This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/TA3ugb2OVcgcyipK0FPCh6-9pgA.roa File: TA3ugb2OVcgcyipK0FPCh6-9pgA.roa (raw, json) Hash identifier: V31PsTSAJkcRm4mvoJ3kmIGO6ltT79h5TcyN76h+w+A= Subject key identifier: 4C:0D:EE:81:BD:8E:55:C8:1C:CA:2A:4A:D0:53:C2:87:AF:BD:A6:00 Certificate issuer: /CN=f90379f3afd94c0f26b67fffa34d6e946c29d624 Certificate serial: 019B7D5CE951EF85EFC2FD816FF3C76942BD Authority key identifier: F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/TA3ugb2OVcgcyipK0FPCh6-9pgA.roa Signing time: Fri 02 Jan 2026 06:19:59 +0000 ROA not before: Fri 02 Jan 2026 06:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206325 IP address blocks: 178.157.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:e9:51:ef:85:ef:c2:fd:81:6f:f3:c7:69:42:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f90379f3afd94c0f26b67fffa34d6e946c29d624 Validity Not Before: Jan 2 06:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c0dee81bd8e55c81cca2a4ad053c287afbda600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7a:af:66:64:cd:16:5c:08:c0:2d:aa:71:a3: fd:ca:52:2b:0a:9f:89:3e:ed:70:e6:40:7f:86:78: dc:35:a3:9f:f3:6b:69:e7:a0:ca:fe:fc:80:64:95: a5:0e:73:67:a7:23:13:96:b8:28:ee:d8:07:3e:3e: 33:3a:46:45:cb:69:23:2f:b8:3a:fc:71:8b:73:be: 58:ac:99:f2:ce:a2:38:8d:76:6b:3c:a2:6a:61:12: 2c:34:57:8a:b5:d5:70:f4:1b:42:5f:51:a3:ce:18: 69:c8:af:30:c1:da:b1:73:4f:51:ff:02:a8:fe:d9: 59:91:f3:26:55:78:e7:da:0d:0c:cd:c6:8f:cb:df: d0:65:6a:e3:11:e0:bc:1e:60:37:fe:0d:45:09:07: 4b:df:bb:93:40:a1:a9:7a:c3:31:ff:35:d0:78:95: 00:2a:11:1d:d1:ec:89:63:ea:8b:cd:62:a2:28:f7: 6c:a5:8b:a8:80:7a:b4:5a:8b:aa:06:7a:8c:16:95: 9c:66:35:1a:87:b7:7c:0b:9d:ed:b8:6f:cb:00:3a: f9:15:67:ce:0c:17:51:29:49:fa:d3:4f:e2:d4:dc: ee:24:91:c4:94:49:d5:08:61:ec:e7:c4:6a:b7:41: 50:60:c1:fd:b2:2e:14:08:a7:b3:c8:e0:ab:e7:26: 15:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:0D:EE:81:BD:8E:55:C8:1C:CA:2A:4A:D0:53:C2:87:AF:BD:A6:00 X509v3 Authority Key Identifier: keyid:F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/TA3ugb2OVcgcyipK0FPCh6-9pgA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.157.1.0/24 Signature Algorithm: sha256WithRSAEncryption 68:27:ed:48:c5:ae:4c:a1:65:51:63:a1:2e:6e:83:7b:d3:4c: 5c:40:ab:0b:0b:08:08:04:1b:bb:52:53:3f:96:f8:7f:cf:75: f9:c8:00:e6:61:a3:74:37:b8:4b:02:05:6a:64:f6:c2:89:52: