This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/TkLqR_2D6FUp8w26CcA_Ij6aAxU.roa File: TkLqR_2D6FUp8w26CcA_Ij6aAxU.roa (raw, json) Hash identifier: JAUrlJKgoaZunqkZQPG/gEEwMrEEnXEBwpCQYjO/HaA= Subject key identifier: 4E:42:EA:47:FD:83:E8:55:29:F3:0D:BA:09:C0:3F:22:3E:9A:03:15 Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Certificate serial: 019B7BA53E32442C188E97631EB2237B92A3 Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/TkLqR_2D6FUp8w26CcA_Ij6aAxU.roa Signing time: Thu 01 Jan 2026 22:19:45 +0000 ROA not before: Thu 01 Jan 2026 22:19:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60560 IP address blocks: 46.10.194.0/24 maxlen: 24 90.154.232.0/24 maxlen: 24 90.154.236.0/24 maxlen: 24 90.154.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:3e:32:44:2c:18:8e:97:63:1e:b2:23:7b:92:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Validity Not Before: Jan 1 22:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e42ea47fd83e85529f30dba09c03f223e9a0315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:aa:a9:e5:52:35:a4:09:31:7e:56:ea:ae:da: cd:de:f1:33:fb:96:26:0f:7f:fe:d1:9f:fb:b3:25: 31:8a:05:1e:d0:e7:be:f3:d5:a0:b4:2f:a5:09:f0: e9:96:65:97:a5:4c:c9:e9:68:1f:e3:5b:7c:ac:9a: 2f:4e:dd:db:fc:72:03:84:14:43:5f:ca:8d:2d:c0: ea:24:f0:49:59:5b:5d:ad:7b:ec:0d:bc:95:c2:c5: 72:c0:40:71:fd:37:3b:7f:ae:30:c0:f1:9a:84:b5: 40:e4:f9:c7:7d:cd:d5:b0:83:74:52:4f:a3:f9:a7: 22:5b:f4:63:4a:4c:b4:03:84:79:10:ad:63:81:35: fa:e9:f9:e4:c8:7e:5b:46:36:5c:93:8b:4f:fc:c3: 0e:db:55:70:1a:d9:5d:77:ed:9a:ad:69:e2:5a:f9: 79:74:a0:12:a8:0f:dd:48:93:31:30:55:e1:cd:af: a3:81:2f:21:8e:c0:95:eb:2e:17:f5:06:16:fe:11: ee:f1:b1:da:33:43:78:f0:a5:92:6c:43:a7:ac:03: f8:fe:18:90:73:94:11:54:19:d2:9b:93:db:45:a8: de:79:22:49:81:34:80:24:9c:61:8b:b4:62:88:1b: fd:4e:ed:04:c2:7f:71:70:84:0d:98:11:a4:fa:54: 2f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:42:EA:47:FD:83:E8:55:29:F3:0D:BA:09:C0:3F:22:3E:9A:03:15 X509v3 Authority Key Identifier: keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/TkLqR_2D6FUp8w26CcA_Ij6aAxU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.10.194.0/24 90.154.232.0/24 90.154.236.0/23 Signature Algorithm: sha256WithRSAEncryption 5e:69:5f:41:0f:76:86:a0:0b:c3:3e:e3:b5:ca:e5:e0:a5:1c: c8:5e:96:af:5f:ce:b6:bc:19:bf:a6:ed:90:82:ca:66:68:18: b1:e4:02:81:a8:81:de:47:f6:13:53:dc:eb:ab:9b:14:d3:ea: 2c:83:f2:bc:47:c6:d5:c3:c7:5c:2c:c3:c1:79:b4:30:35:c3: 18:2b:33:86:64:3d:1d:49:cb:d4:43:96:fb:e3:fd:db:62:64: 2a:2a:5c:b2:de:41:79:fc:31:85:dc:f2:61:1e:c3:82:ba:3e: f7:9c:17:ef:4c:14:a3:e8:1f:c4:79:cc:e6:c0:62:a2:48:ff: bd:c8:0a:24:2b:07:3b:0a:be:23:71:26:e5:44:c7:72:d6:05: 7c:de:4c:8d:67:55:3b:c4:ce:e0:9c:74:44:63:17:8b:af:77: 3d:b5:9f:fc:ef:1c:35:97:48:51:ef:ac:3b:b5:ca:35:a1:91: 9f:16:a5:ac:47:7d:1c:9e:5f:89:d6:e6:84:b4:19:73:9a:dc: 7f:84:04:09:be:d8:0d:63:51:4b:17:9d:78:fc:9a:50:3b:8a: 3c:15:45:9c:7d:00:05:79:1d:64:f2:de:ed:03:2b:0f:53:a5: 7c:66:7d:a5:e9:a8:a9:96:49:ed:7d:e8:30:d1:56:a1:85:fd: 4a:ee:b7:81 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7pT4yRCwYjpdjHrIje5KjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4 ZmI0YzQwHhcNMjYwMTAxMjIxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTQyZWE0N2ZkODNlODU1MjlmMzBkYmEwOWMwM2YyMjNlOWEwMzE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aqp5VI1pAkxflbqrtrN3vEz+5Ym D3/+0Z/7syUxigUe0Oe+89WgtC+lCfDplmWXpUzJ6Wgf41t8rJovTt3b/HIDhBRD X8qNLcDqJPBJWVtdrXvsDbyVwsVywEBx/Tc7f64wwPGahLVA5PnHfc3VsIN0Uk+j +aciW/RjSky0A4R5EK1jgTX66fnkyH5bRjZck4tP/MMO21VwGtldd+2arWniWvl5 dKASqA/dSJMxMFXhza+jgS8hjsCV6y4X9QYW/hHu8bHaM0N48KWSbEOnrAP4/hiQ c5QRVBnSm5PbRajeeSJJgTSAJJxhi7RiiBv9Tu0Ewn9xcIQNmBGk+lQvwQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFE5C6kf9g+hVKfMNugnAPyI+mgMVMB8GA1UdIwQY MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct ODcyYmEyZDlmNDRjLzEvVGtMcVJfMkQ2RlVwOHcyNkNjQV9JajZhQXhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALgrCAwQA WproAwQBWprsMA0GCSqGSIb3DQEBCwUAA4IBAQBeaV9BD3aGoAvDPuO1yuXgpRzI XpavX862vBm/pu2QgspmaBix5AKBqIHeR/YTU9zrq5sU0+osg/K8R8bVw8dcLMPB ebQwNcMYKzOGZD0dScvUQ5b74/3bYmQqKlyy3kF5/DGF3PJhHsOCuj73nBfvTBSj 6B/EeczmwGKiSP+9yAokKwc7Cr4jcSblRMdy1gV83kyNZ1U7xM7gnHREYxeLr3c9 tZ/87xw1l0hR76w7tco1oZGfFqWsR30cnl+J1uaEtBlzmtx/hAQJvtgNY1FLF514 /JpQO4o8FUWcfQAFeR1k8t7tAysPU6V8Zn2l6aiplkntfegw0Vahhf1K7reB -----END CERTIFICATE-----Generated at Mon Jan 26 10:23:35 2026 by rpki-client