This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/TpPJId1e5lG2meo0GsY8127KDCk.roa File: TpPJId1e5lG2meo0GsY8127KDCk.roa (raw, json) Hash identifier: aMNWtngKVeTHR3PWHuMGJZAZEL09LOJBZOu+feFbIPo= Subject key identifier: 4E:93:C9:21:DD:5E:E6:51:B6:99:EA:34:1A:C6:3C:D7:6E:CA:0C:29 Certificate issuer: /CN=2e481909559480d248490d8e1d71c3c093b05fe5 Certificate serial: 019B7CEE67C0ADA556150B9E3C9AED7C0D3C Authority key identifier: 2E:48:19:09:55:94:80:D2:48:49:0D:8E:1D:71:C3:C0:93:B0:5F:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/TpPJId1e5lG2meo0GsY8127KDCk.roa Signing time: Fri 02 Jan 2026 04:19:17 +0000 ROA not before: Fri 02 Jan 2026 04:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201714 IP address blocks: 45.85.100.0/24 maxlen: 24 45.85.101.0/24 maxlen: 24 185.66.4.0/22 maxlen: 24 185.66.4.0/24 maxlen: 24 185.66.5.0/24 maxlen: 24 185.66.6.0/24 maxlen: 24 185.66.7.0/24 maxlen: 24 2a03:1ea0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:67:c0:ad:a5:56:15:0b:9e:3c:9a:ed:7c:0d:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e481909559480d248490d8e1d71c3c093b05fe5 Validity Not Before: Jan 2 04:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e93c921dd5ee651b699ea341ac63cd76eca0c29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2f:e3:d7:0f:59:7e:46:09:b1:d8:c3:a7:7f: bc:bc:ec:dd:8c:cf:f5:f2:23:c2:8d:2c:92:2b:fc: c0:10:39:8c:44:b9:55:8c:e3:a3:fc:ce:cf:fd:5e: b4:1c:cb:9d:1a:e6:8c:7a:60:23:7e:e1:88:19:e5: c8:30:26:75:03:44:0d:26:5c:5e:13:f1:38:5e:20: 95:e8:97:56:d0:23:27:f3:82:7e:5d:d8:28:ac:2b: 2c:f9:15:6f:19:45:9c:02:ad:b6:f3:4d:c2:1f:38: 05:28:c9:c5:a3:df:3f:dd:dd:08:e3:4f:2d:40:90: 54:b8:7b:c6:92:1e:01:47:da:c5:98:3b:d8:fa:b5: ff:7e:88:68:46:9d:ed:e3:23:e7:6b:c0:52:18:03: 68:f4:55:9a:30:ae:0f:20:ab:87:41:45:7d:6b:6b: f3:b8:98:af:8b:59:ed:65:bf:96:94:80:8f:e4:5b: 0c:1b:d5:ff:08:2e:56:f0:0f:39:ac:7b:cf:d4:6d: ee:18:47:f0:81:a2:9f:09:fd:d5:e5:9e:38:ea:ce: d3:0c:a4:aa:3c:d9:df:73:44:22:c8:15:ff:53:3d: 26:2c:47:5c:ef:52:95:e9:0d:91:8d:dc:15:ed:c9: e6:64:e9:0b:fb:03:9c:4a:74:b4:df:6c:53:4e:86: 82:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:93:C9:21:DD:5E:E6:51:B6:99:EA:34:1A:C6:3C:D7:6E:CA:0C:29 X509v3 Authority Key Identifier: keyid:2E:48:19:09:55:94:80:D2:48:49:0D:8E:1D:71:C3:C0:93:B0:5F:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/TpPJId1e5lG2meo0GsY8127KDCk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.100.0/23 185.66.4.0/22 IPv6: 2a03:1ea0::/32 Signature Algorithm: sha256WithRSAEncryption