This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/TCAQGPQ0BZ8ud4Gm8UguZYpuzms.roa File: TCAQGPQ0BZ8ud4Gm8UguZYpuzms.roa (raw, json) Hash identifier: +Kmb6BumaUGSfi8TJeQxjsoBcMk+3PlRsvjbV5UF/c8= Subject key identifier: 4C:20:10:18:F4:34:05:9F:2E:77:81:A6:F1:48:2E:65:8A:6E:CE:6B Certificate issuer: /CN=44a7e5a33d9c5a965d9fbfdeecdc871af0a5d4f8 Certificate serial: 019B7910428B712F5CAF2DB76D3F9C02B394 Authority key identifier: 44:A7:E5:A3:3D:9C:5A:96:5D:9F:BF:DE:EC:DC:87:1A:F0:A5:D4:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/TCAQGPQ0BZ8ud4Gm8UguZYpuzms.roa Signing time: Thu 01 Jan 2026 10:17:47 +0000 ROA not before: Thu 01 Jan 2026 10:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1299 IP address blocks: 193.192.54.0/24 maxlen: 24 193.192.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 22:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:42:8b:71:2f:5c:af:2d:b7:6d:3f:9c:02:b3:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44a7e5a33d9c5a965d9fbfdeecdc871af0a5d4f8 Validity Not Before: Jan 1 10:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c201018f434059f2e7781a6f1482e658a6ece6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b9:29:48:0d:3a:02:82:b3:a3:a1:61:dc:37: 54:38:2a:d2:1b:38:9b:2c:df:63:fd:54:f8:d4:41: 23:95:73:de:59:cd:83:c1:db:63:80:60:84:5c:73: db:eb:e8:3a:af:69:8c:b9:e3:0a:5d:b6:f3:f0:e6: 32:ff:cc:a8:f1:9c:8b:c4:ae:7a:0c:e1:84:2e:50: 86:79:e3:19:f2:31:b0:44:09:d5:33:0a:21:f3:61: 76:13:88:d3:d8:79:7b:83:ee:d4:bf:b7:4c:c7:b9: cd:ab:35:dc:cf:31:50:af:91:d4:c6:a8:71:2b:4b: 06:f8:1d:37:dd:40:f6:54:0a:48:9b:ec:d2:66:4d: 95:f0:45:9c:9e:01:4b:27:55:75:90:1f:d2:54:de: 99:4a:0f:75:7b:ec:ef:0e:1c:dc:89:4e:71:77:7d: 50:e7:a3:9b:7d:da:ab:b0:83:96:02:3d:3d:92:c6: ee:0b:6a:bc:09:be:35:ab:e2:f9:07:5e:46:dc:6f: f9:10:84:a6:95:b5:56:ee:90:58:41:a8:e5:e0:15: e5:e4:0e:2a:7a:f3:90:d4:c0:dd:07:c9:8a:3a:04: 2d:eb:b2:b4:f1:5b:f3:90:49:e9:12:ad:28:45:fb: 6c:2b:49:72:5c:24:0a:5b:a7:98:cf:f5:03:88:7e: f7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:20:10:18:F4:34:05:9F:2E:77:81:A6:F1:48:2E:65:8A:6E:CE:6B X509v3 Authority Key Identifier: keyid:44:A7:E5:A3:3D:9C:5A:96:5D:9F:BF:DE:EC:DC:87:1A:F0:A5:D4:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/TCAQGPQ0BZ8ud4Gm8UguZYpuzms.