This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/TVDa4jH-KePexazfdp059jjKJOw.roa File: TVDa4jH-KePexazfdp059jjKJOw.roa (raw, json) Hash identifier: 89VuNse5oJN1x+WeKQMcg+E+3+6iaiSt9KMxgJnMFJ8= Subject key identifier: 4D:50:DA:E2:31:FE:29:E3:DE:C5:AC:DF:76:9D:39:F6:38:CA:24:EC Certificate issuer: /CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad Certificate serial: 019B79ECD041D905543302F8D6B22004DC51 Authority key identifier: 97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/TVDa4jH-KePexazfdp059jjKJOw.roa Signing time: Thu 01 Jan 2026 14:18:41 +0000 ROA not before: Thu 01 Jan 2026 14:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25773 IP address blocks: 141.226.100.0/24 maxlen: 24 141.226.110.0/24 maxlen: 24 141.226.252.0/22 maxlen: 24 144.249.128.0/18 maxlen: 24 167.17.128.0/19 maxlen: 24 176.100.161.0/24 maxlen: 24 185.139.240.0/22 maxlen: 24 2a07:1980::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:d0:41:d9:05:54:33:02:f8:d6:b2:20:04:dc:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad Validity Not Before: Jan 1 14:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d50dae231fe29e3dec5acdf769d39f638ca24ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a7:60:98:de:30:2d:00:c1:45:8c:89:5b:14: 63:57:55:a3:90:53:05:99:11:2a:ba:21:66:2c:70: 16:a4:88:d3:07:0b:26:52:36:75:9e:c7:5d:30:c7: b8:c5:4d:6d:78:e5:f2:a5:39:8f:7d:a4:1e:d1:3f: 76:fc:c6:ca:af:cf:bd:f1:09:99:c2:d0:65:dd:7d: ff:60:21:d5:8f:08:c2:69:c8:27:b8:3a:31:ab:b8: bf:3d:06:f4:4e:4f:93:51:e4:d7:da:cc:2f:d9:c5: 0a:e7:04:ff:62:21:d1:8f:4c:3f:fa:b1:c8:45:bf: 2e:cc:94:1c:bd:fa:ef:ff:ed:b9:9a:61:65:e6:ac: 88:53:a8:f5:15:b1:4d:81:b5:9f:49:2b:e0:14:3f: f2:d1:8c:46:b6:78:0c:0e:23:37:16:da:54:c5:9c: 35:f8:b9:18:56:69:84:d2:80:c5:54:b7:3c:bf:93: 5f:de:32:9c:cc:2f:a3:bc:04:47:3d:5e:ac:eb:6f: 63:81:44:f9:bd:61:aa:68:cf:40:16:e3:35:e5:17: 0f:0a:ce:aa:ad:0e:cc:76:7e:c6:a6:2b:7c:63:de: 9e:3e:8a:2c:82:17:31:1a:fa:b6:c7:2a:c5:46:7b: f7:61:fb:c2:75:a2:01:7e:c3:5d:ed:8b:96:f3:32: e8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:50:DA:E2:31:FE:29:E3:DE:C5:AC:DF:76:9D:39:F6:38:CA:24:EC X509v3 Authority Key Identifier: keyid:97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/TVDa4jH-KePexazfdp059jjKJOw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.226.100.0/24 141.226.110.0/24 141.226.252.0/22 144.249.128.0/18 167.17.128.0/19 176.100.161.0/24 185.139.240.0/22 IPv6: 2a07:1980::/29 Signature Algorithm: sha256WithRSAEncryption 18:bf:3f:bf:5e:ff:c6:7b:cb:dc:3c:5a:40:fc:36:f1:56:0c: 