a5:ff:6d:b2:74:ae:41:23:2b:1a:c3:a9:13:67:d3:3a:8d:03: 1b:37:4d:63:89:1f:26:9f:fa:72:4d:d4:5d:59:25:d8:72:f1: 19:f7:db:48:1c:9f:ad:df:b8:dd:44:d6:56:fb:ec:c8:83:c5: ee:6d:22:85:a7:64:1c:90:41:cf:90:c0:82:ec:f4:81:6c:d0: 75:2d:0c:b8:95:3b:8d:ac:43:01:b3:8d:71:9f:eb:be:25:23: f3:b0:0c:67:d8:59:82:dd:49:9e:15:b8:29:ef:8c:0e:69:9f: 84:1c:76:06:c8:d0:d7:dd:4a:75:99:3c:fc:d4:5b:6d:a4:6f: ec:88:77:5b:a7:9c:f7:0d:4a:3e:8e:ec:f1:da:9b:e8:71:da: a6:cb:eb:02:6d:80:8c:a3:79:dc:bf:b8:95:cd:96:8a:89:88: 72:3f:4d:8d:48:c3:e1:bb:b3:8e:07:e4:40:1c:7e:e7:ba:81: 39:9d:4b:28:56:d9:16:61:b7:a5:9a:fc:66:4c:0d:8c:d5:de: 77:43:0f:c2:27:0b:a6:e7:17:3d:ff:1c:2e:6f:e1:15:a8:a1: 64:08:92:1f:86:dc:8b:11:8b:b7:04:98:e0:a5:e1:3e:65:a4: 9f:7e:42:e9:4e:88:d9:b3:41:be:af:89:96:38:5f:6d:78:0f: 81:54:61:b9 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt87mfAraVWFQuePJrtfA08MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNDgxOTA5NTU5NDgwZDI0ODQ5MGQ4ZTFkNzFjM2MwOTNi MDVmZTUwHhcNMjYwMTAyMDQxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTkzYzkyMWRkNWVlNjUxYjY5OWVhMzQxYWM2M2NkNzZlY2EwYzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAly/j1w9ZfkYJsdjDp3+8vOzdjM/1 8iPCjSySK/zAEDmMRLlVjOOj/M7P/V60HMudGuaMemAjfuGIGeXIMCZ1A0QNJlxe E/E4XiCV6JdW0CMn84J+XdgorCss+RVvGUWcAq22803CHzgFKMnFo98/3d0I408t QJBUuHvGkh4BR9rFmDvY+rX/fohoRp3t4yPna8BSGANo9FWaMK4PIKuHQUV9a2vz uJivi1ntZb+WlICP5FsMG9X/CC5W8A85rHvP1G3uGEfwgaKfCf3V5Z446s7TDKSq PNnfc0QiyBX/Uz0mLEdc71KV6Q2RjdwV7cnmZOkL+wOcSnS032xTToaCLQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFE6TySHdXuZRtpnqNBrGPNduygwpMB8GA1UdIwQY MBaAFC5IGQlVlIDSSEkNjh1xw8CTsF/lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGtnWkNWV1VnTkpJU1EyT0hYSER3Sk93WC1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83ZjE2ZWEtMjZkMy00NTdmLTkyY2It ODdiYzU4ZjM0NjY1LzEvVHBQSklkMWU1bEcybWVvMEdzWTgxMjdLRENrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi83ZjE2ZWEtMjZkMy00NTdmLTkyY2ItODdiYzU4ZjM0NjY1 LzEvTGtnWkNWV1VnTkpJU1EyT0hYSER3Sk93WC1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBLVVkAwQC uUIEMA0EAgACMAcDBQAqAx6gMA0GCSqGSIb3DQEBCwUAA4IBAQCl/22ydK5BIysa w6kTZ9M6jQMbN01jiR8mn/pyTdRdWSXYcvEZ99tIHJ+t37jdRNZW++zIg8XubSKF p2QckEHPkMCC7PSBbNB1LQy4lTuNrEMBs41xn+u+JSPzsAxn2FmC3UmeFbgp74wO aZ+EHHYGyNDX3Up1mTz81FttpG/siHdbp5z3DUo+juzx2pvocdqmy+sCbYCMo3nc v7iVzZaKiYhyP02NSMPhu7OOB+RAHH7nuoE5nUsoVtkWYbelmvxmTA2M1d53Qw/C Jwum5xc9/xwub+EVqKFkCJIfhtyLEYu3BJjgpeE+ZaSffkLpTojZs0G+r4mWOF9t eA+BVGG5 -----END CERTIFICATE-----Generated at Sun Jan 25 16:53:54 2026 by rpki-client