This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/TsBKJ5VG1iOHqte2doC7OTdW_hw.roa File: TsBKJ5VG1iOHqte2doC7OTdW_hw.roa (raw, json) Hash identifier: KJo9UiYoALbrSsQU23bvnMkU2vT+dKNpE5NMA+Hvo6E= Subject key identifier: 4E:C0:4A:27:95:46:D6:23:87:AA:D7:B6:76:80:BB:39:37:56:FE:1C Certificate issuer: /CN=836528e152b6dcba1571241ac55be5bce01118b7 Certificate serial: 019B7BA3D3E28777206E0C2E5CD4C334E5B6 Authority key identifier: 83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/TsBKJ5VG1iOHqte2doC7OTdW_hw.roa Signing time: Thu 01 Jan 2026 22:18:12 +0000 ROA not before: Thu 01 Jan 2026 22:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 265554 IP address blocks: 185.198.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.crl rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:d3:e2:87:77:20:6e:0c:2e:5c:d4:c3:34:e5:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=836528e152b6dcba1571241ac55be5bce01118b7 Validity Not Before: Jan 1 22:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ec04a279546d62387aad7b67680bb393756fe1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:64:86:52:27:9d:19:30:b7:32:1b:4c:b6:fc: 97:50:3f:b1:33:3b:72:b2:1d:4a:99:89:e1:76:5b: 6b:2b:b1:0f:c3:63:ec:d3:8f:b1:7d:32:af:c6:1c: 39:15:3d:2c:4e:bf:ab:1b:ef:ac:14:c4:aa:e5:11: ed:70:84:3c:ff:6b:fb:fa:5b:93:1f:37:57:3a:2a: e0:d2:c8:4a:08:43:c9:f5:60:88:ac:b0:18:50:74: 84:a3:d6:e1:a7:ac:07:43:29:f7:c8:8b:0a:12:ac: b1:57:7f:25:f9:a5:cd:35:03:46:0a:d6:49:d1:b2: 64:7b:63:f2:fc:b4:d4:e5:2a:1f:6d:8e:0a:f3:5d: 3f:cd:bd:d2:98:33:d0:02:4b:e5:9e:b7:43:c6:6e: c0:a7:9c:54:7b:9d:91:93:32:cf:7f:55:2c:c9:0e: de:42:2d:1e:7b:ba:3b:27:14:51:0f:e3:30:52:88: 42:4e:a0:13:51:4b:63:5a:76:10:63:af:cf:0f:fa: 02:ab:30:dc:0d:56:97:89:8c:a3:f4:b8:0a:ff:f3: 3a:d5:91:2c:4e:e3:9e:81:bf:23:89:71:9f:ab:1c: ae:00:cd:3b:8d:c5:e6:d9:93:82:bc:ca:12:2c:1d: 2b:55:d1:a3:f0:5b:6c:7e:61:90:cd:f5:c7:84:8f: ff:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:C0:4A:27:95:46:D6:23:87:AA:D7:B6:76:80:BB:39:37:56:FE:1C X509v3 Authority Key Identifier: keyid:83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/TsBKJ5VG1iOHqte2doC7OTdW_hw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.198.100.0/22 Signature Algorithm: sha256WithRSAEncryption 6d:64:8c:7c:4f:a2:62:06:a8:cb:fd:03:d6:a4:47:5f:db:52: 14:0f:6d:ff:fb:21:e8:5e:8b:e0:fe:5a:ab:86:fb:44:43:d2: 