This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/tEmNq7LovUuc8Au30SanbkNv0So.roa File: tEmNq7LovUuc8Au30SanbkNv0So.roa (raw, json) Hash identifier: s2pSdz/lU/3uCLBb+gthkVpfgt/RCLo0Ow4VSLUvvBU= Subject key identifier: B4:49:8D:AB:B2:E8:BD:4B:9C:F0:0B:B7:D1:26:A7:6E:43:6F:D1:2A Certificate issuer: /CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9 Certificate serial: 019B77C68B178F62EBCA0B5467CCF92C744B Authority key identifier: 9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/tEmNq7LovUuc8Au30SanbkNv0So.roa Signing time: Thu 01 Jan 2026 04:17:39 +0000 ROA not before: Thu 01 Jan 2026 04:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1759 IP address blocks: 193.143.99.0/24 maxlen: 24 193.143.100.0/24 maxlen: 24 193.143.101.0/24 maxlen: 24 193.143.102.0/23 maxlen: 23 193.143.104.0/21 maxlen: 21 193.143.112.0/23 maxlen: 23 193.143.114.0/24 maxlen: 24 193.143.116.0/23 maxlen: 23 193.143.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:8b:17:8f:62:eb:ca:0b:54:67:cc:f9:2c:74:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9 Validity Not Before: Jan 1 04:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4498dabb2e8bd4b9cf00bb7d126a76e436fd12a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ba:f9:23:e8:49:2c:09:bc:23:75:c4:5c:93: 90:ee:ed:ea:18:6f:5e:ba:1a:e6:e1:3b:be:47:f8: 4a:34:42:e0:c6:ba:a6:aa:b1:75:82:81:02:87:30: fe:59:90:52:c6:66:df:42:88:64:d7:92:b0:ec:af: 08:a3:02:fe:79:f2:45:b0:c8:2b:c6:73:8f:a7:19: 2b:ca:31:c0:39:64:e1:b7:81:a7:71:a4:9b:df:0f: 61:4a:e3:a4:34:4a:d0:89:a2:0e:3e:94:2b:f4:b6: 29:70:b9:8a:4a:77:b1:d8:0b:d5:ce:51:ce:a6:43: a7:f9:1a:9a:c8:fd:4b:55:04:0f:d8:a7:27:a5:ad: ac:ca:a9:f4:d0:aa:2e:a3:36:c0:ff:e3:21:49:82: 29:7a:15:6e:31:44:b2:bb:81:70:ad:67:37:ed:c3: 5d:99:7a:87:26:7b:cb:e5:34:eb:83:e4:0c:10:9f: 63:b8:6f:cf:6d:8f:c2:33:96:25:8e:df:0d:ba:72: df:a9:02:d2:cb:f9:93:41:a0:67:e7:d9:20:61:14: a7:80:ae:3d:33:b0:a6:b2:8c:b9:b4:ef:d4:18:9e: c2:17:05:8d:62:0e:c7:e6:76:48:56:38:4d:9c:99: 51:d5:9c:89:00:7b:a8:e0:56:9b:d7:58:04:34:e2: b9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:49:8D:AB:B2:E8:BD:4B:9C:F0:0B:B7:D1:26:A7:6E:43:6F:D1:2A X509v3 Authority Key Identifier: keyid:9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/tEmNq7LovUuc8Au30SanbkNv0So.