This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/TG-T28D3sM1IJX9-bR6zimuu3dQ.roa File: TG-T28D3sM1IJX9-bR6zimuu3dQ.roa (raw, json) Hash identifier: sKx/GRdEWeKSqR5AF1hTqJiMQ+ztWu0vS1aze4IWqmA= Subject key identifier: 4C:6F:93:DB:C0:F7:B0:CD:48:25:7F:7E:6D:1E:B3:8A:6B:AE:DD:D4 Certificate issuer: /CN=a98e5943c355d48c004e6bf4a3b6cdb8c30adc4c Certificate serial: 019B78A25D33D6E52C8072CDB843E53DA22C Authority key identifier: A9:8E:59:43:C3:55:D4:8C:00:4E:6B:F4:A3:B6:CD:B8:C3:0A:DC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/TG-T28D3sM1IJX9-bR6zimuu3dQ.roa Signing time: Thu 01 Jan 2026 08:17:45 +0000 ROA not before: Thu 01 Jan 2026 08:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1267 IP address blocks: 151.81.0.0/16 maxlen: 16 151.82.0.0/16 maxlen: 16 151.83.0.0/16 maxlen: 16 151.84.0.0/16 maxlen: 16 151.93.0.0/16 maxlen: 16 151.95.0.0/16 maxlen: 16 193.76.0.0/16 maxlen: 16 195.45.0.0/16 maxlen: 16 2a02:b000::/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:5d:33:d6:e5:2c:80:72:cd:b8:43:e5:3d:a2:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a98e5943c355d48c004e6bf4a3b6cdb8c30adc4c Validity Not Before: Jan 1 08:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c6f93dbc0f7b0cd48257f7e6d1eb38a6baeddd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:71:7e:d2:8c:8f:84:af:65:ed:49:f4:f2:79: 42:c0:2e:63:ef:43:b5:ad:ce:35:a8:1a:d2:f8:05: e8:af:19:5d:11:42:6f:87:3a:2c:e0:94:3f:df:cd: 78:93:fd:22:03:80:56:0b:ee:05:37:6b:18:24:6a: 13:8c:29:51:01:9b:0f:ff:f1:50:1a:27:d5:11:b7: 12:f7:b5:a7:c3:78:7b:e0:0e:e6:20:64:0b:6a:c7: ff:d4:4c:6b:29:f2:ed:ef:1f:86:69:7a:2c:7f:60: d1:cb:89:e4:f6:28:47:ba:88:1c:c5:3a:6e:15:75: d5:3b:42:66:56:ea:94:38:a8:06:45:41:58:63:09: da:c8:5c:a6:d6:64:d5:a8:7f:7f:90:f2:04:2a:23: bf:3c:5a:15:d1:d4:e1:34:87:a3:0e:9d:74:90:eb: 0d:eb:e4:78:4f:19:08:94:4a:50:58:46:43:61:3e: 0b:5a:dd:6a:30:97:9b:ef:46:d5:53:09:01:0b:8c: 23:d3:f7:4d:7f:6f:52:ee:74:1a:46:8b:37:2f:5f: 9a:ec:07:93:37:81:e9:21:7e:6b:b2:e1:f3:97:fb: 52:f8:ed:e1:f7:9d:ea:62:fd:82:6c:e1:19:7d:68: c7:62:70:c8:00:fa:ff:bf:12:ce:d7:2b:81:86:da: 64:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:6F:93:DB:C0:F7:B0:CD:48:25:7F:7E:6D:1E:B3:8A:6B:AE:DD:D4 X509v3 Authority Key Identifier: keyid:A9:8E:59:43:C3:55:D4:8C:00:4E:6B:F4:A3:B6:CD:B8:C3:0A:DC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/TG-T28D3sM1IJX9-bR6zimuu3dQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.81.0.0-151.84.255.255 151.93.0.0/16 151.95.0.0/16 193.76.0.0/16 195.45.0.0/16 IPv6: 2a02:b000::/23 Signature Algorithm: