This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/TGdsEBW0dA1vBlmQUvr6OCjcRdA.roa File: TGdsEBW0dA1vBlmQUvr6OCjcRdA.roa (raw, json) Hash identifier: DkyX51xLuQvm/HIMS5Gk0Y7OjI/mNozxguG8FiDw6c4= Subject key identifier: 4C:67:6C:10:15:B4:74:0D:6F:06:59:90:52:FA:FA:38:28:DC:45:D0 Certificate issuer: /CN=cea79dcd5a3dee450eaf3f93152ed6da806bbf71 Certificate serial: 019B7F13B00548969E60D2A18E51B60AE08F Authority key identifier: CE:A7:9D:CD:5A:3D:EE:45:0E:AF:3F:93:15:2E:D6:DA:80:6B:BF:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqedzVo97kUOrz-TFS7W2oBrv3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/TGdsEBW0dA1vBlmQUvr6OCjcRdA.roa Signing time: Fri 02 Jan 2026 14:19:15 +0000 ROA not before: Fri 02 Jan 2026 14:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31445 IP address blocks: 77.88.224.0/20 maxlen: 24 185.112.40.0/22 maxlen: 24 195.128.226.0/23 maxlen: 24 195.177.70.0/24 maxlen: 24 2a10:23c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.mft rsync://rpki.ripe.net/repository/DEFAULT/zqedzVo97kUOrz-TFS7W2oBrv3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:b0:05:48:96:9e:60:d2:a1:8e:51:b6:0a:e0:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cea79dcd5a3dee450eaf3f93152ed6da806bbf71 Validity Not Before: Jan 2 14:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c676c1015b4740d6f06599052fafa3828dc45d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:04:9f:cb:fd:10:05:39:b2:1b:62:32:e5:93: 51:09:88:a7:9e:31:2b:36:c6:4c:06:d4:4d:14:47: a7:87:10:a8:82:75:66:06:49:a2:a8:1a:c3:1c:89: bd:c5:df:ef:6c:33:10:94:d2:72:a1:a8:76:84:61: 56:d0:25:e3:d4:89:54:e3:23:6b:e7:d7:d1:94:0b: 80:1a:7d:10:b3:f8:0e:e8:e3:41:7f:5e:b9:70:14: 9d:e6:ae:1f:a7:69:ce:c7:4c:44:dd:99:bc:cf:a2: 07:1d:8d:cf:f4:d0:d7:f7:ed:b4:68:94:67:f3:cb: 34:30:f7:80:c7:c7:72:34:fa:04:68:10:8f:f2:9e: a0:39:e7:4e:5c:fd:aa:86:82:94:a7:72:a6:24:ac: 17:fb:8e:f0:54:6d:96:8f:f2:cf:24:58:9b:6a:fd: ba:18:45:59:e9:af:62:79:87:d7:94:f1:40:1e:24: 90:b0:53:62:5c:53:90:45:c1:91:43:0e:0b:17:e2: 1b:04:c0:74:dd:24:81:a5:17:6a:3e:b3:08:f3:a0: 91:b8:ae:f1:84:71:fd:21:f7:0a:58:93:14:cf:b6: 93:33:5a:99:f0:e0:29:17:6f:a8:12:ed:1d:ce:6c: d8:d5:10:e1:4d:61:5e:17:21:54:06:32:48:2a:4a: a3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:67:6C:10:15:B4:74:0D:6F:06:59:90:52:FA:FA:38:28:DC:45:D0 X509v3 Authority Key Identifier: keyid:CE:A7:9D:CD:5A:3D:EE:45:0E:AF:3F:93:15:2E:D6:DA:80:6B:BF:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqedzVo97kUOrz-TFS7W2oBrv3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/TGdsEBW0dA1vBlmQUvr6OCjcRdA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.88.224.0/20 185.112.40.0/22 