This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/TFCGti2M-hetYgikCcN3hrjbqGw.roa File: TFCGti2M-hetYgikCcN3hrjbqGw.roa (raw, json) Hash identifier: 1HxVO4vld53LSxCJRAkUESvr3EXgMkBmGHEMAeN8fW4= Subject key identifier: 4C:50:86:B6:2D:8C:FA:17:AD:62:08:A4:09:C3:77:86:B8:DB:A8:6C Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9 Certificate serial: 019B7911425ED036CBA78C85CE2E748B8341 Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/TFCGti2M-hetYgikCcN3hrjbqGw.roa Signing time: Thu 01 Jan 2026 10:18:52 +0000 ROA not before: Thu 01 Jan 2026 10:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42689 IP address blocks: 64.137.12.0/23 maxlen: 23 64.137.20.0/23 maxlen: 23 64.137.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:42:5e:d0:36:cb:a7:8c:85:ce:2e:74:8b:83:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9 Validity Not Before: Jan 1 10:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c5086b62d8cfa17ad6208a409c37786b8dba86c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f3:55:4f:79:06:c8:b9:03:61:09:25:df:83: b5:86:12:55:02:5e:53:1c:f8:4a:01:fb:1f:a6:d9: 36:74:aa:a1:1c:7d:89:46:cb:b5:d0:cb:ae:78:7d: 3d:c0:97:fc:4c:ed:4f:79:a6:e3:27:0e:bb:5f:c1: 54:46:55:83:6f:7f:79:e2:fb:84:b0:1f:f2:41:8e: 1d:38:bf:bb:ed:83:94:25:02:04:15:43:56:6f:f4: f3:13:90:bc:5f:bb:66:3a:9c:77:de:e8:dc:1a:bb: a4:c1:0c:a2:00:83:e4:f7:fa:8c:aa:22:e7:92:55: b4:92:e5:f6:21:05:6d:b9:7e:e8:20:53:b5:12:d7: db:9e:78:7f:94:81:00:52:ca:3d:fd:a7:1f:7c:01: 47:c5:8a:30:7a:79:be:c2:bc:6c:38:20:00:a9:c1: d9:81:e9:fc:af:16:bc:37:10:64:36:9d:33:62:8e: cf:e7:6d:71:a5:65:7b:66:2b:0e:5a:82:85:d4:1a: 33:b2:c1:56:b9:a7:d0:4b:28:15:c2:ac:d5:c2:a4: d3:ec:73:a3:01:7a:1a:dc:72:6b:09:74:4e:87:e2: 4f:c1:9a:3e:31:bd:c4:6c:35:83:86:08:ef:c7:13: 2a:0d:35:d0:a3:ba:ec:6f:90:94:0f:2a:8c:19:6f: 72:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:50:86:B6:2D:8C:FA:17:AD:62:08:A4:09:C3:77:86:B8:DB:A8:6C X509v3 Authority Key Identifier: keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/TFCGti2M-hetYgikCcN3hrjbqGw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.137.12.0/23 64.137.20.0/23 64.137.24.0/22 Signature Algorithm: sha256WithRSAEncryption 8a:e2:15:e5:70:c6:20:58:af:79:5e:06:c1:fe:8d:de:7f:18: e0:35:72:b8:58:07:6d:ef:fc:ef:8c:c5:20:c7:f2:4d:24:3d: 40:34:ed:74:5c:42:41:f3:70:2e:a4:ea:8a:33:00:54:ea:c6: 73:93:e7:f2:38:31:46:30:8e:32:50:24:c8:2c:43:19:24:93: d8:92:f7:9c:04:5d:5f:32:c6:e9:ff:1d:47:aa:2f:ad:5b:26: 4b:35:1c:1b:97:ff:30:95:43:4c:30:67:0b:d7:58:9b:b6:fe: 66:33:1d:d7:01:da:d7:ec:59:ed:ec:bf:ea:66:77:b2:3c:d7: f7:b7:7e:c4:bb:9c:43:39:f2:1c:d7:57:98:2e:06:a4:ce:4a: 5a:ee:d4:ab:b4:b3:1e:13:02:a1:d3:f4:37:fd:fd:03:53:b4: 23:67:70:21:45:fc:12:32:3b:76:58:d8:9a:b7:cd:ec:44:bc: 65:b4:a6:75:f1:a7:86:4c:a5:02:9b:08:f9:dc:8b:77:63:aa: 50:63:9b:cf:68:a9:5d:e9:60:03:46:d3:2d:ac:8a:f0:b2:01: 49:cd:e6:b4:21:5a:66:29:6b:0f:25:03:69:4f:9a:6f:42:a1: 5d:8a:4d:d4:58:ad:72:20:66:6a:7c:db:8e:95:2c:5b:08:f9: 8d:05:12:b0 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5EUJe0DbLp4yFzi50i4NBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj Mzg1ZTkwHhcNMjYwMTAxMTAxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzUwODZiNjJkOGNmYTE3YWQ2MjA4YTQwOWMzNzc4NmI4ZGJhODZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfNVT3kGyLkDYQkl34O1hhJVAl5T HPhKAfsfptk2dKqhHH2JRsu10MuueH09wJf8TO1PeabjJw67X8FURlWDb3954vuE sB/yQY4dOL+77YOUJQIEFUNWb/TzE5C8X7tmOpx33ujcGrukwQyiAIPk9/qMqiLn klW0kuX2IQVtuX7oIFO1Etfbnnh/lIEAUso9/acffAFHxYowenm+wrxsOCAAqcHZ gen8rxa8NxBkNp0zYo7P521xpWV7ZisOWoKF1BozssFWuafQSygVwqzVwqTT7HOj AXoa3HJrCXROh+JPwZo+Mb3EbDWDhgjvxxMqDTXQo7rsb5CUDyqMGW9yiQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFExQhrYtjPoXrWIIpAnDd4a426hsMB8GA1UdIwQY MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt ZmIwNzk1NWYzYWFhLzEvVEZDR3RpMk0taGV0WWdpa0NjTjNocmpicUd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBQIkMAwQB QIkUAwQCQIkYMA0GCSqGSIb3DQEBCwUAA4IBAQCK4hXlcMYgWK95XgbB/o3efxjg NXK4WAdt7/zvjMUgx/JNJD1ANO10XEJB83AupOqKMwBU6sZzk+fyODFGMI4yUCTI LEMZJJPYkvecBF1fMsbp/x1Hqi+tWyZLNRwbl/8wlUNMMGcL11ibtv5mMx3XAdrX 7Fnt7L/qZneyPNf3t37Eu5xDOfIc11eYLgakzkpa7tSrtLMeEwKh0/Q3/f0DU7Qj Z3AhRfwSMjt2WNiat83sRLxltKZ18aeGTKUCmwj53It3Y6pQY5vPaKld6WADRtMt rIrwsgFJzea0IVpmKWsPJQNpT5pvQqFdik3UWK1yIGZqfNuOlSxbCPmNBRKw -----END CERTIFICATE-----Generated at Fri Jan 2 02:38:13 2026 by rpki-client