This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/tk19XDIbs2abJC_w7m3eyvCxcz0.roa File: tk19XDIbs2abJC_w7m3eyvCxcz0.roa (raw, json) Hash identifier: NU3TfhMXPP24pf7R4GaRkyWoD5b0T4TNRSVTKMLyWEo= Subject key identifier: B6:4D:7D:5C:32:1B:B3:66:9B:24:2F:F0:EE:6D:DE:CA:F0:B1:73:3D Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff Certificate serial: 019B7BA516730FAEB8CD389A207C8B20AC69 Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/tk19XDIbs2abJC_w7m3eyvCxcz0.roa Signing time: Thu 01 Jan 2026 22:19:35 +0000 ROA not before: Thu 01 Jan 2026 22:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47441 IP address blocks: 93.174.72.0/24 maxlen: 24 93.174.73.0/24 maxlen: 24 93.174.74.0/24 maxlen: 24 93.174.75.0/24 maxlen: 24 93.174.76.0/24 maxlen: 24 93.174.77.0/24 maxlen: 24 93.174.78.0/24 maxlen: 24 93.174.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:16:73:0f:ae:b8:cd:38:9a:20:7c:8b:20:ac:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff Validity Not Before: Jan 1 22:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b64d7d5c321bb3669b242ff0ee6ddecaf0b1733d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a9:8b:e6:ef:29:ca:34:f4:2b:db:0e:54:cf: 55:5c:73:2b:65:9d:3c:11:e6:94:b4:b9:6e:1b:6a: 04:51:43:49:bc:65:1d:e1:da:f0:2d:11:00:74:a4: 1b:b9:9e:04:0f:a9:82:dd:84:38:b6:1a:ba:14:61: 28:ce:d4:c5:33:28:94:6a:8a:dd:30:5e:01:68:54: be:06:4c:82:88:8b:21:b0:e0:91:df:43:36:c9:62: 48:a0:53:6d:96:b7:3f:f6:3f:ff:4b:0b:75:be:be: 17:ee:59:74:76:62:60:68:e6:56:c5:4d:ec:75:24: cf:dc:8b:39:86:af:94:29:23:dc:b1:91:9b:64:05: 49:9e:93:c1:ef:b5:93:11:84:d2:49:08:90:04:e1: 4f:f6:29:e6:36:21:85:27:9c:17:8a:3b:70:83:be: 97:10:96:3f:fb:2a:28:bf:d9:7e:76:52:1d:52:27: 64:a9:b2:57:c6:27:34:6a:74:bf:71:2b:86:fd:6f: 7a:25:c3:af:5f:0b:42:73:30:d4:b1:17:2a:9b:d0: be:bb:62:fe:55:a9:79:8e:55:72:bd:33:7c:04:33: cd:11:62:bf:03:af:b8:a8:28:6d:4f:d6:f8:f0:3a: 36:30:cf:f8:37:82:e4:3e:fe:a7:54:fe:f2:a4:f6: 80:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:4D:7D:5C:32:1B:B3:66:9B:24:2F:F0:EE:6D:DE:CA:F0:B1:73:3D X509v3 Authority Key Identifier: keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/tk19XDIbs2abJC_w7m3eyvCxcz0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.174.72.0/21 Signature Algorithm: sha256WithRSAEncryption 9d:46:27:8e:42:b9:fd:b0:14:89:eb:58:0d:9c:ac:26:09:ce: c9:0f:ad:03:c6:f5:c8:15:32:51:63:17:7c:16:17:0a:63:08: 7b:4d:d0:d7:93:dc:8c:17:8a:57:a2:4f:10:41:ee:6c:0a:e7: 40:08:81:14:6a:6d:9c:08:73:df:ff:60:c2:e3:8d:dd:36:35: 00:e2:bb:36:69:96:33:0a:24:7a:02:88:6c:8e:a4:1e:af:67: 51:4e:a1:be:ed:c4:aa:ba:d4:d3:1a:82:f2:eb:9b:9e:02:0a: a1:37:54:2c:5a:89:69:92:c6:80:1b:5b:c3:2e:0f:51:21:dd: ec:aa:22:f3:40:50:18:b3:ad:ed:3b:df:8c:5b:4f:eb:c5:51: 8d:0f:a7:d9:b7:d8:99:2f:97:5a:f0:a0:e7:00:77:93:ff:11: d4:81:bb:e9:42:f5:bf:99:60:b0:e5:b6:ab:66:bd:86:07:b7: da:04:c2:50:ad:64:4c:31:02:bb:a5:14:ae:ab:17:b3:5d:2a: 5b:49:7b:a8:10:94:10:7c:99:b3:8b:d8:48:13:9a:27:86:29: 0b:57:be:0e:07:8a:41:ce:2e:25:7e:49:be:5f:7c:ad:16:49: 80:2d:8e:b9:01:71:53:7b:83:54:b6:73:37:91:4a:79:61:4f: a6:7b:0f:d1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pRZzD664zTiaIHyLIKxpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkODMxM2U0MWU2NDZhMDljZDAxZTJlNmY0NzM5ZDNiZDIz NmM0ZmYwHhcNMjYwMTAxMjIxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjRkN2Q1YzMyMWJiMzY2OWIyNDJmZjBlZTZkZGVjYWYwYjE3MzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKmL5u8pyjT0K9sOVM9VXHMrZZ08 EeaUtLluG2oEUUNJvGUd4drwLREAdKQbuZ4ED6mC3YQ4thq6FGEoztTFMyiUaord MF4BaFS+BkyCiIshsOCR30M2yWJIoFNtlrc/9j//Swt1vr4X7ll0dmJgaOZWxU3s dSTP3Is5hq+UKSPcsZGbZAVJnpPB77WTEYTSSQiQBOFP9inmNiGFJ5wXijtwg76X EJY/+yoov9l+dlIdUidkqbJXxic0anS/cSuG/W96JcOvXwtCczDUsRcqm9C+u2L+ Val5jlVyvTN8BDPNEWK/A6+4qChtT9b48Do2MM/4N4LkPv6nVP7ypPaAlQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLZNfVwyG7NmmyQv8O5t3srwsXM9MB8GA1UdIwQY MBaAFM2DE+QeZGoJzQHi5vRznTvSNsT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQt ODg2MmI1MTczMTdjLzEvdGsxOVhESWJzMmFiSkNfdzdtM2V5dkN4Y3owLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQtODg2MmI1MTczMTdj LzEvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXa5IMA0G CSqGSIb3DQEBCwUAA4IBAQCdRieOQrn9sBSJ61gNnKwmCc7JD60DxvXIFTJRYxd8 FhcKYwh7TdDXk9yMF4pXok8QQe5sCudACIEUam2cCHPf/2DC443dNjUA4rs2aZYz CiR6AohsjqQer2dRTqG+7cSqutTTGoLy65ueAgqhN1QsWolpksaAG1vDLg9RId3s qiLzQFAYs63tO9+MW0/rxVGND6fZt9iZL5da8KDnAHeT/xHUgbvpQvW/mWCw5bar Zr2GB7faBMJQrWRMMQK7pRSuqxezXSpbSXuoEJQQfJmzi9hIE5onhikLV74OB4pB zi4lfkm+X3ytFkmALY65AXFTe4NUtnM3kUp5YU+mew/R -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:18 2026 by rpki-client