This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/terKgDp-lp4YdKLQD6_mhNXlVsA.roa File: terKgDp-lp4YdKLQD6_mhNXlVsA.roa (raw, json) Hash identifier: ntHuNsx6woJ+rhTmlKP6IT/q0AwRNxfD1ikTgfZepas= Subject key identifier: B5:EA:CA:80:3A:7E:96:9E:18:74:A2:D0:0F:AF:E6:84:D5:E5:56:C0 Certificate issuer: /CN=0a77196340d2144b8ca7b0778984bb04bc1cb378 Certificate serial: 019B7CEE56F3EED75E83EF6D0DE040C1A019 Authority key identifier: 0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/terKgDp-lp4YdKLQD6_mhNXlVsA.roa Signing time: Fri 02 Jan 2026 04:19:12 +0000 ROA not before: Fri 02 Jan 2026 04:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8641 IP address blocks: 185.212.88.0/23 maxlen: 23 185.212.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:56:f3:ee:d7:5e:83:ef:6d:0d:e0:40:c1:a0:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a77196340d2144b8ca7b0778984bb04bc1cb378 Validity Not Before: Jan 2 04:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5eaca803a7e969e1874a2d00fafe684d5e556c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:47:a5:d8:95:a1:bf:e7:9d:52:2f:07:56:c5: 31:52:29:55:77:9b:ad:36:82:27:2c:45:b8:76:04: 5b:33:3e:59:3d:94:c5:f8:7f:2e:f8:30:ab:0d:3b: c6:40:d7:66:49:a6:0c:26:09:52:07:c0:a1:37:ac: d9:71:1a:96:37:ef:98:5c:d7:87:48:6a:13:60:ea: 91:97:2f:8a:e4:60:27:ea:ba:15:cc:f1:3e:92:b5: 7e:75:c9:2a:86:fc:a3:8e:e0:18:9c:96:c0:76:8c: a8:d4:e6:56:61:2c:85:9f:c7:a3:c7:82:26:7e:b9: e5:a3:a6:84:ac:0c:f1:b2:2e:58:bd:5c:07:5e:8f: fc:11:8c:6b:e7:54:ce:eb:d5:d7:f2:99:eb:92:2b: 16:f5:5d:b7:c9:17:c3:d8:63:2a:dd:09:a9:d0:78: 56:ab:1a:87:c2:ae:05:60:d7:5e:83:4f:97:75:63: e8:9b:b0:d1:bd:87:61:0e:70:4a:b9:96:84:15:32: 3f:ed:70:74:6c:58:7c:61:ca:76:1e:91:c8:0c:28: 00:09:58:de:d3:a9:6a:dc:c4:e7:1f:91:88:94:53: c4:f9:b5:af:7e:70:d0:52:b5:db:2b:4b:9d:78:83: 7f:c7:ed:38:8c:52:16:89:21:79:71:95:a5:46:87: fa:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:EA:CA:80:3A:7E:96:9E:18:74:A2:D0:0F:AF:E6:84:D5:E5:56:C0 X509v3 Authority Key Identifier: keyid:0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/terKgDp-lp4YdKLQD6_mhNXlVsA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.212.88.0-185.212.90.255 Signature Algorithm: sha256WithRSAEncryption 88:a1:e7:dc:df:59:5c:cc:aa:da:f7:b1:55:64:88:63:35:e4: b2:83:f0:de:d8:ae:7f:1a:17:be:70:26:98:11:85:75:b9:8b: eb:21:dc:d4:d5:da:07:a7:83:ba:c7:be:72:b8:2a:44:c6:92: 