This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/TpsCVHSqDTfOTKeZPN8W9MRSaKk.roa File: TpsCVHSqDTfOTKeZPN8W9MRSaKk.roa (raw, json) Hash identifier: snbqT2eExASTjnLg6kLiBCXAbSVZz7O9WqwiO9UA0ZY= Subject key identifier: 4E:9B:02:54:74:AA:0D:37:CE:4C:A7:99:3C:DF:16:F4:C4:52:68:A9 Certificate issuer: /CN=4d6165e4f1813e4b3f5c48720631c7cc0b2374d2 Certificate serial: 019B7EA7256653D14D4481A04CD683C52918 Authority key identifier: 4D:61:65:E4:F1:81:3E:4B:3F:5C:48:72:06:31:C7:CC:0B:23:74:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TWFl5PGBPks_XEhyBjHHzAsjdNI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/TpsCVHSqDTfOTKeZPN8W9MRSaKk.roa Signing time: Fri 02 Jan 2026 12:20:41 +0000 ROA not before: Fri 02 Jan 2026 12:20:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196837 IP address blocks: 91.223.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/TWFl5PGBPks_XEhyBjHHzAsjdNI.crl rsync://rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/TWFl5PGBPks_XEhyBjHHzAsjdNI.mft rsync://rpki.ripe.net/repository/DEFAULT/TWFl5PGBPks_XEhyBjHHzAsjdNI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:25:66:53:d1:4d:44:81:a0:4c:d6:83:c5:29:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d6165e4f1813e4b3f5c48720631c7cc0b2374d2 Validity Not Before: Jan 2 12:20:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e9b025474aa0d37ce4ca7993cdf16f4c45268a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c6:ce:28:71:30:bc:0f:59:c8:57:9b:a9:9b: 21:dd:95:fe:97:63:2e:51:57:6a:96:f9:cd:59:df: 23:b9:67:0f:84:5e:2d:86:77:31:a6:23:e0:5e:f3: a0:f3:60:cc:77:ba:17:b1:9b:96:ed:28:d1:66:7b: d3:61:41:76:dd:6f:77:ab:55:a2:c3:d7:d1:2d:e3: fc:34:9b:7a:b7:d5:d4:05:74:37:ff:7b:d7:c0:d8: 49:98:62:a6:9a:25:80:2d:33:17:a6:1f:ea:10:96: 8a:6b:35:f6:0f:12:1c:39:f0:f4:72:ad:b2:1b:b0: e2:b9:93:76:4d:10:b0:fb:f6:08:34:fa:99:51:c4: f3:6b:ff:ac:a5:b8:e1:a7:55:02:f4:be:25:8c:ff: fe:a6:9a:67:1e:eb:86:47:2e:33:79:27:93:5c:f7: 88:ff:46:a0:5d:1a:98:1c:f5:6c:10:ae:cf:07:21: ed:dd:c4:b4:41:20:32:68:8e:46:03:7a:48:19:46: 0c:6f:51:ce:b8:51:05:ba:c5:af:93:1b:79:f0:59: 55:21:5c:09:ca:ad:48:8c:e8:a8:51:86:a8:0f:ae: a3:49:f1:f7:02:92:0f:cf:02:c1:85:35:ff:4e:64: bc:46:68:83:3d:0f:ae:23:0b:cd:04:1f:d1:b7:1e: 6f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:9B:02:54:74:AA:0D:37:CE:4C:A7:99:3C:DF:16:F4:C4:52:68:A9 X509v3 Authority Key Identifier: keyid:4D:61:65:E4:F1:81:3E:4B:3F:5C:48:72:06:31:C7:CC:0B:23:74:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWFl5PGBPks_XEhyBjHHzAsjdNI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/TpsCVHSqDTfOTKeZPN8W9MRSaKk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/TWFl5PGBPks_XEhyBjHHzAsjdNI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.80.0/24 