sha256WithRSAEncryption a7:66:52:63:63:51:76:c1:0a:02:9c:fb:07:15:45:4a:6a:ad: 2c:6b:2d:cc:9a:1a:34:60:3f:f5:70:24:d4:68:b8:ac:e6:33: 5d:74:76:55:ec:33:be:25:0b:d6:ed:0d:b0:c4:cc:c4:39:57: 50:70:00:b7:c6:d5:ba:4c:24:e5:a2:72:b8:c0:a8:b7:b7:24: 51:6b:c2:1b:36:68:77:44:d1:8c:7f:b8:fb:18:f9:ee:84:86: e8:58:26:40:f8:ab:10:05:26:14:87:af:b0:07:dc:ea:7e:ba: bd:b8:c5:01:56:35:cf:a1:e8:e6:dd:0a:17:3c:d6:77:1c:93: be:e7:41:c9:4d:8c:9c:51:b0:36:4b:e6:07:40:62:ee:e0:d1: cc:fb:97:7d:d6:48:39:4c:ee:85:dd:c1:e4:70:b1:3b:f7:26: 0a:d7:d0:e8:ad:11:d6:0d:03:89:53:00:0e:71:8f:e1:94:9b: 94:fe:61:8d:16:07:85:cc:a0:80:05:f5:cb:b2:27:66:43:96: c4:14:a1:ab:ed:a9:de:e2:f0:17:8e:9c:0e:46:89:b9:3f:25: e4:c4:f8:c7:23:0f:b3:c1:8c:40:4d:b9:70:05:f2:65:f3:54: 3b:27:f3:5a:ca:8d:a3:0d:e9:68:81:49:35:31:12:1b:7b:85: c9:ea:c6:1a -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgISAZt4ol0z1uUsgHLNuEPlPaIsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5OGU1OTQzYzM1NWQ0OGMwMDRlNmJmNGEzYjZjZGI4YzMw YWRjNGMwHhcNMjYwMTAxMDgxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzZmOTNkYmMwZjdiMGNkNDgyNTdmN2U2ZDFlYjM4YTZiYWVkZGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3F+0oyPhK9l7Un08nlCwC5j70O1 rc41qBrS+AXorxldEUJvhzos4JQ/3814k/0iA4BWC+4FN2sYJGoTjClRAZsP//FQ GifVEbcS97Wnw3h74A7mIGQLasf/1ExrKfLt7x+GaXosf2DRy4nk9ihHuogcxTpu FXXVO0JmVuqUOKgGRUFYYwnayFym1mTVqH9/kPIEKiO/PFoV0dThNIejDp10kOsN 6+R4TxkIlEpQWEZDYT4LWt1qMJeb70bVUwkBC4wj0/dNf29S7nQaRos3L1+a7AeT N4HpIX5rsuHzl/tS+O3h953qYv2CbOEZfWjHYnDIAPr/vxLO1yuBhtpkRwIDAQAB o4ICMTCCAi0wHQYDVR0OBBYEFExvk9vA97DNSCV/fm0es4prrt3UMB8GA1UdIwQY MBaAFKmOWUPDVdSMAE5r9KO2zbjDCtxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVk1WlE4TlYxSXdBVG12MG83Yk51TU1LM0V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9jZDkyY2QtN2ZlMy00MjIzLTgzNTAt M2M3NzNhNmM0MmY5LzEvVEctVDI4RDNzTTFJSlg5LWJSNnppbXV1M2RRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9jZDkyY2QtN2ZlMy00MjIzLTgzNTAtM2M3NzNhNmM0MmY5 LzEvcVk1WlE4TlYxSXdBVG12MG83Yk51TU1LM0V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAmBAIAATAgMAoDAwCXUQMD AJdUAwMAl10DAwCXXwMDAMFMAwMAwy0wDAQCAAIwBgMEASoCsDANBgkqhkiG9w0B AQsFAAOCAQEAp2ZSY2NRdsEKApz7BxVFSmqtLGstzJoaNGA/9XAk1Gi4rOYzXXR2 VewzviUL1u0NsMTMxDlXUHAAt8bVukwk5aJyuMCot7ckUWvCGzZod0TRjH+4+xj5 7oSG6FgmQPirEAUmFIevsAfc6n66vbjFAVY1z6Ho5t0KFzzWdxyTvudByU2MnFGw NkvmB0Bi7uDRzPuXfdZIOUzuhd3B5HCxO/cmCtfQ6K0R1g0DiVMADnGP4ZSblP5h jRYHhcyggAX1y7InZkOWxBShq+2p3uLwF46cDkaJuT8l5MT4xyMPs8GMQE25cAXy ZfNUOyfzWsqNow3paIFJNTESG3uFyerGGg== -----END CERTIFICATE-----Generated at Sun Jan 25 15:07:29 2026 by rpki-client