This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/TlmEOt0-y-w49AgNxJOZ0wNCvZ8.roa File: TlmEOt0-y-w49AgNxJOZ0wNCvZ8.roa (raw, json) Hash identifier: 9QB2O9CF6AxN2XHx+5Fgp4F7JBjPl+H/+qk8ZUWd/Og= Subject key identifier: 4E:59:84:3A:DD:3E:CB:EC:38:F4:08:0D:C4:93:99:D3:03:42:BD:9F Certificate issuer: /CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112 Certificate serial: 019B7B36ACC45F6D1C41DF05559D5BE51942 Authority key identifier: 49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/TlmEOt0-y-w49AgNxJOZ0wNCvZ8.roa Signing time: Thu 01 Jan 2026 20:18:59 +0000 ROA not before: Thu 01 Jan 2026 20:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59441 IP address blocks: 5.144.128.0/21 maxlen: 21 5.144.128.0/22 maxlen: 22 5.144.128.0/23 maxlen: 23 5.144.128.0/24 maxlen: 24 5.144.129.0/24 maxlen: 24 5.144.130.0/23 maxlen: 24 5.144.130.0/24 maxlen: 24 5.144.131.0/24 maxlen: 24 5.144.132.0/22 maxlen: 22 5.144.132.0/23 maxlen: 24 5.144.132.0/24 maxlen: 24 5.144.133.0/24 maxlen: 24 5.144.134.0/23 maxlen: 24 5.144.134.0/24 maxlen: 24 5.144.135.0/24 maxlen: 24 45.92.92.0/22 maxlen: 24 45.92.92.0/23 maxlen: 24 45.92.92.0/24 maxlen: 24 45.92.93.0/24 maxlen: 24 45.92.94.0/23 maxlen: 24 45.92.94.0/24 maxlen: 24 45.92.95.0/24 maxlen: 24 45.138.132.0/22 maxlen: 24 45.138.132.0/23 maxlen: 24 45.138.132.0/24 maxlen: 24 45.138.133.0/24 maxlen: 24 45.138.134.0/24 maxlen: 24 45.138.135.0/24 maxlen: 24 80.91.208.0/24 maxlen: 24 185.36.231.0/24 maxlen: 24 185.40.16.0/24 maxlen: 24 185.83.112.0/22 maxlen: 22 185.83.112.0/23 maxlen: 23 185.83.112.0/24 maxlen: 24 185.83.113.0/24 maxlen: 24 185.83.114.0/23 maxlen: 24 185.83.114.0/24 maxlen: 24 185.83.115.0/24 maxlen: 24 185.83.181.0/24 maxlen: 24 185.83.183.0/24 maxlen: 24 185.89.22.0/24 maxlen: 24 185.169.6.0/24 maxlen: 24 185.173.104.0/22 maxlen: 24 185.173.104.0/24 maxlen: 24 185.173.105.0/24 maxlen: 24 185.173.106.0/24 maxlen: 24 185.173.107.0/24 maxlen: 24 185.205.203.0/24 maxlen: 24 185.208.76.0/22 maxlen: 22 185.208.76.0/23 maxlen: 23 185.208.78.0/23 maxlen: 24 185.208.78.0/24 maxlen: 24 185.208.79.0/24 maxlen: 24 193.3.231.0/24 maxlen: 24 193.162.129.0/24 maxlen: 24 2a05:9a00::/29 maxlen: 29 2a05:9a00::/48 maxlen: 48 2a05:9a00:1::/48 maxlen: 48 2a05:9a00:2::/48 maxlen: 48 2a05:9a00:3::/48 maxlen: 48 2a05:9a00:4::/48 maxlen: 48 2a05:9a00:1000::/48 maxlen: 