This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/Tk4BECob0wzGz8tktoazFqndFEA.roa File: Tk4BECob0wzGz8tktoazFqndFEA.roa (raw, json) Hash identifier: vMnbx4+7QIXDr3/1NvPZgl+14y+ZGEXmNQb8sHi4+W0= Subject key identifier: 4E:4E:01:10:2A:1B:D3:0C:C6:CF:CB:64:B6:86:B3:16:A9:DD:14:40 Certificate issuer: /CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d Certificate serial: 019B7C12571DC515800BAEB8ACAD03740D4F Authority key identifier: DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/Tk4BECob0wzGz8tktoazFqndFEA.roa Signing time: Fri 02 Jan 2026 00:18:55 +0000 ROA not before: Fri 02 Jan 2026 00:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 93.187.32.0/24 maxlen: 24 93.187.36.0/24 maxlen: 24 185.52.116.0/24 maxlen: 24 185.52.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:57:1d:c5:15:80:0b:ae:b8:ac:ad:03:74:0d:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d Validity Not Before: Jan 2 00:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e4e01102a1bd30cc6cfcb64b686b316a9dd1440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:01:50:76:8c:7c:71:3e:da:42:2b:e3:45:e9: 54:36:a4:24:05:29:86:e4:37:e4:b3:e9:1c:28:0d: 72:b7:ea:4d:17:f6:ad:2c:08:78:7f:e7:29:23:5a: ce:bc:8c:77:12:93:44:93:a2:e7:c1:3d:84:b0:3f: 2e:29:d5:41:b3:1b:26:e3:ad:17:ac:fa:1d:fb:be: ee:ab:b7:b7:fb:fa:46:5b:c2:86:b4:24:5a:9f:6f: d0:04:24:c3:20:1d:98:43:00:20:91:29:a6:32:9b: 55:f9:95:41:dd:17:77:54:e4:55:a5:12:bd:ae:50: 3f:9a:b4:82:db:9e:ad:cb:ce:43:36:06:f6:d6:b8: c1:49:a7:39:03:25:ab:38:cf:da:d6:6f:46:04:e6: 12:9d:5e:60:6b:15:cf:d4:a0:4e:09:57:5b:c6:75: 24:91:12:1f:cf:b9:46:60:6b:41:aa:c9:9a:73:7d: f3:6b:02:ad:08:30:da:e0:12:3f:99:33:a1:0c:33: 8c:33:d7:c6:fd:d3:a2:63:43:5b:4a:04:dd:5e:a5: 81:6e:cc:7e:45:f8:63:b2:47:bb:ad:53:79:ca:f9: 32:19:60:c0:a1:5a:ac:a3:6b:f3:55:a9:74:b3:b8: 2f:6e:d3:76:75:23:08:75:43:9d:f2:7a:d6:87:93: f6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:4E:01:10:2A:1B:D3:0C:C6:CF:CB:64:B6:86:B3:16:A9:DD:14:40 X509v3 Authority Key Identifier: keyid:DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/Tk4BECob0wzGz8tktoazFqndFEA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.187.32.0/24 93.187.36.0/24 185.52.116.0/24 185.52.118.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:e6:7a:36:b6:be:2e:0d:3f:6c:45:46:df:c7:b8:f8:90:7b: 20:33:60:77:3d:3c:3e:7a:93:95:8e:c9:a1:14:fe:99:91:3d: 64:d3:4b:f8:2a:40:b6:99:8a:ef:e5:4f:23:40:27:da:65:f7: ea:65:1c:83:b6:d6:98:65:54:13:09:54:30:7f:fa:d1:56:37: 29:86:86:ba:88:07:a3:2b:97:51:fb:92:90:d9:cc:ae:8c:50: 32:39:ba:d0:81:a5:f3:02:c6:94:ea:57:c7:20:1f:29:b7:11: 88:db:53:ea:e8:49:5b:24:33:c5:1f:94:00:f0:df:3a:21:f9: 7d:b4:25:99:20:0f:b7:35:d3:0f:c0:e6:34:62:fa:81:59:85: c7:77:e9:2f:03:20:5f:d1:79:a6:cc:2f:ab:cb:fa:7b:05:7d: 1e:70:45:0c:9c:3f:71:0c:f6:e2:c6:f1:0c:f5:eb:d1:cc:82: 09:de:0d:f0:3e:57:6b:33:95:de:3b:9c:11:9c:3b:25:1d:b3: ec:d3:46:c3:32:54:09:7e:ba:83:ec:d1:a0:16:02:11:13:10: 2d:c3:0f:1a:72:f4:a8:bc:c8:28:b3:90:9f:e9:6f:4e:a1:fc: b6:c1:8e:85:ae:e4:58:35:01:65:a6:41:0b:94:5e:92:62:7d: b4:96:65:23 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt8ElcdxRWAC664rK0DdA1PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMDJiMThmNTg4YTUwYjkyNzRmZTM0NjlmZjhiZDRhMTY0 OWQ3NGQwHhcNMjYwMTAyMDAxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTRlMDExMDJhMWJkMzBjYzZjZmNiNjRiNjg2YjMxNmE5ZGQxNDQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAFQdox8cT7aQivjRelUNqQkBSmG 5Dfks+kcKA1yt+pNF/atLAh4f+cpI1rOvIx3EpNEk6LnwT2EsD8uKdVBsxsm460X rPod+77uq7e3+/pGW8KGtCRan2/QBCTDIB2YQwAgkSmmMptV+ZVB3Rd3VORVpRK9 rlA/mrSC256ty85DNgb21rjBSac5AyWrOM/a1m9GBOYSnV5gaxXP1KBOCVdbxnUk kRIfz7lGYGtBqsmac33zawKtCDDa4BI/mTOhDDOMM9fG/dOiY0NbSgTdXqWBbsx+ Rfhjske7rVN5yvkyGWDAoVqso2vzVal0s7gvbtN2dSMIdUOd8nrWh5P22QIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFE5OARAqG9MMxs/LZLaGsxap3RRAMB8GA1UdIwQY MBaAFNwCsY9YilC5J0/jRp/4vUoWSddNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0FLeGoxaUtVTGtuVC1OR25faTlTaFpKMTAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jODYxYzgtYzg5YS00MDQzLWEwMmQt NjY0ZjA0ZDJhNjhkLzEvVGs0QkVDb2Iwd3pHejh0a3RvYXpGcW5kRkVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9jODYxYzgtYzg5YS00MDQzLWEwMmQtNjY0ZjA0ZDJhNjhk LzEvM0FLeGoxaUtVTGtuVC1OR25faTlTaFpKMTAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAXbsgAwQA XbskAwQAuTR0AwQAuTR2MA0GCSqGSIb3DQEBCwUAA4IBAQAd5no2tr4uDT9sRUbf x7j4kHsgM2B3PTw+epOVjsmhFP6ZkT1k00v4KkC2mYrv5U8jQCfaZffqZRyDttaY ZVQTCVQwf/rRVjcphoa6iAejK5dR+5KQ2cyujFAyObrQgaXzAsaU6lfHIB8ptxGI 21Pq6ElbJDPFH5QA8N86Ifl9tCWZIA+3NdMPwOY0YvqBWYXHd+kvAyBf0XmmzC+r y/p7BX0ecEUMnD9xDPbixvEM9evRzIIJ3g3wPldrM5XeO5wRnDslHbPs00bDMlQJ frqD7NGgFgIRExAtww8acvSovMgos5Cf6W9Oofy2wY6FruRYNQFlpkELlF6SYn20 lmUj -----END CERTIFICATE-----Generated at Tue Jan 20 01:21:57 2026 by rpki-client