This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/TbvRrpKrd0GK2OLSSk8cPsfvnp4.roa File: TbvRrpKrd0GK2OLSSk8cPsfvnp4.roa (raw, json) Hash identifier: a8AfxGqIJ1C2OuZ2oeaw7j0FDvi68pLNaQqGhkDj+Do= Subject key identifier: 4D:BB:D1:AE:92:AB:77:41:8A:D8:E2:D2:4A:4F:1C:3E:C7:EF:9E:9E Certificate issuer: /CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a Certificate serial: 019B78A35F1857EEC6C4039A4739BBECA386 Authority key identifier: 8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/TbvRrpKrd0GK2OLSSk8cPsfvnp4.roa Signing time: Thu 01 Jan 2026 08:18:51 +0000 ROA not before: Thu 01 Jan 2026 08:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39039 IP address blocks: 5.134.68.0/22 maxlen: 22 46.31.36.0/22 maxlen: 22 77.95.48.0/21 maxlen: 21 83.243.32.0/21 maxlen: 21 185.170.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:5f:18:57:ee:c6:c4:03:9a:47:39:bb:ec:a3:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a Validity Not Before: Jan 1 08:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4dbbd1ae92ab77418ad8e2d24a4f1c3ec7ef9e9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e5:50:36:57:cb:e1:c7:91:8b:3a:ec:d6:fc: 14:7a:f5:2f:69:a0:3b:48:73:da:33:07:28:ce:cf: cd:c8:b7:af:29:7c:14:a4:f8:28:a1:fa:a1:4a:d7: 21:ea:b9:4b:d6:6a:b1:1c:a6:f4:ae:1c:82:4b:68: 5a:db:05:42:0b:13:7c:ee:a2:20:af:92:64:a2:23: 48:e9:47:88:f6:28:18:7e:27:bf:af:aa:f5:87:b4: f6:4b:33:f6:f2:01:8b:b6:4c:cf:92:38:01:c2:d8: c9:1f:4a:99:41:e5:3f:2e:9f:f3:4e:46:b9:ac:19: 25:37:b0:f6:45:03:06:37:8d:04:6e:6a:09:36:7b: be:88:07:70:fe:10:e1:88:18:21:aa:9a:a9:f4:8f: c2:b6:01:a6:bd:6e:38:e9:e4:4f:35:69:da:ca:64: 2a:bb:8a:8b:3c:ac:30:92:08:22:15:1b:21:ac:56: f3:6b:b6:83:24:a8:37:ec:65:52:f3:2f:2b:31:ec: c9:a4:3c:a0:e1:27:63:6f:61:9b:9e:83:8d:44:71: 36:e8:1f:2e:4b:91:5f:f8:dc:df:36:a1:b2:e7:df: 08:f6:0a:c3:a6:90:75:04:66:5f:ee:0c:53:c7:f6: ba:c6:2c:bc:65:2f:18:fb:96:f4:96:34:48:1e:f3: 87:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:BB:D1:AE:92:AB:77:41:8A:D8:E2:D2:4A:4F:1C:3E:C7:EF:9E:9E X509v3 Authority Key Identifier: keyid:8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/TbvRrpKrd0GK2OLSSk8cPsfvnp4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.134.68.0/22 46.31.36.0/22 77.95.48.0/21 83.243.32.0/21 185.170.32.0/22 Signature Algorithm: sha256WithRSAEncryption 49:d2:b9:2a:51:40:1c:11:19:72:a2:b0:b7:d1:d4:6e:b8:8a: 7c:4f:6d:fd:66:d1:2b:f8:e6:5b:ad:f0:e0:4d:6b:d4:22:6c: 