195.128.226.0/23 195.177.70.0/24 IPv6: 2a10:23c0::/32 Signature Algorithm: sha256WithRSAEncryption 6d:50:8c:88:92:d5:b7:76:2b:6e:d9:70:f7:df:46:33:ed:a2: 5f:cf:c1:db:15:27:7f:7b:98:53:57:4b:0d:08:2c:25:bd:4b: 45:81:a4:a8:39:8b:84:67:94:e6:c9:a7:44:da:14:e6:3a:c9: 46:fe:61:b9:8d:72:b6:7d:6c:9d:42:ed:35:71:10:54:fb:b1: 24:0f:9f:44:00:e4:5b:8f:f5:8d:ee:b3:4b:f2:37:cd:2a:10: 01:60:32:1d:df:97:3e:5a:be:69:79:a8:d8:73:59:65:97:41: 9f:dc:1d:c7:32:02:22:e5:df:73:52:91:8d:1a:13:28:a2:e5: 52:82:56:7d:f8:ce:c9:b5:31:bf:03:c3:89:dd:a0:49:b6:e3: 0c:ba:af:82:9f:1f:a9:06:99:39:70:a5:2a:ec:84:a5:90:30: 3d:5b:82:5d:49:c6:f7:ae:59:22:c5:a2:86:42:a5:bc:36:8e: c4:8a:92:c6:4a:9e:a2:12:e1:a6:13:b3:b9:cf:c9:d0:99:e0: bc:3c:e8:0a:be:a0:41:a3:69:28:a6:ba:e0:28:aa:ee:02:44: 9b:b3:f5:0c:2d:2d:6f:87:3c:cd:32:04:22:53:09:94:69:b5: 6d:9c:a8:f6:63:81:83:3d:6d:ac:00:82:24:aa:04:53:c0:63: 45:8c:46:79 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt/E7AFSJaeYNKhjlG2CuCPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYTc5ZGNkNWEzZGVlNDUwZWFmM2Y5MzE1MmVkNmRhODA2 YmJmNzEwHhcNMjYwMTAyMTQxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzY3NmMxMDE1YjQ3NDBkNmYwNjU5OTA1MmZhZmEzODI4ZGM0NWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwSfy/0QBTmyG2Iy5ZNRCYinnjEr NsZMBtRNFEenhxCognVmBkmiqBrDHIm9xd/vbDMQlNJyoah2hGFW0CXj1IlU4yNr 59fRlAuAGn0Qs/gO6ONBf165cBSd5q4fp2nOx0xE3Zm8z6IHHY3P9NDX9+20aJRn 88s0MPeAx8dyNPoEaBCP8p6gOedOXP2qhoKUp3KmJKwX+47wVG2Wj/LPJFibav26 GEVZ6a9ieYfXlPFAHiSQsFNiXFOQRcGRQw4LF+IbBMB03SSBpRdqPrMI86CRuK7x hHH9IfcKWJMUz7aTM1qZ8OApF2+oEu0dzmzY1RDhTWFeFyFUBjJIKkqjBQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFExnbBAVtHQNbwZZkFL6+jgo3EXQMB8GA1UdIwQY MBaAFM6nnc1aPe5FDq8/kxUu1tqAa79xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenFlZHpWbzk3a1VPcnotVEZTN1cyb0JydjNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9mODE5Y2MtYjI5NC00NjBlLThiZTQt ODZlMjQyNjA1MTZmLzEvVEdkc0VCVzBkQTF2QmxtUVV2cjZPQ2pjUmRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9mODE5Y2MtYjI5NC00NjBlLThiZTQtODZlMjQyNjA1MTZm LzEvenFlZHpWbzk3a1VPcnotVEZTN1cyb0JydjNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQETVjgAwQC uXAoAwQBw4DiAwQAw7FGMA0EAgACMAcDBQAqECPAMA0GCSqGSIb3DQEBCwUAA4IB AQBtUIyIktW3ditu2XD330Yz7aJfz8HbFSd/e5hTV0sNCCwlvUtFgaSoOYuEZ5Tm yadE2hTmOslG/mG5jXK2fWydQu01cRBU+7EkD59EAORbj/WN7rNL8jfNKhABYDId 35c+Wr5peajYc1lll0Gf3B3HMgIi5d9zUpGNGhMoouVSglZ9+M7JtTG/A8OJ3aBJ tuMMuq+Cnx+pBpk5cKUq7ISlkDA9W4JdScb3rlkixaKGQqW8No7EipLGSp6iEuGm E7O5z8nQmeC8POgKvqBBo2koprrgKKruAkSbs/UMLS1vhzzNMgQiUwmUabVtnKj2 Y4GDPW2sAIIkqgRTwGNFjEZ5 -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:27 2026 by rpki-client