This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/TLDEMG13z099E9PPUlaFNgJGWNU.roa File: TLDEMG13z099E9PPUlaFNgJGWNU.roa (raw, json) Hash identifier: BuMLwHcrQNiLmPqXzsk/lZgeQTDappKSAbyz8iHf5NI= Subject key identifier: 4C:B0:C4:30:6D:77:CF:4F:7D:13:D3:CF:52:56:85:36:02:46:58:D5 Certificate issuer: /CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a Certificate serial: 019B7910DAC25F909738D164214EF1DB36AE Authority key identifier: DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/TLDEMG13z099E9PPUlaFNgJGWNU.roa Signing time: Thu 01 Jan 2026 10:18:26 +0000 ROA not before: Thu 01 Jan 2026 10:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35491 IP address blocks: 46.148.64.0/20 maxlen: 20 46.148.64.0/24 maxlen: 24 46.148.65.0/24 maxlen: 24 46.148.66.0/24 maxlen: 24 46.148.67.0/24 maxlen: 24 46.148.68.0/24 maxlen: 24 46.148.69.0/24 maxlen: 24 46.148.70.0/24 maxlen: 24 46.148.71.0/24 maxlen: 24 46.148.72.0/24 maxlen: 24 46.148.73.0/24 maxlen: 24 46.148.74.0/24 maxlen: 24 46.148.75.0/24 maxlen: 24 46.148.76.0/24 maxlen: 24 46.148.77.0/24 maxlen: 24 91.192.120.0/22 maxlen: 22 91.192.120.0/24 maxlen: 24 91.192.121.0/24 maxlen: 24 91.192.122.0/24 maxlen: 24 91.192.123.0/24 maxlen: 24 193.151.112.0/22 maxlen: 22 193.151.112.0/24 maxlen: 24 193.151.113.0/24 maxlen: 24 193.151.114.0/24 maxlen: 24 193.151.115.0/24 maxlen: 24 194.24.180.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 04:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:da:c2:5f:90:97:38:d1:64:21:4e:f1:db:36:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a Validity Not Before: Jan 1 10:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4cb0c4306d77cf4f7d13d3cf52568536024658d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:66:e2:e0:98:c6:24:6f:80:e4:0c:cd:2c:e7: 78:d0:18:9a:09:12:48:31:11:59:c2:73:4e:71:c3: 18:01:b4:ba:47:8c:c0:2c:42:18:4b:fa:eb:dd:4f: 26:4e:9b:da:62:c0:5a:f7:5b:70:cc:83:a6:e9:13: 6f:97:81:53:05:2f:91:90:76:25:b3:ef:7e:52:82: be:8d:e8:34:8d:70:18:02:8b:b5:cd:fb:d5:0c:2d: 73:24:fe:9d:b5:b4:79:fa:f7:5b:8a:62:a4:29:ec: cb:64:e5:5b:e8:e9:32:a2:4d:0f:e8:ea:14:aa:5a: 51:9b:8e:67:d4:94:15:d8:d9:4a:84:8e:67:4b:50: 6b:60:77:7e:9e:78:f1:ea:1e:72:a2:7a:da:79:ea: 4a:4a:21:59:09:8b:78:6d:bb:cc:c0:7f:8f:4e:a9: c9:05:66:e5:a0:4f:6e:d2:21:2c:ea:34:30:30:00: 5b:3f:f9:72:8c:f0:d6:d5:73:88:4c:73:fa:a7:a2: 45:22:da:2b:57:8b:ac:3f:6f:1a:45:d1:b3:53:76: 16:57:af:b9:68:f6:0b:37:f9:a0:cd:48:5c:2d:02: 80:4b:86:6b:6f:75:39:31:86:76:fc:ec:6a:2b:bb: da:92:ea:2b:e0:40:fa:5b:be:a9:d6:4d:ad:99:9b: 81:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B0:C4:30:6D:77:CF:4F:7D:13:D3:CF:52:56:85:36:02:46:58:D5 X509v3 Authority Key Identifier: