This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/TkBggeEIG38cTqgeQZJyjYdfERw.roa File: TkBggeEIG38cTqgeQZJyjYdfERw.roa (raw, json) Hash identifier: TVtGwEq6QFTLzR+0I1131Dy7n+e87d5rFxxyq5eLPbY= Subject key identifier: 4E:40:60:81:E1:08:1B:7F:1C:4E:A8:1E:41:92:72:8D:87:5F:11:1C Certificate issuer: /CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac Certificate serial: 019B78343539872D6DC5F162067BCC4C7E7C Authority key identifier: 46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/TkBggeEIG38cTqgeQZJyjYdfERw.roa Signing time: Thu 01 Jan 2026 06:17:25 +0000 ROA not before: Thu 01 Jan 2026 06:17:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3303 IP address blocks: 45.157.49.0/24 maxlen: 24 45.157.50.0/24 maxlen: 24 45.157.51.0/24 maxlen: 24 185.156.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:35:39:87:2d:6d:c5:f1:62:06:7b:cc:4c:7e:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac Validity Not Before: Jan 1 06:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e406081e1081b7f1c4ea81e4192728d875f111c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:08:33:a8:98:f7:f8:b8:04:b0:3e:4d:ad:6a: 64:8e:f3:f7:74:0e:73:83:92:b7:f9:a9:63:d9:1d: 3c:a8:b0:8c:c4:39:65:8c:80:bc:85:5f:56:01:98: 59:24:f0:3b:64:f7:3f:38:f6:72:4d:6f:c2:2f:02: f1:8c:e2:59:50:e5:6a:4b:26:5c:61:c5:c6:8c:cd: 36:53:dd:7b:a9:31:ea:72:e8:ca:13:7b:48:30:78: 03:78:88:7c:a3:9a:20:84:82:72:cb:21:59:39:4f: e3:85:97:e7:6a:68:eb:5a:45:1e:33:13:47:d9:d4: f9:07:84:73:af:34:d3:16:d4:11:39:79:40:7a:44: 33:91:77:65:1a:c8:1a:6c:03:d9:66:70:7e:ef:a9: f0:31:10:af:c8:e1:77:e6:77:41:df:05:30:bb:eb: bb:ee:7c:5d:83:2d:da:b7:ff:2f:55:fe:1d:81:cb: 55:02:9f:05:5d:f5:38:0f:f3:14:43:5c:f8:13:68: b7:29:ee:e5:7d:df:fe:28:f3:a2:88:8c:14:68:62: a8:16:1f:69:23:07:f7:2e:38:f7:7b:6b:59:ce:c3: 3d:b5:05:fb:76:03:4f:2b:41:53:b9:09:08:b5:3d: 91:2b:bf:ec:95:b2:9a:0c:41:ac:6a:b9:55:ad:11: dd:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:40:60:81:E1:08:1B:7F:1C:4E:A8:1E:41:92:72:8D:87:5F:11:1C X509v3 Authority Key Identifier: keyid:46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/TkBggeEIG38cTqgeQZJyjYdfERw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.157.49.0-45.157.51.255 185.156.8.0/22 Signature Algorithm: sha256WithRSAEncryption a8:e5:c4:c5:8b:dd:e3:bd:54:03:c8:00:4e:00:b0:f6:c4:e6: a7:17:4a:bf:30:75:f4:b7:b8:b6:eb:c7:8a:79:c7:b3:6e:3a: 0b:69:bd:ac:65:32:8a:bb:48:36:fa:71:e6:38:6b:09:99:5c: c9:59:d5:e5:6d:e0:56:6e:a5:27:4f:32:49:7d:5d:c6:bf:8d: 1b:ef:87:cd:3b:94:f5:f3:f9:3d:05:48:e7:c1:03:ea:8d:66: c6:63:f3:a6:c3:5c:f8:f7:c1:a8:f1:2c:33:f1:d4:1a:99:48: 78:7b:3d:aa:56:ec:20:bc:67:ef:9d:79:4f:a8:92:9e:0a:5b: d0:69:6e:e0:aa:db:14:29:65:13:4b:87:e1:9c:b7:46:ab:2d: f5:b7:98:15:39:de:63:18:c1:f6:37:10:37:1c:09:a5:9b:fc: 05:b4:c5:86:03:ba:3a:5e:05:ae:e2:2c:bb:0a:b7:5f:f9:70: ea:3f:25:c9:9c:5e:bf:7e:a6:1e:79:d7:37:8e:58:86:57:aa: 21:20:56:12:64:04:96:9c:32:eb:06:0b:01:a3:c9:88:f6:e8: 4e:d7:cf:96:1e:ff:38:97:27:83:d4:c0:00:34:c4:be:1c:b7: e2:87:5c:00:02:89:52:d6:5e:3c:02:09:3c:3b:42:82:fc:27: 23:74:cf:7a -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt4NDU5hy1txfFiBnvMTH58MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MzhiZjY4YjY2NzVlMmE1YTNhNzkyMmY2NDc3ZDJhZmIz NTdmYWMwHhcNMjYwMTAxMDYxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTQwNjA4MWUxMDgxYjdmMWM0ZWE4MWU0MTkyNzI4ZDg3NWYxMTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8AgzqJj3+LgEsD5NrWpkjvP3dA5z g5K3+alj2R08qLCMxDlljIC8hV9WAZhZJPA7ZPc/OPZyTW/CLwLxjOJZUOVqSyZc YcXGjM02U917qTHqcujKE3tIMHgDeIh8o5oghIJyyyFZOU/jhZfnamjrWkUeMxNH 2dT5B4RzrzTTFtQROXlAekQzkXdlGsgabAPZZnB+76nwMRCvyOF35ndB3wUwu+u7 7nxdgy3at/8vVf4dgctVAp8FXfU4D/MUQ1z4E2i3Ke7lfd/+KPOiiIwUaGKoFh9p Iwf3Ljj3e2tZzsM9tQX7dgNPK0FTuQkItT2RK7/slbKaDEGsarlVrRHduQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFE5AYIHhCBt/HE6oHkGSco2HXxEcMB8GA1UdIwQY MBaAFEY4v2i2Z14qWjp5IvZHfSr7NX+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmppX2FMWm5YaXBhT25raTlrZDlLdnMxZjZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9lMmY2MTUtNmNhNC00YmY1LTlmNTMt ODcwNzNmNDM0YjAzLzEvVGtCZ2dlRUlHMzhjVHFnZVFaSnlqWWRmRVJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9lMmY2MTUtNmNhNC00YmY1LTlmNTMtODcwNzNmNDM0YjAz LzEvUmppX2FMWm5YaXBhT25raTlrZDlLdnMxZjZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAAtnTED BAItnTADBAK5nAgwDQYJKoZIhvcNAQELBQADggEBAKjlxMWL3eO9VAPIAE4AsPbE 5qcXSr8wdfS3uLbrx4p5x7NuOgtpvaxlMoq7SDb6ceY4awmZXMlZ1eVt4FZupSdP Mkl9Xca/jRvvh807lPXz+T0FSOfBA+qNZsZj86bDXPj3wajxLDPx1BqZSHh7PapW 7CC8Z++deU+okp4KW9BpbuCq2xQpZRNLh+Gct0arLfW3mBU53mMYwfY3EDccCaWb /AW0xYYDujpeBa7iLLsKt1/5cOo/JcmcXr9+ph551zeOWIZXqiEgVhJkBJacMusG CwGjyYj26E7Xz5Ye/ziXJ4PUwAA0xL4ct+KHXAACiVLWXjwCCTw7QoL8JyN0z3o= -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:13 2026 by rpki-client