This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/TaLcMniYP68W_xpID_YTmpPHJQw.roa File: TaLcMniYP68W_xpID_YTmpPHJQw.roa (raw, json) Hash identifier: FpN6wFwhf5u/rLDXXLg50HkAwzUqczd5OywdW3G3qdY= Subject key identifier: 4D:A2:DC:32:78:98:3F:AF:16:FF:1A:48:0F:F6:13:9A:93:C7:25:0C Certificate issuer: /CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2 Certificate serial: 019B7F856F5DC0250F7E070400DC53664E4E Authority key identifier: 26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/TaLcMniYP68W_xpID_YTmpPHJQw.roa Signing time: Fri 02 Jan 2026 16:23:29 +0000 ROA not before: Fri 02 Jan 2026 16:23:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39029 IP address blocks: 87.238.32.0/19 maxlen: 19 185.47.40.0/22 maxlen: 22 194.31.39.0/24 maxlen: 24 2a02:c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:6f:5d:c0:25:0f:7e:07:04:00:dc:53:66:4e:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2 Validity Not Before: Jan 2 16:23:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4da2dc3278983faf16ff1a480ff6139a93c7250c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9d:d8:98:5a:33:40:9d:b6:e7:1a:5a:85:aa: 93:82:12:fe:f3:1f:3c:92:95:dd:a5:9f:67:4f:45: f0:8d:7e:a3:8f:e2:c3:e7:1b:35:1a:58:01:c6:43: 59:66:6f:df:db:75:b6:49:b0:c1:11:76:2f:03:4c: 7c:2e:34:c5:1f:75:87:ed:f5:b4:c8:37:ce:6f:36: 91:31:be:2d:d4:16:d4:a0:fe:65:9b:59:25:9e:53: 09:cc:1a:e0:ff:e2:fa:32:1c:b8:39:ef:f8:91:fe: 2a:d0:1b:5d:2c:81:e1:ed:18:25:f2:8c:55:c1:e6: 1c:97:fc:4c:2a:29:fc:9e:2a:c0:d3:d2:cd:08:42: aa:1e:78:2d:03:65:de:ff:39:9a:49:8a:70:f3:41: b4:a1:ce:3d:ee:66:54:af:ab:d5:31:fd:d8:90:e5: 1c:41:03:fd:f3:d8:79:12:3b:35:f8:df:c8:8d:45: 22:aa:e2:d2:29:54:ac:fc:ca:ef:aa:ef:fe:ef:44: 7b:14:34:ca:46:2a:a6:75:21:40:52:0a:6c:a7:78: 7f:ff:3a:81:a3:01:c4:bb:d3:1f:0c:b1:5f:f8:74: 04:d0:10:61:d0:03:d2:3c:7d:5a:e7:26:c0:c4:19: 84:e3:da:86:63:d6:a9:67:b3:b7:81:cd:27:82:e2: 30:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A2:DC:32:78:98:3F:AF:16:FF:1A:48:0F:F6:13:9A:93:C7:25:0C X509v3 Authority Key Identifier: keyid:26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/TaLcMniYP68W_xpID_YTmpPHJQw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.238.32.0/19 185.47.40.0/22 194.31.39.0/24 IPv6: 2a02:c0::/32 Signature Algorithm: sha256WithRSAEncryption b6:e8:62:aa:bb:da:a5:3f:22:e2:9d:16:1f:22:21:d9:01:d7: 4e:95:5d:8e:24:da:bc:dd:e1:58:8d:04:3d:aa:01:48:6c:c8: 