3d:ed:cf:ea:c5:d7:95:64:85:fd:6b:8b:7e:f3:c1:33:12:61: 6c:4a:5d:b2:02:99:25:60:ee:ac:6e:75:fe:d5:4d:94:f3:c9: ac:5a:9c:dd:1a:44:61:c2:51:ab:b4:7c:7d:dc:26:f0:12:2b: 50:9b:64:a5:95:cb:d7:e7:42:cc:55:d2:8d:6a:b0:a1:09:14: c2:f2:eb:0e:af:46:1c:8f:32:bf:59:c4:2a:68:5a:0f:9e:ac: a1:80:2c:b6:b1:3d:8c:c5:9c:74:f9:48:23:a3:6d:76:0a:68: 50:20:ab:db:0f:cf:95:88:fd:73:dc:1e:5e:83:56:c3:c4:98: 9b:12:4f:34:d0:16:c1:c6:e3:7a:90:9e:c8:ef:8f:bf:b7:7e: e9:19:e1:4c:4e:18:05:08:44:f9:3e:e6:ac:17:62:fc:61:52: 9c:8f:e5:d9:11:e7:ca:d4:fe:9f:c4:73:94:5c:b4:43:b6:61: bd:9a:59:3a:52:e1:cb:7e:bc:ad:bf:c5:6c:fa:34:28:f7:56: 1f:b5:0d:37 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt87lbz7tdeg+9tDeBAwaAZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNzcxOTYzNDBkMjE0NGI4Y2E3YjA3Nzg5ODRiYjA0YmMx Y2IzNzgwHhcNMjYwMTAyMDQxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNWVhY2E4MDNhN2U5NjllMTg3NGEyZDAwZmFmZTY4NGQ1ZTU1NmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEel2JWhv+edUi8HVsUxUilVd5ut NoInLEW4dgRbMz5ZPZTF+H8u+DCrDTvGQNdmSaYMJglSB8ChN6zZcRqWN++YXNeH SGoTYOqRly+K5GAn6roVzPE+krV+dckqhvyjjuAYnJbAdoyo1OZWYSyFn8ejx4Im frnlo6aErAzxsi5YvVwHXo/8EYxr51TO69XX8pnrkisW9V23yRfD2GMq3Qmp0HhW qxqHwq4FYNdeg0+XdWPom7DRvYdhDnBKuZaEFTI/7XB0bFh8Ycp2HpHIDCgACVje 06lq3MTnH5GIlFPE+bWvfnDQUrXbK0udeIN/x+04jFIWiSF5cZWlRof6iQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFLXqyoA6fpaeGHSi0A+v5oTV5VbAMB8GA1UdIwQY MBaAFAp3GWNA0hRLjKewd4mEuwS8HLN4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ25jWlkwRFNGRXVNcDdCM2lZUzdCTHdjczNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS80OTg5YmEtOWFmMy00ZTNkLTg0NWQt ZWI5NzcxNjRhN2U0LzEvdGVyS2dEcC1scDRZZEtMUUQ2X21oTlhsVnNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS80OTg5YmEtOWFmMy00ZTNkLTg0NWQtZWI5NzcxNjRhN2U0 LzEvQ25jWlkwRFNGRXVNcDdCM2lZUzdCTHdjczNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAO51FgD BAC51FowDQYJKoZIhvcNAQELBQADggEBAIih59zfWVzMqtr3sVVkiGM15LKD8N7Y rn8aF75wJpgRhXW5i+sh3NTV2geng7rHvnK4KkTGkj3tz+rF15Vkhf1ri37zwTMS YWxKXbICmSVg7qxudf7VTZTzyaxanN0aRGHCUau0fH3cJvASK1CbZKWVy9fnQsxV 0o1qsKEJFMLy6w6vRhyPMr9ZxCpoWg+erKGALLaxPYzFnHT5SCOjbXYKaFAgq9sP z5WI/XPcHl6DVsPEmJsSTzTQFsHG43qQnsjvj7+3fukZ4UxOGAUIRPk+5qwXYvxh UpyP5dkR58rU/p/Ec5RctEO2Yb2aWTpS4ct+vK2/xWz6NCj3Vh+1DTc= -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:55 2026 by rpki-client