This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/TB3TWMd6B_jTmmabHUiaE7GbxpY.roa File: TB3TWMd6B_jTmmabHUiaE7GbxpY.roa (raw, json) Hash identifier: Asm92jz966O9dWSXvo5IS2rhxQ2wThoj/frBnCQjxYo= Subject key identifier: 4C:1D:D3:58:C7:7A:07:F8:D3:9A:66:9B:1D:48:9A:13:B1:9B:C6:96 Certificate issuer: /CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76 Certificate serial: 019B77C6EB32AA1B981AFE50F00355BF1E3A Authority key identifier: 46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/TB3TWMd6B_jTmmabHUiaE7GbxpY.roa Signing time: Thu 01 Jan 2026 04:18:03 +0000 ROA not before: Thu 01 Jan 2026 04:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201513 IP address blocks: 213.184.154.0/24 maxlen: 24 2a03:720:5::/48 maxlen: 48 2a03:720:1005::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:eb:32:aa:1b:98:1a:fe:50:f0:03:55:bf:1e:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76 Validity Not Before: Jan 1 04:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c1dd358c77a07f8d39a669b1d489a13b19bc696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b5:d2:fa:3a:84:33:24:7d:b3:bb:2d:d6:bc: 1b:0e:e7:39:59:ec:87:4e:e3:c5:23:b1:b5:06:37: 9c:1e:bd:6a:c7:2d:2c:51:27:80:c3:a9:55:5d:4c: fb:22:cf:d1:9c:94:23:58:2d:a5:37:2e:a6:b4:d1: 38:52:4e:c6:b2:99:68:ba:2f:50:15:a6:6e:da:0b: d2:c4:32:05:d5:62:b7:c4:2b:2c:b6:c9:62:6c:0c: ff:4d:c9:0a:9d:99:51:de:cc:d5:cd:cc:01:ca:6f: 45:9a:f4:d1:fa:2d:93:6f:d1:94:e1:5a:cf:60:d9: 86:3d:1d:be:8c:46:94:8a:e2:51:28:a2:0a:59:d0: 9b:fc:fc:49:98:71:fc:67:99:b6:1d:7f:ec:f4:35: 22:81:37:15:fe:ea:eb:00:b0:50:55:03:d9:da:ff: cd:9d:d7:ff:02:30:cc:4d:ec:c8:cb:85:00:4b:04: bc:f3:77:8d:19:da:80:47:d1:ad:de:7b:ba:13:de: a5:37:56:f4:d4:fb:50:f0:38:fb:5b:f1:41:82:bd: 79:ed:36:4b:b7:27:85:62:c5:0e:9c:e9:96:52:06: 0f:8b:3a:50:49:8b:eb:46:1d:fb:93:68:70:d8:3a: df:9e:a0:bc:24:1e:f3:10:a5:f7:f1:66:68:5d:09: d1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:1D:D3:58:C7:7A:07:F8:D3:9A:66:9B:1D:48:9A:13:B1:9B:C6:96 X509v3 Authority Key Identifier: keyid:46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/TB3TWMd6B_jTmmabHUiaE7GbxpY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.184.154.0/24 IPv6: 2a03:720:5::/48 2a03:720:1005::/48 Signature Algorithm: sha256WithRSAEncryption 3f:70:2f:a6:22:a7:49:80:ce:86:34:da:ef:ac:33:90:9e:06: 7f:03:c4:be:8a:dc:23:19:87:94:27:b9:5d:30:ae:1e:db:33: 