This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/tgKyxQJIrIZGZt0JdqobdwHEFBU.roa File: tgKyxQJIrIZGZt0JdqobdwHEFBU.roa (raw, json) Hash identifier: R6TZ097sd703JL66PHi/DAt6butDAQ5ZZOyHFsfEnNE= Subject key identifier: B6:02:B2:C5:02:48:AC:86:46:66:DD:09:76:AA:1B:77:01:C4:14:15 Certificate issuer: /CN=8777b5b36f66e13c4388c9934da507856515d073 Certificate serial: 019B7834F63877FEDE23576F5653DAD9E538 Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/tgKyxQJIrIZGZt0JdqobdwHEFBU.roa Signing time: Thu 01 Jan 2026 06:18:15 +0000 ROA not before: Thu 01 Jan 2026 06:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48844 IP address blocks: 5.149.139.0/24 maxlen: 24 37.19.13.64/26 maxlen: 26 37.19.15.128/29 maxlen: 29 2a00:1528:aa00::/48 maxlen: 48 2a00:1528:aa00:c000::/56 maxlen: 56 2a00:1528:aa00:d000::/56 maxlen: 56 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:f6:38:77:fe:de:23:57:6f:56:53:da:d9:e5:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073 Validity Not Before: Jan 1 06:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b602b2c50248ac864666dd0976aa1b7701c41415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:41:90:2d:55:00:9c:83:3f:d0:3a:0e:6d:4e: 91:18:b4:7d:fa:79:d6:2e:8b:2a:6a:84:b3:0e:37: 27:c7:e5:f0:2e:75:d3:e8:63:9a:56:16:1a:9b:09: 5b:d7:3a:76:d8:e6:05:6a:e8:cc:d8:6a:c8:fa:80: 97:aa:fe:18:89:bf:b7:46:4c:2f:58:4a:81:ed:7e: 8c:79:34:21:fe:23:34:2d:7e:7d:f1:86:e2:5e:c3: c6:af:c7:78:33:d0:81:ce:1e:4e:24:44:7f:26:54: 49:c0:6c:7b:59:28:af:ae:d8:c2:e9:a9:19:95:bc: 11:1b:99:51:d2:30:42:de:49:2c:dc:9f:46:0b:98: b0:aa:16:60:06:8e:1c:ae:91:e9:b8:b5:66:e8:5f: 14:cc:42:be:8d:ca:65:95:d6:0f:58:b1:2f:ef:2f: 50:81:64:4a:53:db:45:e0:13:67:4d:0d:8b:ce:46: fb:e4:12:fa:94:34:87:80:34:fb:ce:85:a2:6f:b6: 6d:d4:a7:0e:2b:2b:92:27:27:9e:93:99:16:5b:b0: 0c:ee:f9:e6:b3:94:a1:ab:a3:ef:6e:79:8e:0e:47: bc:c6:a5:6a:3e:4e:da:fb:74:88:7e:5d:75:23:57: 03:fa:16:f3:e4:de:a3:6c:9b:09:71:8e:9b:01:85: eb:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:02:B2:C5:02:48:AC:86:46:66:DD:09:76:AA:1B:77:01:C4:14:15 X509v3 Authority Key Identifier: keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/tgKyxQJIrIZGZt0JdqobdwHEFBU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.149.139.0/24 37.19.13.64/26 37.19.15.128/29 IPv6: 2a00:1528:aa00::/48 Signature Algorithm: sha256WithRSAEncryption 