This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/TLgLKVaOUqUcy2aOeR6b7swW9-Q.roa File: TLgLKVaOUqUcy2aOeR6b7swW9-Q.roa (raw, json) Hash identifier: C/2OykLDOSnCVBosN3ZMBK6gouI0wlKQDVzKIVuT/aw= Subject key identifier: 4C:B8:0B:29:56:8E:52:A5:1C:CB:66:8E:79:1E:9B:EE:CC:16:F7:E4 Certificate issuer: /CN=c339d11e7d4992f9afb30431e36042aafdde5c0a Certificate serial: 019A812C1D551905F3714D47A362F3394199 Authority key identifier: C3:39:D1:1E:7D:49:92:F9:AF:B3:04:31:E3:60:42:AA:FD:DE:5C:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/TLgLKVaOUqUcy2aOeR6b7swW9-Q.roa Signing time: Fri 14 Nov 2025 07:02:23 +0000 ROA not before: Fri 14 Nov 2025 07:02:23 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210973 IP address blocks: 149.62.35.0/24 maxlen: 24 194.0.132.0/24 maxlen: 24 2a10:fd00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:81:2c:1d:55:19:05:f3:71:4d:47:a3:62:f3:39:41:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c339d11e7d4992f9afb30431e36042aafdde5c0a Validity Not Before: Nov 14 07:02:23 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4cb80b29568e52a51ccb668e791e9beecc16f7e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0a:2e:d5:86:d8:2d:f4:85:c8:60:cf:d0:f2: 4b:c5:ac:21:e7:b5:96:7e:17:30:66:4a:4f:b4:71: 9a:d4:01:13:80:a6:3c:f1:49:0f:cb:8c:bf:66:45: 0d:7c:cf:67:26:08:e0:0b:4e:9d:b8:60:74:53:e6: 74:9e:cf:04:f4:96:fb:83:32:b7:a9:ed:74:71:ad: 54:60:f0:e9:5e:ea:06:56:05:1f:2a:1b:8d:90:c6: f8:c8:f4:e2:46:91:d7:b5:b8:71:8f:94:e9:fe:ea: e7:56:17:c6:d6:16:a7:69:35:f6:a0:0d:6d:53:6e: 39:07:a5:7d:45:9d:3e:bd:fe:76:4c:ae:15:ae:0e: d0:f3:a1:e8:a8:a1:28:52:6c:4c:4b:b5:61:6f:d5: 40:a7:26:1e:be:cc:ec:68:b4:15:83:70:80:40:a0: 7e:05:d6:c8:2c:2c:61:61:60:7b:f2:cd:39:9d:e7: c4:c5:02:da:51:eb:da:5d:99:b2:7a:cb:eb:71:9c: 12:57:09:e2:1f:1e:d8:2c:57:8b:c4:4d:a3:96:91: d1:73:fc:5d:32:4c:ab:f0:50:eb:6c:84:ab:01:2c: 21:e1:f6:d7:85:43:6d:10:65:83:78:a3:d5:97:d9: 55:56:49:b6:6b:fb:39:d7:05:65:d5:82:7d:c2:db: d0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B8:0B:29:56:8E:52:A5:1C:CB:66:8E:79:1E:9B:EE:CC:16:F7:E4 X509v3 Authority Key Identifier: keyid:C3:39:D1:1E:7D:49:92:F9:AF:B3:04:31:E3:60:42:AA:FD:DE:5C:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/TLgLKVaOUqUcy2aOeR6b7swW9-Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.62.35.0/24 194.0.132.0/24 IPv6: 2a10:fd00::/32 Signature Algorithm: sha256WithRSAEncryption 90:11:66:1d:44:2d:18:d8:aa:fb:0b:e5:6b:dc:f1:ed:c7:63: a2:53:ab:2b:82:ef:4f:f5:97:57:33:88:f4:7c:b6:a3:f4:40: 4d:b8:5f:7d:66:96:52:71:da:54:cc:de:43:7c:15:10:23:10: 24:8b:67:49:1c:f7:46:1b:7f:1a:a8:de:4a:ee:db:35:26:a1: a2:64:c7:1a:9f:6b:58:39:b8:14:10:c9:78:34:ef:77:4f:15: 4c:d1:f2:5c:9e:22:85:e8:5d:93:21:b7:b5:f0:64:d5:b9:43: b0:8e:57:13:b1:d3:93:22:f3:aa:0a:5c:f8:39:a7:a1:7b:b8: 01:ed:e7:55:e1:65:56:20:ca:79:18:b2:8e:47:ed:88:70:c1: 8e:d5:9f:c7:f4:5d:2f:5e:1c:b5:83:6f:cc:9d:08:05:be:44: b3:f5:c1:52:10:ff:b9:40:61:09:95:51:e3:46:09:57:37:6e: 5d:c6:91:d5:7c:a0:fc:22:4c:8e:a0:11:ce:94:49:60:a3:42: 05:d9:a3:4c:25:0c:87:e0:75:4e:b5:01:35:63:f9:47:1d:70: 45:02:e7:19:7f:66:be:90:a3:fc:bc:a8:a0:1e:a0:50:5e:64: 27:0f:72:90:0a:dd:6a:91:22:89:1b:e7:17:21:04:97:1f:af: 5e:17:88:54 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZqBLB1VGQXzcU1Ho2LzOUGZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzMzlkMTFlN2Q0OTkyZjlhZmIzMDQzMWUzNjA0MmFhZmRk ZTVjMGEwHhcNMjUxMTE0MDcwMjIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Y2I4MGIyOTU2OGU1MmE1MWNjYjY2OGU3OTFlOWJlZWNjMTZmN2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAou1YbYLfSFyGDP0PJLxawh57WW fhcwZkpPtHGa1AETgKY88UkPy4y/ZkUNfM9nJgjgC06duGB0U+Z0ns8E9Jb7gzK3 qe10ca1UYPDpXuoGVgUfKhuNkMb4yPTiRpHXtbhxj5Tp/urnVhfG1hanaTX2oA1t U245B6V9RZ0+vf52TK4Vrg7Q86HoqKEoUmxMS7Vhb9VApyYevszsaLQVg3CAQKB+ BdbILCxhYWB78s05nefExQLaUevaXZmyesvrcZwSVwniHx7YLFeLxE2jlpHRc/xd Mkyr8FDrbISrASwh4fbXhUNtEGWDeKPVl9lVVkm2a/s51wVl1YJ9wtvQKQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFEy4CylWjlKlHMtmjnkem+7MFvfkMB8GA1UdIwQY MBaAFMM50R59SZL5r7MEMeNgQqr93lwKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3puUkhuMUprdm12c3dReDQyQkNxdjNlWEFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9jMGRlZjYtYmMwYS00MjIxLTk3OTEt MmQ4MDE5MDE3ODQ5LzEvVExnTEtWYU9VcVVjeTJhT2VSNmI3c3dXOS1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9jMGRlZjYtYmMwYS00MjIxLTk3OTEtMmQ4MDE5MDE3ODQ5 LzEvd3puUkhuMUprdm12c3dReDQyQkNxdjNlWEFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAlT4jAwQA wgCEMA0EAgACMAcDBQAqEP0AMA0GCSqGSIb3DQEBCwUAA4IBAQCQEWYdRC0Y2Kr7 C+Vr3PHtx2OiU6srgu9P9ZdXM4j0fLaj9EBNuF99ZpZScdpUzN5DfBUQIxAki2dJ HPdGG38aqN5K7ts1JqGiZMcan2tYObgUEMl4NO93TxVM0fJcniKF6F2TIbe18GTV uUOwjlcTsdOTIvOqClz4Oaehe7gB7edV4WVWIMp5GLKOR+2IcMGO1Z/H9F0vXhy1 g2/MnQgFvkSz9cFSEP+5QGEJlVHjRglXN25dxpHVfKD8IkyOoBHOlElgo0IF2aNM JQyH4HVOtQE1Y/lHHXBFAucZf2a+kKP8vKigHqBQXmQnD3KQCt1qkSKJG+cXIQSX H69eF4hU -----END CERTIFICATE-----Generated at Sun Dec 7 08:08:42 2025 by rpki-client