This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/X72Ta738C-LIMFvd1WFhI8hgB0M.roa File: X72Ta738C-LIMFvd1WFhI8hgB0M.roa (raw, json) Hash identifier: v6AOZV930gaDano00ylIK8U0A/h3KnVoUcoteShVPsI= Subject key identifier: 5F:BD:93:6B:BD:FC:0B:E2:C8:30:5B:DD:D5:61:61:23:C8:60:07:43 Certificate issuer: /CN=4d88eb730ab1a501ea36ea3482d764544e141111 Certificate serial: 019B797EDF66992E8669DB1986573AE68657 Authority key identifier: 4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/X72Ta738C-LIMFvd1WFhI8hgB0M.roa Signing time: Thu 01 Jan 2026 12:18:36 +0000 ROA not before: Thu 01 Jan 2026 12:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.225.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.mft rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:df:66:99:2e:86:69:db:19:86:57:3a:e6:86:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d88eb730ab1a501ea36ea3482d764544e141111 Validity Not Before: Jan 1 12:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5fbd936bbdfc0be2c8305bddd5616123c8600743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f8:ba:5d:b6:0e:d7:6d:70:90:92:45:1d:4e: f8:ea:32:8a:3c:ad:7f:d2:ed:5b:47:5b:3b:de:63: 86:01:59:e0:9a:59:3b:be:25:4b:77:66:11:ff:bf: 51:73:b1:e9:1b:55:d6:b7:10:a1:e0:83:bf:52:e2: b1:fa:24:d0:9a:6c:16:fc:e6:cf:12:56:a9:08:03: ea:1f:16:65:b2:b6:b1:a5:b1:99:f0:69:c0:4e:5b: a1:c1:6b:f6:05:ef:0b:f2:61:0f:b2:c9:77:d0:c6: 02:bc:7e:75:96:c8:68:55:4f:ff:cd:69:4e:99:b5: 98:4b:64:6f:20:79:5e:a6:e6:c1:81:8c:6b:40:96: 4d:7c:e2:7b:c4:7d:67:6c:98:24:0f:61:cd:7d:1a: 3b:a7:22:2a:b3:27:4b:ab:10:b5:7c:5e:5f:12:53: 32:23:bf:a6:27:91:d4:29:d2:57:dd:5f:bb:c1:04: ba:7c:37:65:ce:4f:e2:6b:0c:52:c4:04:7d:9a:d3: ee:0b:d9:5c:b6:6f:1f:9d:32:b7:df:ac:da:b6:38: 89:eb:2f:ed:50:fb:f4:90:94:ad:3b:33:1e:71:4c: 0c:b9:0c:d8:00:0e:be:6a:b1:49:0d:f2:fb:17:09: 40:04:09:31:4a:bc:65:e9:f1:a1:04:d3:a8:14:19: 33:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:BD:93:6B:BD:FC:0B:E2:C8:30:5B:DD:D5:61:61:23:C8:60:07:43 X509v3 Authority Key Identifier: keyid:4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/X72Ta738C-LIMFvd1WFhI8hgB0M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.225.236.0/22 Signature Algorithm: sha256WithRSAEncryption 61:14:5e:16:4f:72:98:9d:55:22:28:39:1a:ee:af:df:a2:ee: 9c:61:38:71:29:4b:95:11:8b:25:32:f2:38:54:18:36:d1:b9: 46:4e:43:c1:e3:98:29:79:5f:25:40:d9:da:26:b9:a5:3a:c5: c0:a9:55:6b:09:3a:f8:10:aa:b6:b5:6a:81:e3:ed:46:11:35: 1d:0c:86:f5:1c:25:2f:10:a6:b9:8e:02:39:e4:67:a3:26:ee: 59:1f:c7:7c:51:c3:b0:1b:76:26:57:58:8b:5d:e0:3d:60:58: af:10:0b:9b:71:67:db:da:52:63:4a:b1:c6:1c:97:c9:68:13: 3e:bf:da:c0:75:99:9d:e2:27:ac:5b:54:f4:fe:40:b2:bc:63: 9c:38:8d:36:17:6e:73:e1:76:ed:ee:bc:f9:1f:e3:a8:bc:40: 39:6c:46:5b:7c:b7:c3:2f:ad:ff:fc:a7:cd:d1:af:24:dd:08: 99:5c:5e:2f:c0:54:5e:16:c7:5b:f5:76:53:d2:9d:7b:1f:1a: 06:be:b5:e6:58:c4:02:cc:33:21:c8:42:ab:4d:47:be:6a:29: 26:7c:ef:74:0c:0e:de:9a:3b:cc:07:f6:7c:03:97:e7:ec:71: 6c:21:9e:b6:cf:35:44:17:07:be:8d:80:b5:7d:e9:66:01:5d: 00:84:7a:0e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ft9mmS6GadsZhlc65oZXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkODhlYjczMGFiMWE1MDFlYTM2ZWEzNDgyZDc2NDU0NGUx NDExMTEwHhcNMjYwMTAxMTIxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmJkOTM2YmJkZmMwYmUyYzgzMDViZGRkNTYxNjEyM2M4NjAwNzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPi6XbYO121wkJJFHU746jKKPK1/ 0u1bR1s73mOGAVngmlk7viVLd2YR/79Rc7HpG1XWtxCh4IO/UuKx+iTQmmwW/ObP ElapCAPqHxZlsraxpbGZ8GnATluhwWv2Be8L8mEPssl30MYCvH51lshoVU//zWlO mbWYS2RvIHlepubBgYxrQJZNfOJ7xH1nbJgkD2HNfRo7pyIqsydLqxC1fF5fElMy I7+mJ5HUKdJX3V+7wQS6fDdlzk/iawxSxAR9mtPuC9lctm8fnTK336zatjiJ6y/t UPv0kJStOzMecUwMuQzYAA6+arFJDfL7FwlABAkxSrxl6fGhBNOoFBkzcQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF+9k2u9/AviyDBb3dVhYSPIYAdDMB8GA1UdIwQY MBaAFE2I63MKsaUB6jbqNILXZFROFBERMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFlqcmN3cXhwUUhxTnVvMGd0ZGtWRTRVRVJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jNDkzZWUtZjY2ZS00MjA4LWEzMWQt NzI2ZjgzZDIzODkyLzEvWDcyVGE3MzhDLUxJTUZ2ZDFXRmhJOGhnQjBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9jNDkzZWUtZjY2ZS00MjA4LWEzMWQtNzI2ZjgzZDIzODky LzEvVFlqcmN3cXhwUUhxTnVvMGd0ZGtWRTRVRVJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCueHsMA0G CSqGSIb3DQEBCwUAA4IBAQBhFF4WT3KYnVUiKDka7q/fou6cYThxKUuVEYslMvI4 VBg20blGTkPB45gpeV8lQNnaJrmlOsXAqVVrCTr4EKq2tWqB4+1GETUdDIb1HCUv EKa5jgI55GejJu5ZH8d8UcOwG3YmV1iLXeA9YFivEAubcWfb2lJjSrHGHJfJaBM+ v9rAdZmd4iesW1T0/kCyvGOcOI02F25z4Xbt7rz5H+OovEA5bEZbfLfDL63//KfN 0a8k3QiZXF4vwFReFsdb9XZT0p17HxoGvrXmWMQCzDMhyEKrTUe+aikmfO90DA7e mjvMB/Z8A5fn7HFsIZ62zzVEFwe+jYC1felmAV0AhHoO -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:12 2026 by rpki-client