This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/tlRAf5EiqUlqBJcvLJfhmJFN9vI.roa File: tlRAf5EiqUlqBJcvLJfhmJFN9vI.roa (raw, json) Hash identifier: fKYdczyGnrIDmFu9ZA4jTUe3SM7U43almigmqc8ux9c= Subject key identifier: B6:54:40:7F:91:22:A9:49:6A:04:97:2F:2C:97:E1:98:91:4D:F6:F2 Certificate issuer: /CN=eb78358a6a97d19b2f5afff1cfc793fbb4eafc9d Certificate serial: 019B7CED70E71283355FDD227F24BC7A2E89 Authority key identifier: EB:78:35:8A:6A:97:D1:9B:2F:5A:FF:F1:CF:C7:93:FB:B4:EA:FC:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63g1imqX0ZsvWv_xz8eT-7Tq_J0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/tlRAf5EiqUlqBJcvLJfhmJFN9vI.roa Signing time: Fri 02 Jan 2026 04:18:14 +0000 ROA not before: Fri 02 Jan 2026 04:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209372 IP address blocks: 31.204.1.0/24 maxlen: 24 31.204.2.0/23 maxlen: 24 31.204.4.0/22 maxlen: 24 31.204.8.0/21 maxlen: 24 31.204.16.0/20 maxlen: 24 31.204.26.0/23 maxlen: 24 31.204.27.0/24 maxlen: 24 31.204.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/63g1imqX0ZsvWv_xz8eT-7Tq_J0.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/63g1imqX0ZsvWv_xz8eT-7Tq_J0.mft rsync://rpki.ripe.net/repository/DEFAULT/63g1imqX0ZsvWv_xz8eT-7Tq_J0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:70:e7:12:83:35:5f:dd:22:7f:24:bc:7a:2e:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb78358a6a97d19b2f5afff1cfc793fbb4eafc9d Validity Not Before: Jan 2 04:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b654407f9122a9496a04972f2c97e198914df6f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:86:da:98:01:a8:d0:94:4b:ff:9d:22:3b:04: c8:61:66:98:74:97:0c:d4:99:2c:e1:dc:21:48:16: 9b:aa:39:d6:59:08:cf:a0:00:78:f8:e5:6b:ec:48: a8:59:b4:11:ab:45:11:66:ac:1f:bd:41:ff:4a:be: d0:5d:45:9b:64:20:4e:d5:8f:b7:39:2c:cd:50:62: 6b:1a:78:2f:e6:3f:91:13:c7:b2:94:84:d5:f1:f7: 78:51:a7:72:3a:ef:d9:0e:fd:37:fd:9d:e0:f4:20: 45:af:11:2e:55:09:c1:07:50:99:09:44:ae:04:ae: e4:a9:76:4a:8c:72:35:37:ef:19:7b:a5:f5:24:2f: 40:c8:e4:76:bb:d4:d3:72:ab:d3:e9:7e:41:22:a8: dc:1e:93:1d:df:43:52:fb:f6:86:89:61:34:8a:cf: 2b:cc:a2:6b:8f:34:da:ff:5f:dc:f6:fe:b4:f6:96: e3:79:ad:82:ad:c4:20:64:b2:a7:5c:8b:93:d9:2a: 6c:55:4d:60:e3:11:ef:f7:84:4e:86:71:7a:35:52: 49:76:5e:c6:e4:62:3d:33:ef:40:1c:36:e3:38:b3: 56:7a:b7:8a:8e:26:e7:47:e4:68:1c:fe:13:ce:1c: ce:2f:5f:bf:dc:e7:a8:3b:5f:ef:52:d4:40:e0:bc: 1e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:54:40:7F:91:22:A9:49:6A:04:97:2F:2C:97:E1:98:91:4D:F6:F2 X509v3 Authority Key Identifier: keyid:EB:78:35:8A:6A:97:D1:9B:2F:5A:FF:F1:CF:C7:93:FB:B4:EA:FC:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63g1imqX0ZsvWv_xz8eT-7Tq_J0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/tlRAf5EiqUlqBJcvLJfhmJFN9vI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/63g1imqX0ZsvWv_xz8eT-7Tq_J0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.204.1.0-31.204.63.255 