This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/TalCKAxab_gMMHeJvcq48KPYlOs.roa File: TalCKAxab_gMMHeJvcq48KPYlOs.roa (raw, json) Hash identifier: yPK8jifbQaBLYT5U8Ae5k9YG7IJ/bOiLPK0w75h7kpk= Subject key identifier: 4D:A9:42:28:0C:5A:6F:F8:0C:30:77:89:BD:CA:B8:F0:A3:D8:94:EB Certificate issuer: /CN=ed1cf1dc514e7f38a2387d82bdbbef2fb46c1305 Certificate serial: 019B77594F633BC0E77B200FBFD28BBD621C Authority key identifier: ED:1C:F1:DC:51:4E:7F:38:A2:38:7D:82:BD:BB:EF:2F:B4:6C:13:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Rzx3FFOfziiOH2CvbvvL7RsEwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/TalCKAxab_gMMHeJvcq48KPYlOs.roa Signing time: Thu 01 Jan 2026 02:18:20 +0000 ROA not before: Thu 01 Jan 2026 02:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29686 IP address blocks: 46.243.73.0/24 maxlen: 24 195.43.141.0/24 maxlen: 24 2a09:e080::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.crl rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.mft rsync://rpki.ripe.net/repository/DEFAULT/7Rzx3FFOfziiOH2CvbvvL7RsEwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:4f:63:3b:c0:e7:7b:20:0f:bf:d2:8b:bd:62:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed1cf1dc514e7f38a2387d82bdbbef2fb46c1305 Validity Not Before: Jan 1 02:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4da942280c5a6ff80c307789bdcab8f0a3d894eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:42:21:cf:a6:54:40:e8:60:50:b9:b4:d1:48: 76:3b:66:07:3c:55:c1:13:88:af:6d:08:97:8e:9c: f4:32:fd:e4:4c:8e:1a:89:b1:37:2e:c6:2d:a8:8a: 83:02:83:8b:20:bb:3d:fc:92:50:9a:ae:24:96:ce: 7b:44:85:9a:09:dd:8d:ff:7b:1b:fc:a2:d8:3b:92: 11:14:f5:41:42:42:cc:f2:04:9b:90:46:fd:a2:4a: fb:04:30:28:0a:45:14:71:be:f9:3c:eb:f7:ae:89: 31:03:ce:1e:29:70:0b:02:05:94:f1:23:a2:c4:84: bb:71:e2:af:1f:e5:60:f9:ba:aa:d6:e9:f0:e6:7c: 64:5d:b3:19:f6:b9:ed:6b:93:e2:bc:cf:c2:90:60: ea:a1:fa:2b:07:fb:48:16:09:41:f9:3a:fa:d9:1d: 82:4d:78:bf:3b:db:3a:11:2f:f1:3b:de:fe:be:08: e2:83:b3:46:8c:d9:f2:36:f9:0d:9a:1a:7b:3d:25: be:fc:2a:c2:74:ca:e9:12:cb:84:44:e3:c8:51:07: 64:0a:f2:12:f2:eb:37:f8:fa:7e:89:9e:e0:47:09: d7:90:5a:63:ab:61:1f:d0:7b:5e:cc:ca:cc:3e:ac: 74:c5:49:99:8c:1c:04:40:b2:b1:26:72:88:61:e8: ea:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A9:42:28:0C:5A:6F:F8:0C:30:77:89:BD:CA:B8:F0:A3:D8:94:EB X509v3 Authority Key Identifier: keyid:ED:1C:F1:DC:51:4E:7F:38:A2:38:7D:82:BD:BB:EF:2F:B4:6C:13:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Rzx3FFOfziiOH2CvbvvL7RsEwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/TalCKAxab_gMMHeJvcq48KPYlOs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.243.73.0/24 