This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/Tvc7gYrOVVK9dMIZALC5G4LwXbo.roa File: Tvc7gYrOVVK9dMIZALC5G4LwXbo.roa (raw, json) Hash identifier: 8VfD5a343idNE+0Ix/SSezm8I4j17mt9ETxOO4JFGRk= Subject key identifier: 4E:F7:3B:81:8A:CE:55:52:BD:74:C2:19:00:B0:B9:1B:82:F0:5D:BA Certificate issuer: /CN=335e725cacf83c97f457a56762cf846d643117cd Certificate serial: 019B7A5A9A89B13796C5A59C3610D7F1397E Authority key identifier: 33:5E:72:5C:AC:F8:3C:97:F4:57:A5:67:62:CF:84:6D:64:31:17:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M15yXKz4PJf0V6VnYs-EbWQxF80.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/Tvc7gYrOVVK9dMIZALC5G4LwXbo.roa Signing time: Thu 01 Jan 2026 16:18:36 +0000 ROA not before: Thu 01 Jan 2026 16:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42612 IP address blocks: 46.231.120.0/21 maxlen: 24 46.231.120.0/24 maxlen: 24 82.98.128.0/18 maxlen: 24 185.192.220.0/22 maxlen: 24 2a02:be8::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/M15yXKz4PJf0V6VnYs-EbWQxF80.crl rsync://rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/M15yXKz4PJf0V6VnYs-EbWQxF80.mft rsync://rpki.ripe.net/repository/DEFAULT/M15yXKz4PJf0V6VnYs-EbWQxF80.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:9a:89:b1:37:96:c5:a5:9c:36:10:d7:f1:39:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=335e725cacf83c97f457a56762cf846d643117cd Validity Not Before: Jan 1 16:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ef73b818ace5552bd74c21900b0b91b82f05dba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5d:45:87:7e:e3:7b:f6:dd:36:7f:8f:b1:84: f5:41:3c:99:1a:eb:66:4a:65:33:37:d9:b0:59:4c: e7:30:2d:07:2c:d6:4a:be:e3:b1:7e:fc:5d:1e:f8: c3:c3:bb:32:6c:1e:4d:2d:32:54:14:60:b5:8a:8b: 24:81:a7:cf:0b:80:89:f3:8b:0c:5a:da:68:17:84: 98:69:8c:d2:3e:07:0f:c3:4e:76:c6:ea:1c:d3:47: fb:b1:e2:9b:02:64:a8:bf:23:7f:d9:b0:db:ac:b9: fe:d0:14:09:2b:6b:c9:7a:4f:32:e3:2f:e7:d9:cc: c5:1b:c6:d5:6f:d5:bd:96:d2:5c:ce:23:c1:b7:b2: 8e:ad:cc:a0:e5:33:91:3c:ae:ed:5d:03:24:18:96: ae:42:16:e9:0f:77:54:39:fc:c7:d1:a8:07:0b:e2: ea:9b:62:0a:72:fc:79:84:6f:76:b9:a7:0e:66:1f: bb:07:d1:c3:09:aa:21:ca:50:6b:fc:8f:23:0f:a4: 88:49:39:c9:18:be:3d:91:46:fe:aa:37:6d:06:dc: 57:51:94:2a:c4:24:a5:0a:b0:ee:3b:3b:a9:c1:25: 98:42:08:2b:90:8c:ba:cc:66:83:19:77:3e:56:7b: 5d:fd:b1:94:ef:63:d5:e8:a6:63:62:2d:e4:fc:03: cc:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:F7:3B:81:8A:CE:55:52:BD:74:C2:19:00:B0:B9:1B:82:F0:5D:BA X509v3 Authority Key Identifier: keyid:33:5E:72:5C:AC:F8:3C:97:F4:57:A5:67:62:CF:84:6D:64:31:17:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M15yXKz4PJf0V6VnYs-EbWQxF80.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/Tvc7gYrOVVK9dMIZALC5G4LwXbo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/M15yXKz4PJf0V6VnYs-EbWQxF80.