This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/TlSVX0-vba4I-NSKL89Ngm4tw7c.roa File: TlSVX0-vba4I-NSKL89Ngm4tw7c.roa (raw, json) Hash identifier: o/YwPV35MkVtWefJ+k8c31/h+x9nhWf+AtSwL8HvxrI= Subject key identifier: 4E:54:95:5F:4F:AF:6D:AE:08:F8:D4:8A:2F:CF:4D:82:6E:2D:C3:B7 Certificate issuer: /CN=1e0e4d2dbde986fdc25bf3bf75637852da87abf1 Certificate serial: 019B78A278BCBDE7C80CF4D18892C9DAF32D Authority key identifier: 1E:0E:4D:2D:BD:E9:86:FD:C2:5B:F3:BF:75:63:78:52:DA:87:AB:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/TlSVX0-vba4I-NSKL89Ngm4tw7c.roa Signing time: Thu 01 Jan 2026 08:17:52 +0000 ROA not before: Thu 01 Jan 2026 08:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43260 IP address blocks: 185.248.56.0/24 maxlen: 24 185.248.57.0/24 maxlen: 24 185.248.58.0/24 maxlen: 24 2a0d:2bc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:78:bc:bd:e7:c8:0c:f4:d1:88:92:c9:da:f3:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e0e4d2dbde986fdc25bf3bf75637852da87abf1 Validity Not Before: Jan 1 08:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e54955f4faf6dae08f8d48a2fcf4d826e2dc3b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4b:23:2d:c4:b1:0a:9b:15:2d:44:e6:42:9d: 20:28:d7:7e:3b:c5:98:30:bb:f5:57:34:1b:64:32: df:ac:b8:77:40:56:60:f5:15:c3:e4:e2:f6:ad:58: b6:c4:b6:a1:17:0e:94:52:f6:a9:a2:29:37:43:78: 2b:02:f4:8a:dd:64:3f:6a:e7:66:59:9e:26:c1:ef: cd:1e:60:c1:f4:56:4f:74:24:07:1f:d4:5c:bd:66: 9b:d8:81:6e:83:28:21:39:6c:4c:f6:e4:99:e7:e9: 6b:21:7e:8b:e0:77:44:97:00:da:e0:85:5e:94:d5: 8c:89:b6:72:0d:c5:14:59:bd:90:8a:32:c1:40:31: 3a:6f:68:44:82:fb:15:aa:d1:8c:65:c5:1f:46:4e: 40:c9:3f:09:7b:e2:69:24:54:8d:e9:3b:06:da:d0: c5:5c:2f:da:f8:04:26:8d:e6:89:d8:ff:22:52:cd: ec:dc:86:74:bc:41:39:f5:04:e5:90:a2:57:06:d9: f4:15:f3:08:62:82:1c:92:b5:f4:a9:bf:6c:e6:2d: d8:d8:cb:ad:15:35:cf:bb:b3:84:b1:4a:6a:e1:d9: d2:dc:d2:55:e6:cc:7a:87:ac:b1:c4:e1:04:b7:96: 0c:cd:5d:55:0d:fb:24:72:c9:2b:78:38:fc:92:2d: c5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:54:95:5F:4F:AF:6D:AE:08:F8:D4:8A:2F:CF:4D:82:6E:2D:C3:B7 X509v3 Authority Key Identifier: keyid:1E:0E:4D:2D:BD:E9:86:FD:C2:5B:F3:BF:75:63:78:52:DA:87:AB:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/TlSVX0-vba4I-NSKL89Ngm4tw7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.248.56.0-185.248.58.255 IPv6: 2a0d:2bc0::/48 Signature Algorithm: sha256WithRSAEncryption 29:d5:df:38:d1:6d:c7:d0:dd:0a:5c:46:95:5a:24:68:01:fe: