This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/TADOP4N7PG-OJ3Eny0BgYqBnOcM.roa File: TADOP4N7PG-OJ3Eny0BgYqBnOcM.roa (raw, json) Hash identifier: oYZemQHRZ8vIS7M1TpszhzND0AuAgoFTUg+tIcZgsRY= Subject key identifier: 4C:00:CE:3F:83:7B:3C:6F:8E:27:71:27:CB:40:60:62:A0:67:39:C3 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C138B8D995D2C33D4B53F6981144853 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/TADOP4N7PG-OJ3Eny0BgYqBnOcM.roa Signing time: Fri 02 Jan 2026 00:20:14 +0000 ROA not before: Fri 02 Jan 2026 00:20:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207536 IP address blocks: 185.228.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:8b:8d:99:5d:2c:33:d4:b5:3f:69:81:14:48:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c00ce3f837b3c6f8e277127cb406062a06739c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:90:a1:19:6f:b0:9b:4d:43:c5:ea:1f:02:d6: c3:ce:ee:a2:3f:14:5d:7d:73:0a:04:7e:d8:02:2f: 22:1a:6d:98:5a:c5:0d:c4:19:ce:93:a1:7a:88:62: 14:d6:33:a2:c5:13:a1:78:a1:79:c9:00:d6:a1:27: f7:35:a2:59:45:7f:c0:cb:71:b0:21:5d:c8:46:42: c2:07:95:67:22:65:5e:fa:3c:94:59:b9:0c:af:72: ad:24:f5:da:d8:16:b4:db:8e:79:e5:b8:5b:d1:8b: 1c:c1:40:74:17:9b:00:77:42:54:3d:eb:e5:21:4d: f4:91:1a:b5:2c:39:10:8b:77:bf:a4:b4:c6:9f:3b: a2:16:b5:00:a9:c5:63:bb:94:9b:cb:74:76:32:df: 17:c5:cd:67:c1:3a:39:e3:f5:ef:04:11:c7:6a:bd: c9:25:6a:31:1c:f1:d9:c8:aa:58:48:24:63:48:2a: d8:87:f0:ad:d8:e3:bc:c0:f2:bd:7f:37:45:5d:b8: 0a:c5:3a:7e:3d:c7:79:fe:ea:ae:23:65:4f:63:c0: d7:97:a8:3f:06:a5:19:14:b1:18:74:3d:03:1c:e1: 11:b7:dc:23:9c:ea:a5:46:22:39:4b:b5:be:7b:3a: c9:ba:40:87:e3:96:17:52:72:41:50:b8:0a:bc:d8: 3e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:00:CE:3F:83:7B:3C:6F:8E:27:71:27:CB:40:60:62:A0:67:39:C3 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/TADOP4N7PG-OJ3Eny0BgYqBnOcM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.228.75.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:50:01:e9:d7:fa:7b:a9:7d:06:d6:f7:d5:ee:dd:56:88:a7: 0b:e7:6a:9c:c1:1d:7e:a7:0b:8a:f4:b0:ef:a1:45:8d:3a:12: 82:48:3d:71:e3:eb:3c:c0:d0:27:b9:7e:fa:47:39:c7:08:19: c8:f9:f3:cf:07:46:cc:d8:b3:fa:3f:38:10:91:2d:0c:77:d1: b4:21:9f:11:bf:be:ac:8c:1b:b8:14:94:83:64:f2:38:c3:11: f1:0a:e6:27:dd:31:81:f1:85:26:78:ee:4f:9b:76:0b:47:f2: 4e:1b:ee:92:12:61:8e:a7:a1:46:25:38:ce:7a:9c:67:79:2e: 67:a7:a4:9d:88:16:b6:7c:17:cb:b1:78:95:f5:a7:a0:d4:60: ef:bf:71:98:7d:5d:8d:44:33:e1:2e:ca:a4:d4:9b:42:f3:fd: d5:86:c0:9f:9f:94:f6:83:92:e8:d6:45:a7:38:47:24:c1:cb: a2:96:cf:92:19:85:b3:29:d5:f1:d1:44:3e:3b:5a:0b:93:2b: 0e:dd:46:77:8c:d2:b3:61:14:5e:27:6b:33:45:36:f5:14:d6: e1:a6:42:d0:3a:b6:8a:07:15:ec:00:cc:bc:1f:f9:d6:34:89: be:9c:f8:f8:1f:91:40:32:dc:f6:d5:a3:48:17:c1:84:21:44: 4b:07:36:7c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E4uNmV0sM9S1P2mBFEhTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzAwY2UzZjgzN2IzYzZmOGUyNzcxMjdjYjQwNjA2MmEwNjczOWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJChGW+wm01DxeofAtbDzu6iPxRd fXMKBH7YAi8iGm2YWsUNxBnOk6F6iGIU1jOixROheKF5yQDWoSf3NaJZRX/Ay3Gw IV3IRkLCB5VnImVe+jyUWbkMr3KtJPXa2Ba024555bhb0YscwUB0F5sAd0JUPevl IU30kRq1LDkQi3e/pLTGnzuiFrUAqcVju5Sby3R2Mt8Xxc1nwTo54/XvBBHHar3J JWoxHPHZyKpYSCRjSCrYh/Ct2OO8wPK9fzdFXbgKxTp+Pcd5/uquI2VPY8DXl6g/ BqUZFLEYdD0DHOERt9wjnOqlRiI5S7W+ezrJukCH45YXUnJBULgKvNg+oQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEwAzj+DezxvjidxJ8tAYGKgZznDMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvVEFET1A0TjdQRy1PSjNFbnkwQmdZcUJuT2NNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueRLMA0G CSqGSIb3DQEBCwUAA4IBAQAMUAHp1/p7qX0G1vfV7t1WiKcL52qcwR1+pwuK9LDv oUWNOhKCSD1x4+s8wNAnuX76RznHCBnI+fPPB0bM2LP6PzgQkS0Md9G0IZ8Rv76s jBu4FJSDZPI4wxHxCuYn3TGB8YUmeO5Pm3YLR/JOG+6SEmGOp6FGJTjOepxneS5n p6SdiBa2fBfLsXiV9aeg1GDvv3GYfV2NRDPhLsqk1JtC8/3VhsCfn5T2g5Lo1kWn OEckwcuils+SGYWzKdXx0UQ+O1oLkysO3UZ3jNKzYRReJ2szRTb1FNbhpkLQOraK BxXsAMy8H/nWNIm+nPj4H5FAMtz21aNIF8GEIURLBzZ8 -----END CERTIFICATE-----Generated at Fri Jan 2 23:53:14 2026 by rpki-client