This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tXlhp2DKZE_0FsMcG44oBsgADIA.roa File: tXlhp2DKZE_0FsMcG44oBsgADIA.roa (raw, json) Hash identifier: xc9Pn2LWs1ip/UBe3xd3UE7xXrgDSWeolHA0ZmQ28Bc= Subject key identifier: B5:79:61:A7:60:CA:64:4F:F4:16:C3:1C:1B:8E:28:06:C8:00:0C:80 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AB0440293C3E210886F31024B6B0E Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tXlhp2DKZE_0FsMcG44oBsgADIA.roa Signing time: Thu 01 Jan 2026 16:18:42 +0000 ROA not before: Thu 01 Jan 2026 16:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137409 IP address blocks: 217.145.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:b0:44:02:93:c3:e2:10:88:6f:31:02:4b:6b:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b57961a760ca644ff416c31c1b8e2806c8000c80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:31:83:b3:d9:85:3e:94:32:8f:bd:cd:bb:6d: 24:02:60:27:c6:75:b3:e5:eb:16:33:39:b2:84:1c: 49:e1:d6:f9:61:aa:b5:b5:fc:20:0a:4c:26:5e:96: 46:1d:9e:6c:2c:a8:f2:93:ec:d5:4d:70:9a:bc:64: 38:27:e8:33:f3:f9:6e:22:17:42:f8:79:92:fd:c0: 53:6b:25:eb:d9:ae:b4:c0:7b:a1:f4:5b:45:28:c9: 69:c5:dd:42:eb:b1:8d:e0:7b:60:52:e7:57:df:b8: 30:0e:5e:2e:1c:f8:3d:81:f4:de:78:ef:4b:2b:8f: ff:67:3c:bb:c1:cc:fa:8a:25:06:9b:0e:fb:2b:13: 0c:3f:51:8a:68:6c:fa:5c:31:1b:df:00:e2:b2:b3: 98:e1:f8:29:9a:45:f8:8a:40:39:dd:bc:61:4b:4b: 05:86:8f:96:02:96:37:7e:e8:bc:a5:80:cd:c7:d6: 8e:89:4b:6f:34:8d:b8:87:8e:0a:d0:d5:fa:b9:b0: 6a:d7:85:86:62:0f:0b:38:6a:a8:31:2d:f2:44:73: ea:04:3b:72:ae:0a:91:c1:cf:9b:1a:79:3b:3a:0b: 4f:ef:3d:74:24:86:9f:ff:6f:9a:c5:d8:2c:7f:b8: 6c:25:6a:ed:d2:fe:6a:2e:40:95:30:ee:91:86:c4: 1f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:79:61:A7:60:CA:64:4F:F4:16:C3:1C:1B:8E:28:06:C8:00:0C:80 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tXlhp2DKZE_0FsMcG44oBsgADIA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.145.74.0/24 Signature Algorithm: sha256WithRSAEncryption 68:87:df:c6:e2:1f:75:c0:1c:0b:56:d6:83:47:70:ca:f3:8f: c1:0a:42:06:83:5c:11:33:f2:dd:d1:e9:59:25:8a:f6:6f:3a: 83:de:f8:ce:43:b9:62:6c:33:c0:7d:be:88:93:9c:23:ef:2c: e1:b4:7b:36:38:11:38:ad:68:4d:39:d9:66:8c:63:75:94:23: 24:49:21:15:c0:c8:27:82:f9:95:6f:74:80:7a:78:d7:c9:8a: 03:be:e1:d7:20:8c:13:9b:ad:be:e4:d8:17:9f:52:e3:c4:9b: 3d:cd:26:53:02:c1:cd:75:52:15:b2:f0:9b:81:ff:3f:ae:77: 80:6b:2f:f3:8d:75:b1:a4:91:67:35:23:38:04:a3:f7:e6:38: fc:d9:32:9f:c3:e7:8c:e9:40:6b:25:74:e9:b1:4d:7c:f8:50: 3b:6e:b5:64:85:f6:8c:77:63:6f:8a:6b:bd:53:41:e4:34:7f: d6:85:41:7c:52:b0:c3:b5:f1:bc:1e:09:9f:a7:20:1e:40:e7: 0d:7f:19:fc:6f:09:a3:56:9b:26:84:82:08:43:ca:13:06:2a: f6:f8:4f:50:1e:85:4d:12:f3:78:5f:a2:a5:4e:c2:35:a9:37: 5f:16:96:8a:42:f4:c7:18:60:9d:95:c4:4b:7f:c7:b8:ee:16: 87:d4:cc:3d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WrBEApPD4hCIbzECS2sOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTc5NjFhNzYwY2E2NDRmZjQxNmMzMWMxYjhlMjgwNmM4MDAwYzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDGDs9mFPpQyj73Nu20kAmAnxnWz 5esWMzmyhBxJ4db5Yaq1tfwgCkwmXpZGHZ5sLKjyk+zVTXCavGQ4J+gz8/luIhdC +HmS/cBTayXr2a60wHuh9FtFKMlpxd1C67GN4HtgUudX37gwDl4uHPg9gfTeeO9L K4//Zzy7wcz6iiUGmw77KxMMP1GKaGz6XDEb3wDisrOY4fgpmkX4ikA53bxhS0sF ho+WApY3fui8pYDNx9aOiUtvNI24h44K0NX6ubBq14WGYg8LOGqoMS3yRHPqBDty rgqRwc+bGnk7OgtP7z10JIaf/2+axdgsf7hsJWrt0v5qLkCVMO6RhsQfdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLV5YadgymRP9BbDHBuOKAbIAAyAMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvdFhsaHAyREtaRV8wRnNNY0c0NG9Cc2dBRElBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2ZFKMA0G CSqGSIb3DQEBCwUAA4IBAQBoh9/G4h91wBwLVtaDR3DK84/BCkIGg1wRM/Ld0elZ JYr2bzqD3vjOQ7libDPAfb6Ik5wj7yzhtHs2OBE4rWhNOdlmjGN1lCMkSSEVwMgn gvmVb3SAenjXyYoDvuHXIIwTm62+5NgXn1LjxJs9zSZTAsHNdVIVsvCbgf8/rneA ay/zjXWxpJFnNSM4BKP35jj82TKfw+eM6UBrJXTpsU18+FA7brVkhfaMd2Nvimu9 U0HkNH/WhUF8UrDDtfG8HgmfpyAeQOcNfxn8bwmjVpsmhIIIQ8oTBir2+E9QHoVN EvN4X6KlTsI1qTdfFpaKQvTHGGCdlcRLf8e47haH1Mw9 -----END CERTIFICATE-----Generated at Mon Jan 19 16:53:16 2026 by rpki-client