6c:eb:45:aa:9c:f6:0c:f9:76:35:4b:02:0a:d7:93:cc:77:2d: f4:99:6f:ec:0b:8f:5c:f7:12:f5:34:a7:ae:b8:fc:e2:19:20: a4:a4:96:b4:7e:1b:f5:f7:16:7c:fc:8e:85:ec:b1:fb:b1:26: 98:b1:4f:bb:e4:8e:ba:41:26:8f:16:e5:78:c5:69:bc:5c:34: 08:4b:37:a6:1b:a1:19:fc:51:d3:08:8b:a4:eb:49:b6:e4:df: 96:d6:7f:a3:c9:cd:f7:6a:8b:51:06:ae:3c:68:f7:f4:7d:53: 15:73:80:cc:79:81:97:74:89:d9:ff:e5:71:11:15:82:de:d0: 7f:ba:96:ec:01:cb:d5:c1:03:1f:d4:a2:a6:59:8a:51:40:49: 71:09:64:f7:da:6d:3f:c7:9b:ea:43:08:73:3d:fe:7c:0d:17: d2:c7:c2:b3:cc:04:1c:59:5c:b1:75:14:e0:c1:5d:f4:cc:99: a8:b4:f0:c9:f1:76:26:0b:b7:80:41:78:96:5e:18:5c:27:41: de:a2:df:d2:b2:48:ab:05:c0:ab:c2:59:fd:c1:ce:5d:8b:97: f8:8f:a7:69:39:ac:d9:99:68:cd:e2:ba:b8:41:42:a5:b6:e2: 32:a3:52:30:dd:e1:ed:3e:fb:3c:10:25:fd:81:8d:78:72:ec: 89:5e:b2:9e -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgISAZt4NPY4d/7eI1dvVlPa2eU4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzdiNWIzNmY2NmUxM2M0Mzg4Yzk5MzRkYTUwNzg1NjUx NWQwNzMwHhcNMjYwMTAxMDYxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjAyYjJjNTAyNDhhYzg2NDY2NmRkMDk3NmFhMWI3NzAxYzQxNDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUGQLVUAnIM/0DoObU6RGLR9+nnW LosqaoSzDjcnx+XwLnXT6GOaVhYamwlb1zp22OYFaujM2GrI+oCXqv4Yib+3Rkwv WEqB7X6MeTQh/iM0LX598YbiXsPGr8d4M9CBzh5OJER/JlRJwGx7WSivrtjC6akZ lbwRG5lR0jBC3kks3J9GC5iwqhZgBo4crpHpuLVm6F8UzEK+jcplldYPWLEv7y9Q gWRKU9tF4BNnTQ2Lzkb75BL6lDSHgDT7zoWib7Zt1KcOKyuSJyeek5kWW7AM7vnm s5Shq6PvbnmODke8xqVqPk7a+3SIfl11I1cD+hbz5N6jbJsJcY6bAYXrFwIDAQAB o4ICKDCCAiQwHQYDVR0OBBYEFLYCssUCSKyGRmbdCXaqG3cBxBQVMB8GA1UdIwQY MBaAFId3tbNvZuE8Q4jJk02lB4VlFdBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2Mt ZWQxZjMwY2MxYzU3LzEvdGdLeXhRSklySVpHWnQwSmRxb2Jkd0hFRkJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2MtZWQxZjMwY2MxYzU3 LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTAaBAIAATAUAwQABZWLAwUG JRMNQAMFAyUTD4AwDwQCAAIwCQMHACoAFSiqADANBgkqhkiG9w0BAQsFAAOCAQEA bOtFqpz2DPl2NUsCCteTzHct9Jlv7AuPXPcS9TSnrrj84hkgpKSWtH4b9fcWfPyO heyx+7EmmLFPu+SOukEmjxbleMVpvFw0CEs3phuhGfxR0wiLpOtJtuTfltZ/o8nN 92qLUQauPGj39H1TFXOAzHmBl3SJ2f/lcREVgt7Qf7qW7AHL1cEDH9SiplmKUUBJ cQlk99ptP8eb6kMIcz3+fA0X0sfCs8wEHFlcsXUU4MFd9MyZqLTwyfF2Jgu3gEF4 ll4YXCdB3qLf0rJIqwXAq8JZ/cHOXYuX+I+naTms2ZlozeK6uEFCpbbiMqNSMN3h 7T77PBAl/YGNeHLsiV6yng== -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:38 2026 by rpki-client