This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/tkpEoHGZpIghQKYcH3ib7a_UYzc.roa File: tkpEoHGZpIghQKYcH3ib7a_UYzc.roa (raw, json) Hash identifier: zwqWB09HKwVn6JH+X6zRRmI8bgDkYNFkHNiX4G55ZOs= Subject key identifier: B6:4A:44:A0:71:99:A4:88:21:40:A6:1C:1F:78:9B:ED:AF:D4:63:37 Certificate issuer: /CN=f9c9e0305cfed5794448732a8b0bd8427450d813 Certificate serial: 019B7EA72987E69E08256C137540865067EC Authority key identifier: F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/tkpEoHGZpIghQKYcH3ib7a_UYzc.roa Signing time: Fri 02 Jan 2026 12:20:42 +0000 ROA not before: Fri 02 Jan 2026 12:20:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61049 IP address blocks: 212.124.212.0/24 maxlen: 24 2a00:19e9::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:29:87:e6:9e:08:25:6c:13:75:40:86:50:67:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9c9e0305cfed5794448732a8b0bd8427450d813 Validity Not Before: Jan 2 12:20:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b64a44a07199a4882140a61c1f789bedafd46337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:84:2a:64:f6:ab:2d:c8:af:44:11:22:d9:83: 05:37:a7:fa:98:46:61:0f:6d:24:30:71:fe:c6:b6: a5:1c:ca:83:fd:1e:ac:b0:05:3a:26:70:1c:9c:3b: ef:11:31:e2:be:3c:d5:c3:1b:e6:d5:98:81:0b:5d: 24:53:ac:da:6b:9e:2a:11:5d:5c:a7:e1:71:c4:18: 8d:14:85:cb:f5:8d:ff:2d:2d:1e:ce:f3:be:99:b2: 38:35:cc:cc:88:4d:a0:9c:0a:75:7b:61:c5:bd:1e: 87:c1:42:17:a2:ee:26:2c:07:58:7a:95:4d:37:36: 7b:17:92:af:84:05:9f:a5:c1:60:7e:a7:77:c5:65: 5c:d3:10:b7:c4:52:13:8b:5e:93:89:7c:cb:bb:d2: 0f:78:87:63:35:4e:15:37:78:64:01:8e:46:b8:15: 10:1b:69:78:11:d5:de:03:ee:b7:c2:6d:14:21:a8: d8:ff:01:2f:9c:f8:a3:6c:37:34:04:58:ff:ae:aa: d5:c3:78:71:47:0c:41:2c:b0:b6:4b:20:31:cd:be: be:7a:d7:19:ed:83:b6:77:6b:fb:0e:8f:ff:45:8f: 9c:aa:e3:3d:5f:32:bf:a1:05:aa:60:88:91:14:b4: 5b:f5:c3:d9:98:10:1c:f3:ad:53:99:4d:cf:9f:92: 1c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:4A:44:A0:71:99:A4:88:21:40:A6:1C:1F:78:9B:ED:AF:D4:63:37 X509v3 Authority Key Identifier: keyid:F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/tkpEoHGZpIghQKYcH3ib7a_UYzc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.124.212.0/24 IPv6: 2a00:19e9::/32 Signature Algorithm: sha256WithRSAEncryption 04:d5:28:7a:e5:65:53:ba:cf:40:66:43:93:e8:35:3c:87:22: f5:7f:46:35:09:76:49:d8:9c:cf:62:b4:2c:2f:f4:cd:c3:55: 6c:ea:05:1f:12:ab:8a:b2:8f:26:25:2a:00:98:0e:fa:f7:96: b9:60:b9:78:7f:6b:3c:ef:15:69:8c:3e:24:dc:ec:b0:56:4f: 58:c3:b8:1b:28:8e:85:a2:af:e4:dc:53:a3:7f:b0:26:90:c2: 9f:60:1c:4a:df:c7:6b:35:8d:70:4e:a8:c7:83:4a:37:ab:f6: 08:f4:c5:8b:29:40:52:24:1a:89:c3:b6:35:e5:7f:d8:a3:0d: 1c:fe:80:e3:1b:21:9c:c8:26:e6:c6:52:9b:2c:74:61:7c:58: 68:c4:04:68:58:8c:6d:4d:56:4b:32:cc:70:97:fb:78:8a:e6: c9:fe:9e:4f:f3:12:6e:ac:65:c2:ef:82:7d:3a:43:9b:d8:b2: b6:bd:c0:3c:2a:d9:e8:8a:d7:aa:c4:eb:24:6a:1c:53:a8:4e: 96:99:dd:ce:21:f5:f9:fa:40:cf:f6:e4:1a:88:b7:72:bc:1b: f8:08:70:a8:54:47:fd:dd:f1:f6:69:6c:19:eb:19:85:a4:c0: a7:0c:5a:0b:12:51:2b:b1:5b:9e:df:df:96:04:cb:de:25:32: d4:42:20:c7 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+pymH5p4IJWwTdUCGUGfsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5YzllMDMwNWNmZWQ1Nzk0NDQ4NzMyYThiMGJkODQyNzQ1 MGQ4MTMwHhcNMjYwMTAyMTIyMDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjRhNDRhMDcxOTlhNDg4MjE0MGE2MWMxZjc4OWJlZGFmZDQ2MzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIQqZParLcivRBEi2YMFN6f6mEZh D20kMHH+xralHMqD/R6ssAU6JnAcnDvvETHivjzVwxvm1ZiBC10kU6zaa54qEV1c p+FxxBiNFIXL9Y3/LS0ezvO+mbI4NczMiE2gnAp1e2HFvR6HwUIXou4mLAdYepVN NzZ7F5KvhAWfpcFgfqd3xWVc0xC3xFITi16TiXzLu9IPeIdjNU4VN3hkAY5GuBUQ G2l4EdXeA+63wm0UIajY/wEvnPijbDc0BFj/rqrVw3hxRwxBLLC2SyAxzb6+etcZ 7YO2d2v7Do//RY+cquM9XzK/oQWqYIiRFLRb9cPZmBAc861TmU3Pn5IcAwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFLZKRKBxmaSIIUCmHB94m+2v1GM3MB8GA1UdIwQY MBaAFPnJ4DBc/tV5REhzKosL2EJ0UNgTMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1jbmdNRnotMVhsRVNITXFpd3ZZUW5SUTJCTS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzcvMzYxOTBkLTFjNmMtNDhjNi1hNDE0 LTJmYmIyMDhhZDE4Mi8xL3RrcEVvSEdacElnaFFLWWNIM2liN2FfVVl6Yy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMzcvMzYxOTBkLTFjNmMtNDhjNi1hNDE0LTJmYmIyMDhhZDE4 Mi8xLzEtY25nTUZ6LTFYbEVTSE1xaXd2WVFuUlEyQk0uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBADUfNQw DQQCAAIwBwMFACoAGekwDQYJKoZIhvcNAQELBQADggEBAATVKHrlZVO6z0BmQ5Po NTyHIvV/RjUJdknYnM9itCwv9M3DVWzqBR8Sq4qyjyYlKgCYDvr3lrlguXh/azzv FWmMPiTc7LBWT1jDuBsojoWir+TcU6N/sCaQwp9gHErfx2s1jXBOqMeDSjer9gj0 xYspQFIkGonDtjXlf9ijDRz+gOMbIZzIJubGUpssdGF8WGjEBGhYjG1NVksyzHCX +3iK5sn+nk/zEm6sZcLvgn06Q5vYsra9wDwq2eiK16rE6yRqHFOoTpaZ3c4h9fn6 QM/25BqIt3K8G/gIcKhUR/3d8fZpbBnrGYWkwKcMWgsSUSuxW57f35YEy94lMtRC IMc= -----END CERTIFICATE-----Generated at Sun Jan 25 10:32:45 2026 by rpki-client