Signature Algorithm: sha256WithRSAEncryption 35:b9:97:ef:a9:f2:44:f1:77:40:44:6b:e7:65:e6:62:2c:de: dc:d5:af:46:56:ab:79:79:00:df:53:8e:5b:e2:55:ba:54:de: 4e:5f:38:80:74:8f:90:c5:5f:a7:0e:d8:ea:8f:48:cc:e6:10: c5:ab:3f:4b:da:8e:4b:b1:61:d9:e3:2b:49:75:98:ef:88:cb: 47:44:a4:68:dd:f7:b7:c3:60:42:64:ae:28:f5:a0:58:55:c6: cf:e8:40:59:7b:79:72:be:8b:d6:a7:c4:0c:24:e3:76:59:e9: 55:31:a4:ed:4a:3e:b7:cd:86:a5:11:ff:b1:be:dc:78:2c:e9: f1:29:55:2c:03:b0:bc:09:9c:89:53:f5:81:50:e5:1e:67:83: b7:f0:cd:90:1f:e9:aa:c0:6a:d8:7d:96:89:86:50:50:6f:a4: 12:be:1f:29:2f:6e:2d:61:f7:6f:6c:08:d3:ed:62:64:cb:d0: a5:dc:d1:ff:ac:cd:4e:5e:c2:6c:8d:c6:43:82:78:1a:88:e5: 56:01:ed:27:e3:7b:79:72:ea:d4:fd:de:69:2b:3b:28:24:b4: 32:94:75:78:30:5d:93:28:07:01:7a:4e:82:53:91:1d:8f:a7: a8:07:ab:46:60:c1:1e:ab:d7:fb:4d:76:7c:3d:c1:54:e3:be: 95:18:1a:67 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt87XDnEoM1X90ifyS8ei6JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViNzgzNThhNmE5N2QxOWIyZjVhZmZmMWNmYzc5M2ZiYjRl YWZjOWQwHhcNMjYwMTAyMDQxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjU0NDA3ZjkxMjJhOTQ5NmEwNDk3MmYyYzk3ZTE5ODkxNGRmNmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIbamAGo0JRL/50iOwTIYWaYdJcM 1Jks4dwhSBabqjnWWQjPoAB4+OVr7EioWbQRq0URZqwfvUH/Sr7QXUWbZCBO1Y+3 OSzNUGJrGngv5j+RE8eylITV8fd4UadyOu/ZDv03/Z3g9CBFrxEuVQnBB1CZCUSu BK7kqXZKjHI1N+8Ze6X1JC9AyOR2u9TTcqvT6X5BIqjcHpMd30NS+/aGiWE0is8r zKJrjzTa/1/c9v609pbjea2CrcQgZLKnXIuT2SpsVU1g4xHv94ROhnF6NVJJdl7G 5GI9M+9AHDbjOLNWereKjibnR+RoHP4TzhzOL1+/3OeoO1/vUtRA4LweHwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFLZUQH+RIqlJagSXLyyX4ZiRTfbyMB8GA1UdIwQY MBaAFOt4NYpql9GbL1r/8c/Hk/u06vydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjNnMWltcVgwWnN2V3ZfeHo4ZVQtN1RxX0owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi80NjhiNzUtNTk5NC00OGZiLWE4NWQt NGE1ZWVkMWVlNWJjLzEvdGxSQWY1RWlxVWxxQkpjdkxKZmhtSkZOOXZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi80NjhiNzUtNTk5NC00OGZiLWE4NWQtNGE1ZWVkMWVlNWJj LzEvNjNnMWltcVgwWnN2V3ZfeHo4ZVQtN1RxX0owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAfzAED BAYfzAAwDQYJKoZIhvcNAQELBQADggEBADW5l++p8kTxd0BEa+dl5mIs3tzVr0ZW q3l5AN9TjlviVbpU3k5fOIB0j5DFX6cO2OqPSMzmEMWrP0vajkuxYdnjK0l1mO+I y0dEpGjd97fDYEJkrij1oFhVxs/oQFl7eXK+i9anxAwk43ZZ6VUxpO1KPrfNhqUR /7G+3Hgs6fEpVSwDsLwJnIlT9YFQ5R5ng7fwzZAf6arAath9lomGUFBvpBK+Hykv bi1h929sCNPtYmTL0KXc0f+szU5ewmyNxkOCeBqI5VYB7Sfje3ly6tT93mkrOygk tDKUdXgwXZMoBwF6ToJTkR2Pp6gHq0ZgwR6r1/tNdnw9wVTjvpUYGmc= -----END CERTIFICATE-----Generated at Sun Jan 25 19:43:08 2026 by rpki-client