48 2a05:9a00:1001::/48 maxlen: 48 2a05:9a00:1002::/48 maxlen: 48 2a05:9a00:1003::/48 maxlen: 48 2a07:7ec0::/29 maxlen: 29 2a07:e440::/29 maxlen: 29 2a10:4340::/29 maxlen: 29 2a10:5c40::/29 maxlen: 29 2a10:6140::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:ac:c4:5f:6d:1c:41:df:05:55:9d:5b:e5:19:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112 Validity Not Before: Jan 1 20:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e59843add3ecbec38f4080dc49399d30342bd9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:15:8e:2e:e6:0e:6d:d9:2d:5e:34:24:85:56: a4:9a:37:81:0e:bf:fe:b9:55:a1:d5:09:27:6e:cf: 76:51:b8:f2:c2:6a:02:94:ed:28:7a:f5:12:ef:d1: 11:58:c2:c2:a8:64:16:b5:d7:1d:dd:b2:e6:49:5d: 2f:1d:62:e0:a6:de:38:eb:46:89:00:a1:8f:f1:f8: cc:a9:a9:ba:13:2f:d2:df:0e:32:79:e1:ae:6a:e8: 19:b5:d7:ab:3c:38:1d:cf:41:e4:2f:a5:c4:45:e9: c7:88:54:a1:50:af:c1:ef:f5:00:0c:c6:65:9f:21: 6c:1b:d9:b7:6e:9d:f1:34:e2:62:2d:35:09:6e:aa: 31:7c:66:82:a4:1f:4b:1a:a3:aa:03:90:7c:06:be: 96:36:32:7d:a5:71:c4:2d:29:ed:05:68:cb:77:86: e6:56:c7:af:39:dd:33:92:6e:fb:a5:a3:7a:44:0b: fe:69:0f:04:af:d4:09:f4:2b:32:43:0d:f0:25:5e: 28:bf:94:e9:aa:3c:96:84:7a:c7:97:45:a7:c2:eb: e2:60:e0:73:c8:d0:36:d1:28:09:61:38:60:33:a6: fc:ba:1c:5c:1e:57:44:45:18:15:ae:89:03:9d:20: 33:25:ec:7d:2b:58:e3:2a:2b:dc:2b:83:ff:13:d4: d5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:59:84:3A:DD:3E:CB:EC:38:F4:08:0D:C4:93:99:D3:03:42:BD:9F X509v3 Authority Key Identifier: keyid:49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/TlmEOt0-y-w49AgNxJOZ0wNCvZ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.144.128.0/21 45.92.92.0/22 45.138.132.0/22 80.91.208.0/24 185.36.231.0/24 185.40.16.0/24 185.83.112.0/22 185.83.181.0/24 185.83.183.0/24 185.89.22.0/24 185.169.6.0/24 185.173.104.0/22 185.205.203.0/24 185.208.76.0/22 193.3.231.0/24 193.162.129.0/24 IPv6: 2a05:9a00::/29 2a07:7ec0::/29 2a07:e440::/29 2a10:4340::/29 2a10:5c40::/29 2a10:6140::/29 Signature Algorithm: sha256WithRSAEncryption 78:4c:b8:89:a4:d7:3b:a2:fc:21:c9:55:db:15:bd:e5:06:0c: c2:14:fe:bf:f2:61:04:2b:0f:87:90:b6:55:13:b5:fa:ca:d7: 94:38:23:23:14:f3:13:a1:42:2d:a2:ac:72:33:99:e2:78:a0: 7e:d4:5a:fd:5e:aa:ca:38:9c:29:95:b9:b7:91:e5:0b:23:16: 38:66:a9:e8:ca:1e:d5:4f:23:a9:85:d2:8e:c6:4a:1f:0e:1f: 89:ce:e3:e2:73:4c:bf:36:bc:1b:ed:75:2d:89:38:9e:41:cf: 