This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/TCbT2lKvimmPca_tcJyE61X19LM.roa File: TCbT2lKvimmPca_tcJyE61X19LM.roa (raw, json) Hash identifier: qkxwRBCeRtuFBBppHywPPyPUPj2kdHg3WbKwG9y9ays= Subject key identifier: 4C:26:D3:DA:52:AF:8A:69:8F:71:AF:ED:70:9C:84:EB:55:F5:F4:B3 Certificate issuer: /CN=b11157c98f26279fc3eed2dab3cf118372bdbe1b Certificate serial: 019AD8E0E385533DC7CDD9C6A823D5D4C49B Authority key identifier: B1:11:57:C9:8F:26:27:9F:C3:EE:D2:DA:B3:CF:11:83:72:BD:BE:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/TCbT2lKvimmPca_tcJyE61X19LM.roa Signing time: Mon 01 Dec 2025 07:46:48 +0000 ROA not before: Mon 01 Dec 2025 07:46:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 2116 IP address blocks: 193.23.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d8:e0:e3:85:53:3d:c7:cd:d9:c6:a8:23:d5:d4:c4:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b11157c98f26279fc3eed2dab3cf118372bdbe1b Validity Not Before: Dec 1 07:46:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4c26d3da52af8a698f71afed709c84eb55f5f4b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c6:c5:b6:a6:3f:69:bc:39:54:00:86:1a:e2: ac:77:e2:8f:3f:03:35:14:50:5e:27:7a:7e:a4:7d: 52:f5:68:a0:d4:0b:ce:67:0e:ac:af:0c:89:a7:ce: ec:58:92:72:73:53:f9:00:46:d0:d3:31:b5:0a:e8: a2:b5:b8:96:a8:78:1c:2c:d8:c8:e5:35:34:65:c0: 47:ea:c1:b3:de:2d:28:1f:24:34:a3:a5:1b:9a:55: a3:9b:77:1e:96:a8:b5:2b:7a:78:89:b1:c8:1e:82: 0d:81:79:9f:77:64:b4:19:08:03:3e:2e:ce:1c:5e: 68:32:9c:4e:f4:77:00:31:4a:1d:02:55:4c:70:8d: d8:19:7a:8e:a7:b6:ca:16:19:7c:6a:51:9b:a5:f4: af:07:0e:5c:35:3a:1a:05:63:53:23:97:52:48:41: fe:96:96:58:f7:de:3f:10:db:47:4d:29:16:00:9b: e6:46:9f:0c:2c:85:83:02:72:96:19:ac:a4:f0:c0: 1c:b6:77:df:2a:bb:6a:4f:b8:ce:a4:b7:f3:a8:eb: ac:da:ed:06:94:91:af:f4:2a:76:6b:75:cf:f3:1c: 75:44:7f:e6:f2:b4:b8:67:2f:33:3c:bf:98:6c:85: 71:3d:c3:fe:13:41:f3:1e:25:64:4f:37:98:20:8c: 4a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:26:D3:DA:52:AF:8A:69:8F:71:AF:ED:70:9C:84:EB:55:F5:F4:B3 X509v3 Authority Key Identifier: keyid:B1:11:57:C9:8F:26:27:9F:C3:EE:D2:DA:B3:CF:11:83:72:BD:BE:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/TCbT2lKvimmPca_tcJyE61X19LM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.23.229.0/24 Signature Algorithm: sha256WithRSAEncryption a7:68:9d:ad:01:58:0a:2e:9d:5f:7d:a6:80:ef:28:bb:d4:6c: 04:3f:85:a4:e5:56:ea:e3:74:dd:e3:b7:a6:14:2c:15:e3:8b: ed:d3:39:40:e1:08:58:1c:e2:1e:17:47:d6:d1:22:db:4e:51: 7e:30:01:d1:8b:47:aa:f0:23:80:0f:76:84:e5:c2:9d:72:8f: e0:31:22:e7:e1:fc:99:ec:09:23:37:f6:36:50:86:fd:15:9f: e6:d5:f3:cc:e2:04:f8:73:3a:f3:08:b9:2d:bc:39:0a:94:87: 3a:9e:dd:64:fb:05:3e:d7:ed:4f:51:0c:3d:c5:0c:20:f1:19: 27:96:72:2c:1e:f8:4f:98:2b:40:9a:84:72:f1:4c:5c:8b:cc: 3a:5f:42:d2:e1:f4:26:18:04:f8:cb:af:e3:50:39:67:be:5d: 8d:50:1a:88:d6:a6:c1:3a:ce:13:98:57:f8:9c:99:fd:9f:d7: 10:fd:6e:ed:fe:81:63:97:58:76:03:24:12:d3:1e:62:49:c4: 8f:73:17:89:55:f8:fd:35:a9:a3:70:14:85:54:b2:75:55:38: ba:59:76:a0:22:15:b3:52:52:e4:1a:fa:a7:64:a4:f6:47:6a: 11:06:66:3e:2f:87:03:65:9f:93:d9:a9:e4:d5:61:e3:37:2a: 0d:be:84:3c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrY4OOFUz3HzdnGqCPV1MSbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxMTE1N2M5OGYyNjI3OWZjM2VlZDJkYWIzY2YxMTgzNzJi ZGJlMWIwHhcNMjUxMjAxMDc0NjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzI2ZDNkYTUyYWY4YTY5OGY3MWFmZWQ3MDljODRlYjU1ZjVmNGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMbFtqY/abw5VACGGuKsd+KPPwM1 FFBeJ3p+pH1S9Wig1AvOZw6srwyJp87sWJJyc1P5AEbQ0zG1CuiitbiWqHgcLNjI 5TU0ZcBH6sGz3i0oHyQ0o6UbmlWjm3celqi1K3p4ibHIHoINgXmfd2S0GQgDPi7O HF5oMpxO9HcAMUodAlVMcI3YGXqOp7bKFhl8alGbpfSvBw5cNToaBWNTI5dSSEH+ lpZY994/ENtHTSkWAJvmRp8MLIWDAnKWGayk8MActnffKrtqT7jOpLfzqOus2u0G lJGv9Cp2a3XP8xx1RH/m8rS4Zy8zPL+YbIVxPcP+E0HzHiVkTzeYIIxKWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEwm09pSr4ppj3Gv7XCchOtV9fSzMB8GA1UdIwQY MBaAFLERV8mPJiefw+7S2rPPEYNyvb4bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1JGWHlZOG1KNV9EN3RMYXM4OFJnM0s5dmhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81MjFhNzQtZWJjOS00MjY3LWIwNDYt ZTBhY2FjYzEwZWY1LzEvVENiVDJsS3ZpbW1QY2FfdGNKeUU2MVgxOUxNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy81MjFhNzQtZWJjOS00MjY3LWIwNDYtZTBhY2FjYzEwZWY1 LzEvc1JGWHlZOG1KNV9EN3RMYXM4OFJnM0s5dmhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRflMA0G CSqGSIb3DQEBCwUAA4IBAQCnaJ2tAVgKLp1ffaaA7yi71GwEP4Wk5Vbq43Td47em FCwV44vt0zlA4QhYHOIeF0fW0SLbTlF+MAHRi0eq8COAD3aE5cKdco/gMSLn4fyZ 7AkjN/Y2UIb9FZ/m1fPM4gT4czrzCLktvDkKlIc6nt1k+wU+1+1PUQw9xQwg8Rkn lnIsHvhPmCtAmoRy8Uxci8w6X0LS4fQmGAT4y6/jUDlnvl2NUBqI1qbBOs4TmFf4 nJn9n9cQ/W7t/oFjl1h2AyQS0x5iScSPcxeJVfj9NamjcBSFVLJ1VTi6WXagIhWz UlLkGvqnZKT2R2oRBmY+L4cDZZ+T2ank1WHjNyoNvoQ8 -----END CERTIFICATE-----Generated at Sat Dec 6 17:47:36 2025 by rpki-client