This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/TLlV6jW863bNfhyrt15RgS7DF4k.roa File: TLlV6jW863bNfhyrt15RgS7DF4k.roa (raw, json) Hash identifier: kGMIhvDQxFzFfEL8ihPcdM+a2HFqV1ObKxrxWA65PvA= Subject key identifier: 4C:B9:55:EA:35:BC:EB:76:CD:7E:1C:AB:B7:5E:51:81:2E:C3:17:89 Certificate issuer: /CN=8069d9ffe048a70003f16f06e24d9bf2db85eb52 Certificate serial: 019B7C126A7278DCA85B7D16A6AC6E896FE7 Authority key identifier: 80:69:D9:FF:E0:48:A7:00:03:F1:6F:06:E2:4D:9B:F2:DB:85:EB:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/TLlV6jW863bNfhyrt15RgS7DF4k.roa Signing time: Fri 02 Jan 2026 00:19:00 +0000 ROA not before: Fri 02 Jan 2026 00:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208012 IP address blocks: 45.129.120.0/24 maxlen: 24 45.129.121.0/24 maxlen: 24 45.129.123.0/24 maxlen: 24 185.77.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:6a:72:78:dc:a8:5b:7d:16:a6:ac:6e:89:6f:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8069d9ffe048a70003f16f06e24d9bf2db85eb52 Validity Not Before: Jan 2 00:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4cb955ea35bceb76cd7e1cabb75e51812ec31789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3f:af:ac:85:c8:e3:47:34:48:bf:d4:74:1b: a9:8a:0b:cd:f0:b6:ca:6e:b8:92:ba:63:e6:a7:23: 82:67:4b:ef:e2:71:86:44:23:c8:dc:89:54:f2:35: 59:d3:4a:cb:e0:4a:25:74:1c:d9:25:ac:88:69:91: 47:e5:04:57:5f:42:d5:53:73:31:3f:f7:8e:bd:b8: 8a:bc:2c:86:8b:c1:b6:c7:14:27:c0:3d:88:1f:4c: ca:2f:a1:76:ec:4e:bb:0e:6a:f4:46:98:ed:04:8d: e9:d1:23:16:a9:6d:18:c9:84:9f:3f:45:0e:f4:10: d0:19:ea:d1:d6:b7:af:0e:18:63:2b:6d:bb:99:87: fc:32:cd:d2:28:52:ae:7c:23:57:84:71:d8:96:39: f2:a0:79:3b:c4:23:53:24:1e:fa:fe:3e:4f:76:89: c1:b9:d7:3d:79:9a:c4:16:5c:9b:2d:78:de:6a:68: 28:53:28:c6:54:e0:9a:f2:90:c6:4d:91:c1:78:e4: 31:04:32:dc:ff:a6:10:a3:18:51:4e:d8:90:d0:8e: 6e:b9:18:25:8c:3c:60:df:d5:d3:71:9e:5a:0b:35: 68:19:3d:5d:f2:75:5a:c0:0c:5b:07:e6:c0:d6:cb: ca:4f:8e:fd:6a:28:b7:f5:41:73:fd:f4:6f:10:62: ae:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B9:55:EA:35:BC:EB:76:CD:7E:1C:AB:B7:5E:51:81:2E:C3:17:89 X509v3 Authority Key Identifier: keyid:80:69:D9:FF:E0:48:A7:00:03:F1:6F:06:E2:4D:9B:F2:DB:85:EB:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/TLlV6jW863bNfhyrt15RgS7DF4k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.120.0/23 45.129.123.0/24 185.77.90.