Signature Algorithm: sha256WithRSAEncryption 77:f4:33:29:a6:4b:ec:1e:c3:67:4f:4f:92:8d:a4:d9:88:99: d4:e8:14:9f:20:a5:06:b1:0e:05:ce:f7:58:57:d9:78:32:10: d7:27:e6:73:c1:66:f8:61:2c:e6:4b:d2:c1:8f:33:1d:8d:02: 3b:ed:09:66:aa:c9:55:04:43:ad:7e:e1:51:15:d5:a0:01:e5: 81:a2:85:09:58:f0:c5:87:6c:3a:fa:bc:bb:f5:cc:4f:0a:e5: d8:73:4c:a7:2a:7d:1d:91:0e:eb:f8:02:fe:03:ad:0f:70:83: e5:c8:30:bd:f5:89:81:7d:e8:1c:10:2c:23:a3:8b:4b:32:e8: f7:df:f0:94:18:d0:c4:ad:57:71:0a:ea:b8:73:c7:25:2d:ee: 68:4c:7b:dc:0e:f0:28:32:3d:25:ef:b7:3c:3f:9f:19:eb:0e: d2:37:f6:2a:45:4a:a6:57:78:f5:ee:a9:48:98:76:92:85:60: 96:f8:46:58:02:72:e1:ff:6f:14:2a:17:b8:5e:53:94:9b:9d: cb:7e:69:c6:21:e8:47:47:10:f1:ed:58:4a:4b:84:04:e0:e0: a8:3a:1d:20:b1:cc:f5:0b:e3:e2:be:71:de:1a:34:41:79:56: 2b:ad:4f:51:09:0b:67:e6:e9:52:4e:86:99:bd:2d:1b:4a:dc: 3e:e9:e1:3b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pyVmU9FNRIGgTNaDxSkYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkNjE2NWU0ZjE4MTNlNGIzZjVjNDg3MjA2MzFjN2NjMGIy Mzc0ZDIwHhcNMjYwMTAyMTIyMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTliMDI1NDc0YWEwZDM3Y2U0Y2E3OTkzY2RmMTZmNGM0NTI2OGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcbOKHEwvA9ZyFebqZsh3ZX+l2Mu UVdqlvnNWd8juWcPhF4thncxpiPgXvOg82DMd7oXsZuW7SjRZnvTYUF23W93q1Wi w9fRLeP8NJt6t9XUBXQ3/3vXwNhJmGKmmiWALTMXph/qEJaKazX2DxIcOfD0cq2y G7DiuZN2TRCw+/YINPqZUcTza/+spbjhp1UC9L4ljP/+pppnHuuGRy4zeSeTXPeI /0agXRqYHPVsEK7PByHt3cS0QSAyaI5GA3pIGUYMb1HOuFEFusWvkxt58FlVIVwJ yq1IjOioUYaoD66jSfH3ApIPzwLBhTX/TmS8RmiDPQ+uIwvNBB/Rtx5vMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE6bAlR0qg03zkynmTzfFvTEUmipMB8GA1UdIwQY MBaAFE1hZeTxgT5LP1xIcgYxx8wLI3TSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFdGbDVQR0JQa3NfWEVoeUJqSEh6QXNqZE5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8zYWU1NDEtNTdmNC00NDY2LTkxZDUt MDJhM2JlNDc3M2EzLzEvVHBzQ1ZIU3FEVGZPVEtlWlBOOFc5TVJTYUtrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi8zYWU1NDEtNTdmNC00NDY2LTkxZDUtMDJhM2JlNDc3M2Ez LzEvVFdGbDVQR0JQa3NfWEVoeUJqSEh6QXNqZE5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW99QMA0G CSqGSIb3DQEBCwUAA4IBAQB39DMppkvsHsNnT0+SjaTZiJnU6BSfIKUGsQ4FzvdY V9l4MhDXJ+ZzwWb4YSzmS9LBjzMdjQI77QlmqslVBEOtfuFRFdWgAeWBooUJWPDF h2w6+ry79cxPCuXYc0ynKn0dkQ7r+AL+A60PcIPlyDC99YmBfegcECwjo4tLMuj3 3/CUGNDErVdxCuq4c8clLe5oTHvcDvAoMj0l77c8P58Z6w7SN/YqRUqmV3j17qlI mHaShWCW+EZYAnLh/28UKhe4XlOUm53LfmnGIehHRxDx7VhKS4QE4OCoOh0gscz1 C+PivnHeGjRBeVYrrU9RCQtn5ulSToaZvS0bStw+6eE7 -----END CERTIFICATE-----Generated at Mon Feb 9 22:57:33 2026 by rpki-client