This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/TMapBMpm5rX0-gIoWzb76bSTSuI.roa File: TMapBMpm5rX0-gIoWzb76bSTSuI.roa (raw, json) Hash identifier: R4mwMpiCVjsTtSxaIqIQla1zIyz7FbLUvXLev4eE1XY= Subject key identifier: 4C:C6:A9:04:CA:66:E6:B5:F4:FA:02:28:5B:36:FB:E9:B4:93:4A:E2 Certificate issuer: /CN=2abcc5c664a4a82305892a8c433e94ffe32dadb7 Certificate serial: 019B775940E172D1D98ACCD5D9ABB80CFA50 Authority key identifier: 2A:BC:C5:C6:64:A4:A8:23:05:89:2A:8C:43:3E:94:FF:E3:2D:AD:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/TMapBMpm5rX0-gIoWzb76bSTSuI.roa Signing time: Thu 01 Jan 2026 02:18:16 +0000 ROA not before: Thu 01 Jan 2026 02:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206070 IP address blocks: 185.197.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:40:e1:72:d1:d9:8a:cc:d5:d9:ab:b8:0c:fa:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2abcc5c664a4a82305892a8c433e94ffe32dadb7 Validity Not Before: Jan 1 02:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4cc6a904ca66e6b5f4fa02285b36fbe9b4934ae2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:98:4d:23:ff:f5:89:e4:1e:c9:9c:9b:eb:66: 40:41:96:0a:84:2f:fd:26:39:82:94:28:9d:b9:d1: cd:ae:ef:2e:e8:0c:dd:9f:c7:15:47:17:6a:bd:b4: 2c:70:82:13:2b:75:af:a9:e5:f2:d1:31:63:b8:e0: 07:24:ed:6c:20:be:01:5e:57:fc:28:e1:ab:05:97: 75:26:a2:68:e8:c8:13:30:21:ee:5c:44:f5:c1:15: 8f:46:12:f7:0d:cc:23:1a:43:84:59:ce:e3:b9:8d: 60:50:2d:a4:07:e4:90:b6:a1:04:c7:93:ee:21:02: f0:0a:2c:e9:39:d2:76:a3:ab:e6:92:05:b9:c2:71: bf:62:7a:e8:4a:bf:65:c7:62:e7:3e:b6:0a:e8:36: a3:d2:99:31:18:dc:a2:7b:f3:83:ee:b3:b8:62:cd: 12:74:c0:9f:15:0e:1a:b8:fd:3e:e8:ea:e7:e6:dd: 58:13:d1:9d:92:04:de:d8:74:b9:cf:0b:28:73:1d: cc:5c:e2:9b:cc:4e:1d:94:be:2c:93:98:2f:3e:3a: 11:e8:63:45:02:6a:c7:b9:87:8b:fa:fe:a4:fe:6c: 83:d6:52:2b:7d:c5:7e:d6:f6:cb:8f:85:22:fc:c2: e4:de:19:5f:38:3a:38:18:de:a1:a8:60:27:72:c4: 5b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:C6:A9:04:CA:66:E6:B5:F4:FA:02:28:5B:36:FB:E9:B4:93:4A:E2 X509v3 Authority Key Identifier: keyid:2A:BC:C5:C6:64:A4:A8:23:05:89:2A:8C:43:3E:94:FF:E3:2D:AD:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/TMapBMpm5rX0-gIoWzb76bSTSuI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.197.104.0/22 Signature Algorithm: sha256WithRSAEncryption 9c:60:41:c6:b1:0f:59:94:6a:d4:e3:05:7b:67:51:0e:5f:44: 61:2b:44:9a:c8:44:a5:44:74:7e:65:5a:ea:ab:d5:c9:60:02: