This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/TAErp0MM5r1w7tsbSJAC4z0-eRw.roa File: TAErp0MM5r1w7tsbSJAC4z0-eRw.roa (raw, json) Hash identifier: 5ACRC91wVrH0LaYTctg5PRrelZg/lYtE/E2ynyD9EV8= Subject key identifier: 4C:01:2B:A7:43:0C:E6:BD:70:EE:DB:1B:48:90:02:E3:3D:3E:79:1C Certificate issuer: /CN=3e19048348d7ecb9f1191080555bf4458a1a54e7 Certificate serial: 019B76EB336E687D23962F750D65B16DD1DA Authority key identifier: 3E:19:04:83:48:D7:EC:B9:F1:19:10:80:55:5B:F4:45:8A:1A:54:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/TAErp0MM5r1w7tsbSJAC4z0-eRw.roa Signing time: Thu 01 Jan 2026 00:18:04 +0000 ROA not before: Thu 01 Jan 2026 00:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209181 IP address blocks: 45.90.104.0/22 maxlen: 22 45.90.104.0/24 maxlen: 24 45.90.105.0/24 maxlen: 24 45.90.106.0/24 maxlen: 24 45.90.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.crl rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:33:6e:68:7d:23:96:2f:75:0d:65:b1:6d:d1:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e19048348d7ecb9f1191080555bf4458a1a54e7 Validity Not Before: Jan 1 00:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c012ba7430ce6bd70eedb1b489002e33d3e791c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:28:08:4f:b4:9d:4c:89:57:8b:4b:88:4d:e4: 69:a8:e7:2d:f3:3e:7f:08:54:d8:6a:5f:99:b4:d2: 3f:34:61:4a:8f:24:8f:a5:73:45:e4:db:c3:dc:fd: 42:e2:09:5d:f2:a9:c0:d4:37:16:bc:6b:73:4c:33: 8d:60:c8:6d:73:1a:16:f4:e5:b2:47:2c:85:c8:0e: 96:a8:f4:a4:38:48:f0:3b:57:2d:6e:09:fd:06:da: 56:39:ff:da:c7:8d:e2:55:b4:53:0f:94:3a:37:9e: 5d:bb:d2:0b:4e:53:85:a3:a0:6f:ca:2d:df:3c:97: 70:8e:4f:9a:7d:1d:11:03:6c:a3:6f:06:fe:ee:16: a7:80:b3:ef:7e:ff:dd:7d:12:08:4a:6b:00:9e:8b: a9:37:40:f9:cd:a1:03:03:75:f5:53:f2:57:fc:58: 16:49:98:10:11:23:29:65:1d:74:bb:e9:e1:91:f4: 71:ec:6a:e3:5f:5f:60:0a:f8:f0:90:e8:fe:79:d1: 41:40:ba:00:2d:09:d4:6e:cf:60:64:d6:02:f1:b7: 77:8b:f3:90:9d:8e:25:72:aa:b4:f4:ca:d3:e4:56: 39:f2:29:da:ab:a6:79:6a:3d:bc:27:d2:c9:4d:e6: 3d:6d:33:dd:b5:bd:bf:6f:10:cf:b5:f7:8a:fb:5c: f8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:01:2B:A7:43:0C:E6:BD:70:EE:DB:1B:48:90:02:E3:3D:3E:79:1C X509v3 Authority Key Identifier: keyid:3E:19:04:83:48:D7:EC:B9:F1:19:10:80:55:5B:F4:45:8A:1A:54:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/TAErp0MM5r1w7tsbSJAC4z0-eRw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.90.104.0/22 Signature Algorithm: sha256WithRSAEncryption 