This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/Tapjbvh-PuZAz-k3jhJRlpWxLVk.roa File: Tapjbvh-PuZAz-k3jhJRlpWxLVk.roa (raw, json) Hash identifier: 4kpMa9oce3yLyGOA9Rf9dgs0rQL4kCPs5/HrQzn7jc8= Subject key identifier: 4D:AA:63:6E:F8:7E:3E:E6:40:CF:E9:37:8E:12:51:96:95:B1:2D:59 Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Certificate serial: 019B77C727CFB0A311EB2B34E4BE0DF61D68 Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/Tapjbvh-PuZAz-k3jhJRlpWxLVk.roa Signing time: Thu 01 Jan 2026 04:18:19 +0000 ROA not before: Thu 01 Jan 2026 04:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202636 IP address blocks: 158.255.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:27:cf:b0:a3:11:eb:2b:34:e4:be:0d:f6:1d:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Validity Not Before: Jan 1 04:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4daa636ef87e3ee640cfe9378e12519695b12d59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:60:75:cd:c3:d1:ab:73:e9:ed:6a:c9:68:17: f1:7b:2c:40:85:41:12:11:4a:c9:d1:94:66:76:6b: f2:f8:5b:60:0e:96:e5:c9:f9:03:de:09:26:c5:2a: 7b:30:d5:01:6a:49:3e:f3:2c:5a:67:36:90:8c:9a: d5:c3:43:fb:fc:8e:47:1e:9e:a8:c5:fb:e2:9d:88: 94:ed:16:d2:d9:e6:17:68:46:22:4b:94:bd:b6:b2: 45:e1:56:2d:e7:d0:06:9c:bf:c6:20:7e:9e:c2:69: 70:fb:a7:ea:bf:98:9d:67:ff:82:69:e9:ea:37:5a: eb:0a:0c:d8:77:b0:ac:b5:69:8a:76:5d:f4:9e:0f: de:bf:85:38:f5:bc:31:58:9b:56:01:c8:df:43:8f: 59:0a:30:d0:46:c9:49:94:a7:02:75:ed:36:91:97: ba:e9:fa:b9:c8:4d:ec:89:24:d2:30:ed:97:7a:cf: 73:87:95:b6:55:3a:0e:92:75:38:91:5d:81:e3:c0: 73:2e:8f:69:38:30:da:81:c3:b4:18:3e:2d:c1:45: 5f:33:bd:13:17:d5:94:12:67:0d:8b:d3:45:cc:e9: 8e:fe:95:e8:97:95:43:14:ca:da:8a:cc:76:4d:a1: fa:aa:b6:45:92:ec:cb:b6:77:40:b8:91:5f:01:a0: 89:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:AA:63:6E:F8:7E:3E:E6:40:CF:E9:37:8E:12:51:96:95:B1:2D:59 X509v3 Authority Key Identifier: keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/Tapjbvh-PuZAz-k3jhJRlpWxLVk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.255.232.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:7b:32:6f:1d:0c:45:b4:c8:f5:33:f7:54:fd:d5:f9:be:8d: 43:e2:2a:7a:07:ff:16:0b:50:50:fe:8d:c4:06:63:59:ce:24: 37:40:f6:c5:4b:42:90:39:5e:02:36:76:86:3d:33:16:37:f3: 3c:b5:50:b8:5f:aa:59:a8:90:3f:a2:b5:f1:f3:a5:f7:46:c8: ff:24:13:4a:dd:f5:07:0c:5d:b0:65:16:ea:d9:c3:62:c2:5c: d2:66:c0:17:54:bb:4d:2c:11:a6:c1:e6:18:af:33:90:f0:ea: d5:d6:83:ba:0f:c5:9b:8b:65:60:9b:8e:f5:9a:88:3f:c6:6b: d3:03:d0:e2:c1:b8:c0:f0:e9:78:96:f7:59:e1:5e:5a:ff:38: b5:45:49:c2:4e:f3:e7:29:f2:0c:df:6e:7b:ba:88:29:6b:ee: bc:fc:65:e2:1e:b4:df:ee:0e:81:2c:25:a2:2e:54:35:bd:f4: d7:26:2a:37:84:45:5a:41:26:f0:c1:41:68:03:c5:04:35:76: 7e:88:54:80:3c:3a:ae:32:f5:39:b4:90:f4:71:5a:93:48:46: 6a:e4:69:4d:b4:34:f8:0a:34:02:7b:38:99:d2:a8:0e:42:24: 77:4b:e3:77:9f:51:85:b3:54:df:7d:60:b2:00:07:32:1f:17: 81:96:a9:ff -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xyfPsKMR6ys05L4N9h1oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYzVkZTdkNzI1NWI3ZDU4MjYwYzY1YTEyMGIxNjRlZjEw ZWY5MDMwHhcNMjYwMTAxMDQxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZGFhNjM2ZWY4N2UzZWU2NDBjZmU5Mzc4ZTEyNTE5Njk1YjEyZDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWB1zcPRq3Pp7WrJaBfxeyxAhUES EUrJ0ZRmdmvy+FtgDpblyfkD3gkmxSp7MNUBakk+8yxaZzaQjJrVw0P7/I5HHp6o xfvinYiU7RbS2eYXaEYiS5S9trJF4VYt59AGnL/GIH6ewmlw+6fqv5idZ/+Caenq N1rrCgzYd7CstWmKdl30ng/ev4U49bwxWJtWAcjfQ49ZCjDQRslJlKcCde02kZe6 6fq5yE3siSTSMO2Xes9zh5W2VToOknU4kV2B48BzLo9pODDagcO0GD4twUVfM70T F9WUEmcNi9NFzOmO/pXol5VDFMraisx2TaH6qrZFkuzLtndAuJFfAaCJ3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE2qY274fj7mQM/pN44SUZaVsS1ZMB8GA1UdIwQY MBaAFGvF3n1yVbfVgmDGWhILFk7xDvkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgt ZmRmNjYzOGQyYzA0LzEvVGFwamJ2aC1QdVpBei1rM2poSlJscFd4TFZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgtZmRmNjYzOGQyYzA0 LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnv/oMA0G CSqGSIb3DQEBCwUAA4IBAQBuezJvHQxFtMj1M/dU/dX5vo1D4ip6B/8WC1BQ/o3E BmNZziQ3QPbFS0KQOV4CNnaGPTMWN/M8tVC4X6pZqJA/orXx86X3Rsj/JBNK3fUH DF2wZRbq2cNiwlzSZsAXVLtNLBGmweYYrzOQ8OrV1oO6D8Wbi2Vgm471mog/xmvT A9DiwbjA8Ol4lvdZ4V5a/zi1RUnCTvPnKfIM3257uogpa+68/GXiHrTf7g6BLCWi LlQ1vfTXJio3hEVaQSbwwUFoA8UENXZ+iFSAPDquMvU5tJD0cVqTSEZq5GlNtDT4 CjQCeziZ0qgOQiR3S+N3n1GFs1TffWCyAAcyHxeBlqn/ -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:22 2026 by rpki-client