This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/TmyYIBkphXsirlJCQTVa7k6Uie8.roa File: TmyYIBkphXsirlJCQTVa7k6Uie8.roa (raw, json) Hash identifier: hhCTErkRmXxcMcTjpwytmP+hxldbDBaVoTRSyv8AD3g= Subject key identifier: 4E:6C:98:20:19:29:85:7B:22:AE:52:42:41:35:5A:EE:4E:94:89:EF Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318 Certificate serial: 019B7C1360FB262E285F775FF7C39B085D0A Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/TmyYIBkphXsirlJCQTVa7k6Uie8.roa Signing time: Fri 02 Jan 2026 00:20:03 +0000 ROA not before: Fri 02 Jan 2026 00:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210636 IP address blocks: 45.88.184.0/24 maxlen: 24 45.88.185.0/24 maxlen: 24 45.93.150.0/24 maxlen: 24 45.93.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:60:fb:26:2e:28:5f:77:5f:f7:c3:9b:08:5d:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318 Validity Not Before: Jan 2 00:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e6c98201929857b22ae524241355aee4e9489ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ba:e5:61:41:13:4d:ef:cc:2c:00:0c:0d:1f: ae:74:fa:81:16:13:f3:0e:5e:77:12:41:2e:ba:33: 33:71:ae:c9:15:81:df:66:f1:f4:1b:39:e0:e1:29: 35:53:9f:45:c0:60:c0:77:3e:b4:57:2b:3f:80:05: 11:99:e9:69:a8:b0:63:f3:28:30:31:45:1c:9a:d0: b8:9f:11:e5:11:49:6c:78:cc:7b:8a:66:27:09:26: 07:ef:c8:b3:a6:e3:01:fd:13:40:97:43:24:81:d6: 57:9e:15:69:cf:dc:96:57:d1:79:78:fe:b2:99:27: bc:b4:3d:69:f1:17:b6:67:a9:a9:47:d8:11:83:98: 94:11:c8:0c:20:83:bb:8a:bf:e9:c1:3b:3d:5e:43: 8c:23:ae:61:f8:da:ad:81:f9:96:16:ea:a5:99:a9: c1:6f:78:b8:6c:61:cb:17:b8:fa:6c:73:2f:15:39: 5d:f1:cf:f2:20:bb:54:bd:97:f9:5c:17:66:45:9d: 92:d4:77:86:58:f6:8d:14:d4:36:5d:0c:04:0d:03: bd:2c:79:9a:b9:da:52:b5:fc:fb:d5:3a:0c:16:3f: 9c:c0:d0:b4:88:0b:2c:b0:34:8d:d0:6b:70:ef:63: c6:de:f0:d4:2f:fa:c8:fc:7a:5e:ae:bd:de:78:e2: 9b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:6C:98:20:19:29:85:7B:22:AE:52:42:41:35:5A:EE:4E:94:89:EF X509v3 Authority Key Identifier: keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/TmyYIBkphXsirlJCQTVa7k6Uie8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.88.184.0/23 45.93.150.0/23 Signature Algorithm: sha256WithRSAEncryption 0f:b4:0d:0a:81:46:7d:3f:46:b2:85:7b:9d:98:b9:82:c1:84: 7c:4d:f3:1e:d8:6d:d0:e0:4b:cb:42:19:d0:f1:c6:41:cf:a5: d7:1c:09:43:84:97:62:21:e7:c9:65:41:1e:3b:f1:b5:39:d4: 3f:f7:53:63:22:b1:76:61:e8:70:f1:b7:35:62:d7:a4:8a:e7: 91:e8:4a:4d:38:4e:a5:34:a3:92:f0:f9:d6:45:21:7d:b7:17: ea:a5:fb:40:3a:b7:d5:e6:30:0f:64:75:36:72:8c:ac:eb:76: 59:8d:7d:3e:2f:95:e0:48:b2:31:c6:a6:50:94:43:33:af:fe: 9b:14:2a:cd:8b:a7:51:63:06:14:44:29:d4:16:fb:da:88:9f: 37:80:e9:1d:4e:dc:5a:36:02:32:b9:60:d1:ae:b0:de:02:41: c2:a3:a9:07:1d:bb:14:1c:b9:5e:fd:c5:ff:f9:7a:a0:fc:23: aa:20:27:bd:ad:35:0f:05:6b:d7:9a:5e:04:fb:2b:a0:eb:fe: 5a:fb:63:12:e6:31:a1:69:af:7d:ff:67:af:58:84:09:64:a2: a0:b4:9a:44:dc:a8:e9:f1:b2:c0:be:b6:67:5d:23:5a:a3:c6: 04:93:e2:14:06:62:0b:5d:1b:75:70:c0:92:5f:82:79:d6:6e: 96:dd:ef:ac -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8E2D7Ji4oX3df98ObCF0KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMWMxMTY1OGQyMDQxZWFmMjUwMmZlNTQwOGVkNDkzYmJk NGYzMTgwHhcNMjYwMTAyMDAyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTZjOTgyMDE5Mjk4NTdiMjJhZTUyNDI0MTM1NWFlZTRlOTQ4OWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7brlYUETTe/MLAAMDR+udPqBFhPz Dl53EkEuujMzca7JFYHfZvH0Gzng4Sk1U59FwGDAdz60Vys/gAURmelpqLBj8ygw MUUcmtC4nxHlEUlseMx7imYnCSYH78izpuMB/RNAl0MkgdZXnhVpz9yWV9F5eP6y mSe8tD1p8Re2Z6mpR9gRg5iUEcgMIIO7ir/pwTs9XkOMI65h+NqtgfmWFuqlmanB b3i4bGHLF7j6bHMvFTld8c/yILtUvZf5XBdmRZ2S1HeGWPaNFNQ2XQwEDQO9LHma udpStfz71ToMFj+cwNC0iAsssDSN0Gtw72PG3vDUL/rI/Hperr3eeOKbAwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFE5smCAZKYV7Iq5SQkE1Wu5OlInvMB8GA1UdIwQY MBaAFI4cEWWNIEHq8lAv5UCO1JO71PMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjIt NjMzNDhjZGJmMDI0LzEvVG15WUlCa3BoWHNpcmxKQ1FUVmE3azZVaWU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjItNjMzNDhjZGJmMDI0 LzEvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLVi4AwQB LV2WMA0GCSqGSIb3DQEBCwUAA4IBAQAPtA0KgUZ9P0ayhXudmLmCwYR8TfMe2G3Q 4EvLQhnQ8cZBz6XXHAlDhJdiIefJZUEeO/G1OdQ/91NjIrF2Yehw8bc1YtekiueR 6EpNOE6lNKOS8PnWRSF9txfqpftAOrfV5jAPZHU2coys63ZZjX0+L5XgSLIxxqZQ lEMzr/6bFCrNi6dRYwYURCnUFvvaiJ83gOkdTtxaNgIyuWDRrrDeAkHCo6kHHbsU HLle/cX/+Xqg/COqICe9rTUPBWvXml4E+yug6/5a+2MS5jGhaa99/2evWIQJZKKg tJpE3Kjp8bLAvrZnXSNao8YEk+IUBmILXRt1cMCSX4J51m6W3e+s -----END CERTIFICATE-----Generated at Sun Jan 25 19:37:27 2026 by rpki-client