This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/tk2cGKEcpjmgzh9NziQwQKY_JI0.roa File: tk2cGKEcpjmgzh9NziQwQKY_JI0.roa (raw, json) Hash identifier: dwIpxmtvWqneRRLgeS4d6apfZJjJWMJSqTP4tjDYWgo= Subject key identifier: B6:4D:9C:18:A1:1C:A6:39:A0:CE:1F:4D:CE:24:30:40:A6:3F:24:8D Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a Certificate serial: 019B77C73A0B6C4BFCEFF714D9D1083BFC35 Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/tk2cGKEcpjmgzh9NziQwQKY_JI0.roa Signing time: Thu 01 Jan 2026 04:18:23 +0000 ROA not before: Thu 01 Jan 2026 04:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50214 IP address blocks: 194.226.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:3a:0b:6c:4b:fc:ef:f7:14:d9:d1:08:3b:fc:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a Validity Not Before: Jan 1 04:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b64d9c18a11ca639a0ce1f4dce243040a63f248d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:51:fe:d1:4e:24:e3:4b:07:22:78:c5:10:5a: 74:c1:e4:3f:df:f5:a8:5f:f1:76:27:4b:d4:e7:69: e0:be:d4:97:c8:be:b4:94:95:05:72:d1:48:25:72: c2:98:f1:8e:62:d4:40:92:76:c8:f0:5e:54:15:75: 0c:bd:aa:3e:f7:8d:10:87:8e:1c:7a:ad:8d:d1:bb: ff:85:15:f9:d7:7d:d1:38:26:de:35:6a:94:7e:f4: 4c:25:2d:48:f4:b0:ff:35:be:45:0a:04:5f:36:8b: c5:23:33:90:b0:60:86:e9:4a:74:8e:b5:a2:36:42: 1c:c4:45:ce:96:a7:3b:29:97:61:23:96:c7:03:2c: a2:17:f7:d0:65:e8:66:ab:4d:87:01:10:0f:35:8e: 6b:07:c4:10:ab:69:35:1d:7c:0e:cf:e8:84:ca:93: e5:d8:61:1c:05:a5:af:e9:e4:b1:fe:ed:46:a3:d0: 75:fb:14:4b:c1:94:dc:ea:c6:1b:4a:0b:86:bd:35: c1:17:78:89:4a:b6:ac:d0:27:cf:02:e2:a3:6c:11: 51:de:79:4b:d4:53:64:cd:a1:0a:ce:3b:1a:0e:3e: 02:e9:bd:d0:fe:71:d4:90:8a:ec:63:97:bf:10:45: 2f:a0:50:b8:36:9f:7f:a3:97:c3:7d:ba:00:b9:b5: 9d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:4D:9C:18:A1:1C:A6:39:A0:CE:1F:4D:CE:24:30:40:A6:3F:24:8D X509v3 Authority Key Identifier: keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/tk2cGKEcpjmgzh9NziQwQKY_JI0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.226.139.0/24 Signature Algorithm: sha256WithRSAEncryption 32:ff:c2:44:cf:ec:27:4e:c6:60:69:91:cf:cf:9d:54:45:a0: dd:f9:44:27:62:5a:4f:be:9e:ab:88:24:71:68:5f:84:f7:98: 4f:f5:56:06:ad:18:50:0b:92:01:7f:53:33:d9:7a:e0:20:6a: 6d:f6:51:11:c3:61:53:69:fa:2e:77:ac:1c:2f:1c:98:f3:64: 95:da:b4:b2:07:c6:16:40:c5:f1:9e:fe:1a:1a:03:e8:55:1f: 06:2e:28:20:48:91:4c:e2:52:2e:80:16:f0:c7:ee:42:da:d7: c3:8a:34:7f:f4:16:a9:9d:69:bb:06:9d:a9:22:a6:da:d7:d5: 2f:39:74:6b:f1:5f:ef:39:d7:46:e8:92:ac:cf:64:27:cd:53: 93:fd:53:77:e8:2b:82:ef:bb:b7:91:61:be:5b:50:d3:d4:f3: 2c:f3:7d:cb:0d:68:6c:4b:5b:4c:44:2f:c5:94:74:26:04:da: 0b:af:2e:51:7a:c0:4f:d8:bb:37:e4:f3:25:f7:44:88:18:eb: 7f:a7:d6:77:d7:5b:45:b7:e8:f7:22:b1:0a:db:54:e9:64:00: 0e:1a:22:74:54:f7:cc:e1:41:7a:ce:ec:8e:f5:bd:04:59:61: a1:07:cd:d8:d2:34:42:eb:f4:14:54:4b:57:38:00:1f:8b:2e: a1:1d:27:06 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xzoLbEv87/cU2dEIO/w1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx NjQ2NGEwHhcNMjYwMTAxMDQxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjRkOWMxOGExMWNhNjM5YTBjZTFmNGRjZTI0MzA0MGE2M2YyNDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVH+0U4k40sHInjFEFp0weQ/3/Wo X/F2J0vU52ngvtSXyL60lJUFctFIJXLCmPGOYtRAknbI8F5UFXUMvao+940Qh44c eq2N0bv/hRX5133ROCbeNWqUfvRMJS1I9LD/Nb5FCgRfNovFIzOQsGCG6Up0jrWi NkIcxEXOlqc7KZdhI5bHAyyiF/fQZehmq02HARAPNY5rB8QQq2k1HXwOz+iEypPl 2GEcBaWv6eSx/u1Go9B1+xRLwZTc6sYbSguGvTXBF3iJSras0CfPAuKjbBFR3nlL 1FNkzaEKzjsaDj4C6b3Q/nHUkIrsY5e/EEUvoFC4Np9/o5fDfboAubWdowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLZNnBihHKY5oM4fTc4kMECmPySNMB8GA1UdIwQY MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt OWU5YTFlMDM3MzhlLzEvdGsyY0dLRWNwam1nemg5TnppUXdRS1lfSkkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQtOWU5YTFlMDM3Mzhl LzEvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwuKLMA0G CSqGSIb3DQEBCwUAA4IBAQAy/8JEz+wnTsZgaZHPz51URaDd+UQnYlpPvp6riCRx aF+E95hP9VYGrRhQC5IBf1Mz2XrgIGpt9lERw2FTafoud6wcLxyY82SV2rSyB8YW QMXxnv4aGgPoVR8GLiggSJFM4lIugBbwx+5C2tfDijR/9BapnWm7Bp2pIqba19Uv OXRr8V/vOddG6JKsz2QnzVOT/VN36CuC77u3kWG+W1DT1PMs833LDWhsS1tMRC/F lHQmBNoLry5ResBP2Ls35PMl90SIGOt/p9Z311tFt+j3IrEK21TpZAAOGiJ0VPfM 4UF6zuyO9b0EWWGhB83Y0jRC6/QUVEtXOAAfiy6hHScG -----END CERTIFICATE-----Generated at Sun Jan 25 21:16:12 2026 by rpki-client