This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4a23f5-7d84-44ab-8f33-583a60820e8c/1/TudiQm26LpOArShtxDj0mlejPWk.roa File: TudiQm26LpOArShtxDj0mlejPWk.roa (raw, json) Hash identifier: 3cMfJ6MHxmVeiZa5FM8JI/0xASsnIVgPLa96AX4u6fQ= Subject key identifier: 4E:E7:62:42:6D:BA:2E:93:80:AD:28:6D:C4:38:F4:9A:57:A3:3D:69 Certificate issuer: /CN=134dbf4c13aba17a04c0b2f245b6f5890c805163 Certificate serial: 019B7E38D7EB7927EB9E5BE869406457060B Authority key identifier: 13:4D:BF:4C:13:AB:A1:7A:04:C0:B2:F2:45:B6:F5:89:0C:80:51:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E02_TBOroXoEwLLyRbb1iQyAUWM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/4a23f5-7d84-44ab-8f33-583a60820e8c/1/TudiQm26LpOArShtxDj0mlejPWk.roa Signing time: Fri 02 Jan 2026 10:20:13 +0000 ROA not before: Fri 02 Jan 2026 10:20:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198352 IP address blocks: 151.237.160.0/21 maxlen: 21 193.37.108.0/22 maxlen: 22 195.246.116.0/23 maxlen: 23 2a01:a0c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/4a23f5-7d84-44ab-8f33-583a60820e8c/1/E02_TBOroXoEwLLyRbb1iQyAUWM.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/4a23f5-7d84-44ab-8f33-583a60820e8c/1/E02_TBOroXoEwLLyRbb1iQyAUWM.mft rsync://rpki.ripe.net/repository/DEFAULT/E02_TBOroXoEwLLyRbb1iQyAUWM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:d7:eb:79:27:eb:9e:5b:e8:69:40:64:57:06:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=134dbf4c13aba17a04c0b2f245b6f5890c805163 Validity Not Before: Jan 2 10:20:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ee762426dba2e9380ad286dc438f49a57a33d69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:99:92:c8:5e:ab:4a:df:65:ec:19:a2:83:6d: 5b:3e:c5:73:79:b0:22:b7:22:c6:2d:69:f2:f1:f1: 08:e6:26:f5:c3:ff:e8:29:d7:86:22:9a:84:b8:6b: 5f:65:b3:b4:81:2e:72:9e:2d:73:48:ea:5a:ea:d0: 15:90:34:3b:1b:df:d6:17:10:85:20:e1:da:33:74: 50:fb:21:46:c9:2e:e6:c5:70:77:ec:e3:3e:c4:9d: 4a:6e:23:7f:88:81:cd:22:dd:5d:c7:10:75:90:ae: 4e:34:08:d2:a4:5c:4a:96:86:68:7d:74:72:07:71: 0b:f9:86:c0:09:8b:17:12:fa:89:d7:4a:56:f9:ab: e1:ab:83:4e:4c:37:43:42:65:a7:81:77:13:61:bd: 6e:76:a6:a3:71:f3:69:44:f0:8b:9c:2f:76:1f:5b: 5e:f3:ea:45:6f:02:2c:a3:07:07:cb:20:9e:af:9d: 8e:74:d3:32:46:0f:a6:ab:0a:45:a7:59:5a:73:16: 9b:d0:b4:43:40:b9:86:ce:7c:7c:6c:2d:ee:91:3e: 0f:72:18:7c:79:21:63:7a:8a:a8:b6:92:0d:31:12: 93:6b:51:8f:5e:ad:24:c8:c5:3f:21:a8:c1:ca:dc: 8e:1a:4d:18:3d:9a:5a:ae:a8:e1:4a:b3:32:8e:db: 96:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:E7:62:42:6D:BA:2E:93:80:AD:28:6D:C4:38:F4:9A:57:A3:3D:69 X509v3 Authority Key Identifier: keyid:13:4D:BF:4C:13:AB:A1:7A:04:C0:B2:F2:45:B6:F5:89:0C:80:51:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E02_TBOroXoEwLLyRbb1iQyAUWM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4a23f5-7d84-44ab-8f33-583a60820e8c/1/TudiQm26LpOArShtxDj0mlejPWk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4a23f5-7d84-44ab-8f33-583a60820e8c/1/E02_TBOroXoEwLLyRbb1iQyAUWM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.237.160.0/21 