This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/TehJaUKE7-UYVJg4qzcGnHF4gEE.roa File: TehJaUKE7-UYVJg4qzcGnHF4gEE.roa (raw, json) Hash identifier: g9yiDNMzuqT4Xury4y9vb4TVbFovThME/EkaBOlvwI4= Subject key identifier: 4D:E8:49:69:42:84:EF:E5:18:54:98:38:AB:37:06:9C:71:78:80:41 Certificate issuer: /CN=10071dab168e8e53e3cd7df5db8e0f04242e9086 Certificate serial: 019B7C809B9FAE855E4923E19AE3AEA44142 Authority key identifier: 10:07:1D:AB:16:8E:8E:53:E3:CD:7D:F5:DB:8E:0F:04:24:2E:90:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/TehJaUKE7-UYVJg4qzcGnHF4gEE.roa Signing time: Fri 02 Jan 2026 02:19:21 +0000 ROA not before: Fri 02 Jan 2026 02:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60776 IP address blocks: 45.155.84.0/22 maxlen: 22 2a0f:f100::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:9b:9f:ae:85:5e:49:23:e1:9a:e3:ae:a4:41:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10071dab168e8e53e3cd7df5db8e0f04242e9086 Validity Not Before: Jan 2 02:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4de849694284efe518549838ab37069c71788041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:99:bf:71:b8:40:be:88:8a:68:cc:5d:75:55: d2:53:52:48:41:df:31:74:31:d9:85:fe:c0:42:ba: cf:31:9b:77:cb:a6:59:d9:81:0b:48:97:5b:63:cf: 5e:92:ee:53:a3:12:d2:21:c9:aa:dc:46:eb:e2:6f: ad:d7:8a:ad:ac:c9:10:11:27:b8:cd:60:d6:a7:76: 5e:2e:d3:38:2c:cc:62:61:53:02:21:08:d4:70:eb: 73:b8:64:61:90:f5:7e:ed:36:46:b9:77:25:dd:05: aa:c1:a7:26:87:69:6c:1e:07:b1:6d:0d:4e:72:df: 4b:ff:2c:d7:58:01:8a:03:c7:21:41:ec:34:00:a2: 77:88:6f:ff:02:d4:b3:19:73:98:0b:e2:7a:be:5a: db:9f:bc:ab:ca:a6:ea:86:e5:7c:25:0e:73:6e:6c: 75:b7:68:6e:4f:97:67:a2:e4:df:73:8f:98:07:38: 3c:33:1b:fb:e8:1c:0d:3d:73:83:89:25:83:02:9b: ca:8f:d9:14:ca:75:9b:85:13:2c:f9:e0:14:a7:08: 90:ba:1b:52:e4:1d:4c:1e:06:0b:0c:cb:83:93:58: ce:40:6c:3a:f5:16:80:da:f8:d7:da:35:77:4e:1c: fa:ad:00:3c:64:b9:c8:67:e6:c8:f6:bd:0a:d6:53: fd:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:E8:49:69:42:84:EF:E5:18:54:98:38:AB:37:06:9C:71:78:80:41 X509v3 Authority Key Identifier: keyid:10:07:1D:AB:16:8E:8E:53:E3:CD:7D:F5:DB:8E:0F:04:24:2E:90:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/TehJaUKE7-UYVJg4qzcGnHF4gEE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.84.0/22 IPv6: 2a0f:f100::/29 Signature Algorithm: sha256WithRSAEncryption aa:c6:12:0e:9e:b5:9c:22:a3:00:a3:59:1e:be:6c:e6:2e:c8: af:3c:5e:bc:ce:b3:11:d3:cf:62:09:e4:11:98:44:d1:3a:40: 