This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/tpLAqocF0bTIPOP-ADEzQina1Ek.roa File: tpLAqocF0bTIPOP-ADEzQina1Ek.roa (raw, json) Hash identifier: rexU4bBb1y9ppf3tX3MY9b2rxao5NOkhqUd0pTWruPg= Subject key identifier: B6:92:C0:AA:87:05:D1:B4:C8:3C:E3:FE:00:31:33:42:29:DA:D4:49 Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24 Certificate serial: 019B7E37592822A2CB630D454D492E53E455 Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/tpLAqocF0bTIPOP-ADEzQina1Ek.roa Signing time: Fri 02 Jan 2026 10:18:35 +0000 ROA not before: Fri 02 Jan 2026 10:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34918 IP address blocks: 185.118.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:59:28:22:a2:cb:63:0d:45:4d:49:2e:53:e4:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24 Validity Not Before: Jan 2 10:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b692c0aa8705d1b4c83ce3fe0031334229dad449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:63:9e:42:3f:b4:57:f3:b3:59:58:3a:36:56: 06:ff:49:0e:1f:6c:32:56:a6:5f:e1:83:76:a8:33: f7:2a:b1:c1:56:5f:30:71:ca:3b:c5:f1:74:5c:b4: 12:5e:54:9b:5c:64:9d:73:07:7f:d8:44:c2:b4:c8: 7c:17:ac:46:ce:6d:19:72:d2:16:c0:3c:2d:04:3a: 7b:fc:78:60:fb:32:81:2f:3c:2d:c5:31:70:8b:f8: e2:56:98:6f:b1:74:27:ff:b8:e3:48:d0:c0:86:dd: b8:42:29:06:d9:4a:11:19:98:77:94:84:9b:ea:86: ec:cd:1e:7d:5c:4e:af:1c:b8:4f:39:51:d7:fa:0d: 43:6a:ab:d1:4c:63:40:d6:67:57:70:c1:cd:aa:9f: b2:ad:4a:f2:59:c5:3a:bb:2e:d6:35:24:19:04:8c: af:b1:70:1c:eb:a3:b1:4d:d9:8a:30:7a:3d:81:fc: c4:96:8c:f0:66:6a:0e:04:8f:28:a7:99:a4:a4:5a: 44:7e:9d:32:bd:f0:e4:fe:da:93:9b:2c:ce:df:98: e5:6a:1a:1f:93:bf:22:43:d7:5c:cb:e7:5e:82:c7: 30:e7:ec:8e:1f:a6:1d:fa:18:55:23:d8:dc:dd:25: 02:69:68:b6:e5:a7:97:8f:f5:2d:72:e1:d6:69:d5: c6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:92:C0:AA:87:05:D1:B4:C8:3C:E3:FE:00:31:33:42:29:DA:D4:49 X509v3 Authority Key Identifier: keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/tpLAqocF0bTIPOP-ADEzQina1Ek.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.118.15.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:9a:5d:d0:a9:11:4c:44:84:89:7d:70:a8:e1:64:21:86:c5: 77:9d:7f:da:ff:3a:58:8f:70:82:e8:15:c2:84:f8:1b:8f:50: df:55:b4:a7:26:ef:7e:35:f0:70:05:f7:7b:c3:b9:e7:4e:d6: 6c:3b:81:b0:a2:46:99:56:65:46:dd:55:e7:f3:0c:99:59:22: 16:0e:1c:b9:6f:9e:b8:11:f1:27:5d:12:05:61:65:13:c2:d6: 81:24:fe:96:d5:48:34:92:8d:8d:cc:77:41:d5:fa:98:fc:7b: 0a:49:76:a8:ac:79:fe:97:dd:5a:dd:59:a9:bf:f0:9b:79:88: 76:6e:b2:63:3e:e9:1d:15:2d:a4:10:ac:9e:31:7d:bd:07:70: 14:c7:6e:20:db:a5:43:62:46:98:d7:17:8b:5a:56:5e:2e:9b: f0:d7:dc:11:3a:ca:b3:b4:8e:e5:6b:61:3d:ae:47:92:8d:72: c9:d1:81:f2:38:02:5a:65:f8:ba:38:18:25:a1:d7:10:f8:28: 3f:ed:53:d8:59:b8:2a:0e:a7:bc:7e:08:9d:51:25:4b:f7:54: 38:dd:43:c6:6a:12:74:14:4a:38:14:ef:71:5a:15:69:17:ff: ae:40:22:b7:07:80:91:c3:c1:19:3d:9a:69:9b:46:0f:07:fd: 58:b7:e6:be -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+N1koIqLLYw1FTUkuU+RVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhM2QwYmMxMWIyOWRhNDRhZDU3MzA0YzNmODU2ODg3MGEw MTljMjQwHhcNMjYwMTAyMTAxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjkyYzBhYTg3MDVkMWI0YzgzY2UzZmUwMDMxMzM0MjI5ZGFkNDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGOeQj+0V/OzWVg6NlYG/0kOH2wy VqZf4YN2qDP3KrHBVl8wcco7xfF0XLQSXlSbXGSdcwd/2ETCtMh8F6xGzm0ZctIW wDwtBDp7/Hhg+zKBLzwtxTFwi/jiVphvsXQn/7jjSNDAht24QikG2UoRGZh3lISb 6obszR59XE6vHLhPOVHX+g1DaqvRTGNA1mdXcMHNqp+yrUryWcU6uy7WNSQZBIyv sXAc66OxTdmKMHo9gfzElozwZmoOBI8op5mkpFpEfp0yvfDk/tqTmyzO35jlahof k78iQ9dcy+degscw5+yOH6Yd+hhVI9jc3SUCaWi25aeXj/UtcuHWadXGhwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFLaSwKqHBdG0yDzj/gAxM0Ip2tRJMB8GA1UdIwQY MBaAFPo9C8EbKdpErVcwTD+FaIcKAZwkMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1qMEx3UnNwMmtTdFZ6Qk1QNFZvaHdvQm5DUS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvYWE2NjI5LWQxNDktNDE5Ny1hMzE1 LWQyMTA3MWVmNzM1Yi8xL3RwTEFxb2NGMGJUSVBPUC1BREV6UWluYTFFay5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYzMvYWE2NjI5LWQxNDktNDE5Ny1hMzE1LWQyMTA3MWVmNzM1 Yi8xLzEtajBMd1JzcDJrU3RWekJNUDRWb2h3b0JuQ1EuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC5dg8w DQYJKoZIhvcNAQELBQADggEBAIyaXdCpEUxEhIl9cKjhZCGGxXedf9r/OliPcILo FcKE+BuPUN9VtKcm73418HAF93vDuedO1mw7gbCiRplWZUbdVefzDJlZIhYOHLlv nrgR8SddEgVhZRPC1oEk/pbVSDSSjY3Md0HV+pj8ewpJdqisef6X3VrdWam/8Jt5 iHZusmM+6R0VLaQQrJ4xfb0HcBTHbiDbpUNiRpjXF4taVl4um/DX3BE6yrO0juVr YT2uR5KNcsnRgfI4Alpl+Lo4GCWh1xD4KD/tU9hZuCoOp7x+CJ1RJUv3VDjdQ8Zq EnQUSjgU73FaFWkX/65AIrcHgJHDwRk9mmmbRg8H/Vi35r4= -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:38 2026 by rpki-client