This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/TV34wvad5IaMfPoWisvwqDtCaA0.roa File: TV34wvad5IaMfPoWisvwqDtCaA0.roa (raw, json) Hash identifier: GqkdisDL97UF2sXcw6/14uHKglsSF+BfgwwUNizcOOs= Subject key identifier: 4D:5D:F8:C2:F6:9D:E4:86:8C:7C:FA:16:8A:CB:F0:A8:3B:42:68:0D Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933 Certificate serial: 019B7D5CFADB4D215258469AE906101E2359 Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/TV34wvad5IaMfPoWisvwqDtCaA0.roa Signing time: Fri 02 Jan 2026 06:20:04 +0000 ROA not before: Fri 02 Jan 2026 06:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6714 IP address blocks: 78.133.220.0/22 maxlen: 22 2001:4190:8032::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:fa:db:4d:21:52:58:46:9a:e9:06:10:1e:23:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933 Validity Not Before: Jan 2 06:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d5df8c2f69de4868c7cfa168acbf0a83b42680d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7d:74:88:a9:ee:d5:e6:d4:b9:ca:73:bd:99: 94:2e:80:3c:83:12:10:00:bb:4a:cf:c9:f5:aa:81: fe:1b:4d:0d:56:0e:8e:ff:21:f9:e5:3b:f5:90:65: 93:a1:ec:fc:7c:c1:1b:ce:24:af:63:4e:4c:d8:2a: 73:0f:29:fc:ab:84:a8:67:0e:15:d4:05:6a:8b:39: e0:aa:8f:c2:05:37:cf:3d:9b:64:47:d5:3d:6f:84: 4a:e6:4c:49:72:e1:32:06:f7:8b:30:5a:40:37:b2: 9e:c0:05:cf:de:37:14:9f:c1:d9:2d:f3:4c:cb:72: 46:c3:a6:10:39:24:28:5d:06:d9:da:4b:8c:bf:10: fb:23:08:b0:79:a3:d3:ce:de:eb:13:b9:ae:ca:15: 8a:63:23:4c:56:fb:81:97:c0:f5:8e:9a:84:1c:ce: ae:86:73:d7:ab:1c:71:e3:af:fc:6d:4d:27:22:ee: 81:0e:9b:92:93:e8:d2:c9:94:0c:67:7f:89:94:b8: 8a:46:8a:30:2a:be:32:39:c9:15:b7:80:bc:09:95: 6e:dc:93:92:6e:aa:8a:fc:ca:28:75:29:8c:e5:4b: 29:2c:5f:40:f3:39:cd:ee:c5:a2:09:02:04:b6:25: ec:31:d1:e4:3b:2d:0e:6b:43:68:66:d8:84:f5:a9: de:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:5D:F8:C2:F6:9D:E4:86:8C:7C:FA:16:8A:CB:F0:A8:3B:42:68:0D X509v3 Authority Key Identifier: keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/TV34wvad5IaMfPoWisvwqDtCaA0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.133.220.0/22 IPv6: 2001:4190:8032::/48 Signature Algorithm: sha256WithRSAEncryption 2f:13:0e:2c:ba:c5:49:c4:e2:f5:3f:99:28:fe:2f:4e:a6:08: 68:4b:01:d7:0a:00:66:5b:18:3c:1d:e4:db:f4:e9:84:8f:99: f6:51:43:b4:10:97:74:bc:31:c1:a3:6b:d8:d6:fa:1c:86:d0: 7f:f5:4a:55:0b:5f:97:d9:f9:b3:16:0d:6b:65:a1:ce:7e:a9: c0:f4:7e:b1:f7:9e:be:4e:dd:fd:c1:17:aa:6c:19:a7:ed:b2: 43:3a:7c:28:a3:a6:73:2e:b0:76:6e:e4:81:7f:5b:6a:1d:6f: 3b:48:3b:ec:4e:fe:c1:e0:8b:61:88:ac:6c:c9:6a:81:f8:b4: c7:ed:bc:9a:80:24:b4:89:1c:19:0b:5d:1b:7c:f3:76:5f:8b: d2:03:e1:67:8b:ee:cc:51:be:f9:41:ae:dc:78:61:49:14:89: a0:d8:18:48:2f:67:81:6e:d1:39:f8:2c:ea:59:b8:d1:d8:fa: 41:50:8c:e0:f3:78:bf:18:9d:f1:3b:be:87:20:c9:d7:5f:df: 6f:c7:64:f8:10:b2:30:69:bd:cf:95:33:4a:84:e1:85:c1:85: 61:74:55:19:e3:3f:8c:ee:16:50:ca:96:c6:93:4b:de:69:55: b9:37:d2:40:77:f2:98:25:d0:3e:7f:27:92:4f:f6:82:ce:a0: 60:16:f7:54 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9XPrbTSFSWEaa6QYQHiNZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2E2M2RmMjQ4YjdhZGYzZGRkMDdlOGMyZDNlZWRkMDJj ZWY5MzMwHhcNMjYwMTAyMDYyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDVkZjhjMmY2OWRlNDg2OGM3Y2ZhMTY4YWNiZjBhODNiNDI2ODBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApn10iKnu1ebUucpzvZmULoA8gxIQ ALtKz8n1qoH+G00NVg6O/yH55Tv1kGWToez8fMEbziSvY05M2CpzDyn8q4SoZw4V 1AVqizngqo/CBTfPPZtkR9U9b4RK5kxJcuEyBveLMFpAN7KewAXP3jcUn8HZLfNM y3JGw6YQOSQoXQbZ2kuMvxD7IwiweaPTzt7rE7muyhWKYyNMVvuBl8D1jpqEHM6u hnPXqxxx46/8bU0nIu6BDpuSk+jSyZQMZ3+JlLiKRoowKr4yOckVt4C8CZVu3JOS bqqK/MoodSmM5UspLF9A8znN7sWiCQIEtiXsMdHkOy0Oa0NoZtiE9aneAQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFE1d+ML2neSGjHz6ForL8Kg7QmgNMB8GA1UdIwQY MBaAFBrKY98ki3rfPd0H6MLT7t0CzvkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzIt OTFlMzE4NGJiMGFiLzEvVFYzNHd2YWQ1SWFNZlBvV2lzdndxRHRDYUEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzItOTFlMzE4NGJiMGFi LzEvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCToXcMA8E AgACMAkDBwAgAUGQgDIwDQYJKoZIhvcNAQELBQADggEBAC8TDiy6xUnE4vU/mSj+ L06mCGhLAdcKAGZbGDwd5Nv06YSPmfZRQ7QQl3S8McGja9jW+hyG0H/1SlULX5fZ +bMWDWtloc5+qcD0frH3nr5O3f3BF6psGaftskM6fCijpnMusHZu5IF/W2odbztI O+xO/sHgi2GIrGzJaoH4tMftvJqAJLSJHBkLXRt883Zfi9ID4WeL7sxRvvlBrtx4 YUkUiaDYGEgvZ4Fu0Tn4LOpZuNHY+kFQjODzeL8YnfE7vocgyddf32/HZPgQsjBp vc+VM0qE4YXBhWF0VRnjP4zuFlDKlsaTS95pVbk30kB38pgl0D5/J5JP9oLOoGAW 91Q= -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:33 2026 by rpki-client