This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/TTHKvP9I4eIyqktaeSzVse2AYsc.roa File: TTHKvP9I4eIyqktaeSzVse2AYsc.roa (raw, json) Hash identifier: s8CiSrgNzMnwB+ig5lYNN30bUjmiisXPbvyl36mvQ8w= Subject key identifier: 4D:31:CA:BC:FF:48:E1:E2:32:AA:4B:5A:79:2C:D5:B1:ED:80:62:C7 Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec Certificate serial: 019B797EBFF216C36279C266D1F07C8575E6 Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/TTHKvP9I4eIyqktaeSzVse2AYsc.roa Signing time: Thu 01 Jan 2026 12:18:28 +0000 ROA not before: Thu 01 Jan 2026 12:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48917 IP address blocks: 62.204.158.0/24 maxlen: 24 78.83.128.0/24 maxlen: 24 78.83.129.0/24 maxlen: 24 78.83.130.0/24 maxlen: 24 78.83.131.0/24 maxlen: 24 78.83.132.0/24 maxlen: 24 78.83.133.0/24 maxlen: 24 78.83.134.0/24 maxlen: 24 78.83.135.0/24 maxlen: 24 88.203.156.0/24 maxlen: 24 92.247.72.0/24 maxlen: 24 92.247.73.0/24 maxlen: 24 92.247.74.0/24 maxlen: 24 92.247.75.0/24 maxlen: 24 92.247.76.0/24 maxlen: 24 92.247.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:bf:f2:16:c3:62:79:c2:66:d1:f0:7c:85:75:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec Validity Not Before: Jan 1 12:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d31cabcff48e1e232aa4b5a792cd5b1ed8062c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6e:94:fa:d0:71:3f:c0:f8:65:32:2d:86:7a: 65:e2:3a:6d:4f:ea:8e:ed:d5:47:b5:7c:e9:54:a9: ef:88:d2:73:31:e3:b7:31:25:80:b3:b1:39:a8:06: d4:32:09:86:58:64:96:d9:00:d0:73:f8:12:dd:e2: 4e:82:36:73:8b:51:1f:86:0d:e8:13:17:52:c4:71: 37:49:75:ef:0b:38:a8:1e:06:9b:b2:c4:c6:00:d5: 11:f8:12:54:1d:63:38:9f:c2:f7:30:e7:e4:02:ba: 4e:57:94:5d:f3:15:0a:53:00:9e:16:7e:cb:d8:16: 0b:1e:e9:4f:3e:f6:94:c0:65:b8:4c:71:41:ba:25: 65:ae:1d:d4:83:51:da:80:da:34:9d:6f:59:ea:8c: 1b:6e:d9:ab:49:e0:b9:f1:d3:8f:98:3f:27:07:af: 7f:1e:ad:90:28:f2:5a:82:cf:48:0f:10:ea:1e:a7: 1f:62:7d:62:bc:7d:4c:3b:12:c6:ea:a0:57:a5:5e: 47:77:07:8e:b1:cd:12:ec:da:6a:d7:68:f3:0a:e4: 67:b5:0f:33:b2:d5:a3:bb:92:b2:ef:21:76:24:bb: db:86:4f:f9:62:01:c7:84:4b:08:50:4f:dd:cb:d3: f7:6e:34:a2:6b:2d:38:ee:ba:d7:29:14:6a:ae:08: d1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:31:CA:BC:FF:48:E1:E2:32:AA:4B:5A:79:2C:D5:B1:ED:80:62:C7 X509v3 Authority Key Identifier: keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/TTHKvP9I4eIyqktaeSzVse2AYsc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.204.158.0/24 