01:45:23:51:16:95:99:0d:f6:38:de:23:4a:c7:c9:1d:aa:e6: 94:ae:55:27:0d:3d:26:22:32:80:5e:73:88:78:68:05:79:d7: b6:93:1a:ea:6b:ea:37:ea:51:0b:a3:ff:fd:1f:7b:7b:31:f3: 46:19:7d:dc:cf:2e:00:32:fc:2b:4b:a5:17:a0:6e:65:de:f6: e6:c8:15:99:19:af:e2:b2:88:2a:5a:ad:3d:3d:4b:39:c0:8d: ea:a9:76:f2:d4:da:40:5d:d5:5f:01:b6:52:76:2a:f4:a8:fc: 77:8f:a3:9d:c6:fd:6e:0f:4b:dd:5d:06:62:95:41:51:cb:b6: f1:e2:7b:10:94:90:e3:3b:83:ce:51:60:16:0c:aa:51:83:dd: 43:bf:aa:5d:d8:e3:1c:76:3a:bc:aa:f8:6e:3e:41:f8:6d:aa: a2:92:eb:0e:32:b3:34:68:3a:7b:1f:26:74:cb:6c:51:07:9b: a6:8c:77:58:14:3f:33:73:c4:7b:dc:12:3f:51:d7:0a:50:58: 30:1c:f5:3c:25:40:23:a2:89:95:3b:10:d6:b2:63:cb:7b:2b: d6:c0:de:f2 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt4o18YV+7GxAOaRzm77KOGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMGM3ZjJlYmFiN2M5NjExMWNhZTY4N2NlZGQxY2QyZTli Y2Q1NmEwHhcNMjYwMTAxMDgxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZGJiZDFhZTkyYWI3NzQxOGFkOGUyZDI0YTRmMWMzZWM3ZWY5ZTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveVQNlfL4ceRizrs1vwUevUvaaA7 SHPaMwcozs/NyLevKXwUpPgoofqhStch6rlL1mqxHKb0rhyCS2ha2wVCCxN87qIg r5JkoiNI6UeI9igYfie/r6r1h7T2SzP28gGLtkzPkjgBwtjJH0qZQeU/Lp/zTka5 rBklN7D2RQMGN40EbmoJNnu+iAdw/hDhiBghqpqp9I/CtgGmvW446eRPNWnaymQq u4qLPKwwkggiFRshrFbza7aDJKg37GVS8y8rMezJpDyg4Sdjb2GbnoONRHE26B8u S5Ff+NzfNqGy598I9grDppB1BGZf7gxTx/a6xiy8ZS8Y+5b0ljRIHvOHzwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFE270a6Sq3dBitji0kpPHD7H756eMB8GA1UdIwQY MBaAFIwMfy66t8lhEcrmh87dHNLpvNVqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakF4X0xycTN5V0VSeXVhSHp0MGMwdW04MVdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9jNzYzODMtNTkxYy00Y2RlLWIyY2Yt MjUxZDc0ZWQ3NzU0LzEvVGJ2UnJwS3JkMEdLMk9MU1NrOGNQc2Z2bnA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9jNzYzODMtNTkxYy00Y2RlLWIyY2YtMjUxZDc0ZWQ3NzU0 LzEvakF4X0xycTN5V0VSeXVhSHp0MGMwdW04MVdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCBYZEAwQC Lh8kAwQDTV8wAwQDU/MgAwQCuaogMA0GCSqGSIb3DQEBCwUAA4IBAQBJ0rkqUUAc ERlyorC30dRuuIp8T239ZtEr+OZbrfDgTWvUImwBRSNRFpWZDfY43iNKx8kdquaU rlUnDT0mIjKAXnOIeGgFede2kxrqa+o36lELo//9H3t7MfNGGX3czy4AMvwrS6UX oG5l3vbmyBWZGa/isogqWq09PUs5wI3qqXby1NpAXdVfAbZSdir0qPx3j6Odxv1u D0vdXQZilUFRy7bx4nsQlJDjO4POUWAWDKpRg91Dv6pd2OMcdjq8qvhuPkH4baqi kusOMrM0aDp7HyZ0y2xRB5umjHdYFD8zc8R73BI/UdcKUFgwHPU8JUAjoomVOxDW smPLeyvWwN7y -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:38 2026 by rpki-client