keyid:DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/TLDEMG13z099E9PPUlaFNgJGWNU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.148.64.0/20 91.192.120.0/22 193.151.112.0/22 194.24.180.0/23 Signature Algorithm: sha256WithRSAEncryption 67:3f:f2:fb:72:15:4b:8f:a7:06:6d:7f:1e:a0:0c:fe:27:ec: ce:fe:9c:3c:95:82:05:c5:b6:8c:63:f1:9f:b4:f0:48:08:87: 50:c8:f0:7b:4d:d5:aa:bf:64:d6:36:7f:12:c5:e3:10:65:ae: 23:24:2d:35:7c:fc:f3:f8:df:ec:ea:14:c7:ae:8a:16:e6:74: 01:3c:3c:27:bb:49:e6:b8:84:20:5f:ad:97:14:e8:65:f5:a2: 1b:0b:29:29:e3:7b:df:7e:06:9a:7c:ca:44:33:98:b7:5d:df: b3:75:94:07:c2:b3:3e:97:fa:2d:f1:1e:4a:0b:1a:bd:96:a2: 9d:bd:d5:d4:01:00:4e:63:72:63:fa:0a:30:69:b2:43:12:0a: ea:81:0c:12:ca:33:da:17:92:29:c7:bf:30:44:de:cf:2c:96: a1:90:ef:53:dd:7b:ea:83:38:a6:1b:ca:6c:ae:8b:a0:ba:76: 14:d0:d2:6e:ac:e1:ee:17:36:5b:a5:a9:77:72:fd:d7:de:50: 34:12:71:44:51:e9:ca:43:c2:20:4f:47:e9:5e:84:fe:50:b1: 0b:d6:3a:1c:41:ed:3f:5f:e7:d5:c7:78:70:03:b3:26:e4:7d: c2:3f:1a:00:c8:d0:c1:eb:2e:2b:6f:7a:29:b1:f3:8c:b9:29: 5f:d3:c6:a7 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt5ENrCX5CXONFkIU7x2zauMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlYjE0NTc1NjA4MGFmZjFiYjAwZjVmOTBmZDlmMmYyN2Nj NTczMmEwHhcNMjYwMTAxMTAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Y2IwYzQzMDZkNzdjZjRmN2QxM2QzY2Y1MjU2ODUzNjAyNDY1OGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2bi4JjGJG+A5AzNLOd40BiaCRJI MRFZwnNOccMYAbS6R4zALEIYS/rr3U8mTpvaYsBa91twzIOm6RNvl4FTBS+RkHYl s+9+UoK+jeg0jXAYAou1zfvVDC1zJP6dtbR5+vdbimKkKezLZOVb6Okyok0P6OoU qlpRm45n1JQV2NlKhI5nS1BrYHd+nnjx6h5yonraeepKSiFZCYt4bbvMwH+PTqnJ BWbloE9u0iEs6jQwMABbP/lyjPDW1XOITHP6p6JFItorV4usP28aRdGzU3YWV6+5 aPYLN/mgzUhcLQKAS4Zrb3U5MYZ2/OxqK7vakuor4ED6W76p1k2tmZuBNwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFEywxDBtd89PfRPTz1JWhTYCRljVMB8GA1UdIwQY MBaAFN6xRXVggK/xuwD1+Q/Z8vJ8xXMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3JGRmRXQ0FyX0c3QVBYNUQ5bnk4bnpGY3lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9hNjVkMTQtOTM2NS00MGM5LWE1Njgt M2ZmOTY0NTUwM2U5LzEvVExERU1HMTN6MDk5RTlQUFVsYUZOZ0pHV05VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9hNjVkMTQtOTM2NS00MGM5LWE1NjgtM2ZmOTY0NTUwM2U5 LzEvM3JGRmRXQ0FyX0c3QVBYNUQ5bnk4bnpGY3lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQELpRAAwQC W8B4AwQCwZdwAwQBwhi0MA0GCSqGSIb3DQEBCwUAA4IBAQBnP/L7chVLj6cGbX8e oAz+J+zO/pw8lYIFxbaMY/GftPBICIdQyPB7TdWqv2TWNn8SxeMQZa4jJC01fPzz +N/s6hTHrooW5nQBPDwnu0nmuIQgX62XFOhl9aIbCykp43vffgaafMpEM5i3Xd+z dZQHwrM+l/ot8R5KCxq9lqKdvdXUAQBOY3Jj+gowabJDEgrqgQwSyjPaF5Ipx78w RN7PLJahkO9T3XvqgzimG8psrougunYU0NJurOHuFzZbpal3cv3X3lA0EnFEUenK Q8IgT0fpXoT+ULEL1jocQe0/X+fVx3hwA7Mm5H3CPxoAyNDB6y4rb3opsfOMuSlf 08an -----END CERTIFICATE-----Generated at Mon Jan 26 11:29:34 2026 by rpki-client