94:db:af:a2:84:fa:08:c2:d2:d9:ca:84:11:0d:f6:4f:73:52: 6c:5e:24:e3:31:fd:8f:1a:a7:5e:01:ed:e4:0f:65:07:a8:b5: 36:1d:e0:bb:63:84:1a:09:ea:fa:00:74:5b:ed:ff:ef:7c:a4: 89:bc:7c:4d:d7:b9:75:53:e2:0c:5d:d7:fa:1b:bc:90:c8:61: 37:7b:1a:ce:2e:39:31:d0:13:08:c2:08:45:62:0c:6a:d4:c4: a5:dd:a6:23:b2:42:3d:4d:3b:7a:6c:18:c8:72:79:e9:34:94: 50:02:e8:95:c7:8a:f9:75:08:38:fc:68:e0:28:88:d1:a7:a2: ef:05:70:c5:ca:4f:98:53:46:e5:f5:66:01:a4:21:ec:94:a8: 17:cd:87:21:fa:6a:74:33:d3:ce:5b:6e:95:9d:8e:c0:22:d2: 49:43:c8:ae:e5:ff:0d:46:bf:d9:2e:a1:b3:63:92:3f:55:19: f8:07:8b:30:45:93:ba:1b:3b:51:e5:6d:9a:a5:8d:a1:5b:6d: 61:b2:86:c4:f7:bd:08:15:10:7d:85:43:98:ba:f2:fc:ec:4d: c9:16:85:80 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o9Pih3cgbgwuXNTDNOW2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNjUyOGUxNTJiNmRjYmExNTcxMjQxYWM1NWJlNWJjZTAx MTE4YjcwHhcNMjYwMTAxMjIxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZWMwNGEyNzk1NDZkNjIzODdhYWQ3YjY3NjgwYmIzOTM3NTZmZTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGSGUiedGTC3MhtMtvyXUD+xMzty sh1KmYnhdltrK7EPw2Ps04+xfTKvxhw5FT0sTr+rG++sFMSq5RHtcIQ8/2v7+luT HzdXOirg0shKCEPJ9WCIrLAYUHSEo9bhp6wHQyn3yIsKEqyxV38l+aXNNQNGCtZJ 0bJke2Py/LTU5SofbY4K810/zb3SmDPQAkvlnrdDxm7Ap5xUe52RkzLPf1UsyQ7e Qi0ee7o7JxRRD+MwUohCTqATUUtjWnYQY6/PD/oCqzDcDVaXiYyj9LgK//M61ZEs TuOegb8jiXGfqxyuAM07jcXm2ZOCvMoSLB0rVdGj8FtsfmGQzfXHhI//JwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE7ASieVRtYjh6rXtnaAuzk3Vv4cMB8GA1UdIwQY MBaAFINlKOFStty6FXEkGsVb5bzgERi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzJVbzRWSzIzTG9WY1NRYXhWdmx2T0FSR0xjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC83YzcwZjQtNWYzYS00ZmQzLTg4M2Mt ZWI5NDE1ZWM1NDhhLzEvVHNCS0o1VkcxaU9IcXRlMmRvQzdPVGRXX2h3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC83YzcwZjQtNWYzYS00ZmQzLTg4M2MtZWI5NDE1ZWM1NDhh LzEvZzJVbzRWSzIzTG9WY1NRYXhWdmx2T0FSR0xjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucZkMA0G CSqGSIb3DQEBCwUAA4IBAQBtZIx8T6JiBqjL/QPWpEdf21IUD23/+yHoXovg/lqr hvtEQ9KU26+ihPoIwtLZyoQRDfZPc1JsXiTjMf2PGqdeAe3kD2UHqLU2HeC7Y4Qa Cer6AHRb7f/vfKSJvHxN17l1U+IMXdf6G7yQyGE3exrOLjkx0BMIwghFYgxq1MSl 3aYjskI9TTt6bBjIcnnpNJRQAuiVx4r5dQg4/GjgKIjRp6LvBXDFyk+YU0bl9WYB pCHslKgXzYch+mp0M9POW26VnY7AItJJQ8iu5f8NRr/ZLqGzY5I/VRn4B4swRZO6 GztR5W2apY2hW21hsobE970IFRB9hUOYuvL87E3JFoWA -----END CERTIFICATE-----Generated at Sun Jan 25 20:30:05 2026 by rpki-client