195.43.141.0/24 IPv6: 2a09:e080::/29 Signature Algorithm: sha256WithRSAEncryption 5c:13:df:aa:ac:a6:2b:d9:ec:5e:4d:7e:f1:ac:ac:d2:da:83: 0d:fc:2e:d9:b8:c8:ce:9f:fb:54:a0:fa:cf:41:fa:27:9b:e3: 33:25:70:e5:a0:f6:64:99:5a:6e:4a:42:b3:6c:8b:71:0a:2f: a6:43:14:da:8b:e5:97:dc:1c:00:d2:96:3c:17:01:5e:9c:eb: 5c:e4:d3:ab:d7:31:04:fb:80:3b:67:70:0c:cf:db:69:4e:3d: 96:79:d3:ee:8b:00:b4:21:7c:b8:7c:81:f8:36:b8:b0:40:f8: 0b:c5:81:ab:1b:1e:4e:c9:f1:d3:7e:6d:61:24:d8:86:24:59: a4:90:45:eb:e1:4e:6c:6b:c3:ff:4e:aa:f9:fa:da:c4:06:ba: 47:6d:92:3a:9a:74:2e:c4:9b:bb:a4:26:da:fb:f9:05:af:57: 01:fe:06:dd:e6:34:00:7a:af:72:c1:ef:a8:4d:3a:5d:94:79: ab:55:62:4f:dc:3b:aa:fa:b8:3b:0b:d3:e1:d0:fb:b6:7f:87: 7c:ea:85:ba:f9:42:da:78:a0:15:d6:0e:2a:14:b3:58:f2:b3: d0:6c:f8:bd:ec:f3:35:0f:1b:81:c3:28:d1:39:a6:ca:ad:ae: 83:a0:09:79:90:ed:39:21:bf:d1:ac:74:93:23:82:fe:35:d3: a2:76:33:1f -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt3WU9jO8DneyAPv9KLvWIcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkMWNmMWRjNTE0ZTdmMzhhMjM4N2Q4MmJkYmJlZjJmYjQ2 YzEzMDUwHhcNMjYwMTAxMDIxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZGE5NDIyODBjNWE2ZmY4MGMzMDc3ODliZGNhYjhmMGEzZDg5NGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA50Ihz6ZUQOhgULm00Uh2O2YHPFXB E4ivbQiXjpz0Mv3kTI4aibE3LsYtqIqDAoOLILs9/JJQmq4kls57RIWaCd2N/3sb /KLYO5IRFPVBQkLM8gSbkEb9okr7BDAoCkUUcb75POv3rokxA84eKXALAgWU8SOi xIS7ceKvH+Vg+bqq1unw5nxkXbMZ9rnta5PivM/CkGDqoforB/tIFglB+Tr62R2C TXi/O9s6ES/xO97+vgjig7NGjNnyNvkNmhp7PSW+/CrCdMrpEsuEROPIUQdkCvIS 8us3+Pp+iZ7gRwnXkFpjq2Ef0HtezMrMPqx0xUmZjBwEQLKxJnKIYejqtQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFE2pQigMWm/4DDB3ib3KuPCj2JTrMB8GA1UdIwQY MBaAFO0c8dxRTn84ojh9gr277y+0bBMFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1J6eDNGRk9memlpT0gyQ3ZidnZMN1JzRXdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS85YjkyOGYtY2M1Mi00MTIxLWI0OTIt ZTZmOWU0MTY4YmQyLzEvVGFsQ0tBeGFiX2dNTUhlSnZjcTQ4S1BZbE9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS85YjkyOGYtY2M1Mi00MTIxLWI0OTItZTZmOWU0MTY4YmQy LzEvN1J6eDNGRk9memlpT0gyQ3ZidnZMN1JzRXdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQALvNJAwQA wyuNMA0EAgACMAcDBQMqCeCAMA0GCSqGSIb3DQEBCwUAA4IBAQBcE9+qrKYr2exe TX7xrKzS2oMN/C7ZuMjOn/tUoPrPQfonm+MzJXDloPZkmVpuSkKzbItxCi+mQxTa i+WX3BwA0pY8FwFenOtc5NOr1zEE+4A7Z3AMz9tpTj2WedPuiwC0IXy4fIH4Nriw QPgLxYGrGx5OyfHTfm1hJNiGJFmkkEXr4U5sa8P/Tqr5+trEBrpHbZI6mnQuxJu7 pCba+/kFr1cB/gbd5jQAeq9ywe+oTTpdlHmrVWJP3Duq+rg7C9Ph0Pu2f4d86oW6 +ULaeKAV1g4qFLNY8rPQbPi97PM1DxuBwyjROabKra6DoAl5kO05Ib/RrHSTI4L+ NdOidjMf -----END CERTIFICATE-----Generated at Mon Feb 9 19:44:35 2026 by rpki-client