e2:8e:45:d0:4c:dd:e1:fa:e2:64:86:d7:e0:be:b6:13:c8:f2: 15:bf:6f:53:b6:c1:3f:72:e5:7c:d5:a1:68:69:43:37:2a:34: d1:2c:c6:ef:66:bb:b5:f9:e4:2d:7f:6f:51:50:c4:c6:da:2c: 3a:82:53:13:99:73:b3:ee:6d:c9:2f:6b:92:dd:3d:f2:4f:5a: 64:df:76:bd:a6:ac:48:81:5c:1a:d9:83:21:d9:2a:5d:2b:13: 66:6d:ee:49:0c:5d:67:35:f5:ef:e3:53:41:76:31:f5:c8:a3: 9a:cf:9d:ed:07:de:67:cf:42:7e:1d:b7:52:e2:82:8a:18:19: fc:b9:c6:db:27:6a:db:23:e3:a1:ce:a9:75:59:99:99:36:52: d1:59:3f:7f:33:ad:de:a7:73:8e:1d:51:0f:0c:6d:8f:5e:36: b9:73:56:29:0e:81:3c:bc:d8:83:5a:ed:43:28:4d:bf:6c:1a: 60:05:ad:74:82:07:35:3b:3b:7d:56:f9:b6:a0:e7:eb:a6:91: 1c:4c:34:39:ee:bd:b6:50:58:f3:d0:bb:d5:3d:46:7a:60:72: 62:a9:48:af:16:74:6f:54:23:18:68:bd:d2:44:5d:3f:c6:1d: d2:6c:dc:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4oni8vefIDPTRiJLJ2vMtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMGU0ZDJkYmRlOTg2ZmRjMjViZjNiZjc1NjM3ODUyZGE4 N2FiZjEwHhcNMjYwMTAxMDgxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTU0OTU1ZjRmYWY2ZGFlMDhmOGQ0OGEyZmNmNGQ4MjZlMmRjM2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10sjLcSxCpsVLUTmQp0gKNd+O8WY MLv1VzQbZDLfrLh3QFZg9RXD5OL2rVi2xLahFw6UUvapoik3Q3grAvSK3WQ/audm WZ4mwe/NHmDB9FZPdCQHH9RcvWab2IFugyghOWxM9uSZ5+lrIX6L4HdElwDa4IVe lNWMibZyDcUUWb2QijLBQDE6b2hEgvsVqtGMZcUfRk5AyT8Je+JpJFSN6TsG2tDF XC/a+AQmjeaJ2P8iUs3s3IZ0vEE59QTlkKJXBtn0FfMIYoIckrX0qb9s5i3Y2Mut FTXPu7OEsUpq4dnS3NJV5sx6h6yxxOEEt5YMzV1VDfskcskreDj8ki3FUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE5UlV9Pr22uCPjUii/PTYJuLcO3MB8GA1UdIwQY MBaAFB4OTS296Yb9wlvzv3VjeFLah6vxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGc1TkxiM3BodjNDV19PX2RXTjRVdHFIcV9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9jOWUxMTUtMTIzNi00ZmRhLWEwMzMt OTllZWExZjBhMzU0LzEvVGxTVlgwLXZiYTRJLU5TS0w4OU5nbTR0dzdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9jOWUxMTUtMTIzNi00ZmRhLWEwMzMtOTllZWExZjBhMzU0 LzEvSGc1TkxiM3BodjNDV19PX2RXTjRVdHFIcV9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAUBAIAATAOMAwDBAO5+DgD BAC5+DowDwQCAAIwCQMHACoNK8AAADANBgkqhkiG9w0BAQsFAAOCAQEAKdXfONFt x9DdClxGlVokaAH+4o5F0Ezd4friZIbX4L62E8jyFb9vU7bBP3LlfNWhaGlDNyo0 0SzG72a7tfnkLX9vUVDExtosOoJTE5lzs+5tyS9rkt098k9aZN92vaasSIFcGtmD IdkqXSsTZm3uSQxdZzX17+NTQXYx9cijms+d7QfeZ89Cfh23UuKCihgZ/LnG2ydq 2yPjoc6pdVmZmTZS0Vk/fzOt3qdzjh1RDwxtj142uXNWKQ6BPLzYg1rtQyhNv2wa YAWtdIIHNTs7fVb5tqDn66aRHEw0Oe69tlBY89C71T1GemByYqlIrxZ0b1QjGGi9 0kRdP8Yd0mzcAw== -----END CERTIFICATE-----Generated at Mon Jan 19 16:53:33 2026 by rpki-client