This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/Tc5xm-6wNZTyj1dJnc4HQrGeS-o.roa File: Tc5xm-6wNZTyj1dJnc4HQrGeS-o.roa (raw, json) Hash identifier: vIzC9sIZH6YUu+Ppt3sLWqdbfBwlSwyCWej1tNmuxcU= Subject key identifier: 4D:CE:71:9B:EE:B0:35:94:F2:8F:57:49:9D:CE:07:42:B1:9E:4B:EA Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5 Certificate serial: 019B76EB4AEAE1E45F01F4DA3CF772932DF3 Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/Tc5xm-6wNZTyj1dJnc4HQrGeS-o.roa Signing time: Thu 01 Jan 2026 00:18:10 +0000 ROA not before: Thu 01 Jan 2026 00:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5822 IP address blocks: 85.185.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:4a:ea:e1:e4:5f:01:f4:da:3c:f7:72:93:2d:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5 Validity Not Before: Jan 1 00:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4dce719beeb03594f28f57499dce0742b19e4bea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4a:cb:9b:06:92:7c:21:5d:7a:d2:0f:2d:b2: 55:7b:a1:2f:bc:fd:19:48:53:c1:02:ad:9a:a1:20: 41:b0:4b:69:c2:91:86:63:57:4c:84:46:c6:50:a6: 41:e7:cb:00:6d:fa:97:3c:4c:1a:bc:ff:70:68:93: 31:2a:35:0c:0c:bd:67:3a:c0:52:18:d3:43:6b:8a: 86:74:fa:82:36:40:79:fb:47:bb:1a:d1:c5:3f:34: 7f:bb:12:04:96:74:06:b9:d2:bd:a2:58:c9:36:43: aa:1b:75:bc:3c:3a:d0:a0:b7:4d:2e:a9:1f:c5:25: 18:07:64:b1:eb:39:4d:b4:16:8c:97:bd:7d:87:26: 80:c1:e2:b8:48:53:5b:11:49:20:7b:10:80:79:ee: 4a:17:ec:f9:f6:ba:b2:f9:98:bc:35:f0:53:26:73: bc:e7:ae:ae:e6:c9:af:84:d7:27:26:b6:29:d8:13: 06:86:74:d0:00:7c:e7:8c:c6:1e:6a:67:8f:cc:ca: aa:a8:fb:2e:2b:c5:97:54:46:36:10:76:f1:d2:9d: da:e8:9e:9b:e3:8e:e7:e4:4e:a8:9e:0c:79:93:8c: 5d:24:b8:33:83:68:b1:a2:32:a8:56:41:03:50:a9: 58:a9:5d:18:6c:f8:69:08:9d:4d:fd:6a:29:17:40: 2d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:CE:71:9B:EE:B0:35:94:F2:8F:57:49:9D:CE:07:42:B1:9E:4B:EA X509v3 Authority Key Identifier: keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/Tc5xm-6wNZTyj1dJnc4HQrGeS-o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.185.48.0/20 Signature Algorithm: sha256WithRSAEncryption 85:72:4a:d3:b0:cd:d0:f4:70:42:f8:05:22:ef:a9:16:5c:e7: 7d:9c:fb:78:51:3f:90:29:5f:75:be:33:cb:47:df:2a:7f:99: 74:90:39:d8:80:a0:1c:a9:6a:73:2a:d1:ff:fc:33:b4:13:e5: ef:9b:c2:7f:e7:9f:49:c2:6a:47:9f:e8:d1:6c:9b:f6:4c:77: a5:cb:04:76:9f:23:f9:01:2b:21:21:83:b2:35:9b:a7:c0:c0: a1:03:1b:4c:9a:d2:ab:47:5a:85:b6:47:4d:3e:f5:77:61:89: 1c:5f:63:ba:ec:7e:49:85:fc:23:e9:20:1d:ed:7d:15:89:c0: a4:c6:a8:87:87:ce:d0:83:b5:71:fa:88:f1:cf:cb:f0:53:90: 36:b7:5a:54:a6:26:78:14:e8:77:d8:05:b3:86:da:39:c5:1e: b3:1e:2d:7a:c9:ec:29:eb:c4:20:81:d9:8e:22:6f:3f:db:03: 6b:fd:c6:d0:38:96:5b:6c:d0:e9:0a:e9:f6:78:cd:8e:22:00: 5d:15:21:d2:2e:7f:52:89:3a:af:c9:07:be:81:58:da:e5:4c: a5:f6:6f:a8:34:98:ec:89:04:46:8b:df:80:10:65:5b:2a:f1: f4:7d:fb:ad:75:3e:ed:0c:3b:b5:7d:eb:1d:ab:df:3a:05:7d: 21:87:62:54 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt260rq4eRfAfTaPPdyky3zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YTM5ZTQ3OTRjMzQ2MTJlN2YyMjU2OWIxYTZhODE3MTAy NjBhZTUwHhcNMjYwMTAxMDAxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZGNlNzE5YmVlYjAzNTk0ZjI4ZjU3NDk5ZGNlMDc0MmIxOWU0YmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvErLmwaSfCFdetIPLbJVe6EvvP0Z SFPBAq2aoSBBsEtpwpGGY1dMhEbGUKZB58sAbfqXPEwavP9waJMxKjUMDL1nOsBS GNNDa4qGdPqCNkB5+0e7GtHFPzR/uxIElnQGudK9oljJNkOqG3W8PDrQoLdNLqkf xSUYB2Sx6zlNtBaMl719hyaAweK4SFNbEUkgexCAee5KF+z59rqy+Zi8NfBTJnO8 566u5smvhNcnJrYp2BMGhnTQAHznjMYeamePzMqqqPsuK8WXVEY2EHbx0p3a6J6b 447n5E6ongx5k4xdJLgzg2ixojKoVkEDUKlYqV0YbPhpCJ1N/WopF0AtKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE3OcZvusDWU8o9XSZ3OB0KxnkvqMB8GA1UdIwQY MBaAFCejnkeUw0YS5/IlabGmqBcQJgrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMt Zjc0ZDk1MTg1NzZjLzEvVGM1eG0tNndOWlR5ajFkSm5jNEhRckdlUy1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMtZjc0ZDk1MTg1NzZj LzEvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEVbkwMA0G CSqGSIb3DQEBCwUAA4IBAQCFckrTsM3Q9HBC+AUi76kWXOd9nPt4UT+QKV91vjPL R98qf5l0kDnYgKAcqWpzKtH//DO0E+Xvm8J/559JwmpHn+jRbJv2THelywR2nyP5 ASshIYOyNZunwMChAxtMmtKrR1qFtkdNPvV3YYkcX2O67H5Jhfwj6SAd7X0VicCk xqiHh87Qg7Vx+ojxz8vwU5A2t1pUpiZ4FOh32AWzhto5xR6zHi16yewp68QggdmO Im8/2wNr/cbQOJZbbNDpCun2eM2OIgBdFSHSLn9SiTqvyQe+gVja5Uyl9m+oNJjs iQRGi9+AEGVbKvH0ffutdT7tDDu1fesdq986BX0hh2JU -----END CERTIFICATE-----Generated at Sun Jan 25 20:30:36 2026 by rpki-client