This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TBa4a-KtbfHFVrbN2cad2MX6LMk.roa File: TBa4a-KtbfHFVrbN2cad2MX6LMk.roa (raw, json) Hash identifier: Y3N+cjg+SjqyV2tOVkdyLRVpi/Svkzn+vqTnkQ2Uhq0= Subject key identifier: 4C:16:B8:6B:E2:AD:6D:F1:C5:56:B6:CD:D9:C6:9D:D8:C5:FA:2C:C9 Certificate issuer: /CN=4c87389ef41f18c1fcc82754349ea7096980b1e3 Certificate serial: 019A6EEF24E2E93486EE74E2E4B5436DC0E0 Authority key identifier: 4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TBa4a-KtbfHFVrbN2cad2MX6LMk.roa Signing time: Mon 10 Nov 2025 18:02:37 +0000 ROA not before: Mon 10 Nov 2025 18:02:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 49673 IP address blocks: 94.247.104.0/21 maxlen: 21 94.247.110.0/23 maxlen: 23 94.247.110.0/24 maxlen: 24 94.247.111.0/24 maxlen: 24 185.54.244.0/22 maxlen: 22 185.54.244.0/24 maxlen: 24 185.54.245.0/24 maxlen: 24 2a02:47a0:a::/48 maxlen: 48 2a02:47a0:a:112::/64 maxlen: 64 2a02:47a0:a:115::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6e:ef:24:e2:e9:34:86:ee:74:e2:e4:b5:43:6d:c0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c87389ef41f18c1fcc82754349ea7096980b1e3 Validity Not Before: Nov 10 18:02:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4c16b86be2ad6df1c556b6cdd9c69dd8c5fa2cc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3f:7a:7b:88:67:0b:42:7b:92:44:62:cc:4f: 2a:40:67:7b:1d:c2:62:31:74:0b:5b:81:ca:ef:0f: ae:cd:09:04:10:ba:83:40:3d:a0:47:c6:1d:fd:d4: e5:6c:2c:fb:8a:eb:bd:2d:91:86:83:d6:e6:e4:61: 6e:ee:23:e7:2c:b8:88:67:61:27:bd:ee:b5:c1:81: cb:16:b9:ac:72:e2:ab:a5:23:55:27:89:fa:1e:64: 6f:0e:2c:0d:a1:61:33:a2:db:64:bd:e0:c0:4b:1e: 41:de:b1:4a:13:a8:fc:a4:b3:b4:0e:f1:fd:b9:e0: 0e:88:e3:0b:78:c1:bf:89:76:8c:a1:7c:41:d3:2e: 34:cd:85:61:a1:db:d8:c6:fe:de:7e:4f:27:1b:f2: ff:b8:3d:9c:b4:49:23:e3:be:8a:39:17:dc:1d:11: df:1f:7b:53:d2:93:d5:92:d4:b4:88:71:cb:9c:c5: 7b:40:73:3b:1d:44:b0:27:82:be:2d:17:77:e9:11: 32:c1:4a:fd:0c:fd:b2:86:17:88:5e:c6:38:55:33: 11:7f:ef:3a:fa:bc:58:1b:44:00:4c:aa:66:32:7a: 06:14:88:91:5a:12:ab:ae:7c:57:65:9c:c6:e9:1b: 8e:19:65:8e:9c:44:d7:d5:08:b7:af:a6:32:0e:36: 30:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:16:B8:6B:E2:AD:6D:F1:C5:56:B6:CD:D9:C6:9D:D8:C5:FA:2C:C9 X509v3 Authority Key Identifier: keyid:4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TBa4a-KtbfHFVrbN2cad2MX6LMk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.247.104.0/21 185.54.244.0/22 IPv6: 2a02:47a0:a::/48 Signature Algorithm: sha256WithRSAEncryption 