This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/TjwUrt0QbOg_7Hv7hnE5gPoovGE.roa File: TjwUrt0QbOg_7Hv7hnE5gPoovGE.roa (raw, json) Hash identifier: vCYAcdHdzTkyR5n/fzt3EtvDXfAERXz/dZUmibVHkag= Subject key identifier: 4E:3C:14:AE:DD:10:6C:E8:3F:EC:7B:FB:86:71:39:80:FA:28:BC:61 Certificate issuer: /CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc Certificate serial: 019B7E38B101424E6E9D01FA031D6FDAFAE4 Authority key identifier: 2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/TjwUrt0QbOg_7Hv7hnE5gPoovGE.roa Signing time: Fri 02 Jan 2026 10:20:03 +0000 ROA not before: Fri 02 Jan 2026 10:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42334 IP address blocks: 185.236.204.0/24 maxlen: 24 185.236.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 13:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:b1:01:42:4e:6e:9d:01:fa:03:1d:6f:da:fa:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc Validity Not Before: Jan 2 10:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e3c14aedd106ce83fec7bfb86713980fa28bc61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ac:f9:6e:23:47:d7:99:a8:c2:95:1b:33:e3: ac:26:60:93:aa:6d:5c:32:78:b8:5d:79:09:09:ac: 59:f3:ae:aa:7c:07:9c:bf:ad:1b:6e:b8:14:80:76: 6f:b2:f4:ac:90:ab:c9:bd:8d:1e:6a:52:6b:ea:3d: 83:58:03:5a:fa:45:55:c1:23:7c:f5:b2:a6:eb:60: 9d:08:05:d2:02:c9:dd:8e:c7:75:ba:94:5e:9a:69: 2e:14:3d:53:bf:5e:fd:d2:e5:52:e6:c9:47:dc:61: 89:5a:01:dc:80:04:33:54:17:32:56:cc:da:6f:d2: 10:a9:2b:b2:08:1d:19:d7:fc:f0:14:cd:01:41:55: 53:d8:d7:ef:8f:4f:41:c0:9c:22:d7:c0:8e:5d:86: 7f:7a:20:7a:fc:7f:e1:5e:aa:eb:52:d6:03:d3:43: f3:05:19:30:80:dc:8f:5d:9c:d5:f6:54:47:12:92: 8d:c9:cd:27:4c:e6:a0:18:ca:f1:32:0b:4f:01:2f: 14:25:78:1d:c0:9e:a2:20:37:f6:5e:1b:1a:ea:b6: d6:49:58:e3:3f:9a:33:03:b6:d3:f4:17:af:1c:b4: 07:49:f8:6d:41:7e:54:8c:b7:c1:e2:3e:57:5a:86: b4:2d:62:29:63:9d:a7:e5:44:c3:7e:b4:87:7c:97: c8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:3C:14:AE:DD:10:6C:E8:3F:EC:7B:FB:86:71:39:80:FA:28:BC:61 X509v3 Authority Key Identifier: keyid:2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/TjwUrt0QbOg_7Hv7hnE5gPoovGE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.236.204.0/23 Signature Algorithm: sha256WithRSAEncryption 32:a6:cc:ff:3b:68:19:fb:1f:3e:99:1a:a8:ff:d9:c6:8c:89: ce:31:10:39:23:8b:4e:ec:c9:50:ba:cc:ad:c0:ac:38:fd:4d: 9b:de:96:33:43:13:97:35:79:2d:15:80:76:4e:d6:3d:12:5f: 96:59:fb:dd:06:cb:89:2e:68:13:f9:df:87:e5:c9:56:a1:e3: 8a:42:e1:c1:d0:f4:09:a7:ad:36:5c:fe:f2:66:a4:9a:ad:05: c5:80:ea:71:cf:8f:ee:95:2e:11:1d:18:82:8e:ea:b8:5b:ae: 9d:14:c6:16:ea:a8:c5:0b:f4:a6:f6:32:a9:2b:8d:aa:8a:49: bc:3d:de:0d:59:f5:af:f0:3f:5f:d7:dd:b0:34:83:5f:49:e8: 64:15:1c:b4:a7:a9:74:e1:a8:8c:c8:26:58:51:b6:77:73:81: 25:d6:f1:6e:c4:a7:a6:45:b0:4c:e4:19:90:db:0f:d0:5c:ca: af:61:c1:da:a6:68:5d:cf:fb:ca:c6:bd:f9:0e:0f:36:e5:78: a3:2b:e1:02:0f:88:92:98:31:59:fa:f9:96:07:c0:36:7c:54: f5:de:01:9f:4d:c0:97:44:d9:8f:43:76:67:c3:b0:67:ac:fd: 16:48:08:32:a8:5c:67:f9:b3:8d:68:35:2b:3c:62:75:ca:9f: 93:92:17:7e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OLEBQk5unQH6Ax1v2vrkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYTNjOTlmZjU4YjhmNzMzZWYyYzYyYTc3NzJjMGMxZjI5 ZTU3ZmMwHhcNMjYwMTAyMTAyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTNjMTRhZWRkMTA2Y2U4M2ZlYzdiZmI4NjcxMzk4MGZhMjhiYzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6z5biNH15mowpUbM+OsJmCTqm1c Mni4XXkJCaxZ866qfAecv60bbrgUgHZvsvSskKvJvY0ealJr6j2DWANa+kVVwSN8 9bKm62CdCAXSAsndjsd1upRemmkuFD1Tv1790uVS5slH3GGJWgHcgAQzVBcyVsza b9IQqSuyCB0Z1/zwFM0BQVVT2Nfvj09BwJwi18COXYZ/eiB6/H/hXqrrUtYD00Pz BRkwgNyPXZzV9lRHEpKNyc0nTOagGMrxMgtPAS8UJXgdwJ6iIDf2Xhsa6rbWSVjj P5ozA7bT9BevHLQHSfhtQX5UjLfB4j5XWoa0LWIpY52n5UTDfrSHfJfI/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE48FK7dEGzoP+x7+4ZxOYD6KLxhMB8GA1UdIwQY MBaAFCqjyZ/1i49zPvLGKndywMHynlf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3FQSm5fV0xqM00tOHNZcWQzTEF3ZktlVl93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hMGI2M2UtMTE2Ni00NmI1LTllM2Ut MzhiNWQxNzg4MDA3LzEvVGp3VXJ0MFFiT2dfN0h2N2huRTVnUG9vdkdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hMGI2M2UtMTE2Ni00NmI1LTllM2UtMzhiNWQxNzg4MDA3 LzEvS3FQSm5fV0xqM00tOHNZcWQzTEF3ZktlVl93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuezMMA0G CSqGSIb3DQEBCwUAA4IBAQAypsz/O2gZ+x8+mRqo/9nGjInOMRA5I4tO7MlQusyt wKw4/U2b3pYzQxOXNXktFYB2TtY9El+WWfvdBsuJLmgT+d+H5clWoeOKQuHB0PQJ p602XP7yZqSarQXFgOpxz4/ulS4RHRiCjuq4W66dFMYW6qjFC/Sm9jKpK42qikm8 Pd4NWfWv8D9f192wNINfSehkFRy0p6l04aiMyCZYUbZ3c4El1vFuxKemRbBM5BmQ 2w/QXMqvYcHapmhdz/vKxr35Dg825XijK+ECD4iSmDFZ+vmWB8A2fFT13gGfTcCX RNmPQ3Znw7BnrP0WSAgyqFxn+bONaDUrPGJ1yp+Tkhd+ -----END CERTIFICATE-----Generated at Tue Jan 27 17:24:54 2026 by rpki-client