This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/Tj-tszmPMOIdicR6OTt8f45Zya4.roa File: Tj-tszmPMOIdicR6OTt8f45Zya4.roa (raw, json) Hash identifier: 38F17CYyilIBIc43xJOnaUQedazOErXtC4iNosY91dA= Subject key identifier: 4E:3F:AD:B3:39:8F:30:E2:1D:89:C4:7A:39:3B:7C:7F:8E:59:C9:AE Certificate issuer: /CN=3de49b1844fe4422afbe10cdd2819c7448277e65 Certificate serial: 019B7D5B843881D24CF744589B3095DA8049 Authority key identifier: 3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/Tj-tszmPMOIdicR6OTt8f45Zya4.roa Signing time: Fri 02 Jan 2026 06:18:28 +0000 ROA not before: Fri 02 Jan 2026 06:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12859 IP address blocks: 45.153.16.0/23 maxlen: 23 45.153.16.0/24 maxlen: 24 45.153.17.0/24 maxlen: 24 178.22.56.0/21 maxlen: 21 178.22.56.0/24 maxlen: 24 178.22.57.0/24 maxlen: 24 178.22.58.0/24 maxlen: 24 178.22.59.0/24 maxlen: 24 178.22.60.0/24 maxlen: 24 178.22.61.0/24 maxlen: 24 178.22.62.0/24 maxlen: 24 178.22.63.0/24 maxlen: 24 185.31.244.0/22 maxlen: 22 185.31.244.0/24 maxlen: 24 185.31.245.0/24 maxlen: 24 185.31.246.0/24 maxlen: 24 185.31.247.0/24 maxlen: 24 2a00:1e28::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:84:38:81:d2:4c:f7:44:58:9b:30:95:da:80:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3de49b1844fe4422afbe10cdd2819c7448277e65 Validity Not Before: Jan 2 06:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e3fadb3398f30e21d89c47a393b7c7f8e59c9ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:af:86:f7:98:c9:6d:4a:8b:e7:9e:2c:99:93: 19:39:b8:f1:e1:c7:a1:7d:e6:0f:c1:8b:b4:f0:2a: 3a:91:72:50:94:33:2e:38:83:3c:a9:3f:fb:bd:55: a7:75:11:89:5b:c6:a2:e5:9c:60:31:e4:e5:08:e3: 57:29:5f:b0:b4:b0:fb:ee:e5:a7:af:02:5c:74:9b: d6:a5:22:89:69:02:bc:2c:c6:e1:54:20:1a:3c:2e: 32:5e:8a:b5:12:ca:98:2b:d4:42:e4:79:7a:1f:d9: ed:d1:9d:d1:28:e0:bf:63:4f:99:18:54:da:c1:78: a9:cf:2e:02:38:72:7f:79:e6:1d:b3:c4:f8:2f:ae: b4:9a:1b:1a:12:c4:a6:aa:b1:e0:9a:68:14:06:b1: 47:32:26:7e:b3:4b:b9:2f:37:dd:d7:4c:9e:02:6d: d9:e1:d0:2b:2f:a9:ee:48:82:59:58:00:65:86:68: 7b:27:75:1a:8a:a5:a6:81:23:2e:91:c7:90:c8:df: 3d:fc:f8:54:a9:ac:bc:0a:f9:92:a7:4e:64:93:06: ef:81:c8:c7:2b:41:e9:39:a0:73:61:18:d2:46:09: 32:b9:cd:56:57:2e:1d:6b:06:26:49:9a:0a:60:46: 1a:3a:70:10:b5:59:4c:cd:4b:35:c6:b5:e6:74:24: d9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:3F:AD:B3:39:8F:30:E2:1D:89:C4:7A:39:3B:7C:7F:8E:59:C9:AE X509v3 Authority Key Identifier: keyid:3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/Tj-tszmPMOIdicR6OTt8f45Zya4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.153.16.0/23 178.22.56.0/21 