This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/TG3cV_k_6T9HbxHghkTkoJbXOL0.roa File: TG3cV_k_6T9HbxHghkTkoJbXOL0.roa (raw, json) Hash identifier: burWH/ULqeg/o8zbECBxBAYn5WigohJQk5bXldlsBxE= Subject key identifier: 4C:6D:DC:57:F9:3F:E9:3F:47:6F:11:E0:86:44:E4:A0:96:D7:38:BD Certificate issuer: /CN=59dd542781851c0bce5a3ea5cc387650ffc8277e Certificate serial: 019B7EA6D75DA9551453E4EA2C58C68804CA Authority key identifier: 59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/TG3cV_k_6T9HbxHghkTkoJbXOL0.roa Signing time: Fri 02 Jan 2026 12:20:21 +0000 ROA not before: Fri 02 Jan 2026 12:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39312 IP address blocks: 77.81.122.0/24 maxlen: 24 84.47.180.0/24 maxlen: 24 188.241.244.0/23 maxlen: 23 195.90.110.0/23 maxlen: 23 2a05:da80:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:d7:5d:a9:55:14:53:e4:ea:2c:58:c6:88:04:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59dd542781851c0bce5a3ea5cc387650ffc8277e Validity Not Before: Jan 2 12:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c6ddc57f93fe93f476f11e08644e4a096d738bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ad:ba:a7:12:8b:b3:5f:57:de:f3:17:34:a4: 39:ef:e0:44:86:dc:eb:2f:bb:e1:fc:f9:e7:d0:33: ee:7f:0a:d4:3e:a8:fc:ee:84:30:bd:28:cb:e3:86: 37:93:19:c6:62:1e:25:16:7b:7e:61:14:cf:38:a2: 11:f9:68:ba:4c:c3:79:49:d7:25:1d:5a:13:5a:8d: 4d:87:3c:5d:9d:6f:a4:5b:26:6c:03:9a:b4:e1:3b: dd:d4:20:15:41:ef:43:4d:51:0c:fb:cb:49:e9:de: d2:d8:67:e3:8c:ce:a5:16:f2:02:bd:3e:10:92:92: b2:8e:71:c0:b1:1d:98:01:80:86:a3:20:4e:90:14: aa:53:24:07:7c:ab:12:e9:fe:91:03:cb:94:3a:7e: bb:c9:b9:82:d4:bb:55:ed:6c:86:fd:92:eb:73:67: c8:0d:04:f0:98:16:b5:00:33:d1:27:35:88:fb:b6: 91:be:f3:01:19:60:63:eb:7f:3b:76:9d:55:89:57: 0c:d9:40:cd:74:c2:43:28:b4:82:6b:87:0a:49:a5: 00:fa:91:03:47:fc:38:57:da:08:ec:9e:28:7a:52: 4b:89:45:0a:65:46:01:84:99:5a:7e:a9:6b:ba:62: 7a:79:4d:0f:3e:55:c6:9c:6c:0e:a4:8a:31:7f:64: f1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:6D:DC:57:F9:3F:E9:3F:47:6F:11:E0:86:44:E4:A0:96:D7:38:BD X509v3 Authority Key Identifier: keyid:59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/TG3cV_k_6T9HbxHghkTkoJbXOL0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.81.122.0/24 84.47.180.0/24 188.241.244.0/23 195.90.110.0/23 IPv6: 2a05:da80:2000::/40 Signature Algorithm: sha256WithRSAEncryption a0:17:4c:a1:2d:75:60:7f:50:2a:ee:70:e2:3e:ca:85:60:02: f2:1f:b5:0b:96:2e:05:59:6b:50:89:56:b2:9d:b0:ad:6d:5c: b2:c8:5e:bd:68:96:24:e5:e8:ec:30:23:5e:8f:c7:12:66:76: 4a:83:01:fc:a3:ea:1a:ce:12:52:fb:e3:79:b1:e4:36:e1:d7: 0f:88:67:7d:e7:4b:19:90:87:1b:73:5c:0d:f4:ea:b1:e0:63: c5:d5:99:a4:84:be:58:5e:61:32:67:97:e1:a1:04:a0:d2:dc: 58:e2:99:8c:ba:82:d0:4e:0f:ee:59:d3:dd:28:0d:97:bc:6e: 56:de:65:25:ca:04:dd:ef:bb:46:73:f4:dc:cc:bc:f5:fd:c5: b4:66:a6:b0:dd:07:a4:62:80:eb:97:a9:22:36:99:de:16:36: 9e:d4:d6:c5:05:56:3c:d0:fc:65:3c:96:60:eb:f2:08:9b:3a: 0e:0b:12:53:47:9c:74:7d:cc:e4:10:97:1b:78:86:a8:32:31: c9:7a:17:00:3f:16:00:7d:01:a5:c9:6f:ca:0c:3e:5c:b0:65: 52:00:4a:3f:ab:f5:4c:12:06:02:42:40:73:51:97:94:e7:50: 8a:3f:46:bd:b3:cb:1b:59:e7:82:ee:e5:55:8c:49:70:66:45: e4:16:c8:2f -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt+ptddqVUUU+TqLFjGiATKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZGQ1NDI3ODE4NTFjMGJjZTVhM2VhNWNjMzg3NjUwZmZj ODI3N2UwHhcNMjYwMTAyMTIyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzZkZGM1N2Y5M2ZlOTNmNDc2ZjExZTA4NjQ0ZTRhMDk2ZDczOGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArK26pxKLs19X3vMXNKQ57+BEhtzr L7vh/Pnn0DPufwrUPqj87oQwvSjL44Y3kxnGYh4lFnt+YRTPOKIR+Wi6TMN5Sdcl HVoTWo1NhzxdnW+kWyZsA5q04Tvd1CAVQe9DTVEM+8tJ6d7S2GfjjM6lFvICvT4Q kpKyjnHAsR2YAYCGoyBOkBSqUyQHfKsS6f6RA8uUOn67ybmC1LtV7WyG/ZLrc2fI DQTwmBa1ADPRJzWI+7aRvvMBGWBj6387dp1ViVcM2UDNdMJDKLSCa4cKSaUA+pED R/w4V9oI7J4oelJLiUUKZUYBhJlafqlrumJ6eU0PPlXGnGwOpIoxf2TxLwIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFExt3Ff5P+k/R28R4IZE5KCW1zi9MB8GA1UdIwQY MBaAFFndVCeBhRwLzlo+pcw4dlD/yCd+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2QxVUo0R0ZIQXZPV2o2bHpEaDJVUF9JSjM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi83OWM0YmEtMzhlMi00ZjVhLTk1OWYt NDdlMDkzNzk4OWE4LzEvVEczY1Zfa182VDlIYnhIZ2hrVGtvSmJYT0wwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi83OWM0YmEtMzhlMi00ZjVhLTk1OWYtNDdlMDkzNzk4OWE4 LzEvV2QxVUo0R0ZIQXZPV2o2bHpEaDJVUF9JSjM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAeBAIAATAYAwQATVF6AwQA VC+0AwQBvPH0AwQBw1puMA4EAgACMAgDBgAqBdqAIDANBgkqhkiG9w0BAQsFAAOC AQEAoBdMoS11YH9QKu5w4j7KhWAC8h+1C5YuBVlrUIlWsp2wrW1csshevWiWJOXo 7DAjXo/HEmZ2SoMB/KPqGs4SUvvjebHkNuHXD4hnfedLGZCHG3NcDfTqseBjxdWZ pIS+WF5hMmeX4aEEoNLcWOKZjLqC0E4P7lnT3SgNl7xuVt5lJcoE3e+7RnP03My8 9f3FtGamsN0HpGKA65epIjaZ3hY2ntTWxQVWPND8ZTyWYOvyCJs6DgsSU0ecdH3M 5BCXG3iGqDIxyXoXAD8WAH0Bpclvygw+XLBlUgBKP6v1TBIGAkJAc1GXlOdQij9G vbPLG1nngu7lVYxJcGZF5BbILw== -----END CERTIFICATE-----Generated at Sun Jan 25 23:04:30 2026 by rpki-client