6b:44:25:c2:f6:6a:de:a9:66:c1:e2:18:ba:43:15:86:91:23: 54:8b:f6:39:77:ce:80:0b:b9:f5:8d:a2:e4:d6:77:bd:bf:47: ba:05:56:24:bb:50:c1:38:47:cf:cb:c5:ba:af:69:35:94:45: 67:d9:9a:34:ab:82:50:a0:7d:fe:6f:2c:5c:20:5f:52:ec:d1: b0:9c:29:09:ca:ba:4d:0f:b8:c5:3f:c0:3a:9c:7a:8b:88:2c: 4f:8b:22:b4:ac:a3:16:d2:d1:61:78:28:48:fb:96:88:ae:91: 12:17:0a:8e:4c:00:85:5b:0b:6e:fb:dd:64:75:69:ba:f9:39: b9:81:34:c0:fc:82:5a:29:a9:e7:4e:40:b5:bc:3a:20:69:89: 30:ff:60:8c:82:43:bb:0a:7c:fa:55:42:f7:16:b1:33:67:fb: 9e:5b:e6:12:30:91:a6:fd:a3:04:4f:99:a1:7e:03:f0:25:a3: b8:18:23:ef:f3:ff:85:a6:47:35:88:9f:79:63:9b:ec:f4:6a: 27:55:a3:c9:ed:56:84:5d:3b:1c:8f:66:df:3a:eb:83:d8:a5: ec:b6:ad:7f:f6:15:f7:87:90:8b:03:18:34:05:d3:23:ff:50: b6:54:71:4c:38:87:43:51:b4:d4:c9:2d:35:4d:00:4e:5e:56: 12:2a:a8:6c -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZpu7yTi6TSG7nTi5LVDbcDgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjODczODllZjQxZjE4YzFmY2M4Mjc1NDM0OWVhNzA5Njk4 MGIxZTMwHhcNMjUxMTEwMTgwMjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzE2Yjg2YmUyYWQ2ZGYxYzU1NmI2Y2RkOWM2OWRkOGM1ZmEyY2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvT96e4hnC0J7kkRizE8qQGd7HcJi MXQLW4HK7w+uzQkEELqDQD2gR8Yd/dTlbCz7iuu9LZGGg9bm5GFu7iPnLLiIZ2En ve61wYHLFrmscuKrpSNVJ4n6HmRvDiwNoWEzottkveDASx5B3rFKE6j8pLO0DvH9 ueAOiOMLeMG/iXaMoXxB0y40zYVhodvYxv7efk8nG/L/uD2ctEkj476KORfcHRHf H3tT0pPVktS0iHHLnMV7QHM7HUSwJ4K+LRd36REywUr9DP2yhheIXsY4VTMRf+86 +rxYG0QATKpmMnoGFIiRWhKrrnxXZZzG6RuOGWWOnETX1Qi3r6YyDjYwswIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFEwWuGvirW3xxVa2zdnGndjF+izJMB8GA1UdIwQY MBaAFEyHOJ70HxjB/MgnVDSepwlpgLHjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEljNG52UWZHTUg4eUNkVU5KNm5DV21Bc2VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8yMjE1ZjctODg3YS00YmQ1LWJmOTct ZmZiNzA5Zjc2NjhjLzEvVEJhNGEtS3RiZkhGVnJiTjJjYWQyTVg2TE1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8yMjE1ZjctODg3YS00YmQ1LWJmOTctZmZiNzA5Zjc2Njhj LzEvVEljNG52UWZHTUg4eUNkVU5KNm5DV21Bc2VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQDXvdoAwQC uTb0MA8EAgACMAkDBwAqAkegAAowDQYJKoZIhvcNAQELBQADggEBAGtEJcL2at6p ZsHiGLpDFYaRI1SL9jl3zoALufWNouTWd72/R7oFViS7UME4R8/LxbqvaTWURWfZ mjSrglCgff5vLFwgX1Ls0bCcKQnKuk0PuMU/wDqceouILE+LIrSsoxbS0WF4KEj7 loiukRIXCo5MAIVbC2773WR1abr5ObmBNMD8glopqedOQLW8OiBpiTD/YIyCQ7sK fPpVQvcWsTNn+55b5hIwkab9owRPmaF+A/Alo7gYI+/z/4WmRzWIn3ljm+z0aidV o8ntVoRdOxyPZt8664PYpey2rX/2FfeHkIsDGDQF0yP/ULZUcUw4h0NRtNTJLTVN AE5eVhIqqGw= -----END CERTIFICATE-----Generated at Sat Dec 6 12:27:30 2025 by rpki-client