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.231.120.0/21 82.98.128.0/18 185.192.220.0/22 IPv6: 2a02:be8::/32 Signature Algorithm: sha256WithRSAEncryption 9f:7d:bf:12:5e:fe:bd:d7:d4:7d:99:bf:cb:79:2b:9b:f1:5c: df:72:bd:f1:4f:e3:38:0b:64:5d:96:75:82:c0:f3:45:9d:52: e0:76:d3:aa:bd:c7:88:80:ac:c3:bf:61:a3:c0:bb:94:36:56: 92:17:f1:67:32:9a:0e:ef:26:20:a9:3e:42:36:99:ff:c8:2c: ad:5a:c6:0f:7f:3c:50:39:11:8e:b6:71:2a:7c:ae:cc:59:d6: 2c:16:35:3d:b4:a6:5d:20:58:6a:4e:a5:b3:e1:cf:0b:15:d9: 88:ed:4f:80:ed:e2:f6:fe:af:e8:d5:b7:12:0d:6c:ab:7c:97: a0:87:8f:db:a8:76:d2:40:92:35:a9:e8:51:c7:8a:6a:d8:30: 85:3e:16:ae:f0:75:ee:0a:16:39:95:a9:f7:62:5c:3c:df:0c: 50:42:1d:66:40:8d:e2:28:29:2d:bf:a5:a4:f9:77:2f:87:dc: 2c:c8:e9:5c:42:e9:ca:9a:83:39:b3:1d:5e:72:0e:32:79:78: e8:d8:cd:28:7f:42:1e:f4:84:5a:e0:05:e6:94:48:41:d8:de: bf:74:66:70:12:16:b3:21:46:aa:70:37:f3:23:eb:96:3b:c5: a9:10:9f:40:04:bb:fd:9a:0d:9b:cb:34:e4:72:55:31:52:4a: ba:ea:27:92 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt6WpqJsTeWxaWcNhDX8Tl+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNWU3MjVjYWNmODNjOTdmNDU3YTU2NzYyY2Y4NDZkNjQz MTE3Y2QwHhcNMjYwMTAxMTYxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZWY3M2I4MThhY2U1NTUyYmQ3NGMyMTkwMGIwYjkxYjgyZjA1ZGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnV1Fh37je/bdNn+PsYT1QTyZGutm SmUzN9mwWUznMC0HLNZKvuOxfvxdHvjDw7sybB5NLTJUFGC1ioskgafPC4CJ84sM WtpoF4SYaYzSPgcPw052xuoc00f7seKbAmSovyN/2bDbrLn+0BQJK2vJek8y4y/n 2czFG8bVb9W9ltJcziPBt7KOrcyg5TORPK7tXQMkGJauQhbpD3dUOfzH0agHC+Lq m2IKcvx5hG92uacOZh+7B9HDCaohylBr/I8jD6SISTnJGL49kUb+qjdtBtxXUZQq xCSlCrDuOzupwSWYQggrkIy6zGaDGXc+Vntd/bGU72PV6KZjYi3k/APMIwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFE73O4GKzlVSvXTCGQCwuRuC8F26MB8GA1UdIwQY MBaAFDNeclys+DyX9FelZ2LPhG1kMRfNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTE1eVhLejRQSmYwVjZWbllzLUViV1F4RjgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8wMjY1NDgtNTAxMi00YWQwLWE1YmIt ODJjMDU2MDU5NWNkLzEvVHZjN2dZck9WVks5ZE1JWkFMQzVHNEx3WGJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi8wMjY1NDgtNTAxMi00YWQwLWE1YmItODJjMDU2MDU5NWNk LzEvTTE1eVhLejRQSmYwVjZWbllzLUViV1F4RjgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDLud4AwQG UmKAAwQCucDcMA0EAgACMAcDBQAqAgvoMA0GCSqGSIb3DQEBCwUAA4IBAQCffb8S Xv6919R9mb/LeSub8Vzfcr3xT+M4C2RdlnWCwPNFnVLgdtOqvceIgKzDv2GjwLuU NlaSF/FnMpoO7yYgqT5CNpn/yCytWsYPfzxQORGOtnEqfK7MWdYsFjU9tKZdIFhq TqWz4c8LFdmI7U+A7eL2/q/o1bcSDWyrfJegh4/bqHbSQJI1qehRx4pq2DCFPhau 8HXuChY5lan3Ylw83wxQQh1mQI3iKCktv6Wk+Xcvh9wsyOlcQunKmoM5sx1ecg4y eXjo2M0of0Ie9IRa4AXmlEhB2N6/dGZwEhazIUaqcDfzI+uWO8WpEJ9ABLv9mg2b yzTkclUxUkq66ieS -----END CERTIFICATE-----Generated at Sun Jan 25 19:02:16 2026 by rpki-client