This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/tZk_CaKCryAvJRReN7aPc9CJl5Q.roa File: tZk_CaKCryAvJRReN7aPc9CJl5Q.roa (raw, json) Hash identifier: GDF5SYSr5M1uY12BBc2vpgU4RwEGW3L9n697ONqnZ8U= Subject key identifier: B5:99:3F:09:A2:82:AF:20:2F:25:14:5E:37:B6:8F:73:D0:89:97:94 Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a Certificate serial: 019B7BA3263A1A9E72C837F0A11C4422CF02 Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/tZk_CaKCryAvJRReN7aPc9CJl5Q.roa Signing time: Thu 01 Jan 2026 22:17:28 +0000 ROA not before: Thu 01 Jan 2026 22:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24881 IP address blocks: 46.162.0.0/18 maxlen: 24 193.111.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:26:3a:1a:9e:72:c8:37:f0:a1:1c:44:22:cf:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a Validity Not Before: Jan 1 22:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5993f09a282af202f25145e37b68f73d0899794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:38:10:b5:97:fb:ab:2f:52:03:fb:c0:b9:c1: e8:54:06:0b:3d:b2:90:cc:cb:61:e7:78:a9:f6:36: 2d:0f:aa:29:f2:27:57:d6:22:9d:c2:4e:d1:e6:0f: 18:d6:6a:06:95:cf:90:d9:f9:63:01:ae:f0:83:ba: f8:a6:e2:1c:c1:29:fa:61:cb:f4:f4:ea:af:cf:b2: c0:7e:7d:60:98:06:ac:9f:2a:cb:78:84:30:9b:fc: 8c:79:a8:06:44:d1:02:d9:e4:d9:f2:c8:b5:55:7f: 6d:ce:49:b5:28:fe:9c:66:5d:7a:6c:f4:10:6e:85: 32:4d:2b:6c:0c:2e:97:fe:85:7c:f7:e9:df:03:83: 31:66:c8:0d:59:95:02:c8:75:61:96:16:b3:7b:00: 63:fc:72:e4:54:1d:cd:4a:0a:16:e0:6f:cc:7a:99: 67:33:69:22:c6:15:04:e0:d4:37:39:d7:16:0b:a1: 1b:a0:dd:df:d1:b0:c9:1f:1d:2b:d2:00:c0:f2:28: d8:a4:93:ae:cd:44:cd:e8:b8:3d:a8:2e:8b:aa:81: 1a:d5:1a:67:ae:f7:a4:b5:fd:41:d5:54:99:d9:cd: e8:34:50:c3:28:a4:d4:73:b9:97:26:ce:62:28:aa: e9:d4:64:ae:44:d4:86:57:99:52:66:34:37:36:23: 8f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:99:3F:09:A2:82:AF:20:2F:25:14:5E:37:B6:8F:73:D0:89:97:94 X509v3 Authority Key Identifier: keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/tZk_CaKCryAvJRReN7aPc9CJl5Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.162.0.0/18 193.111.156.0/22 Signature Algorithm: sha256WithRSAEncryption 33:46:83:75:ee:ee:80:55:bf:85:df:96:af:f2:a8:1b:36:86: b7:41:02:76:f1:53:a7:9e:63:cf:3c:c0:d4:6c:e0:33:25:24: cf:d6:23:79:0e:28:ce:d1:ff:7b:85:3d:98:25:d3:94:88:65: 43:c1:0e:af:32:66:6e:b5:00:0c:30:42:0b:7a:42:05:b0:57: 83:ac:ca:a5:81:b4:ee:4e:da:b2:62:12:85:06:78:a1:af:d1: 60:55:6a:22:0b:5f:fa:08:c6:0d:dc:ee:b8:26:55:c6:42:5d: 8a:b4:81:5c:16:27:5a:a9:00:5e:e5:74:c9:5d:54:5b:4c:58: 49:c2:52:04:7b:c2:fc:22:a4:5e:b0:33:b2:32:5f:ee:ed:36: 6f:7e:e2:b3:dd:c4:9f:18:83:1a:b1:3e:bb:7f:6d:8e:6b:05: 68:6b:e4:3f:35:4f:13:b7:5e:62:43:5b:0a:10:83:06:77:9b: 12:16:19:f2:ff:db:b4:e5:1b:b5:80:61:0c:b0:c3:51:11:20: d5:8f:71:80:08:97:8a:96:1b:d6:8f:5b:65:b2:85:34:1a:7b: 22:5b:9e:e9:94:06:e6:f0:ab:ea:9f:8d:b9:56:5f:5e:82:79: 8f:50:27:11:42:0a:7a:4b:46:8c:8d:41:f9:1d:61:d2:ee:98: ac:b1:90:fc -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7oyY6Gp5yyDfwoRxEIs8CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NDJmZDNmMzM2Y2U2ZWU5OWU2MWZhOTc3MDQ5YTZjNmE5 MjNlNGEwHhcNMjYwMTAxMjIxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTk5M2YwOWEyODJhZjIwMmYyNTE0NWUzN2I2OGY3M2QwODk5Nzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszgQtZf7qy9SA/vAucHoVAYLPbKQ zMth53ip9jYtD6op8idX1iKdwk7R5g8Y1moGlc+Q2fljAa7wg7r4puIcwSn6Ycv0 9Oqvz7LAfn1gmAasnyrLeIQwm/yMeagGRNEC2eTZ8si1VX9tzkm1KP6cZl16bPQQ boUyTStsDC6X/oV89+nfA4MxZsgNWZUCyHVhlhazewBj/HLkVB3NSgoW4G/Mepln M2kixhUE4NQ3OdcWC6EboN3f0bDJHx0r0gDA8ijYpJOuzUTN6Lg9qC6LqoEa1Rpn rvektf1B1VSZ2c3oNFDDKKTUc7mXJs5iKKrp1GSuRNSGV5lSZjQ3NiOPCwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLWZPwmigq8gLyUUXje2j3PQiZeUMB8GA1UdIwQY MBaAFHZC/T8zbObumeYfqXcEmmxqkj5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAt NjJjNDNhYzdjMDJmLzEvdFprX0NhS0NyeUF2SlJSZU43YVBjOUNKbDVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAtNjJjNDNhYzdjMDJm LzEvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQGLqIAAwQC wW+cMA0GCSqGSIb3DQEBCwUAA4IBAQAzRoN17u6AVb+F35av8qgbNoa3QQJ28VOn nmPPPMDUbOAzJSTP1iN5DijO0f97hT2YJdOUiGVDwQ6vMmZutQAMMEILekIFsFeD rMqlgbTuTtqyYhKFBnihr9FgVWoiC1/6CMYN3O64JlXGQl2KtIFcFidaqQBe5XTJ XVRbTFhJwlIEe8L8IqResDOyMl/u7TZvfuKz3cSfGIMasT67f22OawVoa+Q/NU8T t15iQ1sKEIMGd5sSFhny/9u05Ru1gGEMsMNRESDVj3GACJeKlhvWj1tlsoU0Gnsi W57plAbm8Kvqn425Vl9egnmPUCcRQgp6S0aMjUH5HWHS7pissZD8 -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:24 2026 by rpki-client