This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tPuaKKcbH3KM9HU849VehbRFKAw.roa File: tPuaKKcbH3KM9HU849VehbRFKAw.roa (raw, json) Hash identifier: 0CzXIb1/Va8wbh9IZ26FQRzeiKSWMOkNwyxkQfBpKoQ= Subject key identifier: B4:FB:9A:28:A7:1B:1F:72:8C:F4:75:3C:E3:D5:5E:85:B4:45:28:0C Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Certificate serial: 019B7758DDC72B9F7ACFB9706197721D339B Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tPuaKKcbH3KM9HU849VehbRFKAw.roa Signing time: Thu 01 Jan 2026 02:17:50 +0000 ROA not before: Thu 01 Jan 2026 02:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12586 IP address blocks: 5.1.81.142/32 maxlen: 32 178.251.228.102/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:dd:c7:2b:9f:7a:cf:b9:70:61:97:72:1d:33:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Validity Not Before: Jan 1 02:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4fb9a28a71b1f728cf4753ce3d55e85b445280c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c8:3c:51:5b:99:c5:20:04:1c:c6:b3:d6:e8: 13:b2:8a:31:39:97:48:6d:a7:a4:68:2b:68:98:b0: 87:13:06:2c:32:c0:09:57:35:64:cb:c6:e1:c2:2b: fd:5f:ef:43:72:da:b0:6e:88:63:2a:21:a4:96:fa: ae:6f:21:91:ab:4d:82:0f:4b:16:89:75:7a:23:ec: 65:c0:b7:19:6d:d9:73:08:38:27:c4:b4:07:f8:c1: 8a:4a:21:a8:10:01:ea:0f:8d:2f:88:db:0c:6c:68: 91:03:4c:a2:a5:25:fc:90:05:2c:46:ae:5a:50:d6: 73:07:18:5f:aa:69:a9:81:d2:9e:5c:22:68:07:67: bf:c0:05:a2:09:28:ce:77:63:af:a1:a3:c0:23:a9: fd:21:18:1d:56:79:ce:bd:89:bd:4c:4e:b9:16:eb: 8a:5a:30:c7:58:73:a6:9a:7a:59:4d:15:3b:53:50: 42:bb:eb:c9:12:98:d5:69:af:7f:f0:60:a5:3e:e8: 36:9c:98:c3:78:a0:06:77:aa:7f:13:08:44:1a:56: c3:bd:ce:10:e6:ad:b1:b9:2d:0c:15:56:16:6a:d4: 71:f8:47:8f:2c:be:73:5b:25:9f:2b:1b:30:6e:4b: 28:44:b2:6f:99:28:b5:e1:d4:98:29:b9:d5:d2:60: b0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:FB:9A:28:A7:1B:1F:72:8C:F4:75:3C:E3:D5:5E:85:B4:45:28:0C X509v3 Authority Key Identifier: keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tPuaKKcbH3KM9HU849VehbRFKAw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.1.81.142/32 178.251.228.102/32 Signature Algorithm: sha256WithRSAEncryption 2d:7c:a2:b6:9d:10:00:db:65:8a:db:a3:95:c6:ef:e1:fe:40: 29:56:f0:25:78:2f:b0:98:58:51:13:47:17:47:26:ff:06:60: ec:cc:50:a8:26:17:cc:21:a8:5a:7f:49:6b:c0:36:e2:bf:1d: 96:20:e3:29:72:3a:26:24:23:df:4e:79:1d:18:17:ed:0b:2e: 12:8d:9e:c2:56:be:f1:3a:7a:e8:c1:64:80:f6:ce:c9:81:67: ff:d4:e1:c9:a0:a7:d2:03:e7:d6:ef:e4:a4:93:ca:57:ea:24: b0:eb:3a:19:a3:48:be:44:33:f4:ff:4c:dd:f7:38:48:5d:08: a4:75:e6:86:9b:d8:f4:8a:7d:67:a3:13:e6:56:27:61:bd:3e: e3:f9:47:0e:7c:7c:3c:93:2b:83:ba:20:10:90:d4:2e:d7:1b: 96:42:ba:31:05:4c:ae:9b:79:d3:72:18:14:81:2c:6d:9b:a2: 46:32:ff:54:fe:7e:bb:bf:98:c4:e0:53:81:18:e4:d4:95:f6: 81:2a:76:00:d6:90:f0:87:c5:ec:d1:fc:37:84:d6:30:13:d3: f9:d8:d1:1c:12:d7:bf:5c:8a:ef:a7:5b:b2:1d:27:09:2a:61: b7:1c:23:57:e5:78:61:4e:1e:d2:4c:0d:d1:13:1b:3c:1f:13: 4c:29:fd:75 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3WN3HK596z7lwYZdyHTObMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi MGZhZGIwHhcNMjYwMTAxMDIxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGZiOWEyOGE3MWIxZjcyOGNmNDc1M2NlM2Q1NWU4NWI0NDUyODBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sg8UVuZxSAEHMaz1ugTsooxOZdI baekaCtomLCHEwYsMsAJVzVky8bhwiv9X+9DctqwbohjKiGklvqubyGRq02CD0sW iXV6I+xlwLcZbdlzCDgnxLQH+MGKSiGoEAHqD40viNsMbGiRA0yipSX8kAUsRq5a UNZzBxhfqmmpgdKeXCJoB2e/wAWiCSjOd2OvoaPAI6n9IRgdVnnOvYm9TE65FuuK WjDHWHOmmnpZTRU7U1BCu+vJEpjVaa9/8GClPug2nJjDeKAGd6p/EwhEGlbDvc4Q 5q2xuS0MFVYWatRx+EePLL5zWyWfKxswbksoRLJvmSi14dSYKbnV0mCweQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFLT7miinGx9yjPR1POPVXoW0RSgMMB8GA1UdIwQY MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt NThiMzhmNWFjODBiLzEvdFB1YUtLY2JIM0tNOUhVODQ5VmVoYlJGS0F3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUABQFRjgMF ALL75GYwDQYJKoZIhvcNAQELBQADggEBAC18oradEADbZYrbo5XG7+H+QClW8CV4 L7CYWFETRxdHJv8GYOzMUKgmF8whqFp/SWvANuK/HZYg4ylyOiYkI99OeR0YF+0L LhKNnsJWvvE6eujBZID2zsmBZ//U4cmgp9ID59bv5KSTylfqJLDrOhmjSL5EM/T/ TN33OEhdCKR15oab2PSKfWejE+ZWJ2G9PuP5Rw58fDyTK4O6IBCQ1C7XG5ZCujEF TK6bedNyGBSBLG2bokYy/1T+fru/mMTgU4EY5NSV9oEqdgDWkPCHxezR/DeE1jAT 0/nY0RwS179ciu+nW7IdJwkqYbccI1fleGFOHtJMDdETGzwfE0wp/XU= -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:07 2026 by rpki-client