This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Ta082XLitUUWmi8lEVvMnH9kxho.roa File: Ta082XLitUUWmi8lEVvMnH9kxho.roa (raw, json) Hash identifier: Hi1+gnirS97ap5JJUkXiKbpgPjtEeZ3etSYa5P1n9kM= Subject key identifier: 4D:AD:3C:D9:72:E2:B5:45:16:9A:2F:25:11:5B:CC:9C:7F:64:C6:1A Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F8499FFD312B03EBB9937C768134E31 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Ta082XLitUUWmi8lEVvMnH9kxho.roa Signing time: Fri 02 Jan 2026 16:22:35 +0000 ROA not before: Fri 02 Jan 2026 16:22:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41124 IP address blocks: 31.148.208.0/22 maxlen: 24 93.171.64.0/21 maxlen: 24 93.171.228.0/23 maxlen: 24 95.47.32.0/22 maxlen: 24 95.47.192.0/22 maxlen: 24 146.120.124.0/22 maxlen: 24 146.120.152.0/22 maxlen: 24 146.120.176.0/22 maxlen: 24 146.158.24.0/22 maxlen: 24 146.158.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:99:ff:d3:12:b0:3e:bb:99:37:c7:68:13:4e:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4dad3cd972e2b545169a2f25115bcc9c7f64c61a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1a:df:21:64:7c:f5:51:b8:9f:a1:14:38:05: c0:fa:b5:11:50:9b:a0:59:e7:a7:0d:d3:48:b1:c3: 3a:c4:e5:92:80:9b:86:a5:ec:a2:76:64:f9:44:d2: af:44:00:8a:72:e8:1b:5c:7b:7e:af:fe:d8:44:93: 86:47:84:10:2d:25:aa:48:f9:d8:65:fb:53:a4:3c: 6f:43:af:3b:f9:6d:35:19:f0:7d:9f:6d:18:9f:70: 2d:2f:3b:1a:00:18:83:2e:21:85:cc:3d:07:16:83: d6:29:31:8d:1d:5b:7a:5f:15:74:0e:2a:e4:69:70: 7f:48:72:98:8e:3b:59:d6:d8:f0:9b:6b:01:5b:1e: cc:29:4a:3b:f2:82:6b:db:cc:a8:3c:a9:9d:09:70: 82:8e:55:9d:d4:50:14:41:40:fd:56:ce:7f:51:26: fc:4e:85:9c:00:3e:4f:d7:e4:5d:12:c7:eb:48:6c: fc:e3:33:a9:05:a6:16:87:bb:26:7b:f2:00:99:6a: fc:b0:6c:ea:c8:5c:6a:72:ba:91:17:85:6a:19:1b: f6:49:40:84:9e:fe:54:e5:d5:89:b2:0f:99:cb:d8: 60:8f:8b:04:59:83:16:e9:98:80:15:20:93:0d:d8: f0:b0:3a:50:47:f2:a4:78:26:bb:ee:4a:59:5f:1f: bc:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:AD:3C:D9:72:E2:B5:45:16:9A:2F:25:11:5B:CC:9C:7F:64:C6:1A X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Ta082XLitUUWmi8lEVvMnH9kxho.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.148.208.0/22 93.171.64.0/21 93.171.228.0/23 95.47.32.0/22 95.47.192.0/22 146.120.124.0/22 146.120.152.0/22 146.120.176.0/22 146.158.24.0/22 146.158.64.0/22 Signature Algorithm: sha256WithRSAEncryption 02:c9:dc:67:02:c0:10:5f:c8:38:ce:f9:c2:a3:6b:1a:31:2e: 19:7a:4a:af:ae:c7:24:d9:1b:8c:d8:6c:7c:9b:f9:b0:95:64: 71:56:0a:1f:a7:ed:f1:e5:73:8d:78:0d:27:1e:1d:7b:f8:b3: af:20:34:7c:45:01:3d:19:cc:ab:5b:dd:7b:62:71:f2:58:a8: 58:a2:8f:89:1e:2c:c9:e6:6e:26:4b:34:48:7d:a2:a9:77:33: c5:9a:8f:8c:6f:fc:bd:f4:77:30:0a:ac:46:18:68:90:fd:ae: bb:ef:27:ec:77:1b:12:d4:97:ed:bb:03:6c:e6:15:a7:ff:82: 92:51:a7:f0:52:eb:a4:8a:93:0d:b5:9e:a8:ac:62:e3:6b:23: d1:f2:f3:fa:11:75:b3:e4:1f:07:3b:c0:b2:af:34:4a:08:d8: 8f:36:34:e4:23:ef:f5:1a:4c:02:ce:f3:c3:2f:0b:fa:95:65: 8c:10:8c:6f:c8:2a:9c:40:98:4d:23:fa:03:48:07:89:50:3a: 62:80:68:c8:9c:4c:a5:41:f5:73:23:f0:18:ac:68:5b:ac:d0: d5:9b:d9:04:a1:ef:f6:f9:72:5b:4f:63:1a:76:d2:38:24:4e: e8:45:26:22:da:89:d4:ca:35:ae:08:28:23:29:77:8f:a3:1b: a4:53:5e:8f -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZt/hJn/0xKwPruZN8doE04xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZGFkM2NkOTcyZTJiNTQ1MTY5YTJmMjUxMTViY2M5YzdmNjRjNjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBrfIWR89VG4n6EUOAXA+rURUJug WeenDdNIscM6xOWSgJuGpeyidmT5RNKvRACKcugbXHt+r/7YRJOGR4QQLSWqSPnY ZftTpDxvQ687+W01GfB9n20Yn3AtLzsaABiDLiGFzD0HFoPWKTGNHVt6XxV0Dirk aXB/SHKYjjtZ1tjwm2sBWx7MKUo78oJr28yoPKmdCXCCjlWd1FAUQUD9Vs5/USb8 ToWcAD5P1+RdEsfrSGz84zOpBaYWh7sme/IAmWr8sGzqyFxqcrqRF4VqGRv2SUCE nv5U5dWJsg+Zy9hgj4sEWYMW6ZiAFSCTDdjwsDpQR/KkeCa77kpZXx+8MwIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFE2tPNly4rVFFpovJRFbzJx/ZMYaMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvVGEwODJYTGl0VVVXbWk4bEVWdk1uSDlreGhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQCH5TQAwQD XatAAwQBXavkAwQCXy8gAwQCXy/AAwQCknh8AwQCkniYAwQCkniwAwQCkp4YAwQC kp5AMA0GCSqGSIb3DQEBCwUAA4IBAQACydxnAsAQX8g4zvnCo2saMS4Zekqvrsck 2RuM2Gx8m/mwlWRxVgofp+3x5XONeA0nHh17+LOvIDR8RQE9GcyrW917YnHyWKhY oo+JHizJ5m4mSzRIfaKpdzPFmo+Mb/y99HcwCqxGGGiQ/a677yfsdxsS1JftuwNs 5hWn/4KSUafwUuukipMNtZ6orGLjayPR8vP6EXWz5B8HO8CyrzRKCNiPNjTkI+/1 GkwCzvPDLwv6lWWMEIxvyCqcQJhNI/oDSAeJUDpigGjInEylQfVzI/AYrGhbrNDV m9kEoe/2+XJbT2MadtI4JE7oRSYi2onUyjWuCCgjKXePoxukU16P -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:06 2026 by rpki-client