4c:65:3b:5e:ba:f1:16:85:2e:3e:eb:42:09:ec:44:ea:9a:61: a4:d6:9f:c4:5b:2b:82:94:2d:1d:66:6f:bb:55:49:c6:20:63: 10:68:46:5c:97:55:42:b2:20:15:7a:ba:43:f3:c6:13:a7:f5: 8f:21:3d:ff:03:63:d5:5b:70:ee:3e:f4:05:29:f8:49:40:a6: 9a:2e:41:cb:3c:e0:79:74:d3:4e:0b:5b:b4:5c:e7:cd:4b:99: 05:c6:a6:4a:57:86:f3:cb:d6:cd:03:1e:91:98:6b:c4:8b:9f: 00:99:c7:b7:76:80:6f:2b:f0:71:c0:59:21:6a:e5:d3:56:cb: b2:5a:6f:95:58:75:3f:08:78:3a:1e:a7:2b:3f:ce:ac:5d:95: 1c:8e:8f:38:af:98:4d:af:f4:0e:2c:c1:ce:3d:ea:0a:d5:ae: 95:34:e7:36:bd:f8:c1:e5:13:9b:d0:71:ed:5e:6e:f5:82:62: 23:7f:ff:31:92:9d:32:38:5e:0f:07:0c:20:06:e6:44:43:75: 8f:13:d3:b6:d8:6c:fb:44:26:79:c5:c0:ac:db:d0:bc:72:9d: 3e:15:3b:c7 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt3xusyqhuYGv5Q8ANVvx46MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2YmEzZjgwMDM5YjllNzg0Y2ZiMjRiZjJjN2RkYjI0ZTE5 MDBhNzYwHhcNMjYwMTAxMDQxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzFkZDM1OGM3N2EwN2Y4ZDM5YTY2OWIxZDQ4OWExM2IxOWJjNjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrXS+jqEMyR9s7st1rwbDuc5WeyH TuPFI7G1BjecHr1qxy0sUSeAw6lVXUz7Is/RnJQjWC2lNy6mtNE4Uk7Gsploui9Q FaZu2gvSxDIF1WK3xCsstslibAz/TckKnZlR3szVzcwBym9FmvTR+i2Tb9GU4VrP YNmGPR2+jEaUiuJRKKIKWdCb/PxJmHH8Z5m2HX/s9DUigTcV/urrALBQVQPZ2v/N ndf/AjDMTezIy4UASwS883eNGdqAR9Gt3nu6E96lN1b01PtQ8Dj7W/FBgr157TZL tyeFYsUOnOmWUgYPizpQSYvrRh37k2hw2DrfnqC8JB7zEKX38WZoXQnRAwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFEwd01jHegf405pmmx1ImhOxm8aWMB8GA1UdIwQY MBaAFEa6P4ADm554TPskvyx92yThkAp2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnJvX2dBT2JubmhNLXlTX0xIM2JKT0dRQ25ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jZmEyYWUtZTUyNC00YmQwLTg3NWIt ODlhY2UzODIyMGZiLzEvVEIzVFdNZDZCX2pUbW1hYkhVaWFFN0dieHBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9jZmEyYWUtZTUyNC00YmQwLTg3NWItODlhY2UzODIyMGZi LzEvUnJvX2dBT2JubmhNLXlTX0xIM2JKT0dRQ25ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQA1biaMBgE AgACMBIDBwAqAwcgAAUDBwAqAwcgEAUwDQYJKoZIhvcNAQELBQADggEBAD9wL6Yi p0mAzoY02u+sM5CeBn8DxL6K3CMZh5QnuV0wrh7bM0xlO1668RaFLj7rQgnsROqa YaTWn8RbK4KULR1mb7tVScYgYxBoRlyXVUKyIBV6ukPzxhOn9Y8hPf8DY9VbcO4+ 9AUp+ElAppouQcs84Hl0004LW7Rc581LmQXGpkpXhvPL1s0DHpGYa8SLnwCZx7d2 gG8r8HHAWSFq5dNWy7Jab5VYdT8IeDoepys/zqxdlRyOjzivmE2v9A4swc496grV rpU05za9+MHlE5vQce1ebvWCYiN//zGSnTI4Xg8HDCAG5kRDdY8T07bYbPtEJnnF wKzb0LxynT4VO8c= -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:14 2026 by rpki-client