66:d5:00:45:a4:e3:3f:08:b3:36:a1:a3:e3:b8:fe:9a:b5:c9: 3f:84:0c:05:27:ce:df:06:c9:25:8e:eb:40:b1:98:97:59:fe: 6e:e3:ee:43:64:ba:5d:db:af:d5:7c:0a:e3:6f:d2:19:6a:49: 83:65:e4:9c:ba:11:e2:c4:16:2d:6a:cd:f2:3d:52:da:ca:96: 9a:0a:7f:04:f3:e6:7f:cf:97:5a:74:80:f0:51:99:09:61:56: f2:05:f7:db:90:4c:0c:ff:69:f6:bf:8a:35:22:e2:04:a7:0e: 68:6e:29:d3:6d:a2:c1:b6:ba:41:48:7f:c9:09:1a:25:3d:d9: 13:d0:0d:28:70:1f:c8:48:8a:1d:1b:c8:41:c8:25:02:cf:56: 88:14:cc:ec:a4:eb:33:60:88:fd:ef:4c:9f:f0:f9:3b:d4:61: e4:89:8a:e0:90:eb:43:23:d7:fa:47:cf:bd:b5:db:8a:89:b5: 26:c7:94:9d:c1:69:d8:be:b0:eb:e7:01:56:fe:1e:d9:ea:48: 1f:00:73:3d:8d:85:b6:84:4d:7c:d0:fd:e1:c8:41:4d:b4:d8: 74:18:24:19 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt/hW9dwCUPfgcEANxTZk5OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2YTQ1MWUyNDVlMDFiYTliMmZiMjMxNGMyNjA5ZTdiMTUx ZTc0YTIwHhcNMjYwMTAyMTYyMzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZGEyZGMzMjc4OTgzZmFmMTZmZjFhNDgwZmY2MTM5YTkzYzcyNTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmp3YmFozQJ225xpahaqTghL+8x88 kpXdpZ9nT0XwjX6jj+LD5xs1GlgBxkNZZm/f23W2SbDBEXYvA0x8LjTFH3WH7fW0 yDfObzaRMb4t1BbUoP5lm1klnlMJzBrg/+L6Mhy4Oe/4kf4q0BtdLIHh7Rgl8oxV weYcl/xMKin8nirA09LNCEKqHngtA2Xe/zmaSYpw80G0oc497mZUr6vVMf3YkOUc QQP989h5Ejs1+N/IjUUiquLSKVSs/Mrvqu/+70R7FDTKRiqmdSFAUgpsp3h//zqB owHEu9MfDLFf+HQE0BBh0APSPH1a5ybAxBmE49qGY9apZ7O3gc0nguIwXQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFE2i3DJ4mD+vFv8aSA/2E5qTxyUMMB8GA1UdIwQY MBaAFCakUeJF4BupsvsjFMJgnnsVHnSiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnFSUjRrWGdHNm15LXlNVXdtQ2VleFVlZEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9hMDc3MzktNjBiYS00ZTE5LWJjNTUt YjU2YzUzNjYyMDI4LzEvVGFMY01uaVlQNjhXX3hwSURfWVRtcFBISlF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9hMDc3MzktNjBiYS00ZTE5LWJjNTUtYjU2YzUzNjYyMDI4 LzEvSnFSUjRrWGdHNm15LXlNVXdtQ2VleFVlZEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQFV+4gAwQC uS8oAwQAwh8nMA0EAgACMAcDBQAqAgDAMA0GCSqGSIb3DQEBCwUAA4IBAQC26GKq u9qlPyLinRYfIiHZAddOlV2OJNq83eFYjQQ9qgFIbMhm1QBFpOM/CLM2oaPjuP6a tck/hAwFJ87fBskljutAsZiXWf5u4+5DZLpd26/VfArjb9IZakmDZeScuhHixBYt as3yPVLaypaaCn8E8+Z/z5dadIDwUZkJYVbyBffbkEwM/2n2v4o1IuIEpw5obinT baLBtrpBSH/JCRolPdkT0A0ocB/ISIodG8hByCUCz1aIFMzspOszYIj970yf8Pk7 1GHkiYrgkOtDI9f6R8+9tduKibUmx5SdwWnYvrDr5wFW/h7Z6kgfAHM9jYW2hE18 0P3hyEFNtNh0GCQZ -----END CERTIFICATE-----Generated at Mon Jan 26 12:55:41 2026 by rpki-client