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.143.99.0-193.143.114.255 193.143.116.0-193.143.118.255 Signature Algorithm: sha256WithRSAEncryption 10:8e:06:37:92:b1:53:6e:d5:6c:a8:ac:b1:5b:ef:8f:eb:78: f4:64:ca:74:b1:df:b9:a8:47:08:82:59:d3:47:d9:e2:c5:04: 7c:55:2d:79:0a:77:9e:39:2c:da:e0:75:07:b9:e4:22:55:4f: 1c:be:61:2a:03:e9:63:4e:ac:25:e3:9b:85:78:b3:71:85:3e: 57:ac:4c:0f:08:4b:33:69:9e:57:1f:f8:48:1a:4f:49:57:3e: df:1f:93:e9:bb:d8:fa:b7:a0:0b:30:b6:d3:51:f2:fb:74:22: 99:a3:a8:c5:15:0c:55:63:e5:74:7e:f8:76:ac:82:1e:d1:96: fd:ce:c5:aa:f5:a0:52:27:a2:71:e1:5b:37:ec:67:ed:8f:8a: 4d:e2:57:db:c2:14:e9:c1:22:c4:d6:91:55:0b:a9:ca:93:8b: 0b:b1:45:34:59:cb:cb:ed:ba:c1:38:38:90:9a:25:07:d6:9c: cb:ab:40:6a:73:5b:2a:92:b2:13:f9:21:45:09:48:dc:4c:41: 3c:11:c3:d9:8c:e3:3b:4b:a9:61:85:70:cf:f6:38:12:60:d9: b0:a7:11:23:58:c8:ae:ec:8f:d4:07:a2:48:25:f0:87:2e:8b: 29:4d:ae:46:bd:db:58:f2:c1:69:e6:3e:68:03:a2:c8:39:21: 8c:14:95:b2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt3xosXj2LrygtUZ8z5LHRLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMDJlMDY0Yzk4YjMyMzFjM2YyMTQ4YTFjM2Q5YzM4N2Q0 ODllZTkwHhcNMjYwMTAxMDQxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDQ5OGRhYmIyZThiZDRiOWNmMDBiYjdkMTI2YTc2ZTQzNmZkMTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7r5I+hJLAm8I3XEXJOQ7u3qGG9e uhrm4Tu+R/hKNELgxrqmqrF1goEChzD+WZBSxmbfQohk15Kw7K8IowL+efJFsMgr xnOPpxkryjHAOWTht4GncaSb3w9hSuOkNErQiaIOPpQr9LYpcLmKSnex2AvVzlHO pkOn+RqayP1LVQQP2Kcnpa2syqn00KouozbA/+MhSYIpehVuMUSyu4FwrWc37cNd mXqHJnvL5TTrg+QMEJ9juG/PbY/CM5Yljt8NunLfqQLSy/mTQaBn59kgYRSngK49 M7Cmsoy5tO/UGJ7CFwWNYg7H5nZIVjhNnJlR1ZyJAHuo4Fab11gENOK5qQIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFLRJjauy6L1LnPALt9Emp25Db9EqMB8GA1UdIwQY MBaAFJ4C4GTJizIxw/IUihw9nDh9SJ7pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmdMZ1pNbUxNakhEOGhTS0hEMmNPSDFJbnVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi81ZDdiYzQtZTBjNS00YTQ4LTkwZTYt NzUyNTE2ODkwZDNkLzEvdEVtTnE3TG92VXVjOEF1MzBTYW5ia052MFNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi81ZDdiYzQtZTBjNS00YTQ4LTkwZTYtNzUyNTE2ODkwZDNk LzEvbmdMZ1pNbUxNakhEOGhTS0hEMmNPSDFJbnVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBADBj2MD BADBj3IwDAMEAsGPdAMEAMGPdjANBgkqhkiG9w0BAQsFAAOCAQEAEI4GN5KxU27V bKissVvvj+t49GTKdLHfuahHCIJZ00fZ4sUEfFUteQp3njks2uB1B7nkIlVPHL5h KgPpY06sJeObhXizcYU+V6xMDwhLM2meVx/4SBpPSVc+3x+T6bvY+regCzC201Hy +3QimaOoxRUMVWPldH74dqyCHtGW/c7FqvWgUieiceFbN+xn7Y+KTeJX28IU6cEi xNaRVQupypOLC7FFNFnLy+26wTg4kJolB9acy6tAanNbKpKyE/khRQlI3ExBPBHD 2YzjO0upYYVwz/Y4EmDZsKcRI1jIruyP1AeiSCXwhy6LKU2uRr3bWPLBaeY+aAOi yDkhjBSVsg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:41:19 2026 by rpki-client