This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/TkbZnDKLHNckDUZ_FatGjJfWGJU.roa File: TkbZnDKLHNckDUZ_FatGjJfWGJU.roa (raw, json) Hash identifier: YfQNwc6PFqEuY9BfnEymm61veAIdey4yo8hota2ukro= Subject key identifier: 4E:46:D9:9C:32:8B:1C:D7:24:0D:46:7F:15:AB:46:8C:97:D6:18:95 Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B76EAD1FE4C9D0F95D989168519C94FB9 Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/TkbZnDKLHNckDUZ_FatGjJfWGJU.roa Signing time: Thu 01 Jan 2026 00:17:39 +0000 ROA not before: Thu 01 Jan 2026 00:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209043 IP address blocks: 5.180.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:d1:fe:4c:9d:0f:95:d9:89:16:85:19:c9:4f:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Jan 1 00:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e46d99c328b1cd7240d467f15ab468c97d61895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:de:33:be:ba:36:3e:d9:7b:4e:81:07:51:1a: b7:d1:18:ac:ab:63:39:5d:00:0f:8d:2d:d0:f5:6f: 1e:40:bb:f9:67:fb:3a:b8:5e:a3:57:c5:18:fd:c8: c7:a7:6b:ed:19:9c:c4:44:d3:20:3a:4c:9c:84:7b: 91:5e:d0:1d:17:7b:cc:f0:df:dd:74:8a:c3:e9:19: 06:00:d0:22:7b:39:2c:98:98:45:73:8f:f0:5b:a5: 4a:00:dc:e3:93:1f:cc:90:fc:8d:fe:fd:cf:fb:d0: 25:ad:96:3d:ca:c9:af:95:cf:f6:8e:06:20:06:c9: 65:c1:05:8f:cf:c2:f9:11:56:cb:81:12:5c:94:fc: fa:44:c6:6a:a5:ba:6d:cd:1a:e9:43:4e:7e:68:6b: 2d:ba:1f:8c:e7:4b:66:a8:ec:fb:77:2d:fc:e0:92: dc:08:18:10:05:fb:6d:83:7d:78:e0:85:ab:d3:6a: 5f:28:e8:37:d3:45:2c:56:9f:99:c5:95:d9:2b:93: 2a:6c:f5:2b:5c:a9:35:4e:7e:75:33:e9:6a:39:0c: 90:e9:a4:48:72:4d:1f:d9:5e:b0:52:1b:7b:9b:3b: 7c:f5:87:ba:6a:69:ee:e9:a7:34:58:f8:f5:ba:66: 77:a6:56:df:95:30:cb:44:21:bf:fa:a0:62:03:b7: 92:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:46:D9:9C:32:8B:1C:D7:24:0D:46:7F:15:AB:46:8C:97:D6:18:95 X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/TkbZnDKLHNckDUZ_FatGjJfWGJU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.235.0/24 Signature Algorithm: sha256WithRSAEncryption 26:aa:6b:1d:e2:46:5d:94:81:8a:af:30:13:1f:67:19:86:76: 76:e5:b1:cf:3c:9a:2a:f1:0a:63:87:0a:d9:9d:63:e4:8f:4c: 21:76:b4:42:f5:08:4d:34:b3:42:3e:4d:e1:38:a4:de:e7:96: 3b:19:07:9d:6c:a5:6e:3b:c6:f9:7a:22:88:f0:92:52:ae:51: 6d:0f:a4:c2:a0:93:64:32:34:e3:6d:8f:eb:8e:4e:88:5a:ff: 46:8e:8b:8d:30:a7:8c:47:24:95:87:b5:49:ed:d0:17:1d:6e: 82:c2:6b:12:92:05:e8:08:e1:ad:9e:f1:87:24:dd:23:59:fe: dd:c5:f4:a6:52:e0:e6:0a:0e:3f:eb:24:b3:66:0e:d3:93:30: 2b:7f:ce:ca:79:69:6b:13:c4:d2:64:62:22:ed:c2:f4:56:9f: 66:dd:b2:6b:98:77:f3:b7:3c:f5:a0:b9:bb:af:3e:dd:3f:8a: f7:de:94:38:be:59:75:ae:6d:0b:7c:f8:bc:b6:16:c5:35:a5: 2b:6e:dd:29:00:45:f2:93:33:c3:df:95:66:68:4e:a8:13:18: 1e:2f:72:8a:05:ae:46:2b:26:c0:42:51:3f:59:38:2b:36:f0: 7a:38:f9:95:6b:cd:4e:6f:31:4d:d8:d9:28:bf:ac:11:c7:d5: e6:31:e4:2a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26tH+TJ0PldmJFoUZyU+5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjYwMTAxMDAxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTQ2ZDk5YzMyOGIxY2Q3MjQwZDQ2N2YxNWFiNDY4Yzk3ZDYxODk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz94zvro2Ptl7ToEHURq30Risq2M5 XQAPjS3Q9W8eQLv5Z/s6uF6jV8UY/cjHp2vtGZzERNMgOkychHuRXtAdF3vM8N/d dIrD6RkGANAiezksmJhFc4/wW6VKANzjkx/MkPyN/v3P+9AlrZY9ysmvlc/2jgYg BsllwQWPz8L5EVbLgRJclPz6RMZqpbptzRrpQ05+aGstuh+M50tmqOz7dy384JLc CBgQBfttg3144IWr02pfKOg300UsVp+ZxZXZK5MqbPUrXKk1Tn51M+lqOQyQ6aRI ck0f2V6wUht7mzt89Ye6amnu6ac0WPj1umZ3plbflTDLRCG/+qBiA7eSywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE5G2ZwyixzXJA1GfxWrRoyX1hiVMB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvVGtiWm5ES0xITmNrRFVaX0ZhdEdqSmZXR0pVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbTrMA0G CSqGSIb3DQEBCwUAA4IBAQAmqmsd4kZdlIGKrzATH2cZhnZ25bHPPJoq8QpjhwrZ nWPkj0whdrRC9QhNNLNCPk3hOKTe55Y7GQedbKVuO8b5eiKI8JJSrlFtD6TCoJNk MjTjbY/rjk6IWv9GjouNMKeMRySVh7VJ7dAXHW6CwmsSkgXoCOGtnvGHJN0jWf7d xfSmUuDmCg4/6ySzZg7TkzArf87KeWlrE8TSZGIi7cL0Vp9m3bJrmHfztzz1oLm7 rz7dP4r33pQ4vll1rm0LfPi8thbFNaUrbt0pAEXykzPD35VmaE6oExgeL3KKBa5G KybAQlE/WTgrNvB6OPmVa81ObzFN2Nkov6wRx9XmMeQq -----END CERTIFICATE-----Generated at Mon Jan 19 23:20:56 2026 by rpki-client