This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/TGeDIFBGIW5eczvcX5q3jNyzVtA.roa File: TGeDIFBGIW5eczvcX5q3jNyzVtA.roa (raw, json) Hash identifier: DgUdGVPI56iMDORgQFEHjPBMjjgqkbyYMnQ4bBFfVcc= Subject key identifier: 4C:67:83:20:50:46:21:6E:5E:73:3B:DC:5F:9A:B7:8C:DC:B3:56:D0 Certificate issuer: /CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8 Certificate serial: 019B7A5A82F514B63243C3343E21BD0B300E Authority key identifier: A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/TGeDIFBGIW5eczvcX5q3jNyzVtA.roa Signing time: Thu 01 Jan 2026 16:18:30 +0000 ROA not before: Thu 01 Jan 2026 16:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48854 IP address blocks: 193.8.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.crl rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:82:f5:14:b6:32:43:c3:34:3e:21:bd:0b:30:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8 Validity Not Before: Jan 1 16:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c6783205046216e5e733bdc5f9ab78cdcb356d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d6:5a:64:22:8c:37:cb:92:85:41:07:03:7c: 68:fd:4d:e2:da:54:26:2a:89:29:27:9a:ff:40:36: 9f:90:42:a4:cf:18:d8:e6:6b:ae:83:17:32:d4:aa: 57:73:ea:d8:7d:41:fc:00:ea:97:94:95:b1:e5:f4: e3:88:76:3d:ca:07:a3:44:94:75:3c:fb:77:8d:be: 95:c1:cc:36:e5:d4:a7:76:a0:d2:ed:27:24:de:f1: db:7b:35:47:2e:41:35:51:73:5e:4d:d3:6e:67:fe: 24:bc:00:33:80:0c:2b:28:ac:eb:5e:d2:56:35:4f: aa:cb:b0:6d:2a:5f:52:5e:f1:10:70:db:fc:15:f3: 15:cc:1b:e5:92:a9:4a:4f:92:cf:72:96:c0:4f:c6: fd:3a:87:16:36:bd:35:35:09:bb:5b:99:9f:bf:5e: c8:c2:21:ff:58:aa:69:46:75:78:d1:5d:bd:b6:c2: 47:32:24:6c:c0:7e:86:4e:9e:70:8e:80:4b:df:5c: 84:cb:ce:49:69:72:7a:db:a2:b5:d8:e7:20:91:8e: 65:86:f2:0b:f0:1e:e8:ca:96:70:35:be:a1:e4:ca: fd:85:d2:5e:a0:fa:90:ae:3a:70:e9:b9:2e:42:92: 2e:e4:e7:fc:e2:da:21:92:e8:5d:62:92:58:23:fc: 5e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:67:83:20:50:46:21:6E:5E:73:3B:DC:5F:9A:B7:8C:DC:B3:56:D0 X509v3 Authority Key Identifier: keyid:A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/TGeDIFBGIW5eczvcX5q3jNyzVtA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.8.38.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:d3:62:28:18:c3:4f:e9:c2:72:4a:82:c2:bc:e5:b8:a1:19: 6b:5a:98:77:63:6a:97:e9:f4:43:5a:04:ac:6e:a7:28:09:24: 60:19:9a:be:0d:f1:e6:2b:4b:b8:2e:18:1e:b8:30:f7:f6:d5: a1:47:80:e8:42:da:35:e7:18:44:9e:ed:f5:5e:00:a1:5e:fe: 97:11:80:4e:19:8e:ac:2f:5f:17:f8:be:a4:99:ed:92:72:7e: 75:e2:26:71:8e:70:df:20:5a:8f:72:22:3d:cb:0b:1d:10:fd: c8:f2:21:a0:d0:46:f4:e7:fa:82:b5:22:c0:58:76:b8:2e:a0: be:a7:45:9a:49:d8:a2:e6:d2:b9:d6:44:e2:4a:ba:58:d7:57: 9b:a4:7b:f4:b6:70:fe:6d:88:ea:54:9f:0f:0e:16:08:3d:9f: 59:b1:99:be:a8:9c:36:9d:91:6d:f9:96:6b:d5:28:c1:ba:ef: de:d9:64:5e:28:80:98:8b:32:fb:56:59:b5:9f:8e:5f:1d:8c: 5e:8d:a3:bc:17:1f:f6:15:90:ac:d7:d4:41:0c:00:c9:f7:b5: 35:3b:9c:fd:9d:31:e2:86:6c:85:c9:e1:12:a1:ec:10:4f:1b: 90:43:91:61:76:7f:62:63:67:e1:f8:78:4a:90:b3:25:9c:3f: 31:76:bd:a5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WoL1FLYyQ8M0PiG9CzAOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MmE4YzdhMWY2YTRjOTQ5ZTAyN2I1MzY5ZDk3ZDc1NzZl MTQ3ZjgwHhcNMjYwMTAxMTYxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzY3ODMyMDUwNDYyMTZlNWU3MzNiZGM1ZjlhYjc4Y2RjYjM1NmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstZaZCKMN8uShUEHA3xo/U3i2lQm KokpJ5r/QDafkEKkzxjY5muugxcy1KpXc+rYfUH8AOqXlJWx5fTjiHY9ygejRJR1 PPt3jb6Vwcw25dSndqDS7Sck3vHbezVHLkE1UXNeTdNuZ/4kvAAzgAwrKKzrXtJW NU+qy7BtKl9SXvEQcNv8FfMVzBvlkqlKT5LPcpbAT8b9OocWNr01NQm7W5mfv17I wiH/WKppRnV40V29tsJHMiRswH6GTp5wjoBL31yEy85JaXJ626K12OcgkY5lhvIL 8B7oypZwNb6h5Mr9hdJeoPqQrjpw6bkuQpIu5Of84tohkuhdYpJYI/xebwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFExngyBQRiFuXnM73F+at4zcs1bQMB8GA1UdIwQY MBaAFKYqjHofakyUngJ7U2nZfXV24Uf4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGlxTWVoOXFUSlNlQW50VGFkbDlkWGJoUl9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mYzAyMmQtZjhlNS00YTZlLThiMWYt NThjODVkNDMzNmJjLzEvVEdlRElGQkdJVzVlY3p2Y1g1cTNqTnl6VnRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9mYzAyMmQtZjhlNS00YTZlLThiMWYtNThjODVkNDMzNmJj LzEvcGlxTWVoOXFUSlNlQW50VGFkbDlkWGJoUl9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQgmMA0G CSqGSIb3DQEBCwUAA4IBAQCa02IoGMNP6cJySoLCvOW4oRlrWph3Y2qX6fRDWgSs bqcoCSRgGZq+DfHmK0u4LhgeuDD39tWhR4DoQto15xhEnu31XgChXv6XEYBOGY6s L18X+L6kme2Scn514iZxjnDfIFqPciI9ywsdEP3I8iGg0Eb05/qCtSLAWHa4LqC+ p0WaSdii5tK51kTiSrpY11ebpHv0tnD+bYjqVJ8PDhYIPZ9ZsZm+qJw2nZFt+ZZr 1SjBuu/e2WReKICYizL7Vlm1n45fHYxejaO8Fx/2FZCs19RBDADJ97U1O5z9nTHi hmyFyeESoewQTxuQQ5Fhdn9iY2fh+HhKkLMlnD8xdr2l -----END CERTIFICATE-----Generated at Mon Jan 26 04:41:56 2026 by rpki-client