193.37.108.0/22 195.246.116.0/23 IPv6: 2a01:a0c0::/32 Signature Algorithm: sha256WithRSAEncryption 6c:80:c5:a9:e0:ae:ad:2e:46:21:8d:2a:4b:97:3a:a9:69:98: 21:ea:c9:ee:fb:18:8d:d6:9f:ff:c2:64:2b:d3:8c:42:df:db: 1d:e7:c1:d2:0f:eb:b8:70:e5:54:27:e4:46:6a:fd:d5:d1:54: ce:8e:10:e5:b3:99:a2:ac:7a:f2:59:9b:98:b8:32:a4:b1:3c: ce:1b:03:5a:d6:05:9b:3d:b6:e3:cd:e0:c5:47:80:12:e8:af: fb:3e:19:cd:7d:43:9b:88:8f:4e:c0:2c:67:b7:e9:05:70:19: c8:4a:6f:45:84:65:0e:f1:99:a6:42:b9:04:a1:b8:7c:f7:8e: da:ea:6d:ef:0f:7e:c4:49:41:be:06:be:cd:66:86:37:57:30: ce:6e:40:37:28:1c:ed:3b:f1:e3:4c:5d:b3:2e:be:85:09:a6: 23:4e:90:fc:61:a3:65:f4:84:ac:1b:95:2a:97:fc:e6:fe:b6: 06:45:d0:45:cf:08:66:40:26:7e:67:3c:e2:c9:4b:5c:20:c4: bf:f7:91:3f:18:4c:bb:73:07:bf:52:1b:44:f9:d6:c8:bb:0e: d5:54:b4:8d:0c:ba:2d:d5:8a:74:62:6f:87:9f:f4:1b:5b:77: 5b:5f:ce:90:e8:26:1e:08:bd:79:82:4c:11:a9:c2:5b:32:ea: ba:65:ff:d9 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt+ONfreSfrnlvoaUBkVwYLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzNGRiZjRjMTNhYmExN2EwNGMwYjJmMjQ1YjZmNTg5MGM4 MDUxNjMwHhcNMjYwMTAyMTAyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZWU3NjI0MjZkYmEyZTkzODBhZDI4NmRjNDM4ZjQ5YTU3YTMzZDY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZmSyF6rSt9l7Bmig21bPsVzebAi tyLGLWny8fEI5ib1w//oKdeGIpqEuGtfZbO0gS5yni1zSOpa6tAVkDQ7G9/WFxCF IOHaM3RQ+yFGyS7mxXB37OM+xJ1KbiN/iIHNIt1dxxB1kK5ONAjSpFxKloZofXRy B3EL+YbACYsXEvqJ10pW+avhq4NOTDdDQmWngXcTYb1udqajcfNpRPCLnC92H1te 8+pFbwIsowcHyyCer52OdNMyRg+mqwpFp1lacxab0LRDQLmGznx8bC3ukT4Pchh8 eSFjeoqotpINMRKTa1GPXq0kyMU/IajBytyOGk0YPZparqjhSrMyjtuWFwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFE7nYkJtui6TgK0obcQ49JpXoz1pMB8GA1UdIwQY MBaAFBNNv0wTq6F6BMCy8kW29YkMgFFjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTAyX1RCT3JvWG9Fd0xMeVJiYjFpUXlBVVdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC80YTIzZjUtN2Q4NC00NGFiLThmMzMt NTgzYTYwODIwZThjLzEvVHVkaVFtMjZMcE9BclNodHhEajBtbGVqUFdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC80YTIzZjUtN2Q4NC00NGFiLThmMzMtNTgzYTYwODIwZThj LzEvRTAyX1RCT3JvWG9Fd0xMeVJiYjFpUXlBVVdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDl+2gAwQC wSVsAwQBw/Z0MA0EAgACMAcDBQAqAaDAMA0GCSqGSIb3DQEBCwUAA4IBAQBsgMWp 4K6tLkYhjSpLlzqpaZgh6snu+xiN1p//wmQr04xC39sd58HSD+u4cOVUJ+RGav3V 0VTOjhDls5mirHryWZuYuDKksTzOGwNa1gWbPbbjzeDFR4AS6K/7PhnNfUObiI9O wCxnt+kFcBnISm9FhGUO8ZmmQrkEobh8947a6m3vD37ESUG+Br7NZoY3VzDObkA3 KBztO/HjTF2zLr6FCaYjTpD8YaNl9ISsG5Uql/zm/rYGRdBFzwhmQCZ+ZzziyUtc IMS/95E/GEy7cwe/UhtE+dbIuw7VVLSNDLot1Yp0Ym+Hn/QbW3dbX86Q6CYeCL15 gkwRqcJbMuq6Zf/Z -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:28 2026 by rpki-client