This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/TDnGx-yWDIFqFi83TRDVauCdL-0.roa File: TDnGx-yWDIFqFi83TRDVauCdL-0.roa (raw, json) Hash identifier: vGAWyhTZc4YYRF0r4iG8JBgBRr3OJEchixvO3ETaTDQ= Subject key identifier: 4C:39:C6:C7:EC:96:0C:81:6A:16:2F:37:4D:10:D5:6A:E0:9D:2F:ED Certificate issuer: /CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005 Certificate serial: 019B7A5AFD96A69B166EC13D705F74937AA7 Authority key identifier: 9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/TDnGx-yWDIFqFi83TRDVauCdL-0.roa Signing time: Thu 01 Jan 2026 16:19:02 +0000 ROA not before: Thu 01 Jan 2026 16:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25577 IP address blocks: 185.229.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:fd:96:a6:9b:16:6e:c1:3d:70:5f:74:93:7a:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005 Validity Not Before: Jan 1 16:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c39c6c7ec960c816a162f374d10d56ae09d2fed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4d:1c:86:ad:77:4a:3b:c1:34:61:51:8e:04: b2:95:f3:59:ef:4e:b7:b1:4b:5b:34:28:63:a5:3f: 28:07:2a:bc:8d:4a:5f:b5:b1:e5:5f:e9:fc:5e:78: b1:23:43:fe:23:16:31:b1:54:cf:06:31:03:ec:14: 28:0a:16:58:35:31:16:50:19:8a:d3:d2:29:0d:c7: bb:c5:d2:75:de:14:67:54:df:90:c1:cf:53:a8:de: c9:de:c1:4a:4e:c2:69:e8:a0:9f:5b:dd:5e:5a:35: d7:af:c3:a0:8b:0c:9f:94:05:81:12:2b:b2:69:a9: 92:49:c6:80:67:07:d8:0c:bc:ff:b6:53:9d:c8:e9: b2:22:76:d2:41:65:6e:99:6c:1b:8b:98:6a:d1:62: 12:84:d1:9a:98:ad:74:a7:97:34:24:c7:91:5b:89: 9c:bc:75:3d:0f:1d:2c:13:7f:44:c8:3e:d4:4d:5f: 03:6e:f3:13:49:ce:8b:79:99:9e:f6:7d:8e:31:7d: ce:62:60:62:fe:81:47:5b:f5:e8:7a:bc:cd:b3:7a: 18:ef:6d:1d:00:8f:37:b6:af:5d:62:12:e0:26:b4: 39:b5:b7:bc:38:fe:81:18:a0:a4:de:a6:af:16:42: 32:13:b7:48:f9:88:c1:a6:5a:2d:cb:1f:8d:f4:27: a2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:39:C6:C7:EC:96:0C:81:6A:16:2F:37:4D:10:D5:6A:E0:9D:2F:ED X509v3 Authority Key Identifier: keyid:9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/TDnGx-yWDIFqFi83TRDVauCdL-0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.229.20.0/23 Signature Algorithm: sha256WithRSAEncryption 78:01:e9:a7:ca:0b:3c:0c:cf:32:bc:c1:36:2a:73:27:30:7c: 5b:89:93:17:1c:61:8d:4a:24:6d:74:41:1f:49:a1:2b:65:c4: 68:ce:4b:7e:50:15:4a:46:f5:f8:b4:2d:ab:9e:28:87:fa:28: 14:1c:31:90:c1:be:e7:f6:84:01:77:22:90:7a:d1:b0:e3:f6: 34:00:e3:76:c7:5b:ed:a7:53:cc:6a:08:98:76:52:e9:c6:0e: cb:4b:af:91:24:0a:b2:2a:dd:bd:bb:c2:81:0f:3a:a5:9f:c3: 58:68:21:7b:8a:75:b6:27:59:3a:f4:17:a9:76:5f:0c:64:e7: dd:61:9e:12:93:eb:ea:e4:18:2e:2f:44:46:15:dd:1f:5f:83: bc:45:79:ab:53:da:34:18:f5:80:a3:15:1a:0d:4e:ca:31:56: 26:76:2e:33:88:99:3f:95:e9:b5:90:e5:ec:b1:cf:a6:07:76: ea:b3:76:7e:f7:fa:0f:77:a9:0d:17:ab:c4:35:02:f2:16:6a: c2:d6:23:fe:36:3b:e9:94:3b:35:e3:39:aa:6b:68:26:81:9b: 4a:2a:c4:2a:5f:49:82:89:22:f8:4c:c4:a3:1b:c1:d2:f3:43: bc:45:03:a1:4a:2a:0a:b3:94:bf:58:55:8e:dd:b5:69:06:88: 7f:8d:3b:f2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wv2WppsWbsE9cF90k3qnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllYjMxNDNhMmU3M2YyMDllNjlkOTdjNGI4Zjc4Y2RhNWY0 MzcwMDUwHhcNMjYwMTAxMTYxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzM5YzZjN2VjOTYwYzgxNmExNjJmMzc0ZDEwZDU2YWUwOWQyZmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsU0chq13SjvBNGFRjgSylfNZ7063 sUtbNChjpT8oByq8jUpftbHlX+n8XnixI0P+IxYxsVTPBjED7BQoChZYNTEWUBmK 09IpDce7xdJ13hRnVN+Qwc9TqN7J3sFKTsJp6KCfW91eWjXXr8OgiwyflAWBEiuy aamSScaAZwfYDLz/tlOdyOmyInbSQWVumWwbi5hq0WIShNGamK10p5c0JMeRW4mc vHU9Dx0sE39EyD7UTV8DbvMTSc6LeZme9n2OMX3OYmBi/oFHW/XoerzNs3oY720d AI83tq9dYhLgJrQ5tbe8OP6BGKCk3qavFkIyE7dI+YjBplotyx+N9CeiLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEw5xsfslgyBahYvN00Q1WrgnS/tMB8GA1UdIwQY MBaAFJ6zFDouc/IJ5p2XxLj3jNpfQ3AFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnJNVU9pNXo4Z25tblpmRXVQZU0ybDlEY0FVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZmFmMjQtMDVlMS00ZGI5LTlhYWYt NTAxNjE4NDExYzc2LzEvVERuR3gteVdESUZxRmk4M1RSRFZhdUNkTC0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85ZmFmMjQtMDVlMS00ZGI5LTlhYWYtNTAxNjE4NDExYzc2 LzEvbnJNVU9pNXo4Z25tblpmRXVQZU0ybDlEY0FVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBueUUMA0G CSqGSIb3DQEBCwUAA4IBAQB4Aemnygs8DM8yvME2KnMnMHxbiZMXHGGNSiRtdEEf SaErZcRozkt+UBVKRvX4tC2rniiH+igUHDGQwb7n9oQBdyKQetGw4/Y0AON2x1vt p1PMagiYdlLpxg7LS6+RJAqyKt29u8KBDzqln8NYaCF7inW2J1k69Bepdl8MZOfd YZ4Sk+vq5BguL0RGFd0fX4O8RXmrU9o0GPWAoxUaDU7KMVYmdi4ziJk/lem1kOXs sc+mB3bqs3Z+9/oPd6kNF6vENQLyFmrC1iP+NjvplDs14zmqa2gmgZtKKsQqX0mC iSL4TMSjG8HS80O8RQOhSioKs5S/WFWO3bVpBoh/jTvy -----END CERTIFICATE-----Generated at Mon Jan 26 04:41:56 2026 by rpki-client