7:ca: 7c:71:28:f7:92:2f:44:4f:ef:04:3f:46:85:df:8f:c2:b6:17: 0c:d3:01:83:09:76:7c:5f:1e:95:68:fb:d0:fc:1c:90:b6:20: 57:13:46:ea:69:f4:79:a6:0e:2d:d2:d4:15:19:3e:6e:ac:32: 16:44:3f:01:2a:ee:ea:16:08:cb:c5:a3:bd:2f:78:f4:0c:04: bc:86:3e:c0:ab:01:99:4d:84:f7:3e:b5:d9:e1:00:b5:3c:b0: ab:e8:51:5e:2d:b0:24:fe:88:78:09:90:0b:d9:e7:7a:e4:d4: d4:b8:c7:98:a9:dd:9e:4d:9e:30:c3:ba:d6:ca:75:41:d4:8c: fd:22:4a:0d:0d:3e:34:83:fe:40:d4:c0:8d:7c:ef:24:0d:65: da:01:50:bf:50:2f:ae:de:c3:ab:48:b9:3e:bc:91:b1:3a:9e: c2:7f:9b:a6:7f:09:2d:c1:c7:b7:66:3e:a2:58:3a:35:d5:05: 22:4e:47:b0:e9:29:50:93:1e:80:b8:6d:65:ee:f5:59:79:45: 94:bd:4a:43 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gg+oTnpyWZM8wdWKZuYNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NTRiMGNjMmMzZjZiNzU3ZmY1MmNiYTE2NWQ5ZmZhODhj ZWQzMGYwHhcNMjYwMTAyMTYxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTIxMTk4ZDRmYWY0YjllZTE0ZWEzZmNkZjJmNDUxNzgzMmI1ODBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5wzqHEKSo+ZBnN4FDOs/iZp9dZE zj4NuzlqCMH5QNFJRUiSDvHP/NtCvGVpBGPctzWQlTLvkDQ4AKrb/DEzFxJiRlVu Ft9TROEtesGJn9+Zcn73LPPNe++l0CwtCzcrAMH3GzK1536Cnd0QZ3UgwSHxnorG 1gtuhm//wr5iXLa12gKKMwZIUAkOWMOYw2+l/FXrOiPm1HNsdBqHqxL+F6MqLyA5 IYODb7SvjrEmVkW5Vg1M9RgQmTgjci/1OZdPT5txRqtbGim2l9XJiRcnQR2YsadD TUrzIOWOGsIzrC5uIdiTtNp0X1XBdIG31ST0RaHFqbtBhzeu2hBLWTKGhQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLUhGY1Pr0ue4U6j/N8vRReDK1gLMB8GA1UdIwQY MBaAFHZUsMwsP2t1f/UsuhZdn/qIztMPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGxTd3pDd19hM1ZfOVN5NkZsMmYtb2pPMHc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xMjI2NDEtNzFhZi00NTljLWI5YzEt OGIxNTZkYjRmZjM1LzEvdFNFWmpVLXZTNTdoVHFQODN5OUZGNE1yV0FzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xMjI2NDEtNzFhZi00NTljLWI5YzEtOGIxNTZkYjRmZjM1 LzEvZGxTd3pDd19hM1ZfOVN5NkZsMmYtb2pPMHc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwhjyMA0G CSqGSIb3DQEBCwUAA4IBAQAzes5hkoq8Tjr4u/YodBw+x/iUaFwHCVoFRUp1K6Dv SIP7zYdVe5tCpGv8nhJf8TVmG2mix8p8cSj3ki9ET+8EP0aF34/CthcM0wGDCXZ8 Xx6VaPvQ/ByQtiBXE0bqafR5pg4t0tQVGT5urDIWRD8BKu7qFgjLxaO9L3j0DAS8 hj7AqwGZTYT3PrXZ4QC1PLCr6FFeLbAk/oh4CZAL2ed65NTUuMeYqd2eTZ4ww7rW ynVB1Iz9IkoNDT40g/5A1MCNfO8kDWXaAVC/UC+u3sOrSLk+vJGxOp7Cf5umfwkt wce3Zj6iWDo11QUiTkew6SlQkx6AuG1l7vVZeUWUvUpD -----END CERTIFICATE-----Generated at Mon Jan 26 21:06:13 2026 by rpki-client