78.83.128.0/21 88.203.156.0/24 92.247.72.0-92.247.76.255 92.247.160.0/22 Signature Algorithm: sha256WithRSAEncryption 73:a9:ce:12:b9:f3:bc:18:68:8a:99:8a:90:fd:1b:13:b7:31: a2:8f:41:4a:c3:80:8e:cf:bf:8f:5b:87:a4:33:dc:46:9f:b3: b0:1b:44:a6:35:f4:15:b9:26:54:30:6d:a9:16:b4:2b:f7:d7: 6e:b4:c3:47:38:c5:b4:21:35:66:10:76:44:9f:a3:a3:1e:35: 9c:09:61:bc:74:09:f5:0e:bc:12:3e:1c:4a:eb:bf:30:3c:c0: 12:87:c3:69:13:ee:20:a5:30:28:ba:fe:4c:dd:c3:9a:95:3a: b0:cc:55:0a:84:1e:0b:2b:2b:56:44:88:50:1b:db:46:40:4a: 4d:79:3b:39:2b:18:27:50:62:ff:71:45:70:ac:58:f9:c0:45: 23:03:4d:42:45:85:39:41:02:db:7b:d9:56:f1:9a:8d:34:fd: 8e:9c:f3:20:41:b5:9d:2b:83:23:a1:1f:b4:1b:96:97:ba:8b: 09:c5:3e:87:c4:ab:a5:ec:24:6f:51:e5:b4:fa:81:a2:e1:d9: ac:71:e8:c7:58:33:bf:5f:dd:d8:62:c1:35:74:d5:64:3b:78: 79:8e:f2:5c:76:89:da:50:5e:8f:bc:78:1b:7f:09:bb:12:43: 97:4a:0b:69:0c:61:e3:35:07:ba:b4:54:bb:00:82:cd:48:03: be:97:f4:0f -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt5fr/yFsNiecJm0fB8hXXmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj ZDgyZWMwHhcNMjYwMTAxMTIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDMxY2FiY2ZmNDhlMWUyMzJhYTRiNWE3OTJjZDViMWVkODA2MmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum6U+tBxP8D4ZTIthnpl4jptT+qO 7dVHtXzpVKnviNJzMeO3MSWAs7E5qAbUMgmGWGSW2QDQc/gS3eJOgjZzi1Efhg3o ExdSxHE3SXXvCzioHgabssTGANUR+BJUHWM4n8L3MOfkArpOV5Rd8xUKUwCeFn7L 2BYLHulPPvaUwGW4THFBuiVlrh3Ug1HagNo0nW9Z6owbbtmrSeC58dOPmD8nB69/ Hq2QKPJags9IDxDqHqcfYn1ivH1MOxLG6qBXpV5HdweOsc0S7Npq12jzCuRntQ8z stWju5Ky7yF2JLvbhk/5YgHHhEsIUE/dy9P3bjSiay047rrXKRRqrgjRtQIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFE0xyrz/SOHiMqpLWnks1bHtgGLHMB8GA1UdIwQY MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt N2ZiYmFlNmY5NDM3LzEvVFRIS3ZQOUk0ZUl5cWt0YWVTelZzZTJBWXNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3 LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQAPsyeAwQD TlOAAwQAWMucMAwDBANc90gDBABc90wDBAJc96AwDQYJKoZIhvcNAQELBQADggEB AHOpzhK587wYaIqZipD9GxO3MaKPQUrDgI7Pv49bh6Qz3Eafs7AbRKY19BW5JlQw bakWtCv31260w0c4xbQhNWYQdkSfo6MeNZwJYbx0CfUOvBI+HErrvzA8wBKHw2kT 7iClMCi6/kzdw5qVOrDMVQqEHgsrK1ZEiFAb20ZASk15OzkrGCdQYv9xRXCsWPnA RSMDTUJFhTlBAtt72Vbxmo00/Y6c8yBBtZ0rgyOhH7Qblpe6iwnFPofEq6XsJG9R 5bT6gaLh2axx6MdYM79f3dhiwTV01WQ7eHmO8lx2idpQXo+8eBt/CbsSQ5dKC2kM YeM1B7q0VLsAgs1IA76X9A8= -----END CERTIFICATE-----Generated at Sun Jan 25 15:29:09 2026 by rpki-client