75:3d:d2:c7:bc:a9:db:02:60:dd:91:bb:3c:ab:d6:d1:f3:9f: bb:a5:85:8a:ae:e9:0c:be:70:ca:dd:65:c9:f7:cf:ae:d9:0d: 7b:55:94:49:9e:7f:1f:f3:bf:0c:44:41:0f:ad:42:a6:83:ca: ed:f1:47:d0:54:a4:d0:8a:9f:0a:8c:39:31:fc:3f:82:72:99: 66:6b:6b:4a:41:ae:94:cc:79:9d:03:20:0e:01:bc:57:df:76: 9b:d2:22:5e:ce:ea:76:8e:59:c9:2b:32:d6:2d:58:fa:80:f0: f6:18:f8:07:88:0c:ea:1b:0b:de:c1:0c:58:b0:32:48:8e:81: 3b:2c:a0:5e:2f:f5:6d:1f:05:a2:a3:f9:2a:a6:97:73:4c:d6: 15:f6:95:a4 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgISAZt7NqzEX20cQd8FVZ1b5RlCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZWUxMTk0YmQ4MWQxOTQ2YzM5ZjEwZjdmZGZkZjIyZDFh MDMxMTIwHhcNMjYwMTAxMjAxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTU5ODQzYWRkM2VjYmVjMzhmNDA4MGRjNDkzOTlkMzAzNDJiZDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxWOLuYObdktXjQkhVakmjeBDr/+ uVWh1Qknbs92UbjywmoClO0oevUS79ERWMLCqGQWtdcd3bLmSV0vHWLgpt4460aJ AKGP8fjMqam6Ey/S3w4yeeGuaugZtderPDgdz0HkL6XERenHiFShUK/B7/UADMZl nyFsG9m3bp3xNOJiLTUJbqoxfGaCpB9LGqOqA5B8Br6WNjJ9pXHELSntBWjLd4bm VsevOd0zkm77paN6RAv+aQ8Er9QJ9CsyQw3wJV4ov5TpqjyWhHrHl0WnwuviYOBz yNA20SgJYThgM6b8uhxcHldERRgVrokDnSAzJex9K1jjKivcK4P/E9TVkwIDAQAB o4ICmDCCApQwHQYDVR0OBBYEFE5ZhDrdPsvsOPQIDcSTmdMDQr2fMB8GA1UdIwQY MBaAFEnuEZS9gdGUbDnxD3/f3yLRoDESMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2U0UmxMMkIwWlJzT2ZFUGY5X2ZJdEdnTVJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9hMzI0ZjQtOTc3MC00YTU4LWE2ZWYt ZDYyZmE2MzE5ZmQ0LzEvVGxtRU90MC15LXc0OUFnTnhKT1owd05Ddlo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9hMzI0ZjQtOTc3MC00YTU4LWE2ZWYtZDYyZmE2MzE5ZmQ0 LzEvU2U0UmxMMkIwWlJzT2ZFUGY5X2ZJdEdnTVJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGtBggrBgEFBQcBBwEB/wSBnTCBmjBmBAIAATBgAwQDBZCA AwQCLVxcAwQCLYqEAwQAUFvQAwQAuSTnAwQAuSgQAwQCuVNwAwQAuVO1AwQAuVO3 AwQAuVkWAwQAuakGAwQCua1oAwQAuc3LAwQCudBMAwQAwQPnAwQAwaKBMDAEAgAC MCoDBQMqBZoAAwUDKgd+wAMFAyoH5EADBQMqEENAAwUDKhBcQAMFAyoQYUAwDQYJ KoZIhvcNAQELBQADggEBAHhMuImk1zui/CHJVdsVveUGDMIU/r/yYQQrD4eQtlUT tfrK15Q4IyMU8xOhQi2irHIzmeJ4oH7UWv1eqso4nCmVubeR5QsjFjhmqejKHtVP I6mF0o7GSh8OH4nO4+JzTL82vBvtdS2JOJ5Bz3U90se8qdsCYN2Ruzyr1tHzn7ul hYqu6Qy+cMrdZcn3z67ZDXtVlEmefx/zvwxEQQ+tQqaDyu3xR9BUpNCKnwqMOTH8 P4JymWZra0pBrpTMeZ0DIA4BvFffdpvSIl7O6naOWckrMtYtWPqA8PYY+AeIDOob C97BDFiwMkiOgTssoF4v9W0fBaKj+Sqml3NM1hX2laQ= -----END CERTIFICATE-----Generated at Sun Jan 25 22:31:43 2026 by rpki-client