This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/Tcg_tO4TH6VzGp-S2NuzlB5WECE.roa File: Tcg_tO4TH6VzGp-S2NuzlB5WECE.roa (raw, json) Hash identifier: vf8tQnW7oqoTXI/ZHAP1eVwRqXSdr72IdtoqliIf4Ys= Subject key identifier: 4D:C8:3F:B4:EE:13:1F:A5:73:1A:9F:92:D8:DB:B3:94:1E:56:10:21 Certificate issuer: /CN=7f85e990354397e36c0ca903a0c620c7709efdcd Certificate serial: 019B775931059788657E14B44EE54A82E754 Authority key identifier: 7F:85:E9:90:35:43:97:E3:6C:0C:A9:03:A0:C6:20:C7:70:9E:FD:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/Tcg_tO4TH6VzGp-S2NuzlB5WECE.roa Signing time: Thu 01 Jan 2026 02:18:12 +0000 ROA not before: Thu 01 Jan 2026 02:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58067 IP address blocks: 185.214.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:31:05:97:88:65:7e:14:b4:4e:e5:4a:82:e7:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f85e990354397e36c0ca903a0c620c7709efdcd Validity Not Before: Jan 1 02:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4dc83fb4ee131fa5731a9f92d8dbb3941e561021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fc:e5:e8:6d:c4:4a:c7:f7:aa:bf:08:76:0f: 42:6f:cb:bf:53:da:9a:78:e3:ca:3e:d1:6e:8f:df: bb:ea:47:80:02:a5:96:29:d7:36:bb:94:a4:4f:08: 12:3c:71:fa:ca:15:d4:cb:a6:50:71:59:7f:55:a8: 1a:71:e8:dd:7e:b6:df:d2:ca:58:18:a7:2a:53:b2: fe:a5:40:e9:79:20:53:85:85:92:a1:52:e0:87:cf: 2d:b7:6b:83:73:11:4f:9b:40:a6:0b:8b:4a:60:c0: 91:0c:5d:aa:b7:e5:1d:a0:5b:15:17:91:7f:fd:16: 70:53:ea:0e:4f:83:7f:7c:1a:ca:c0:35:10:e9:e8: 4e:25:12:5e:48:e1:24:14:75:f4:31:73:56:05:f1: 83:87:b7:ba:92:59:98:cd:a4:62:63:a4:c0:ec:6d: d4:7c:4b:68:d4:f8:89:0a:d4:40:0f:c2:34:e2:c6: a5:d2:3e:6e:13:90:24:61:ab:c4:e6:21:8c:65:0b: 20:42:3f:22:67:2b:34:27:e5:ae:0c:e7:61:1d:a9: b0:05:c0:43:4d:b1:54:50:e6:75:61:4b:42:61:90: 9b:61:8a:63:35:cb:ed:da:2f:89:c9:35:3e:2b:35: ed:cb:5a:a1:c9:c0:91:6a:41:f4:5d:68:ae:96:b1: 9b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:C8:3F:B4:EE:13:1F:A5:73:1A:9F:92:D8:DB:B3:94:1E:56:10:21 X509v3 Authority Key Identifier: keyid:7F:85:E9:90:35:43:97:E3:6C:0C:A9:03:A0:C6:20:C7:70:9E:FD:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/Tcg_tO4TH6VzGp-S2NuzlB5WECE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.214.76.0/22 Signature Algorithm: sha256WithRSAEncryption 5f:20:23:19:79:af:4a:59:ab:98:ac:ed:8d:a3:82:22:d8:1c: 27:57:a7:d3:78:3f:ed:bd:35:bd:6c:99:6f:33:f6:09:21:4a: 