This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/Tj4Mcwc_96ZTjJYw-9rKbpG4AXA.roa File: Tj4Mcwc_96ZTjJYw-9rKbpG4AXA.roa (raw, json) Hash identifier: 6X5APSqbz1P2mkb03h8c2CZF8YBdY33egLhUsQ1Fh0E= Subject key identifier: 4E:3E:0C:73:07:3F:F7:A6:53:8C:96:30:FB:DA:CA:6E:91:B8:01:70 Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d Certificate serial: 019B7E3870DB2C3E8C2CF330E5C17AADDBED Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/Tj4Mcwc_96ZTjJYw-9rKbpG4AXA.roa Signing time: Fri 02 Jan 2026 10:19:46 +0000 ROA not before: Fri 02 Jan 2026 10:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 36131 IP address blocks: 5.150.156.0/24 maxlen: 24 5.150.157.0/24 maxlen: 24 5.150.158.0/24 maxlen: 24 5.150.159.0/24 maxlen: 24 185.22.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 19:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:70:db:2c:3e:8c:2c:f3:30:e5:c1:7a:ad:db:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d Validity Not Before: Jan 2 10:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e3e0c73073ff7a6538c9630fbdaca6e91b80170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:71:3e:d7:72:3a:1b:d8:89:b4:c8:26:39:fb: dd:8c:46:1e:8b:74:05:3e:66:19:80:c8:8d:68:b2: e3:15:3f:2b:34:dc:98:12:58:81:ee:43:63:9d:32: e6:ca:80:80:be:46:40:75:11:33:43:36:08:4f:4a: bb:49:56:ad:7a:ea:7b:62:09:b9:29:09:18:38:e1: 0e:cd:a0:c7:7a:96:c6:c5:83:ca:bc:ae:9e:5d:c5: f4:d5:4d:a3:6b:b4:8a:ac:4e:a7:23:e2:7b:20:9a: 1d:c0:ba:86:90:a9:38:e5:ca:0a:f7:b2:7b:ce:71: 76:0d:61:0b:e8:d6:a6:65:cb:fb:a2:d9:66:29:36: 37:c3:a7:1f:7f:b7:3f:fd:5a:5c:6b:a7:a1:a0:1c: 20:e4:57:d2:27:c5:93:ae:9d:71:51:9b:2c:72:80: ff:cf:e6:36:a3:c9:28:9a:7b:be:81:af:24:b7:00: 2c:45:3b:76:6a:1d:ca:66:9d:57:3f:30:15:d3:ec: 5f:a3:31:0e:93:e9:48:65:7d:55:93:9e:8f:63:9f: b8:f7:da:f1:71:5a:f8:a3:83:b2:d7:4d:b2:74:00: eb:a8:e1:fc:8f:0b:81:b8:66:6a:a9:55:49:c6:00: ab:0d:d5:20:53:43:03:03:92:2e:fa:36:ab:ce:90: 7b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:3E:0C:73:07:3F:F7:A6:53:8C:96:30:FB:DA:CA:6E:91:B8:01:70 X509v3 Authority Key Identifier: keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/Tj4Mcwc_96ZTjJYw-9rKbpG4AXA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.150.156.0/22 185.22.42.0/24 Signature Algorithm: sha256WithRSAEncryption c3:1c:78:c0:a4:f7:c7:b2:e2:bf:59:c1:e3:78:19:ed:09:4c: 3b:33:d8:f2:49:b4:5b:72:7c:4c:5f:89:91:37:2a:35:02:b7: 10:ed:21:46:f0:68:ba:eb:14:ca:9b:ed:50:49:97:f6:13:f4: 4b:bf:f3:49:a7:55:57:61:35:ae:d6:24:71:10:ca:25:db:f1: 69:fa:09:c0:61:36:91:4e:a6:5e:a6:2b:99:fb:79:41:58:d4: a5:55:6e:01:79:5c:76:8c:4c:0b:c7:d8:91:9d:29:7b:bd:6d: 99:54:54:c1:e5:56:ef:18:2c:81:d9:52:5c:4c:3f:eb:c6:db: 50:58:a2:f2:be:88:b4:65:8e:4a:61:00:f7:8a:8d:36:86:a7: 4d:db:49:15:9b:e4:69:95:93:58:8a:e6:da:27:67:ed:15:5f: 5f:4c:04:e0:6f:a9:ad:6b:32:07:91:fa:47:f0:f5:d4:22:9f: 35:3c:3a:7a:4a:86:39:a0:45:f7:13:c6:88:07:f8:e0:e7:a7: 20:d9:ad:ce:25:c4:f6:bd:13:f6:c3:78:3d:cb:88:2b:a1:4a: 69:f5:de:03:23:40:d1:32:07:b9:8d:76:ba:4e:dc:0c:f9:55: 5d:b5:29:52:a0:a1:9e:2f:3c:35:cf:13:88:43:a2:0e:58:53: 1e:72:e5:3b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OHDbLD6MLPMw5cF6rdvtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYjJiYjdiYWQ1MGYxOTIxODEwYTAyOGU3OGVkZDY1Zjgx ZjZhN2QwHhcNMjYwMTAyMTAxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTNlMGM3MzA3M2ZmN2E2NTM4Yzk2MzBmYmRhY2E2ZTkxYjgwMTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHE+13I6G9iJtMgmOfvdjEYei3QF PmYZgMiNaLLjFT8rNNyYEliB7kNjnTLmyoCAvkZAdREzQzYIT0q7SVateup7Ygm5 KQkYOOEOzaDHepbGxYPKvK6eXcX01U2ja7SKrE6nI+J7IJodwLqGkKk45coK97J7 znF2DWEL6NamZcv7otlmKTY3w6cff7c//Vpca6ehoBwg5FfSJ8WTrp1xUZsscoD/ z+Y2o8komnu+ga8ktwAsRTt2ah3KZp1XPzAV0+xfozEOk+lIZX1Vk56PY5+499rx cVr4o4Oy102ydADrqOH8jwuBuGZqqVVJxgCrDdUgU0MDA5Iu+jarzpB7RQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFE4+DHMHP/emU4yWMPvaym6RuAFwMB8GA1UdIwQY MBaAFE+yu3utUPGSGBCgKOeO3WX4H2p9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYt MjdmYmM5OWVhM2M2LzEvVGo0TWN3Y185NlpUakpZdy05ckticEc0QVhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYtMjdmYmM5OWVhM2M2 LzEvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCBZacAwQA uRYqMA0GCSqGSIb3DQEBCwUAA4IBAQDDHHjApPfHsuK/WcHjeBntCUw7M9jySbRb cnxMX4mRNyo1ArcQ7SFG8Gi66xTKm+1QSZf2E/RLv/NJp1VXYTWu1iRxEMol2/Fp +gnAYTaRTqZepiuZ+3lBWNSlVW4BeVx2jEwLx9iRnSl7vW2ZVFTB5VbvGCyB2VJc TD/rxttQWKLyvoi0ZY5KYQD3io02hqdN20kVm+RplZNYiubaJ2ftFV9fTATgb6mt azIHkfpH8PXUIp81PDp6SoY5oEX3E8aIB/jg56cg2a3OJcT2vRP2w3g9y4groUpp 9d4DI0DRMge5jXa6TtwM+VVdtSlSoKGeLzw1zxOIQ6IOWFMecuU7 -----END CERTIFICATE-----Generated at Wed Jan 21 01:51:12 2026 by rpki-client