This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/tgjM50ZKGP4qPI5mmTpRBmDenEE.roa File: tgjM50ZKGP4qPI5mmTpRBmDenEE.roa (raw, json) Hash identifier: RlkNfbpEPulXLuet/buo1REohnn0CiNdUQRm8qrkrJU= Subject key identifier: B6:08:CC:E7:46:4A:18:FE:2A:3C:8E:66:99:3A:51:06:60:DE:9C:41 Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38 Certificate serial: 019B7C12DD576A6EE2F99DF5B4BE00CB91C9 Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/tgjM50ZKGP4qPI5mmTpRBmDenEE.roa Signing time: Fri 02 Jan 2026 00:19:29 +0000 ROA not before: Fri 02 Jan 2026 00:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210538 IP address blocks: 185.255.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:dd:57:6a:6e:e2:f9:9d:f5:b4:be:00:cb:91:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38 Validity Not Before: Jan 2 00:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b608cce7464a18fe2a3c8e66993a510660de9c41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cc:87:8c:01:ac:58:d2:a0:0e:df:1d:f4:5c: 93:8b:63:d6:ce:ac:1d:3b:e9:22:71:0c:30:25:2d: 2a:41:5b:5f:d9:a6:b5:24:6c:2e:b0:4f:cf:a9:4d: de:78:70:3e:89:39:e3:02:48:7b:e5:5d:40:a9:73: d7:3f:14:7d:2c:31:f4:ae:db:b8:29:7a:7f:0b:53: a7:8a:a2:45:a3:3a:94:30:24:9d:92:b2:31:b4:66: 91:73:17:49:aa:26:d3:05:4b:90:0c:51:31:ea:ca: 28:b1:a7:e7:07:0f:aa:9e:d0:74:af:33:5e:ba:18: 02:b6:68:96:fc:4e:d6:c5:4e:a1:a8:81:d8:24:78: 49:9a:6b:9b:86:74:4c:43:9a:5b:af:d5:d4:c0:99: 72:9b:f4:71:f0:c7:65:bb:84:8a:2e:21:77:f5:af: b4:26:3f:09:53:cb:1d:bd:de:92:e9:a5:3d:ab:0d: 79:2e:c0:9b:3b:91:31:da:e0:82:fe:7d:90:06:29: 6b:8b:44:5c:ed:4e:04:9b:bc:71:93:4e:58:6a:9c: 8f:c4:71:c2:02:0d:2b:35:83:ed:a8:51:3f:e8:58: 1b:f7:f7:e0:e6:25:07:93:4e:cc:e6:54:19:9d:a5: 21:f0:36:1b:b6:ae:71:bd:6b:c0:23:61:ca:54:68: 5f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:08:CC:E7:46:4A:18:FE:2A:3C:8E:66:99:3A:51:06:60:DE:9C:41 X509v3 Authority Key Identifier: keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/tgjM50ZKGP4qPI5mmTpRBmDenEE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.255.4.0/24 Signature Algorithm: sha256WithRSAEncryption 31:17:1f:65:e6:37:30:4a:a1:b9:8e:13:0a:b6:de:8e:32:1a: 81:c0:0b:08:a0:42:54:f3:1c:6b:0c:0d:22:eb:77:0b:ba:67: ca:96:3f:96:2c:3a:05:ad:72:54:bc:c4:c1:1e:b6:35:2b:2d: c0:05:53:f9:42:7b:a1:1b:d7:6c:8b:40:40:fa:92:2e:e0:f6: fe:d5:5f:69:65:4c:c4:e4:cf:6f:1a:1f:fa:5f:31:8f:f2:ef: 72:ef:42:2a:14:77:ee:a3:99:74:86:19:41:fb:30:be:08:d2: 14:1d:a5:51:85:f7:e8:45:0d:02:21:64:b7:b1:f2:f4:b1:af: 74:f7:f0:a4:ca:ae:a6:75:bd:2e:17:63:47:33:fb:b5:21:fb: 15:8e:b5:ad:bc:dd:2d:23:51:88:f8:1a:fc:0d:85:4c:c6:ed: a5:56:8b:ef:78:ce:ae:92:10:f3:3a:2e:74:15:e1:00:93:75: 0c:a3:12:5e:9f:a3:32:5f:d0:ae:c1:34:af:81:fc:62:fe:27: ff:26:e1:27:39:a4:5c:05:35:62:09:62:4e:d6:ed:db:52:03: 55:56:2d:de:bc:bd:1e:f1:9b:74:08:8d:6c:1c:69:80:fa:26: 7b:6a:ae:fd:1f:55:9d:80:26:d5:54:8c:97:2f:6a:3b:34:5b: 3f:56:f0:0f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Et1Xam7i+Z31tL4Ay5HJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmZjI0NzI2ZGYzZTc3ZjZmNGM4ZTA0MzY2MTNiMzUxMTBl ZWFmMzgwHhcNMjYwMTAyMDAxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjA4Y2NlNzQ2NGExOGZlMmEzYzhlNjY5OTNhNTEwNjYwZGU5YzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsyHjAGsWNKgDt8d9FyTi2PWzqwd O+kicQwwJS0qQVtf2aa1JGwusE/PqU3eeHA+iTnjAkh75V1AqXPXPxR9LDH0rtu4 KXp/C1OniqJFozqUMCSdkrIxtGaRcxdJqibTBUuQDFEx6soosafnBw+qntB0rzNe uhgCtmiW/E7WxU6hqIHYJHhJmmubhnRMQ5pbr9XUwJlym/Rx8Mdlu4SKLiF39a+0 Jj8JU8sdvd6S6aU9qw15LsCbO5Ex2uCC/n2QBilri0Rc7U4Em7xxk05YapyPxHHC Ag0rNYPtqFE/6Fgb9/fg5iUHk07M5lQZnaUh8DYbtq5xvWvAI2HKVGhfvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLYIzOdGShj+KjyOZpk6UQZg3pxBMB8GA1UdIwQY MBaAFN/yRybfPnf29MjgQ2YTs1EQ7q84MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzct NjJiYjZkNjNlNTlkLzEvdGdqTTUwWktHUDRxUEk1bW1UcFJCbURlbkVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzctNjJiYjZkNjNlNTlk LzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf8EMA0G CSqGSIb3DQEBCwUAA4IBAQAxFx9l5jcwSqG5jhMKtt6OMhqBwAsIoEJU8xxrDA0i 63cLumfKlj+WLDoFrXJUvMTBHrY1Ky3ABVP5QnuhG9dsi0BA+pIu4Pb+1V9pZUzE 5M9vGh/6XzGP8u9y70IqFHfuo5l0hhlB+zC+CNIUHaVRhffoRQ0CIWS3sfL0sa90 9/Ckyq6mdb0uF2NHM/u1IfsVjrWtvN0tI1GI+Br8DYVMxu2lVovveM6ukhDzOi50 FeEAk3UMoxJen6MyX9CuwTSvgfxi/if/JuEnOaRcBTViCWJO1u3bUgNVVi3evL0e 8Zt0CI1sHGmA+iZ7aq79H1WdgCbVVIyXL2o7NFs/VvAP -----END CERTIFICATE-----Generated at Mon Jan 19 21:55:53 2026 by rpki-client