This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/TaMheOMdZP2tmei_s2ybU2SsCPg.roa File: TaMheOMdZP2tmei_s2ybU2SsCPg.roa (raw, json) Hash identifier: DqAPmPSrPef9PUHYVbmORYuL6XIcTBrJp4dUoyY7wso= Subject key identifier: 4D:A3:21:78:E3:1D:64:FD:AD:99:E8:BF:B3:6C:9B:53:64:AC:08:F8 Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Certificate serial: 019B7C12C1096AC619F001685C9D676507BB Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/TaMheOMdZP2tmei_s2ybU2SsCPg.roa Signing time: Fri 02 Jan 2026 00:19:22 +0000 ROA not before: Fri 02 Jan 2026 00:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200205 IP address blocks: 83.139.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:c1:09:6a:c6:19:f0:01:68:5c:9d:67:65:07:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Validity Not Before: Jan 2 00:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4da32178e31d64fdad99e8bfb36c9b5364ac08f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:9b:13:77:76:6c:20:59:c6:ca:16:34:cc:dd: 89:da:71:0b:e9:20:9d:c9:b1:9d:89:f0:44:e3:48: 89:d0:89:f5:f1:90:9d:ad:56:d0:8d:b5:1e:e5:ed: f2:03:14:e3:e8:75:f2:79:05:13:bb:2f:c7:fd:ad: 79:8f:44:48:93:65:7a:6a:8c:d5:1b:03:b5:c8:5e: 33:11:4a:c3:67:d0:ff:50:dc:75:8c:fd:9c:f6:1c: f6:fd:b5:a6:a3:3e:0f:5d:1c:b1:93:81:c9:bb:47: 5a:b8:de:0a:7b:71:40:be:94:46:ad:27:c9:45:80: df:a1:aa:a3:93:e7:b5:ef:2f:3b:84:41:77:91:ec: b4:c4:2a:f9:05:cf:c7:9a:fe:9b:bc:2f:94:06:9e: dd:de:1f:a3:bb:62:93:f7:e8:ad:99:b1:58:30:6e: 14:52:0a:73:c2:d8:0b:38:4b:e3:8a:a7:d9:6a:59: c4:cf:80:f4:55:47:1d:13:af:c0:5c:f5:60:3c:ca: 17:47:b2:84:23:d4:26:40:11:27:6d:0a:a1:cc:c9: bc:1d:ef:1d:dd:ae:0d:e6:e7:4e:52:8b:36:5c:44: 27:f3:2b:d5:35:ef:19:6b:ac:10:5c:21:8c:9d:1c: 54:88:d7:13:ee:1a:ac:fb:a6:da:0b:c1:54:4c:63: 1f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A3:21:78:E3:1D:64:FD:AD:99:E8:BF:B3:6C:9B:53:64:AC:08:F8 X509v3 Authority Key Identifier: keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/TaMheOMdZP2tmei_s2ybU2SsCPg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.139.22.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:4f:2e:92:55:d5:5b:8c:65:54:16:d2:db:24:b1:f9:ee:75: aa:38:a8:8a:af:b9:94:ad:10:5c:b4:f4:6c:f8:b8:56:e1:d0: f5:bb:43:15:09:47:ff:81:b6:8e:01:bf:14:6e:9e:9e:76:dd: 6f:d2:da:fb:8e:cc:d2:4e:e9:79:1b:e8:75:f4:8f:9d:99:55: e1:06:62:fe:e7:fb:80:e1:cf:73:ff:98:39:8d:af:85:5e:eb: 6e:6f:fd:f0:41:15:f0:9e:f7:8d:1b:ae:36:62:53:ff:3f:19: c8:1b:56:00:16:30:a9:ad:12:e4:9b:77:75:04:20:2e:04:55: b6:e0:2e:1f:71:39:e9:06:1d:45:19:29:50:df:c6:b4:84:48: 0f:81:be:94:5e:41:76:0a:23:53:97:7c:ed:cf:49:59:bb:f4: 49:f7:ac:6d:22:90:00:a0:ee:14:7e:12:cb:5c:e7:90:71:6b: 1f:8b:a5:97:ea:f9:be:2e:5c:7d:f0:4d:a6:01:24:ca:6a:51: d0:4e:bb:48:61:08:52:20:4a:a2:b9:5a:85:51:5f:b8:bc:96: 8f:8b:35:57:2e:c2:59:eb:49:c5:24:d9:57:3b:dc:ea:a8:dd: 6b:43:49:a1:c5:a1:a9:64:2f:6a:bb:d4:42:ce:9f:0f:ec:02: e5:06:3d:96 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EsEJasYZ8AFoXJ1nZQe7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNzVmYjRmNTJhODI5ZDEzNmUyOWE5YTAyNWM2MzZkMTlh ZTMyOGUwHhcNMjYwMTAyMDAxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZGEzMjE3OGUzMWQ2NGZkYWQ5OWU4YmZiMzZjOWI1MzY0YWMwOGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JsTd3ZsIFnGyhY0zN2J2nEL6SCd ybGdifBE40iJ0In18ZCdrVbQjbUe5e3yAxTj6HXyeQUTuy/H/a15j0RIk2V6aozV GwO1yF4zEUrDZ9D/UNx1jP2c9hz2/bWmoz4PXRyxk4HJu0dauN4Ke3FAvpRGrSfJ RYDfoaqjk+e17y87hEF3key0xCr5Bc/Hmv6bvC+UBp7d3h+ju2KT9+itmbFYMG4U UgpzwtgLOEvjiqfZalnEz4D0VUcdE6/AXPVgPMoXR7KEI9QmQBEnbQqhzMm8He8d 3a4N5udOUos2XEQn8yvVNe8Za6wQXCGMnRxUiNcT7hqs+6baC8FUTGMffwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE2jIXjjHWT9rZnov7Nsm1NkrAj4MB8GA1UdIwQY MBaAFA51+09SqCnRNuKamgJcY20ZrjKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYt MzViYTI2N2RlZDNiLzEvVGFNaGVPTWRaUDJ0bWVpX3MyeWJVMlNzQ1BnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYtMzViYTI2N2RlZDNi LzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU4sWMA0G CSqGSIb3DQEBCwUAA4IBAQCNTy6SVdVbjGVUFtLbJLH57nWqOKiKr7mUrRBctPRs +LhW4dD1u0MVCUf/gbaOAb8Ubp6edt1v0tr7jszSTul5G+h19I+dmVXhBmL+5/uA 4c9z/5g5ja+FXutub/3wQRXwnveNG642YlP/PxnIG1YAFjCprRLkm3d1BCAuBFW2 4C4fcTnpBh1FGSlQ38a0hEgPgb6UXkF2CiNTl3ztz0lZu/RJ96xtIpAAoO4UfhLL XOeQcWsfi6WX6vm+Llx98E2mASTKalHQTrtIYQhSIEqiuVqFUV+4vJaPizVXLsJZ 60nFJNlXO9zqqN1rQ0mhxaGpZC9qu9RCzp8P7ALlBj2W -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:20 2026 by rpki-client