This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/TUxGT6b7VmBODBTYsF2NgpIkI_g.roa File: TUxGT6b7VmBODBTYsF2NgpIkI_g.roa (raw, json) Hash identifier: 3zWjegldqSXFUKgzRCSieNP7a6jAxz4Yeeh+x/krXJ8= Subject key identifier: 4D:4C:46:4F:A6:FB:56:60:4E:0C:14:D8:B0:5D:8D:82:92:24:23:F8 Certificate issuer: /CN=567190854786a16afa6b0ec78dfb0620abaacfef Certificate serial: 019B78A280C5B9505841D111E7DA4975F14C Authority key identifier: 56:71:90:85:47:86:A1:6A:FA:6B:0E:C7:8D:FB:06:20:AB:AA:CF:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/TUxGT6b7VmBODBTYsF2NgpIkI_g.roa Signing time: Thu 01 Jan 2026 08:17:54 +0000 ROA not before: Thu 01 Jan 2026 08:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41489 IP address blocks: 81.187.42.0/24 maxlen: 24 81.187.96.0/20 maxlen: 20 81.187.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:80:c5:b9:50:58:41:d1:11:e7:da:49:75:f1:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=567190854786a16afa6b0ec78dfb0620abaacfef Validity Not Before: Jan 1 08:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d4c464fa6fb56604e0c14d8b05d8d82922423f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:97:bc:e8:ee:49:83:8c:20:fe:b7:7c:cf:47: bd:33:32:f1:ce:ba:46:05:2e:d0:65:d4:7d:b8:61: 5c:cf:4c:e0:ef:0d:69:7f:b3:ee:3d:22:f7:87:da: e1:c5:b5:c3:0d:ba:7c:74:ed:7a:af:3c:7b:33:89: 63:00:dd:f1:5a:3a:72:f9:f5:24:f9:06:25:43:bd: e2:96:de:a5:ba:a2:74:0d:31:02:4c:16:2b:70:8a: 84:70:a4:45:a6:7d:cd:79:db:e5:d5:2b:18:e7:a2: ed:df:23:ed:63:6a:0f:8d:8a:3c:46:85:2d:df:fc: 58:e0:f4:32:91:dd:6d:00:c1:e2:0c:49:05:25:7f: db:e1:3d:95:d3:d1:12:23:0d:fe:a8:b0:f9:09:fa: c5:ae:6b:e1:4b:04:03:42:d3:3d:e2:67:70:f9:f3: 5e:c4:c9:0c:fd:8d:cf:37:05:1d:76:42:ac:40:01: 7f:23:73:6a:13:96:74:1a:c9:a8:38:87:cc:52:f3: f1:a7:c6:a2:3a:45:9a:c4:0b:7e:27:6d:e5:51:e3: f9:56:32:69:0e:8b:99:48:54:0d:4b:5c:06:12:a9: ca:42:fe:7d:76:b8:32:dc:d1:01:32:1b:19:42:1e: 92:46:dd:f5:54:e3:45:08:a3:fc:fe:ed:a2:63:64: db:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:4C:46:4F:A6:FB:56:60:4E:0C:14:D8:B0:5D:8D:82:92:24:23:F8 X509v3 Authority Key Identifier: keyid:56:71:90:85:47:86:A1:6A:FA:6B:0E:C7:8D:FB:06:20:AB:AA:CF:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/TUxGT6b7VmBODBTYsF2NgpIkI_g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.187.42.0/24 81.187.96.0/20 81.187.128.