This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TgXMah-eX8_Z1wje6vqQjXPmAUk.roa File: TgXMah-eX8_Z1wje6vqQjXPmAUk.roa (raw, json) Hash identifier: HD06IVrlRIAk23e9ytf2cUxxAjrp4jjWg0YaaGrh0KY= Subject key identifier: 4E:05:CC:6A:1F:9E:5F:CF:D9:D7:08:DE:EA:FA:90:8D:73:E6:01:49 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84B889E6D4CE47102C7C53892F4B33 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TgXMah-eX8_Z1wje6vqQjXPmAUk.roa Signing time: Fri 02 Jan 2026 16:22:42 +0000 ROA not before: Fri 02 Jan 2026 16:22:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213799 IP address blocks: 31.58.247.0/24 maxlen: 24 31.58.249.0/24 maxlen: 24 31.58.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:b8:89:e6:d4:ce:47:10:2c:7c:53:89:2f:4b:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e05cc6a1f9e5fcfd9d708deeafa908d73e60149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9b:6a:0f:20:c0:65:ec:05:91:24:64:a9:31: 55:ee:67:5a:a8:54:1e:1f:ba:23:18:cd:7b:d1:08: fe:37:e3:24:6d:17:8a:d5:17:6d:a4:cc:0f:60:c3: c5:fb:ae:55:20:cc:ef:38:60:35:88:39:3c:99:8f: c0:3b:b5:6b:52:11:86:3c:60:ca:19:db:36:b8:ea: ab:a5:58:bb:25:dc:f2:a1:bc:f7:bb:f4:04:1f:6e: 5c:d1:27:78:61:f8:6e:b6:17:c6:0c:34:8a:9f:50: 30:f9:c9:3c:6c:e4:8c:29:e1:6c:1d:ac:d2:a7:e4: 9a:a5:34:8a:38:91:75:54:f4:be:fe:66:e4:bd:0f: cd:7f:83:71:5a:b1:21:d0:79:9d:b1:2b:4b:0b:4e: 27:78:9f:4e:fd:0e:cf:e5:9e:3c:2b:71:bb:7d:19: 23:91:90:37:99:9e:9b:45:47:38:3c:e4:a1:40:2e: 41:a7:63:78:8d:fb:68:61:44:22:26:18:65:ba:1e: 99:19:eb:ac:81:78:a7:21:05:9b:f1:c7:df:ec:f7: cc:2d:17:aa:98:ef:2b:0b:ab:bc:40:27:27:fd:a5: fd:d3:7a:4e:71:23:ff:d5:2a:74:b4:19:70:0b:4e: 15:75:77:2b:6b:da:33:71:db:65:98:00:94:e1:11: 0c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:05:CC:6A:1F:9E:5F:CF:D9:D7:08:DE:EA:FA:90:8D:73:E6:01:49 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TgXMah-eX8_Z1wje6vqQjXPmAUk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.247.0/24 31.58.249.0-31.58.250.255 Signature Algorithm: sha256WithRSAEncryption 70:6f:46:12:79:4b:fd:d5:2d:22:99:f1:7c:fc:c5:de:ab:67: 12:1d:fc:04:91:bb:ab:e2:b9:59:39:45:20:fb:e9:da:ee:00: 07:ba:e9:72:3a:63:3b:63:df:60:21:78:80:4f:bc:d2:59:60: 5f:0e:9b:1c:07:87:24:a8:66:a0:e6:c3:dd:d1:e5:9e:2e:8d: 91:eb:6b:1d:ed:c8:36:6f:e7:b1:b1:75:fc:83:ae:27:da:1d: ef:3d:a9:f4:ca:fd:a0:9c:7b:f5:2d:1e:e8:be:35:57:3a:3a: 24:90:9a:dc:0b:5f:10:ee:5e:b7:42:bc:b2:b6:de:0c:d4:61: f3:50:54:30:c4:69:8b:e0:55:8b:62:1b:5c:83:93:53:3f:df: 1b:a0:91:1b:b6:9f:3c:6a:2a:fc:65:f4:69:ec:b5:0f:5d:c5: fb:a2:90:06:a9:ee:b9:c8:44:ce:ae:c6:16:00:b7:d2:a7:b6: 8a:86:12:c7:d9:23:61:37:da:47:8b:76:4e:9a:48:54:01:fa: cf:f3:84:1b:3b:4e:a1:b7:66:22:73:27:2c:d5:81:be:f1:af: f6:72:0e:25:85:bb:d5:2d:ec:c9:49:27:f4:c9:c4:3d:bb:6a: e7:de:d2:f7:95:47:65:62:38:00:db:af:e7:f8:3a:62:57:5a: e2:11:ab:b8 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt/hLiJ5tTORxAsfFOJL0szMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTA1Y2M2YTFmOWU1ZmNmZDlkNzA4ZGVlYWZhOTA4ZDczZTYwMTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5tqDyDAZewFkSRkqTFV7mdaqFQe H7ojGM170Qj+N+MkbReK1RdtpMwPYMPF+65VIMzvOGA1iDk8mY/AO7VrUhGGPGDK Gds2uOqrpVi7Jdzyobz3u/QEH25c0Sd4YfhuthfGDDSKn1Aw+ck8bOSMKeFsHazS p+SapTSKOJF1VPS+/mbkvQ/Nf4NxWrEh0HmdsStLC04neJ9O/Q7P5Z48K3G7fRkj kZA3mZ6bRUc4POShQC5Bp2N4jftoYUQiJhhluh6ZGeusgXinIQWb8cff7PfMLReq mO8rC6u8QCcn/aX903pOcSP/1Sp0tBlwC04VdXcra9ozcdtlmACU4REM2wIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFE4FzGofnl/P2dcI3ur6kI1z5gFJMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvVGdYTWFoLWVYOF9aMXdqZTZ2cVFqWFBtQVVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAHzr3MAwD BAAfOvkDBAAfOvowDQYJKoZIhvcNAQELBQADggEBAHBvRhJ5S/3VLSKZ8Xz8xd6r ZxId/ASRu6viuVk5RSD76druAAe66XI6Yztj32AheIBPvNJZYF8OmxwHhySoZqDm w93R5Z4ujZHrax3tyDZv57GxdfyDrifaHe89qfTK/aCce/UtHui+NVc6OiSQmtwL XxDuXrdCvLK23gzUYfNQVDDEaYvgVYtiG1yDk1M/3xugkRu2nzxqKvxl9GnstQ9d xfuikAap7rnIRM6uxhYAt9KntoqGEsfZI2E32keLdk6aSFQB+s/zhBs7TqG3ZiJz JyzVgb7xr/ZyDiWFu9Ut7MlJJ/TJxD27aufe0veVR2ViOADbr+f4OmJXWuIRq7g= -----END CERTIFICATE-----Generated at Mon Jan 5 14:34:47 2026 by rpki-client