fa:52:15:c3:0a:44:1a:ce:0f:0d:d9:46:96:94:fe:b6:94:85: 06:a5:05:8a:0c:76:93:db:9b:a6:c2:9f:63:0d:e7:7b:de:42: 40:71:9c:63:86:b8:d9:bc:1a:67:20:d5:9a:d1:50:af:5a:95: bd:ee:53:ed:de:a5:01:09:6f:62:94:3e:e8:24:ed:99:d3:b7: 06:7b:ac:48:f6:7e:90:a6:12:cb:9d:47:d0:18:a7:1b:56:61: 67:20:42:41:80:6e:f5:ca:b0:ec:2e:8f:6d:3d:34:3f:d4:09: ee:ab:bf:c1:10:83:f1:cf:8d:ed:c5:db:ce:1b:0c:aa:1d:19: ce:2f:ba:ba:73:50:17:8e:b2:db:1b:9c:7d:d2:dd:4f:66:8a: b0:37:23:e8:78:17:56:af:6a:ff:51:a8:24:5e:05:c9:40:9a: 4b:67:bb:1f:ca:7c:01:ca:1d:c9:61:67:57:e0:a8:ef:2e:7e: 77:b3:de:a3:9a:17:bf:3f:9c:e9:2b:40:b0:10:4f:d4:02:c9: 5b:c5:a8:a4 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt9XOlR74Xvwv2Bb/PHaUK9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5MDM3OWYzYWZkOTRjMGYyNmI2N2ZmZmEzNGQ2ZTk0NmMy OWQ2MjQwHhcNMjYwMTAyMDYxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzBkZWU4MWJkOGU1NWM4MWNjYTJhNGFkMDUzYzI4N2FmYmRhNjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHqvZmTNFlwIwC2qcaP9ylIrCp+J Pu1w5kB/hnjcNaOf82tp56DK/vyAZJWlDnNnpyMTlrgo7tgHPj4zOkZFy2kjL7g6 /HGLc75YrJnyzqI4jXZrPKJqYRIsNFeKtdVw9BtCX1GjzhhpyK8wwdqxc09R/wKo /tlZkfMmVXjn2g0MzcaPy9/QZWrjEeC8HmA3/g1FCQdL37uTQKGpesMx/zXQeJUA KhEd0eyJY+qLzWKiKPdspYuogHq0WouqBnqMFpWcZjUah7d8C53tuG/LADr5FWfO DBdRKUn600/i1NzuJJHElEnVCGHs58Rqt0FQYMH9si4UCKezyOCr5yYVUwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFEwN7oG9jlXIHMoqStBTwoevvaYAMB8GA1UdIwQY MBaAFPkDefOv2UwPJrZ//6NNbpRsKdYkMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1RTjU4Nl9aVEE4bXRuX19vMDF1bEd3cDFpUS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDYvZGU3ZWY2LWJkYWUtNDcxNy1iMDYx LTZmMjA3OTUxYzRiMi8xL1RBM3VnYjJPVmNnY3lpcEswRlBDaDYtOXBnQS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNDYvZGU3ZWY2LWJkYWUtNDcxNy1iMDYxLTZmMjA3OTUxYzRi Mi8xLzEtUU41ODZfWlRBOG10bl9fbzAxdWxHd3AxaVEuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACynQEw DQYJKoZIhvcNAQELBQADggEBAGgn7UjFrkyhZVFjoS5ug3vTTFxAqwsLCAgEG7tS Uz+W+H/PdfnIAOZho3Q3uEsCBWpk9sKJUvpSFcMKRBrODw3ZRpaU/raUhQalBYoM dpPbm6bCn2MN53veQkBxnGOGuNm8Gmcg1ZrRUK9alb3uU+3epQEJb2KUPugk7ZnT twZ7rEj2fpCmEsudR9AYpxtWYWcgQkGAbvXKsOwuj209ND/UCe6rv8EQg/HPje3F 284bDKodGc4vurpzUBeOstsbnH3S3U9mirA3I+h4F1avav9RqCReBclAmktnux/K fAHKHclhZ1fgqO8ufnez3qOaF78/nOkrQLAQT9QCyVvFqKQ= -----END CERTIFICATE-----Generated at Mon Jan 26 08:37:40 2026 by rpki-client