This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/TmsmTGmgS6sd6WFv5Rsll00K2Gs.roa File: TmsmTGmgS6sd6WFv5Rsll00K2Gs.roa (raw, json) Hash identifier: wAic2J4bqDmqrmzEVgtvUbDKm5nBwL0cJ98lVKcttls= Subject key identifier: 4E:6B:26:4C:69:A0:4B:AB:1D:E9:61:6F:E5:1B:25:97:4D:0A:D8:6B Certificate issuer: /CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b Certificate serial: 019B797E2ED5B754315A6F5FCFCCF6377C67 Authority key identifier: AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/TmsmTGmgS6sd6WFv5Rsll00K2Gs.roa Signing time: Thu 01 Jan 2026 12:17:51 +0000 ROA not before: Thu 01 Jan 2026 12:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58075 IP address blocks: 185.187.100.0/22 maxlen: 24 2a0a:47c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:2e:d5:b7:54:31:5a:6f:5f:cf:cc:f6:37:7c:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b Validity Not Before: Jan 1 12:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e6b264c69a04bab1de9616fe51b25974d0ad86b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:e6:78:c9:58:63:75:83:8b:aa:b9:69:73:b6: 3a:d6:25:f3:1b:0f:5a:be:ea:44:44:90:71:49:44: 11:cb:67:f9:6b:1f:31:61:82:ca:75:86:03:c3:45: b7:81:e7:3b:46:7a:02:e9:d6:23:52:0d:a6:56:d6: f4:1f:3d:00:26:c8:a6:9d:60:c2:dd:b1:41:74:6f: 5c:52:17:bc:a0:e8:17:21:4e:8c:bb:45:24:6b:2c: 0e:e7:78:3e:85:4b:65:38:71:93:bb:93:bd:ca:70: fd:b4:58:ce:a6:6c:29:7e:3d:51:e5:df:1c:cc:48: b4:70:dc:1c:ed:43:31:d2:62:6f:56:f2:90:cd:7c: 72:a2:12:43:ed:8d:2d:45:24:c9:81:1b:e4:0e:53: 2d:02:cc:f1:7f:02:bd:6c:e1:30:96:55:da:2b:64: a1:5b:65:91:61:34:33:1b:89:cc:40:5c:c6:58:f3: e9:73:e8:48:ed:99:98:dd:7c:86:71:1e:22:e7:2c: a0:55:c4:e3:7f:5f:ec:8d:9c:20:74:dd:7b:79:ea: bd:5e:32:3c:2d:3e:94:77:22:d8:49:e3:64:11:e8: b9:19:94:16:90:d8:82:5b:01:47:10:92:27:45:2b: 94:32:f8:d7:f0:e0:a7:95:a7:48:22:95:c6:c7:81: 57:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:6B:26:4C:69:A0:4B:AB:1D:E9:61:6F:E5:1B:25:97:4D:0A:D8:6B X509v3 Authority Key Identifier: keyid:AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/TmsmTGmgS6sd6WFv5Rsll00K2Gs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.187.100.0/22 IPv6: 2a0a:47c0::/29 Signature Algorithm: sha256WithRSAEncryption 45:5f:87:ef:53:1a:97:63:0e:9f:f2:01:fe:bd:6b:c5:2e:f1: 87:60:46:73:ec:1d:0e:b4:a5:ce:8a:06:fd:cb:fa:72:41:06: 36:57:17:14:e0:2d:6f:84:5f:87:f8:52:38:c4:fb:e0:ec:83: 