This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/TaOkTEEE00uDuFBt0oukno2-oJM.roa File: TaOkTEEE00uDuFBt0oukno2-oJM.roa (raw, json) Hash identifier: L5MTfRyQyNuoejsnRiY40yBhfPSdHTRkPlZoOi8bsGw= Subject key identifier: 4D:A3:A4:4C:41:04:D3:4B:83:B8:50:6D:D2:8B:A4:9E:8D:BE:A0:93 Certificate issuer: /CN=9cce3b1197d0cf9511540572a58fd372dcc07489 Certificate serial: 019B7C111B793859C0CD6C6F1438E523EFB1 Authority key identifier: 9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/TaOkTEEE00uDuFBt0oukno2-oJM.roa Signing time: Fri 02 Jan 2026 00:17:34 +0000 ROA not before: Fri 02 Jan 2026 00:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212017 IP address blocks: 185.159.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:1b:79:38:59:c0:cd:6c:6f:14:38:e5:23:ef:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cce3b1197d0cf9511540572a58fd372dcc07489 Validity Not Before: Jan 2 00:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4da3a44c4104d34b83b8506dd28ba49e8dbea093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5b:e0:99:3e:93:d4:2d:6a:20:50:02:8b:b6: 55:47:76:17:a2:4a:0f:4f:ed:01:d0:d2:7e:25:16: b0:89:b4:cf:d1:fd:36:35:80:a6:8d:dc:25:ea:2b: e5:aa:cd:76:f3:56:bc:48:db:b6:d0:5d:ef:95:fe: 6a:33:0a:b7:5c:f2:46:c3:cc:85:47:f5:dc:34:c3: c7:61:41:16:c9:65:47:10:61:6b:8f:a1:c2:b9:2a: 58:c2:bb:00:64:9c:26:16:71:2a:e5:dd:1f:74:e3: f8:99:65:e4:2d:ca:8d:bb:a7:33:b3:37:e9:d9:26: ad:ad:b5:3a:43:44:44:0b:69:d0:fc:83:2b:04:6f: bc:95:40:6f:cc:11:60:79:53:48:68:10:2d:ca:c4: f9:ef:bf:33:86:07:30:19:f7:b1:39:f6:21:74:93: 1a:7f:07:b6:b9:97:e7:c7:64:fe:0f:50:c8:e7:09: 08:4a:25:a1:e0:60:8a:f6:9e:b6:89:4a:a1:d1:06: e9:fc:d4:90:ad:8d:e2:2f:52:88:8e:b3:9f:90:d8: 0e:ed:d5:44:31:5a:b6:ea:eb:36:14:33:4f:67:19: 7e:b5:fc:ad:f6:aa:b7:fe:db:d1:22:8a:70:21:f5: 51:ce:bd:16:d3:42:be:72:03:90:e2:0f:af:1d:37: 56:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A3:A4:4C:41:04:D3:4B:83:B8:50:6D:D2:8B:A4:9E:8D:BE:A0:93 X509v3 Authority Key Identifier: keyid:9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/TaOkTEEE00uDuFBt0oukno2-oJM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.159.40.0/22 Signature Algorithm: sha256WithRSAEncryption 79:de:42:4f:85:b6:ae:65:1c:99:da:ce:c4:08:25:8f:9e:fc: 41:40:bb:b6:63:33:84:78:62:45:bd:41:70:92:43:e6:f4:18: 51:df:d3:42:ea:d8:e6:54:a1:73:b3:6a:13:0e:77:3f:be:28: 40:18:ac:9e:5f:89:4f:94:76:2c:af:e2:47:62:b0:9c:8f:8e: bc:93:2b:5c:15:28:7c:e4:5f:bd:e5:df:38:c8:14:12:48:ce: 66:f4:df:b5:ab:b9:07:c3:1b:a6:37:1b:e7:0a:37:49:ed:59: c6:80:8d:4c:12:34:b9:80:0b:a2:31:83:e3:84:2a:93:51:9a: 45:c3:10:40:71:da:9e:35:e1:40:ed:82:d4:28:fd:da:8e:2e: 5a:99:9c:77:45:3c:f5:bb:24:78:22:4b:d1:d4:0d:e8:f3:88: 95:ee:40:7c:7b:ba:28:fa:f8:84:e2:32:c2:45:ed:b3:44:fd: 1b:dd:28:9e:77:c4:3e:cb:c2:25:99:0a:fb:3d:85:53:e1:bb: de:6e:8e:7a:ab:5b:32:55:8e:05:33:b3:69:9b:e2:07:cf:e9: 32:c6:c3:f1:be:f7:be:56:33:1b:49:12:79:10:d8:17:12:b6: 16:42:11:6a:0f:99:fe:ff:b9:76:b1:e4:13:2f:d9:f8:6d:f7: 42:fe:cc:f8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8ERt5OFnAzWxvFDjlI++xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljY2UzYjExOTdkMGNmOTUxMTU0MDU3MmE1OGZkMzcyZGNj MDc0ODkwHhcNMjYwMTAyMDAxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZGEzYTQ0YzQxMDRkMzRiODNiODUwNmRkMjhiYTQ5ZThkYmVhMDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1vgmT6T1C1qIFACi7ZVR3YXokoP T+0B0NJ+JRawibTP0f02NYCmjdwl6ivlqs1281a8SNu20F3vlf5qMwq3XPJGw8yF R/XcNMPHYUEWyWVHEGFrj6HCuSpYwrsAZJwmFnEq5d0fdOP4mWXkLcqNu6czszfp 2SatrbU6Q0REC2nQ/IMrBG+8lUBvzBFgeVNIaBAtysT5778zhgcwGfexOfYhdJMa fwe2uZfnx2T+D1DI5wkISiWh4GCK9p62iUqh0Qbp/NSQrY3iL1KIjrOfkNgO7dVE MVq26us2FDNPZxl+tfyt9qq3/tvRIopwIfVRzr0W00K+cgOQ4g+vHTdWQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE2jpExBBNNLg7hQbdKLpJ6NvqCTMB8GA1UdIwQY MBaAFJzOOxGX0M+VEVQFcqWP03LcwHSJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbk00N0VaZlF6NVVSVkFWeXBZX1RjdHpBZElrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC80ZjIzNjctNzNmMy00ODE2LWJlYTgt YTA0NWZmOGUyYWMwLzEvVGFPa1RFRUUwMHVEdUZCdDBvdWtubzItb0pNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC80ZjIzNjctNzNmMy00ODE2LWJlYTgtYTA0NWZmOGUyYWMw LzEvbk00N0VaZlF6NVVSVkFWeXBZX1RjdHpBZElrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZ8oMA0G CSqGSIb3DQEBCwUAA4IBAQB53kJPhbauZRyZ2s7ECCWPnvxBQLu2YzOEeGJFvUFw kkPm9BhR39NC6tjmVKFzs2oTDnc/vihAGKyeX4lPlHYsr+JHYrCcj468kytcFSh8 5F+95d84yBQSSM5m9N+1q7kHwxumNxvnCjdJ7VnGgI1MEjS5gAuiMYPjhCqTUZpF wxBAcdqeNeFA7YLUKP3aji5amZx3RTz1uyR4IkvR1A3o84iV7kB8e7oo+viE4jLC Re2zRP0b3Sied8Q+y8IlmQr7PYVT4bvebo56q1syVY4FM7Npm+IHz+kyxsPxvve+ VjMbSRJ5ENgXErYWQhFqD5n+/7l2seQTL9n4bfdC/sz4 -----END CERTIFICATE-----Generated at Sun Jan 25 17:20:10 2026 by rpki-client