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.192.54.0/23 Signature Algorithm: sha256WithRSAEncryption 71:be:62:ba:8c:5e:65:99:12:c6:b3:72:73:8b:ab:4a:73:8c: c4:63:81:42:5c:75:9e:05:73:c7:ea:d9:59:f9:3e:de:eb:ca: 6e:c1:b1:3e:6f:f4:11:30:27:66:6c:95:ad:07:2f:34:5f:5a: fc:4c:ee:09:fd:72:96:76:94:22:9a:ae:f1:c9:aa:45:23:c2: 4e:03:d7:29:8a:cf:64:e3:cf:a8:53:82:c0:a1:64:8a:b1:d2: 70:f8:d6:54:d1:a6:95:e2:5e:aa:a5:87:3a:ab:ed:a1:e8:2f: 5f:94:f5:86:db:9f:b3:13:32:46:5e:eb:b8:6e:41:1d:27:0f: fb:24:0a:7a:53:87:11:a5:0e:2e:d8:36:dd:60:b0:45:44:04: f4:65:e6:c7:18:c0:7c:85:75:85:40:06:b9:0d:33:fa:21:d6: 83:fe:4f:71:5c:75:8e:95:21:cf:54:c3:3e:92:4e:59:62:d1: c1:ff:6c:02:d3:81:12:7d:e9:39:a6:1f:27:5e:f8:a0:82:de: 0b:b3:ac:46:cc:ba:8f:2d:47:05:27:3a:7a:d5:d6:f7:a4:a3: 5d:22:5f:cb:d1:c2:47:0c:f9:bc:46:52:4a:13:b0:42:20:d8: 8d:78:5c:95:0e:e2:73:d6:ae:eb:af:e7:e1:4b:96:35:1a:93: a7:b6:09:7a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EEKLcS9cry23bT+cArOUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0YTdlNWEzM2Q5YzVhOTY1ZDlmYmZkZWVjZGM4NzFhZjBh NWQ0ZjgwHhcNMjYwMTAxMTAxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzIwMTAxOGY0MzQwNTlmMmU3NzgxYTZmMTQ4MmU2NThhNmVjZTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbkpSA06AoKzo6Fh3DdUOCrSGzib LN9j/VT41EEjlXPeWc2DwdtjgGCEXHPb6+g6r2mMueMKXbbz8OYy/8yo8ZyLxK56 DOGELlCGeeMZ8jGwRAnVMwoh82F2E4jT2Hl7g+7Uv7dMx7nNqzXczzFQr5HUxqhx K0sG+B033UD2VApIm+zSZk2V8EWcngFLJ1V1kB/SVN6ZSg91e+zvDhzciU5xd31Q 56ObfdqrsIOWAj09ksbuC2q8Cb41q+L5B15G3G/5EISmlbVW7pBYQajl4BXl5A4q evOQ1MDdB8mKOgQt67K08VvzkEnpEq0oRftsK0lyXCQKW6eYz/UDiH73ywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEwgEBj0NAWfLneBpvFILmWKbs5rMB8GA1UdIwQY MBaAFESn5aM9nFqWXZ+/3uzchxrwpdT4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUktmbG96MmNXcFpkbjdfZTdOeUhHdkNsMVBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wZDgwODgtZWE5My00YWJiLTg5OTYt MjFjZjU2Y2JjZTEyLzEvVENBUUdQUTBCWjh1ZDRHbThVZ3VaWXB1em1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8wZDgwODgtZWE5My00YWJiLTg5OTYtMjFjZjU2Y2JjZTEy LzEvUktmbG96MmNXcFpkbjdfZTdOeUhHdkNsMVBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwcA2MA0G CSqGSIb3DQEBCwUAA4IBAQBxvmK6jF5lmRLGs3Jzi6tKc4zEY4FCXHWeBXPH6tlZ +T7e68puwbE+b/QRMCdmbJWtBy80X1r8TO4J/XKWdpQimq7xyapFI8JOA9cpis9k 48+oU4LAoWSKsdJw+NZU0aaV4l6qpYc6q+2h6C9flPWG25+zEzJGXuu4bkEdJw/7 JAp6U4cRpQ4u2DbdYLBFRAT0ZebHGMB8hXWFQAa5DTP6IdaD/k9xXHWOlSHPVMM+ kk5ZYtHB/2wC04ESfek5ph8nXviggt4Ls6xGzLqPLUcFJzp61db3pKNdIl/L0cJH DPm8RlJKE7BCINiNeFyVDuJz1q7rr+fhS5Y1GpOntgl6 -----END CERTIFICATE-----Generated at Wed Jan 21 07:22:11 2026 by rpki-client