3e:84:ad:19:ab:ca:43:29:0c:83:1d:1b:5d:d7:22:c1:74:41: 20:8f:29:10:a5:03:0d:70:6a:2e:5a:43:e3:6f:fd:9c:d3:c5: c0:dc:8d:c1:f8:bc:e9:ce:bc:3f:f6:57:ab:1b:c2:7f:09:f8: 46:ff:a2:fc:c7:15:16:46:51:31:61:1a:00:a2:de:f6:aa:9d: bd:06:ac:d6:1b:a5:e0:5d:3a:72:13:0a:d7:3f:b1:b3:a2:12: 7f:09:f1:b5:43:7e:18:65:38:a0:89:0a:52:10:d7:cb:14:b1: 3d:c2:1b:81:e3:f2:1f:3a:1c:c5:fc:da:2e:34:77:5e:6f:7b: 47:62:6e:77:44:ae:35:bc:1d:75:95:0d:46:56:2b:de:7c:9e: 1a:ea:27:b8:d7:b1:7b:5e:31:fa:41:75:91:e6:54:70:76:4d: c4:77:c8:05:1d:5e:61:cc:3b:6d:6d:74:64:14:22:6a:12:80: b4:07:a6:07:0a:35:5e:af:d8:d5:f9:bd:d4:59:3c:59:54:e3: 47:01:92:7a:1d:f3:c6:a7:7a:22:3d:8c:f6:ee:4b:1b:b0:2e: 4b:84:dd:38 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WTEFl4hlfhS0TuVKgudUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmODVlOTkwMzU0Mzk3ZTM2YzBjYTkwM2EwYzYyMGM3NzA5 ZWZkY2QwHhcNMjYwMTAxMDIxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZGM4M2ZiNGVlMTMxZmE1NzMxYTlmOTJkOGRiYjM5NDFlNTYxMDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfzl6G3ESsf3qr8Idg9Cb8u/U9qa eOPKPtFuj9+76keAAqWWKdc2u5SkTwgSPHH6yhXUy6ZQcVl/Vagacejdfrbf0spY GKcqU7L+pUDpeSBThYWSoVLgh88tt2uDcxFPm0CmC4tKYMCRDF2qt+UdoFsVF5F/ /RZwU+oOT4N/fBrKwDUQ6ehOJRJeSOEkFHX0MXNWBfGDh7e6klmYzaRiY6TA7G3U fEto1PiJCtRAD8I04sal0j5uE5AkYavE5iGMZQsgQj8iZys0J+WuDOdhHamwBcBD TbFUUOZ1YUtCYZCbYYpjNcvt2i+JyTU+KzXty1qhycCRakH0XWiulrGbkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE3IP7TuEx+lcxqfktjbs5QeVhAhMB8GA1UdIwQY MBaAFH+F6ZA1Q5fjbAypA6DGIMdwnv3NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjRYcGtEVkRsLU5zREtrRG9NWWd4M0NlX2MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80YWUxNzUtNTVkMC00ODRkLThkMTEt OGM5ZDU4MjNiYWQ5LzEvVGNnX3RPNFRINlZ6R3AtUzJOdXpsQjVXRUNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS80YWUxNzUtNTVkMC00ODRkLThkMTEtOGM5ZDU4MjNiYWQ5 LzEvZjRYcGtEVkRsLU5zREtrRG9NWWd4M0NlX2MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudZMMA0G CSqGSIb3DQEBCwUAA4IBAQBfICMZea9KWauYrO2No4Ii2BwnV6fTeD/tvTW9bJlv M/YJIUo+hK0Zq8pDKQyDHRtd1yLBdEEgjykQpQMNcGouWkPjb/2c08XA3I3B+Lzp zrw/9lerG8J/CfhG/6L8xxUWRlExYRoAot72qp29BqzWG6XgXTpyEwrXP7GzohJ/ CfG1Q34YZTigiQpSENfLFLE9whuB4/IfOhzF/NouNHdeb3tHYm53RK41vB11lQ1G VivefJ4a6ie417F7XjH6QXWR5lRwdk3Ed8gFHV5hzDttbXRkFCJqEoC0B6YHCjVe r9jV+b3UWTxZVONHAZJ6HfPGp3oiPYz27ksbsC5LhN04 -----END CERTIFICATE-----Generated at Mon Feb 9 23:51:30 2026 by rpki-client