185.31.244.0/22 IPv6: 2a00:1e28::/32 Signature Algorithm: sha256WithRSAEncryption 3e:f0:9f:de:8b:27:64:29:97:7c:74:47:1f:66:e5:a6:4d:6f: 72:d8:e2:3c:86:39:ad:76:03:e0:a5:a6:a9:db:e0:97:0d:9b: f3:4b:3a:a9:8a:88:9b:ba:45:ce:8f:a9:55:68:ce:cf:64:18: 6b:eb:70:d9:ec:ab:b8:e4:e2:e3:0d:b9:15:21:5c:51:cb:5a: e9:2d:8a:c4:ec:83:08:a1:c4:9e:bf:4c:a5:44:e2:63:83:5a: e7:07:25:a8:60:33:4f:2e:d0:0e:0f:8c:d4:3a:12:6d:b9:41: dd:3d:87:18:99:05:90:0d:60:c0:14:78:47:c2:a7:6a:54:12: 75:48:2e:58:6a:80:4e:ea:7a:c2:9c:dc:a8:13:b8:40:fa:69: 03:46:89:71:34:62:e2:6a:48:b6:65:3e:57:f0:a5:22:b0:46: 0c:57:a8:36:51:d6:90:5d:4f:96:f0:79:17:b4:f9:cb:c3:65: 07:b1:ca:b2:ce:d9:37:c0:11:9a:1d:52:85:37:3a:52:48:f2: 37:41:6f:51:0f:ee:d4:48:c3:e3:6e:e1:72:d6:68:ca:28:ee: b6:99:a2:e5:ed:ab:b0:ea:43:ae:ab:fa:cd:26:47:af:6b:34: d7:61:e3:78:11:6e:bc:c7:00:af:42:ff:2b:b7:53:57:5e:12: 64:92:2d:a8 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt9W4Q4gdJM90RYmzCV2oBJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkZTQ5YjE4NDRmZTQ0MjJhZmJlMTBjZGQyODE5Yzc0NDgy NzdlNjUwHhcNMjYwMTAyMDYxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTNmYWRiMzM5OGYzMGUyMWQ4OWM0N2EzOTNiN2M3ZjhlNTljOWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsq+G95jJbUqL554smZMZObjx4ceh feYPwYu08Co6kXJQlDMuOIM8qT/7vVWndRGJW8ai5ZxgMeTlCONXKV+wtLD77uWn rwJcdJvWpSKJaQK8LMbhVCAaPC4yXoq1EsqYK9RC5Hl6H9nt0Z3RKOC/Y0+ZGFTa wXipzy4COHJ/eeYds8T4L660mhsaEsSmqrHgmmgUBrFHMiZ+s0u5Lzfd10yeAm3Z 4dArL6nuSIJZWABlhmh7J3UaiqWmgSMukceQyN89/PhUqay8CvmSp05kkwbvgcjH K0HpOaBzYRjSRgkyuc1WVy4dawYmSZoKYEYaOnAQtVlMzUs1xrXmdCTZLQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFE4/rbM5jzDiHYnEejk7fH+OWcmuMB8GA1UdIwQY MBaAFD3kmxhE/kQir74QzdKBnHRIJ35lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGVTYkdFVC1SQ0t2dmhETjBvR2NkRWduZm1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC84MWIxODgtMjU1ZC00OWM3LTlmOTgt MGFjOWI0ZDdlYWI3LzEvVGotdHN6bVBNT0lkaWNSNk9UdDhmNDVaeWE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC84MWIxODgtMjU1ZC00OWM3LTlmOTgtMGFjOWI0ZDdlYWI3 LzEvUGVTYkdFVC1SQ0t2dmhETjBvR2NkRWduZm1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQBLZkQAwQD shY4AwQCuR/0MA0EAgACMAcDBQAqAB4oMA0GCSqGSIb3DQEBCwUAA4IBAQA+8J/e iydkKZd8dEcfZuWmTW9y2OI8hjmtdgPgpaap2+CXDZvzSzqpioibukXOj6lVaM7P ZBhr63DZ7Ku45OLjDbkVIVxRy1rpLYrE7IMIocSev0ylROJjg1rnByWoYDNPLtAO D4zUOhJtuUHdPYcYmQWQDWDAFHhHwqdqVBJ1SC5YaoBO6nrCnNyoE7hA+mkDRolx NGLiaki2ZT5X8KUisEYMV6g2UdaQXU+W8HkXtPnLw2UHscqyztk3wBGaHVKFNzpS SPI3QW9RD+7USMPjbuFy1mjKKO62maLl7auw6kOuq/rNJkevazTXYeN4EW68xwCv Qv8rt1NXXhJkki2o -----END CERTIFICATE-----Generated at Tue Jan 20 06:03:58 2026 by rpki-client