42:49:85:b8:7e:85:33:44:43:e0:f7:1f:ed:c7:09:fa:c0:b5: 17:a4:c9:b9:91:8a:b3:19:fb:75:06:3b:ea:b3:10:c2:97:f8: ca:3d:21:e0:76:c7:fd:5c:48:df:2b:18:80:b9:6e:73:08:bf: 29:29:48:33:1a:6a:15:ab:2e:38:cf:92:ce:09:34:1d:f7:5c: a2:b0:78:e4:0e:7b:58:5f:84:36:53:b1:91:93:fb:f6:26:d7: 24:71:b3:ae:c2:94:5d:b3:10:6e:d8:68:11:c6:32:db:ae:19: d3:41:c2:56:c9:8b:1c:92:f3:dc:48:ac:a7:56:b3:d4:1b:77: 78:eb:de:18:9a:bc:95:cb:fc:ca:0a:9c:8f:ef:9f:6f:8e:ee: cb:8b:4c:b4:4f:07:38:b0:6c:82:b2:eb:81:78:48:f1:c6:7c: 73:3e:43:45:a7:26:48:91:e0:a0:11:25:06:51:a9:06:86:bc: b5:06:e5:91:ba:5f:3d:f4:f1:7a:c0:fa:8b:fa:17:cc:6d:40: e3:9c:ca:fe -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5fi7Vt1QxWm9fz8z2N3xnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiOWY4NGM2YTQ4ZDVjNmRmZTY0MTQ5ODczYjE0OGQxMTIw YjAwOWIwHhcNMjYwMTAxMTIxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTZiMjY0YzY5YTA0YmFiMWRlOTYxNmZlNTFiMjU5NzRkMGFkODZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+OZ4yVhjdYOLqrlpc7Y61iXzGw9a vupERJBxSUQRy2f5ax8xYYLKdYYDw0W3gec7RnoC6dYjUg2mVtb0Hz0AJsimnWDC 3bFBdG9cUhe8oOgXIU6Mu0UkaywO53g+hUtlOHGTu5O9ynD9tFjOpmwpfj1R5d8c zEi0cNwc7UMx0mJvVvKQzXxyohJD7Y0tRSTJgRvkDlMtAszxfwK9bOEwllXaK2Sh W2WRYTQzG4nMQFzGWPPpc+hI7ZmY3XyGcR4i5yygVcTjf1/sjZwgdN17eeq9XjI8 LT6UdyLYSeNkEei5GZQWkNiCWwFHEJInRSuUMvjX8OCnladIIpXGx4FXjwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFE5rJkxpoEurHelhb+UbJZdNCthrMB8GA1UdIwQY MBaAFKufhMakjVxt/mQUmHOxSNESCwCbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTUtRXhxU05YRzMtWkJTWWM3RkkwUklMQUpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8zNjE3N2YtN2NkOC00YmQzLTg2ODkt MjEzZDY0YmVmZjcxLzEvVG1zbVRHbWdTNnNkNldGdjVSc2xsMDBLMkdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8zNjE3N2YtN2NkOC00YmQzLTg2ODktMjEzZDY0YmVmZjcx LzEvcTUtRXhxU05YRzMtWkJTWWM3RkkwUklMQUpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCubtkMA0E AgACMAcDBQMqCkfAMA0GCSqGSIb3DQEBCwUAA4IBAQBFX4fvUxqXYw6f8gH+vWvF LvGHYEZz7B0OtKXOigb9y/pyQQY2VxcU4C1vhF+H+FI4xPvg7INCSYW4foUzREPg 9x/txwn6wLUXpMm5kYqzGft1BjvqsxDCl/jKPSHgdsf9XEjfKxiAuW5zCL8pKUgz GmoVqy44z5LOCTQd91yisHjkDntYX4Q2U7GRk/v2JtckcbOuwpRdsxBu2GgRxjLb rhnTQcJWyYsckvPcSKynVrPUG3d4694YmryVy/zKCpyP759vju7Li0y0Twc4sGyC suuBeEjxxnxzPkNFpyZIkeCgESUGUakGhry1BuWRul899PF6wPqL+hfMbUDjnMr+ -----END CERTIFICATE-----Generated at Mon Jan 26 11:39:53 2026 by rpki-client