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:0a:5b:9b:8d:fe:57:bb:83:b9:2b:1e:fa:b2:61:bd:20:5d: 12:92:7d:f7:c4:76:1a:b6:5d:b7:19:8d:93:ac:a9:da:42:f0: 6e:76:b7:1d:d0:96:47:07:17:f4:58:35:f8:f7:33:bb:db:f7: 0f:30:5b:22:23:06:a1:4c:e6:48:92:b6:27:97:b2:e6:f3:14: 40:c4:a4:f4:30:d6:5c:a3:08:cc:bd:a9:bc:41:ef:11:32:70: af:f5:d7:bb:64:1d:c3:ee:05:d2:83:3c:34:cd:cc:fe:78:a3: f0:bc:29:98:4d:9e:b3:3a:7b:06:b4:fe:c3:b2:b5:ad:6a:96: 1e:56:6a:65:83:70:df:ba:24:b7:ce:86:aa:2f:68:a1:81:4b: fa:78:fa:55:1a:17:99:9d:01:0a:23:b6:09:3a:52:6b:d9:09: 70:41:e1:6b:a3:75:29:57:fc:a4:06:77:00:2b:c8:cb:e6:da: 7c:4c:34:9c:9d:08:db:31:3c:89:e8:67:92:4b:e9:46:90:f2: 00:c0:4a:71:1f:d5:a5:36:0e:85:a4:b3:7e:38:06:66:7b:3d: 60:6d:46:17:96:f4:62:24:9d:a0:4b:d1:17:ab:db:2d:0f:64: c2:52:e8:1d:5e:10:e4:c9:7f:58:02:70:56:42:0b:83:3d:91: aa:54:91:e0 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8EmpyeNyoW30WpqxuiW/nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwNjlkOWZmZTA0OGE3MDAwM2YxNmYwNmUyNGQ5YmYyZGI4 NWViNTIwHhcNMjYwMTAyMDAxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Y2I5NTVlYTM1YmNlYjc2Y2Q3ZTFjYWJiNzVlNTE4MTJlYzMxNzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwj+vrIXI40c0SL/UdBupigvN8LbK briSumPmpyOCZ0vv4nGGRCPI3IlU8jVZ00rL4EoldBzZJayIaZFH5QRXX0LVU3Mx P/eOvbiKvCyGi8G2xxQnwD2IH0zKL6F27E67Dmr0RpjtBI3p0SMWqW0YyYSfP0UO 9BDQGerR1revDhhjK227mYf8Ms3SKFKufCNXhHHYljnyoHk7xCNTJB76/j5PdonB udc9eZrEFlybLXjeamgoUyjGVOCa8pDGTZHBeOQxBDLc/6YQoxhRTtiQ0I5uuRgl jDxg39XTcZ5aCzVoGT1d8nVawAxbB+bA1svKT479aii39UFz/fRvEGKu5wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEy5Veo1vOt2zX4cq7deUYEuwxeJMB8GA1UdIwQY MBaAFIBp2f/gSKcAA/FvBuJNm/LbhetSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0duWl8tQklwd0FEOFc4RzRrMmI4dHVGNjFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9lNjQxNDgtNGM4Yy00ZTg0LTkyNWIt ZTAyMmUzMDA5YTcxLzEvVExsVjZqVzg2M2JOZmh5cnQxNVJnUzdERjRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9lNjQxNDgtNGM4Yy00ZTg0LTkyNWItZTAyMmUzMDA5YTcx LzEvZ0duWl8tQklwd0FEOFc4RzRrMmI4dHVGNjFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBLYF4AwQA LYF7AwQAuU1aMA0GCSqGSIb3DQEBCwUAA4IBAQAMClubjf5Xu4O5Kx76smG9IF0S kn33xHYatl23GY2TrKnaQvBudrcd0JZHBxf0WDX49zO72/cPMFsiIwahTOZIkrYn l7Lm8xRAxKT0MNZcowjMvam8Qe8RMnCv9de7ZB3D7gXSgzw0zcz+eKPwvCmYTZ6z OnsGtP7DsrWtapYeVmplg3DfuiS3zoaqL2ihgUv6ePpVGheZnQEKI7YJOlJr2Qlw QeFro3UpV/ykBncAK8jL5tp8TDScnQjbMTyJ6GeSS+lGkPIAwEpxH9WlNg6FpLN+ OAZmez1gbUYXlvRiJJ2gS9EXq9stD2TCUugdXhDkyX9YAnBWQguDPZGqVJHg -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:47 2026 by rpki-client