This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/ta0Rdbjt8C-1Bo83AZG_nUQ4jA0.roa File: ta0Rdbjt8C-1Bo83AZG_nUQ4jA0.roa (raw, json) Hash identifier: hFISjq5YgJgsaNYFUxD6c5OV1Wr97+ZssGNWOWdlNqg= Subject key identifier: B5:AD:11:75:B8:ED:F0:2F:B5:06:8F:37:01:91:BF:9D:44:38:8C:0D Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Certificate serial: 019B26952F4E87B9CFF7115DC937B0A2C646 Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/ta0Rdbjt8C-1Bo83AZG_nUQ4jA0.roa Signing time: Tue 16 Dec 2025 09:54:29 +0000 ROA not before: Tue 16 Dec 2025 09:54:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 49200 IP address blocks: 46.243.207.0/24 maxlen: 24 46.243.208.0/24 maxlen: 24 46.243.213.0/24 maxlen: 24 46.243.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 08:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:95:2f:4e:87:b9:cf:f7:11:5d:c9:37:b0:a2:c6:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Validity Not Before: Dec 16 09:54:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b5ad1175b8edf02fb5068f370191bf9d44388c0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fb:d9:4b:b8:e1:9f:19:0f:63:61:24:5c:bb: d3:e5:bb:0f:a4:15:c7:14:02:a5:f3:46:9d:6b:66: b7:8f:eb:7f:11:1f:24:d0:c0:44:b0:85:eb:c2:57: 72:a5:f7:f1:67:9d:be:86:9f:8e:70:e9:45:b7:5f: a8:77:a6:6a:ae:4e:b8:b0:15:c7:64:00:61:47:53: 8c:ad:66:03:9b:12:75:c7:10:18:e7:fe:f7:2e:bb: 03:3e:ed:c9:89:13:64:77:f5:4f:c9:a7:61:ca:5f: 24:b1:08:a4:7b:be:57:49:1b:ca:c2:f8:bd:c6:d7: c6:80:2b:71:81:52:c1:5a:a0:45:3f:57:fc:f5:f1: ad:dc:58:a3:3e:5b:81:0e:5d:18:3a:50:1d:b9:65: 1b:c8:eb:92:57:c0:3b:ad:eb:fd:ed:8c:f9:27:e1: f3:07:f4:1c:ad:ed:74:35:c8:47:39:f8:ed:e6:0f: 29:c5:d4:02:64:89:db:8d:d7:78:7d:3f:88:a1:01: 9a:52:44:b5:d2:5e:c3:a4:ed:9c:bb:50:20:88:93: d5:d4:fd:7f:cc:03:e3:aa:87:ef:c4:d3:54:f4:22: 8a:97:ed:db:b0:41:28:ea:aa:26:6b:d8:82:3d:e4: 8d:83:d6:b4:86:35:0b:7e:36:ea:a9:21:37:77:7d: 1b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:AD:11:75:B8:ED:F0:2F:B5:06:8F:37:01:91:BF:9D:44:38:8C:0D X509v3 Authority Key Identifier: keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/ta0Rdbjt8C-1Bo83AZG_nUQ4jA0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.243.207.0-46.243.208.255 46.243.213.0/24 46.243.216.0/24 Signature Algorithm: sha256WithRSAEncryption 56:19:c1:c5:29:d1:93:1f:15:6f:be:fe:82:5c:a9:41:49:49: ca:36:29:f1:86:b0:a7:6f:07:e5:2e:b3:ed:8a:13:70:24:6e: 15:7d:5d:17:e5:ac:36:df:83:8b:d2:29:8b:fd:62:9e:b1:c5: 91:ed:7a:73:61:9c:f6:5a:94:49:a7:79:ad:c6:c8:0f:2d:2c: 22:c5:8d:6e:d8:3d:a0:f4:69:d5:2c:6a:b5:31:7f:47:65:89: de:2b:86:51:dd:9b:70:5d:74:f6:8c:88:28:34:8e:54:23:fb: 4e:27:2e:d0:be:7c:c3:f9:3a:7b:60:a1:8d:b0:f9:0e:c0:2e: 43:f5:f7:f6:7f:a5:02:39:25:81:53:f7:83:b0:f8:a1:38:e7: cd:73:a6:f9:ab:27:05:d2:90:99:17:bb:e2:35:10:bc:ec:08: 4c:08:35:6e:89:9c:85:ff:58:21:cd:9f:d4:44:87:80:60:5d: a6:3d:46:af:e5:31:79:60:c7:bf:09:bb:08:75:f9:6c:fa:9b: 21:4a:ec:f0:ce:22:10:42:39:1a:d1:7c:90:df:4f:53:e9:98: 72:cb:e0:f5:a5:8e:d7:6d:6d:13:6d:36:2f:3d:dc:97:e4:f7: e2:8f:8c:18:c3:7b:d2:c8:6d:e9:ed:05:53:8f:bc:c1:d0:05: 8f:df:72:1f -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZsmlS9Oh7nP9xFdyTewosZGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0 NzA2N2UwHhcNMjUxMjE2MDk1NDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNWFkMTE3NWI4ZWRmMDJmYjUwNjhmMzcwMTkxYmY5ZDQ0Mzg4YzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPvZS7jhnxkPY2EkXLvT5bsPpBXH FAKl80ada2a3j+t/ER8k0MBEsIXrwldypffxZ52+hp+OcOlFt1+od6Zqrk64sBXH ZABhR1OMrWYDmxJ1xxAY5/73LrsDPu3JiRNkd/VPyadhyl8ksQike75XSRvKwvi9 xtfGgCtxgVLBWqBFP1f89fGt3FijPluBDl0YOlAduWUbyOuSV8A7rev97Yz5J+Hz B/Qcre10NchHOfjt5g8pxdQCZInbjdd4fT+IoQGaUkS10l7DpO2cu1AgiJPV1P1/ zAPjqofvxNNU9CKKl+3bsEEo6qoma9iCPeSNg9a0hjULfjbqqSE3d30bZwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFLWtEXW47fAvtQaPNwGRv51EOIwNMB8GA1UdIwQY MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt OGM5NTgxZDk2ZDhmLzEvdGEwUmRianQ4Qy0xQm84M0FaR19uVVE0akEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAAu888D BAAu89ADBAAu89UDBAAu89gwDQYJKoZIhvcNAQELBQADggEBAFYZwcUp0ZMfFW++ /oJcqUFJSco2KfGGsKdvB+Uus+2KE3AkbhV9XRflrDbfg4vSKYv9Yp6xxZHtenNh nPZalEmnea3GyA8tLCLFjW7YPaD0adUsarUxf0dlid4rhlHdm3BddPaMiCg0jlQj +04nLtC+fMP5OntgoY2w+Q7ALkP19/Z/pQI5JYFT94Ow+KE4581zpvmrJwXSkJkX u+I1ELzsCEwINW6JnIX/WCHNn9REh4BgXaY9Rq/lMXlgx78Juwh1+Wz6myFK7PDO IhBCORrRfJDfT1PpmHLL4PWljtdtbRNtNi893Jfk9+KPjBjDe9LIbentBVOPvMHQ BY/fch8= -----END CERTIFICATE-----Generated at Thu Dec 18 14:47:56 2025 by rpki-client