44:5c:3c:87:86:8d:1b:bf:10:5c:62:76:52:f9:03:2d:2a:e3: af:5c:e7:3a:df:01:9a:f2:41:5e:6a:5f:e4:4f:e4:b0:38:df: 21:5e:68:c2:e1:63:36:dd:97:73:ce:1b:3e:f5:19:5f:d6:78: fe:b7:5b:ac:f3:c6:95:53:d4:14:41:ca:f6:db:22:ec:23:49: 21:ca:da:5e:a1:c8:71:fa:31:bf:0d:ef:08:5e:fc:5f:11:77: 93:fb:cb:cf:08:22:3f:85:9a:1f:73:10:a0:ed:54:ee:fa:60: 05:dd:b0:f3:8f:ef:00:af:df:c3:de:b7:e8:fb:75:05:14:63: b6:2a:ec:8e:58:ae:be:fd:1e:d8:36:bf:fd:f0:47:7f:d9:15: e7:79:dc:9c:ef:ed:97:09:19:cf:ba:e2:0d:50:36:88:7a:52: 60:f5:40:1b:f5:a7:06:16:9b:a3:d4:2f:fc:14:47:db:26:8b: da:13:85:24:c5:3a:f0:5c:2d:d4:fa:12:f3:33:2e:2c:52:f9: 68:61:65:b0:34:e1:54:c1:c0:af:f6:56:5b:6b:6f:8e:23:5c: 87:d9:ce:7a:c5:b6:e5:26:6d:e6:dd:ab:96:50:4a:ee:73:33: ff:c5:a2:9e:19:17:ea:9a:e7:8a:2a:93:1b:33:d3:9d:b3:a8: be:53:8e:b4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26zNuaH0jli91DWWxbdHaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMTkwNDgzNDhkN2VjYjlmMTE5MTA4MDU1NWJmNDQ1OGEx YTU0ZTcwHhcNMjYwMTAxMDAxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzAxMmJhNzQzMGNlNmJkNzBlZWRiMWI0ODkwMDJlMzNkM2U3OTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCgIT7SdTIlXi0uITeRpqOct8z5/ CFTYal+ZtNI/NGFKjySPpXNF5NvD3P1C4gld8qnA1DcWvGtzTDONYMhtcxoW9OWy RyyFyA6WqPSkOEjwO1ctbgn9BtpWOf/ax43iVbRTD5Q6N55du9ILTlOFo6Bvyi3f PJdwjk+afR0RA2yjbwb+7hangLPvfv/dfRIISmsAnoupN0D5zaEDA3X1U/JX/FgW SZgQESMpZR10u+nhkfRx7GrjX19gCvjwkOj+edFBQLoALQnUbs9gZNYC8bd3i/OQ nY4lcqq09MrT5FY58inaq6Z5aj28J9LJTeY9bTPdtb2/bxDPtfeK+1z4YQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEwBK6dDDOa9cO7bG0iQAuM9PnkcMB8GA1UdIwQY MBaAFD4ZBINI1+y58RkQgFVb9EWKGlTnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGhrRWcwalg3TG54R1JDQVZWdjBSWW9hVk9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9hZjI2MmMtZTJjZC00ODQxLTg1MGYt MDJmMzVhZDg3N2YzLzEvVEFFcnAwTU01cjF3N3RzYlNKQUM0ejAtZVJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9hZjI2MmMtZTJjZC00ODQxLTg1MGYtMDJmMzVhZDg3N2Yz LzEvUGhrRWcwalg3TG54R1JDQVZWdjBSWW9hVk9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVpoMA0G CSqGSIb3DQEBCwUAA4IBAQBEXDyHho0bvxBcYnZS+QMtKuOvXOc63wGa8kFeal/k T+SwON8hXmjC4WM23Zdzzhs+9Rlf1nj+t1us88aVU9QUQcr22yLsI0khytpeochx +jG/De8IXvxfEXeT+8vPCCI/hZofcxCg7VTu+mAF3bDzj+8Ar9/D3rfo+3UFFGO2 KuyOWK6+/R7YNr/98Ed/2RXnedyc7+2XCRnPuuINUDaIelJg9UAb9acGFpuj1C/8 FEfbJovaE4UkxTrwXC3U+hLzMy4sUvloYWWwNOFUwcCv9lZba2+OI1yH2c56xbbl Jm3m3auWUEruczP/xaKeGRfqmueKKpMbM9Ods6i+U460 -----END CERTIFICATE-----Generated at Sun Jan 25 15:11:38 2026 by rpki-client