This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/TSAciExIDDLBEcTIBLpyxR8oUe8.roa File: TSAciExIDDLBEcTIBLpyxR8oUe8.roa (raw, json) Hash identifier: xuR6T02zCPYtUbw7NwiqXuHRlL2/+geA0rMQimehzsE= Subject key identifier: 4D:20:1C:88:4C:48:0C:32:C1:11:C4:C8:04:BA:72:C5:1F:28:51:EF Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Certificate serial: 019B7E389E1B976F44043E5B4341E723FE00 Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/TSAciExIDDLBEcTIBLpyxR8oUe8.roa Signing time: Fri 02 Jan 2026 10:19:58 +0000 ROA not before: Fri 02 Jan 2026 10:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58349 IP address blocks: 194.143.203.0/24 maxlen: 24 194.143.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:9e:1b:97:6f:44:04:3e:5b:43:41:e7:23:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Validity Not Before: Jan 2 10:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d201c884c480c32c111c4c804ba72c51f2851ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d3:fd:1c:70:af:63:8c:c9:78:d5:66:37:b5: 63:bf:49:6d:3e:88:b8:c5:e4:c8:07:e4:99:d2:02: db:a3:bb:06:32:eb:96:11:2c:11:20:cd:10:e4:4c: 0a:da:a9:de:9e:15:a8:48:64:14:2c:aa:7f:6f:77: ef:8a:ad:8f:ab:56:6c:aa:e6:e9:36:bf:a7:72:c7: be:1b:11:5d:b6:1a:58:9c:0b:99:7f:02:91:fe:60: d5:c9:57:3e:6a:4c:f0:ce:f6:2a:72:2d:8c:8c:74: 62:63:9d:2a:67:c5:81:97:5f:cb:74:bb:36:fb:86: f5:be:76:83:69:0a:dd:24:d9:cf:bc:77:ef:1e:54: 5d:ef:4d:67:e7:07:a9:eb:3b:d8:ed:46:76:5f:96: af:b0:6f:35:02:c5:1b:1a:25:6f:70:ff:47:8e:fb: 0e:37:49:0d:b7:06:a7:b1:13:c3:d4:f0:4c:55:33: 71:dd:eb:99:c5:6a:44:e4:23:9e:7b:bc:c0:8b:bd: a6:26:3d:39:b7:f9:41:0a:7d:51:93:0d:4c:76:4f: 2a:8e:94:4a:3d:e3:66:9c:41:15:8f:bd:f0:43:10: 1a:f0:5f:00:38:b9:4e:8b:fa:f7:a9:52:84:53:5f: b0:07:16:6f:a4:79:cf:06:f3:8d:40:47:ef:32:0b: e1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:20:1C:88:4C:48:0C:32:C1:11:C4:C8:04:BA:72:C5:1F:28:51:EF X509v3 Authority Key Identifier: keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/TSAciExIDDLBEcTIBLpyxR8oUe8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.143.203.0/24 194.143.209.0/24 Signature Algorithm: sha256WithRSAEncryption 97:11:3d:bf:fb:8d:c3:41:44:be:e8:46:90:2f:10:d5:8a:7f: 3a:ec:ad:c0:9a:f4:ee:0d:78:1a:36:76:05:27:0c:25:e4:d9: d1:68:12:2b:9c:63:3f:1a:e1:39:05:36:aa:14:e1:2b:94:ff: 7a:3c:bc:e7:e2:62:b9:a2:ef:8b:0e:31:b3:48:a9:0c:47:75: 15:1a:d7:c6:99:70:79:4b:af:dc:83:78:53:94:4e:56:04:bb: 71:84:a4:ea:ca:cf:6c:90:d1:e0:1e:01:72:ad:5d:8d:19:16: 96:c5:e9:6b:15:a0:7b:d7:46:9e:63:1d:88:97:17:90:8c:62: 82:78:10:6d:55:a0:4a:39:f2:0f:70:34:c0:56:14:f9:7c:21: 38:e5:9a:32:50:dd:92:e2:2a:cb:50:cf:c0:49:42:1c:fe:17: 48:7b:06:0f:e7:db:11:83:01:96:53:8c:95:7f:b2:17:69:a1: cc:09:73:57:c2:d9:60:c2:3a:48:b7:ab:75:df:8b:12:a0:6c: 76:5f:67:6b:9e:b5:67:5a:3a:fc:91:47:04:35:4e:34:41:71: 9b:da:b3:c9:a1:7b:56:ca:3f:b7:8c:9d:24:3f:1b:d8:d7:6f: b5:79:87:75:f7:c5:6c:f4:b2:a7:7a:fe:8b:54:c8:9f:aa:dc: ad:da:1b:1c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OJ4bl29EBD5bQ0HnI/4AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy MGFlMmUwHhcNMjYwMTAyMTAxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDIwMWM4ODRjNDgwYzMyYzExMWM0YzgwNGJhNzJjNTFmMjg1MWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NP9HHCvY4zJeNVmN7Vjv0ltPoi4 xeTIB+SZ0gLbo7sGMuuWESwRIM0Q5EwK2qnenhWoSGQULKp/b3fviq2Pq1Zsqubp Nr+ncse+GxFdthpYnAuZfwKR/mDVyVc+akzwzvYqci2MjHRiY50qZ8WBl1/LdLs2 +4b1vnaDaQrdJNnPvHfvHlRd701n5wep6zvY7UZ2X5avsG81AsUbGiVvcP9HjvsO N0kNtwansRPD1PBMVTNx3euZxWpE5COee7zAi72mJj05t/lBCn1Rkw1Mdk8qjpRK PeNmnEEVj73wQxAa8F8AOLlOi/r3qVKEU1+wBxZvpHnPBvONQEfvMgvhywIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFE0gHIhMSAwywRHEyAS6csUfKFHvMB8GA1UdIwQY MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt MWRkZWM0Y2NlMjRjLzEvVFNBY2lFeElERExCRWNUSUJMcHl4UjhvVWU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwo/LAwQA wo/RMA0GCSqGSIb3DQEBCwUAA4IBAQCXET2/+43DQUS+6EaQLxDVin867K3AmvTu DXgaNnYFJwwl5NnRaBIrnGM/GuE5BTaqFOErlP96PLzn4mK5ou+LDjGzSKkMR3UV GtfGmXB5S6/cg3hTlE5WBLtxhKTqys9skNHgHgFyrV2NGRaWxelrFaB710aeYx2I lxeQjGKCeBBtVaBKOfIPcDTAVhT5fCE45ZoyUN2S4irLUM/ASUIc/hdIewYP59sR gwGWU4yVf7IXaaHMCXNXwtlgwjpIt6t134sSoGx2X2drnrVnWjr8kUcENU40QXGb 2rPJoXtWyj+3jJ0kPxvY12+1eYd198Vs9LKnev6LVMifqtyt2hsc -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:00 2026 by rpki-client