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:e7:65:fd:f6:ff:8b:bf:40:35:f5:05:01:1d:14:d7:34:82: ac:b9:d9:d4:a4:c8:39:54:82:d0:5f:72:12:38:f2:46:d1:4c: ff:02:50:d0:4f:d4:72:57:3f:9d:8f:3e:64:03:a1:66:1b:11: 4e:22:93:59:77:25:57:03:f2:cb:26:e0:18:93:ea:88:2a:47: be:cb:1a:06:c5:e6:e8:d3:10:b9:e3:84:8c:7c:6c:0f:0c:90: ab:98:ea:94:f7:bb:82:d8:15:5e:fe:c3:ce:43:4a:31:38:b2: 86:39:d3:c3:22:39:73:0e:84:a3:b9:2e:d9:b6:34:08:17:0a: b2:13:48:a9:c7:47:c7:7e:cc:c0:94:d6:11:23:77:57:23:ca: 93:2e:5f:7a:ff:70:ce:67:b6:9c:22:97:39:fe:f5:52:b4:18: 48:24:d2:a6:44:75:4e:c2:8a:f6:9a:02:5f:61:ff:2f:22:3f: c9:0c:b6:68:f9:eb:e2:72:20:d8:de:e0:8e:98:62:e9:29:6b: c7:21:aa:6a:92:e4:0c:cc:b2:f5:e7:62:40:0e:59:d8:39:85: 76:86:59:2a:f4:06:bf:4e:6a:6f:1a:85:f0:2b:d1:43:2d:81: 70:ec:a2:b9:f0:37:41:9b:b8:80:b7:06:10:f4:8a:b0:cf:bb: 9d:ed:9f:c9 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4ooDFuVBYQdER59pJdfFMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2NzE5MDg1NDc4NmExNmFmYTZiMGVjNzhkZmIwNjIwYWJh YWNmZWYwHhcNMjYwMTAxMDgxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDRjNDY0ZmE2ZmI1NjYwNGUwYzE0ZDhiMDVkOGQ4MjkyMjQyM2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJe86O5Jg4wg/rd8z0e9MzLxzrpG BS7QZdR9uGFcz0zg7w1pf7PuPSL3h9rhxbXDDbp8dO16rzx7M4ljAN3xWjpy+fUk +QYlQ73ilt6luqJ0DTECTBYrcIqEcKRFpn3Nedvl1SsY56Lt3yPtY2oPjYo8RoUt 3/xY4PQykd1tAMHiDEkFJX/b4T2V09ESIw3+qLD5CfrFrmvhSwQDQtM94mdw+fNe xMkM/Y3PNwUddkKsQAF/I3NqE5Z0GsmoOIfMUvPxp8aiOkWaxAt+J23lUeP5VjJp DouZSFQNS1wGEqnKQv59drgy3NEBMhsZQh6SRt31VONFCKP8/u2iY2TbWQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFE1MRk+m+1ZgTgwU2LBdjYKSJCP4MB8GA1UdIwQY MBaAFFZxkIVHhqFq+msOx437BiCrqs/vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVm5HUWhVZUdvV3I2YXc3SGpmc0dJS3Vxei04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yNGMzMjQtYTE1ZS00Y2QwLTk0YzEt NzNmZjQwOTU5MzQ4LzEvVFV4R1Q2YjdWbUJPREJUWXNGMk5ncElrSV9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8yNGMzMjQtYTE1ZS00Y2QwLTk0YzEtNzNmZjQwOTU5MzQ4 LzEvVm5HUWhVZUdvV3I2YXc3SGpmc0dJS3Vxei04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUbsqAwQE UbtgAwQAUbuAMA0GCSqGSIb3DQEBCwUAA4IBAQCL52X99v+Lv0A19QUBHRTXNIKs udnUpMg5VILQX3ISOPJG0Uz/AlDQT9RyVz+djz5kA6FmGxFOIpNZdyVXA/LLJuAY k+qIKke+yxoGxebo0xC544SMfGwPDJCrmOqU97uC2BVe/sPOQ0oxOLKGOdPDIjlz DoSjuS7ZtjQIFwqyE0ipx0fHfszAlNYRI3dXI8qTLl96/3DOZ7acIpc5/vVStBhI JNKmRHVOwor2mgJfYf8vIj/JDLZo+eviciDY3uCOmGLpKWvHIapqkuQMzLL152JA DlnYOYV2hlkq9Aa/TmpvGoXwK9FDLYFw7KK58DdBm7iAtwYQ9Iqwz7ud7Z/J -----END CERTIFICATE-----Generated at Sun Jan 25 23:54:28 2026 by rpki-client