1a:8e:5e:65:b4:90:d3:91:7b:2b:70:5c:5e:37:1a:31:b7:19: d0:12:4e:37:80:98:8d:0a:b6:01:ae:45:e1:7b:b9:f4:b0:00: 61:79:c4:76:ae:b2:97:24:c2:38:32:0e:96:18:14:49:e5:82: 8d:10:46:04:57:9a:a2:ae:ad:cd:3d:08:25:87:13:da:50:c4: aa:a8:19:00:ac:6b:0d:a1:53:12:eb:f9:e9:e4:64:1d:b1:36: 12:cb:ac:dc:16:ff:6a:3e:55:9b:0c:49:c9:e7:6d:16:66:12: 53:ec:0d:82:ed:e7:06:9d:01:de:78:6b:b0:d6:ae:34:1d:24: 32:a4:9f:f1:eb:49:c0:c5:97:40:db:51:f4:ec:d4:1d:7a:eb: e1:76:ac:6b:27:44:7d:1a:82:49:63:41:19:82:4c:11:49:82: d9:d7:8b:15:60:60:a7:6d:87:96:0c:ce:64:90:2f:08:c1:58: 33:78:2f:23:78:e3:5d:92:75:63:51:6e:fb:f8:1d:8e:1b:1d: e0:e0:bf:60:92:9a:02:5d:0e:62:e1:7a:a4:b8:e0:c9:d0:46: 06:43:4e:17 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8gJufroVeSSPhmuOupEFCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwMDcxZGFiMTY4ZThlNTNlM2NkN2RmNWRiOGUwZjA0MjQy ZTkwODYwHhcNMjYwMTAyMDIxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZGU4NDk2OTQyODRlZmU1MTg1NDk4MzhhYjM3MDY5YzcxNzg4MDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpm/cbhAvoiKaMxddVXSU1JIQd8x dDHZhf7AQrrPMZt3y6ZZ2YELSJdbY89eku5ToxLSIcmq3Ebr4m+t14qtrMkQESe4 zWDWp3ZeLtM4LMxiYVMCIQjUcOtzuGRhkPV+7TZGuXcl3QWqwacmh2lsHgexbQ1O ct9L/yzXWAGKA8chQew0AKJ3iG//AtSzGXOYC+J6vlrbn7yryqbqhuV8JQ5zbmx1 t2huT5dnouTfc4+YBzg8Mxv76BwNPXODiSWDApvKj9kUynWbhRMs+eAUpwiQuhtS 5B1MHgYLDMuDk1jOQGw69RaA2vjX2jV3Thz6rQA8ZLnIZ+bI9r0K1lP9bwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFE3oSWlChO/lGFSYOKs3BpxxeIBBMB8GA1UdIwQY MBaAFBAHHasWjo5T48199duODwQkLpCGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUFjZHF4YU9qbFBqelgzMTI0NFBCQ1F1a0lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jYmU2YjctNWUxMy00MDk0LWI5Nzkt MmZlNDEyZTNlYWI0LzEvVGVoSmFVS0U3LVVZVkpnNHF6Y0duSEY0Z0VFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9jYmU2YjctNWUxMy00MDk0LWI5NzktMmZlNDEyZTNlYWI0 LzEvRUFjZHF4YU9qbFBqelgzMTI0NFBCQ1F1a0lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLZtUMA0E AgACMAcDBQMqD/EAMA0GCSqGSIb3DQEBCwUAA4IBAQCqxhIOnrWcIqMAo1kevmzm LsivPF68zrMR089iCeQRmETROkAajl5ltJDTkXsrcFxeNxoxtxnQEk43gJiNCrYB rkXhe7n0sABhecR2rrKXJMI4Mg6WGBRJ5YKNEEYEV5qirq3NPQglhxPaUMSqqBkA rGsNoVMS6/np5GQdsTYSy6zcFv9qPlWbDEnJ520WZhJT7A2C7ecGnQHeeGuw1q40 HSQypJ/x60nAxZdA21H07NQdeuvhdqxrJ0R9GoJJY0EZgkwRSYLZ14sVYGCnbYeW DM5kkC8IwVgzeC8jeONdknVjUW77+B2OGx3g4L9gkpoCXQ5i4XqkuODJ0EYGQ04X -----END CERTIFICATE-----Generated at Tue Feb 10 08:38:41 2026 by rpki-client