bd:37:cf:c7:3f:7d:56:e7:16:ad:4d:d6:65:ff:ac:e0:22:f9: 0c:4a:06:71:4f:50:4a:61:f5:a2:8d:29:16:7b:f4:d8:26:4c: 96:b1:9a:c2:c0:89:ef:8c:77:ec:9f:4d:ba:74:de:14:52:44: a0:4c:89:3c:66:de:ca:c5:55:ad:eb:47:e4:45:e8:de:55:78: 90:c5:29:a2:37:ee:25:1b:88:f6:a8:8c:d9:d1:c8:4d:e8:c7: 3d:4b:cd:12:8b:9b:44:24:fb:61:78:7f:dd:ba:30:da:a4:0b: 61:5a:10:58:a7:c2:e6:e2:ce:8c:89:50:43:e5:5b:30:90:16: 3e:c4:f0:fd:2e:18:82:3f:ca:ba:56:5b:78:b8:da:a9:f4:44: 0c:09:ad:28:e1:51:1b:a7:ef:3d:29:4f:70:c3:e2:43:29:4c: e9:4e:59:14:78:e5:d0:a1:90:a0:46:09:66:fe:44:44:c3:dc: 67:d7:62:35:29:ee:b1:01:ef:47:39:ab:b4:f3:62:cc:60:2e: 90:81:22:92:8a:da:0f:13:37:31:f7:53:a8:f9:2b:36:8c:ef: 1d:1f:13:5a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WUDhctHZiszV2au4DPpQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYmNjNWM2NjRhNGE4MjMwNTg5MmE4YzQzM2U5NGZmZTMy ZGFkYjcwHhcNMjYwMTAxMDIxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Y2M2YTkwNGNhNjZlNmI1ZjRmYTAyMjg1YjM2ZmJlOWI0OTM0YWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JhNI//1ieQeyZyb62ZAQZYKhC/9 JjmClCidudHNru8u6Azdn8cVRxdqvbQscIITK3WvqeXy0TFjuOAHJO1sIL4BXlf8 KOGrBZd1JqJo6MgTMCHuXET1wRWPRhL3DcwjGkOEWc7juY1gUC2kB+SQtqEEx5Pu IQLwCizpOdJ2o6vmkgW5wnG/YnroSr9lx2LnPrYK6Daj0pkxGNyie/OD7rO4Ys0S dMCfFQ4auP0+6Orn5t1YE9GdkgTe2HS5zwsocx3MXOKbzE4dlL4sk5gvPjoR6GNF AmrHuYeL+v6k/myD1lIrfcV+1vbLj4Ui/MLk3hlfODo4GN6hqGAncsRbXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEzGqQTKZua19PoCKFs2++m0k0riMB8GA1UdIwQY MBaAFCq8xcZkpKgjBYkqjEM+lP/jLa23MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3J6RnhtU2txQ01GaVNxTVF6NlVfLU10cmJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9kYzczNDUtNzVjYi00NDIwLWEzZjAt NjVmYjEwYTA2ZTg5LzEvVE1hcEJNcG01clgwLWdJb1d6Yjc2YlNUU3VJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy9kYzczNDUtNzVjYi00NDIwLWEzZjAtNjVmYjEwYTA2ZTg5 LzEvS3J6RnhtU2txQ01GaVNxTVF6NlVfLU10cmJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucVoMA0G CSqGSIb3DQEBCwUAA4IBAQCcYEHGsQ9ZlGrU4wV7Z1EOX0RhK0SayESlRHR+ZVrq q9XJYAK9N8/HP31W5xatTdZl/6zgIvkMSgZxT1BKYfWijSkWe/TYJkyWsZrCwInv jHfsn026dN4UUkSgTIk8Zt7KxVWt60fkRejeVXiQxSmiN+4lG4j2qIzZ0chN6Mc9 S80Si5tEJPtheH/dujDapAthWhBYp8Lm4s6MiVBD5VswkBY+xPD9LhiCP8q6Vlt4 uNqp9EQMCa0o4VEbp+89KU9ww+JDKUzpTlkUeOXQoZCgRglm/kREw9xn12I1Ke6x Ae9HOau082LMYC6QgSKSitoPEzcx91Oo+Ss2jO8dHxNa -----END CERTIFICATE-----Generated at Mon Jan 19 23:20:25 2026 by rpki-client