This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/txkHSD0FoHaF3ZnQGhiTd7tKPFc.roa File: txkHSD0FoHaF3ZnQGhiTd7tKPFc.roa (raw, json) Hash identifier: pcD4w9ifKD5HzUe/A1dFZ1xkSNsR04PyDHXlMHyE+qw= Subject key identifier: B7:19:07:48:3D:05:A0:76:85:DD:99:D0:1A:18:93:77:BB:4A:3C:57 Certificate issuer: /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce Certificate serial: 019B79106F3867BFD601385D8633DF00C8EF Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/txkHSD0FoHaF3ZnQGhiTd7tKPFc.roa Signing time: Thu 01 Jan 2026 10:17:58 +0000 ROA not before: Thu 01 Jan 2026 10:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206462 IP address blocks: 195.123.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:6f:38:67:bf:d6:01:38:5d:86:33:df:00:c8:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce Validity Not Before: Jan 1 10:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b71907483d05a07685dd99d01a189377bb4a3c57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:16:35:aa:26:6a:d4:a4:01:e2:89:82:3e:32: c9:6b:3a:d7:d7:66:1d:65:c8:ef:b7:74:06:9a:d3: fc:f5:02:a2:3f:63:3c:10:4a:eb:18:c0:9d:57:66: a4:74:e7:ef:8b:ba:7e:6c:1a:94:27:07:5a:8b:eb: 70:10:d5:c5:c9:71:13:35:1a:e3:45:8f:ad:9b:cb: 30:7e:49:07:92:91:0a:ec:cc:4b:58:37:3a:0f:4f: 0f:ad:a0:7e:ca:18:c9:a6:53:bf:e3:53:d9:3d:3c: 65:3e:4f:20:b7:41:60:2d:b9:b8:a7:86:09:0c:db: 71:1d:01:b5:d4:ec:93:28:ca:1c:cd:30:93:46:87: bd:8c:2b:64:e1:41:0c:36:c6:ca:36:8a:16:8d:a7: e8:99:21:61:0a:1b:49:16:9e:f3:8e:5d:62:34:d8: 73:68:44:21:8c:95:7d:4a:1b:aa:1f:0f:8a:f8:7f: 93:f2:c6:fd:c1:cc:a8:c0:09:db:26:32:22:09:33: 64:67:68:06:0e:0b:be:15:3c:1c:f0:73:18:65:c2: 40:df:90:89:5b:ce:2c:d1:b9:2f:90:ee:a2:1a:b2: cd:cc:d3:df:13:37:a2:db:26:ae:74:3a:47:cd:6f: 1c:d6:26:be:0e:84:ef:e6:9c:5e:dd:b1:c4:33:cb: 8a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:19:07:48:3D:05:A0:76:85:DD:99:D0:1A:18:93:77:BB:4A:3C:57 X509v3 Authority Key Identifier: keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/txkHSD0FoHaF3ZnQGhiTd7tKPFc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.123.173.0/24 Signature Algorithm: sha256WithRSAEncryption 92:80:f9:a4:01:e0:6c:64:43:d5:f6:72:9e:55:76:4f:f1:af: b2:ce:c0:8a:85:4a:a2:44:0f:70:47:f5:7d:49:3b:ed:15:e9: b8:89:30:9b:03:43:23:3d:be:59:f2:83:ba:c3:4a:bd:6e:fa: ff:84:7c:a0:18:25:f0:fb:1d:43:7a:83:a6:0f:85:da:f2:ad: b7:8a:18:17:29:e2:b9:24:3d:c9:b7:a8:82:18:4e:ab:5f:67: 16:06:dc:8b:1e:37:97:ba:51:7b:30:f7:08:e3:08:3d:c6:3e: 91:d3:25:2d:68:cb:71:62:eb:62:2d:20:99:ac:cc:e9:8e:23: 8e:43:d1:65:46:6b:26:17:12:95:dd:b0:a3:53:7b:be:fa:ba: cd:b2:05:04:e9:ce:cf:51:dd:8d:59:49:3a:df:88:13:86:39: 60:9c:4f:a7:40:e1:83:c5:d5:84:0d:61:8c:da:7d:16:a4:af: 7d:a7:dc:a8:fc:42:8e:64:c3:07:9e:c2:4c:02:37:58:33:5f: ed:26:9f:e8:6f:d9:71:32:d2:23:ed:f7:aa:b1:b3:28:5f:90: 1b:a6:d5:74:bf:31:49:da:0b:0c:32:9f:85:a9:be:ef:62:75: 51:99:32:e4:bb:00:46:81:c0:7c:e0:fd:9b:4e:53:46:24:c8: 0e:b7:e9:7f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EG84Z7/WAThdhjPfAMjvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMDVhZGM1YzQyNjJkZmY2YjNmM2U2MDY4MzBjN2Y5NzFk NzY2Y2UwHhcNMjYwMTAxMTAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzE5MDc0ODNkMDVhMDc2ODVkZDk5ZDAxYTE4OTM3N2JiNGEzYzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhY1qiZq1KQB4omCPjLJazrX12Yd Zcjvt3QGmtP89QKiP2M8EErrGMCdV2akdOfvi7p+bBqUJwdai+twENXFyXETNRrj RY+tm8swfkkHkpEK7MxLWDc6D08PraB+yhjJplO/41PZPTxlPk8gt0FgLbm4p4YJ DNtxHQG11OyTKMoczTCTRoe9jCtk4UEMNsbKNooWjafomSFhChtJFp7zjl1iNNhz aEQhjJV9ShuqHw+K+H+T8sb9wcyowAnbJjIiCTNkZ2gGDgu+FTwc8HMYZcJA35CJ W84s0bkvkO6iGrLNzNPfEzei2yaudDpHzW8c1ia+DoTv5pxe3bHEM8uKAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLcZB0g9BaB2hd2Z0BoYk3e7SjxXMB8GA1UdIwQY MBaAFMEFrcXEJi3/az8+YGgwx/lx12bOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1FXdHhjUW1MZjlyUHo1Z2FEREgtWEhYWnM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNDkxNzItZjhkYS00MTI4LTg2ODkt NTE1ODQ1ZTZjMzE3LzEvdHhrSFNEMEZvSGFGM1puUUdoaVRkN3RLUEZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9jNDkxNzItZjhkYS00MTI4LTg2ODktNTE1ODQ1ZTZjMzE3 LzEvd1FXdHhjUW1MZjlyUHo1Z2FEREgtWEhYWnM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw3utMA0G CSqGSIb3DQEBCwUAA4IBAQCSgPmkAeBsZEPV9nKeVXZP8a+yzsCKhUqiRA9wR/V9 STvtFem4iTCbA0MjPb5Z8oO6w0q9bvr/hHygGCXw+x1DeoOmD4Xa8q23ihgXKeK5 JD3Jt6iCGE6rX2cWBtyLHjeXulF7MPcI4wg9xj6R0yUtaMtxYutiLSCZrMzpjiOO Q9FlRmsmFxKV3bCjU3u++rrNsgUE6c7PUd2NWUk634gThjlgnE+nQOGDxdWEDWGM 2n0WpK99p9yo/EKOZMMHnsJMAjdYM1/tJp/ob9lxMtIj7feqsbMoX5AbptV0vzFJ 2gsMMp+Fqb7vYnVRmTLkuwBGgcB84P2bTlNGJMgOt+l/ -----END CERTIFICATE-----Generated at Mon Jan 26 21:05:05 2026 by rpki-client