15:7c:04:cf:31:4a:3c:e3:7b:35:fc:a8:fc:23:cb:78:dd:d1: ee:ab:51:e8:ce:e6:f0:fb:03:d4:3b:5c:63:38:1b:a9:2c:18: bd:6e:88:55:33:a7:85:c5:4e:7a:be:4b:1f:3c:e0:12:02:8e: 2e:26:e9:a4:1d:28:bb:16:e0:a9:a9:72:e7:61:dd:1a:95:1b: fc:80:30:ac:87:7e:40:62:b6:42:26:f9:e9:51:96:ce:b5:0f: 11:d9:f2:57:8a:6b:66:08:bc:f7:8d:d7:c5:c2:47:74:4e:9e: 1c:db:2e:6a:30:c3:22:01:a6:0f:5d:5c:a2:7f:55:8e:60:24: 2b:90:49:f1:c2:1f:53:7b:38:eb:ef:0a:62:79:ec:fd:9b:27: f7:a2:71:d1:0b:9e:13:04:4d:3d:68:c9:2a:45:4e:32:21:53: a7:01:31:46:ce:be:1e:82:fa:a5:3a:57:32:e1:e0:d2:3f:eb: ea:76:2d:01:c6:a5:38:46:cb:41:14:7c:d9:13:fb:ba:46:97: 9e:62:06:fd:e7:35:f0:cb:f8:6e:3c:e4:63:80:64:fc:0b:16: 2b:1b:24:0c:3c:41:4e:dc:75:fc:36:21:0a:3b:c1:72:e6:45: 36:4b:8a:48 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISAZt57NBB2QVUMwL41rIgBNxRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3YmQ5Yjg2NTMxZTU0NGFmYTAzMDlkOGJlMmE3YmE2OTE2 M2Y5YWQwHhcNMjYwMTAxMTQxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDUwZGFlMjMxZmUyOWUzZGVjNWFjZGY3NjlkMzlmNjM4Y2EyNGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAladgmN4wLQDBRYyJWxRjV1WjkFMF mREquiFmLHAWpIjTBwsmUjZ1nsddMMe4xU1teOXypTmPfaQe0T92/MbKr8+98QmZ wtBl3X3/YCHVjwjCacgnuDoxq7i/PQb0Tk+TUeTX2swv2cUK5wT/YiHRj0w/+rHI Rb8uzJQcvfrv/+25mmFl5qyIU6j1FbFNgbWfSSvgFD/y0YxGtngMDiM3FtpUxZw1 +LkYVmmE0oDFVLc8v5Nf3jKczC+jvARHPV6s629jgUT5vWGqaM9AFuM15RcPCs6q rQ7Mdn7Gpit8Y96ePoosghcxGvq2xyrFRnv3YfvCdaIBfsNd7YuW8zLogQIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFE1Q2uIx/inj3sWs33adOfY4yiTsMB8GA1UdIwQY MBaAFJe9m4ZTHlRK+gMJ2L4qe6aRY/mtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDcyYmhsTWVWRXI2QXduWXZpcDdwcEZqLWEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9kNGJkOGItNTVmNC00NzY1LWFkMjIt MzQ2MGNjMjY0ODBiLzEvVFZEYTRqSC1LZVBleGF6ZmRwMDU5ampLSk93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9kNGJkOGItNTVmNC00NzY1LWFkMjItMzQ2MGNjMjY0ODBi LzEvbDcyYmhsTWVWRXI2QXduWXZpcDdwcEZqLWEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQAjeJkAwQA jeJuAwQCjeL8AwQGkPmAAwQFpxGAAwQAsGShAwQCuYvwMA0EAgACMAcDBQMqBxmA MA0GCSqGSIb3DQEBCwUAA4IBAQAYvz+/Xv/Ge8vcPFpA/DbxVgwVfATPMUo843s1 /Kj8I8t43dHuq1Hozubw+wPUO1xjOBupLBi9bohVM6eFxU56vksfPOASAo4uJumk HSi7FuCpqXLnYd0alRv8gDCsh35AYrZCJvnpUZbOtQ8R2fJXimtmCLz3jdfFwkd0 Tp4c2y5qMMMiAaYPXVyif1WOYCQrkEnxwh9Tezjr7wpieez9myf3onHRC54TBE09 aMkqRU4yIVOnATFGzr4egvqlOlcy4eDSP+vqdi0BxqU4RstBFHzZE/u6RpeeYgb9 5zXwy/huPORjgGT8CxYrGyQMPEFO3HX8NiEKO8Fy5kU2S4pI -----END CERTIFICATE-----Generated at Sun Jan 25 10:14:30 2026 by rpki-client