This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/Tv-1lu7GVvYKCCNJrjspKQqz-UY.roa File: Tv-1lu7GVvYKCCNJrjspKQqz-UY.roa (raw, json) Hash identifier: 9l4nrTM55YoKW+9z7XZNyjc96a4hC8pAvLejRN5e7BI= Subject key identifier: 4E:FF:B5:96:EE:C6:56:F6:0A:08:23:49:AE:3B:29:29:0A:B3:F9:46 Certificate issuer: /CN=540b63d19d86ea345c9b5f169300c3a29d4c31c4 Certificate serial: 019B797DF3D15E6F689618629B51E29BC0D5 Authority key identifier: 54:0B:63:D1:9D:86:EA:34:5C:9B:5F:16:93:00:C3:A2:9D:4C:31:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/Tv-1lu7GVvYKCCNJrjspKQqz-UY.roa Signing time: Thu 01 Jan 2026 12:17:36 +0000 ROA not before: Thu 01 Jan 2026 12:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8680 IP address blocks: 37.18.136.0/21 maxlen: 24 37.18.136.0/23 maxlen: 23 37.18.138.0/23 maxlen: 23 37.18.138.0/24 maxlen: 24 37.18.140.0/23 maxlen: 23 46.31.200.0/21 maxlen: 24 46.31.202.0/23 maxlen: 23 46.31.204.0/23 maxlen: 23 46.31.206.0/24 maxlen: 24 46.31.207.0/24 maxlen: 24 185.48.76.0/22 maxlen: 24 185.48.78.0/24 maxlen: 24 2a04:b240::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:f3:d1:5e:6f:68:96:18:62:9b:51:e2:9b:c0:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=540b63d19d86ea345c9b5f169300c3a29d4c31c4 Validity Not Before: Jan 1 12:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4effb596eec656f60a082349ae3b29290ab3f946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:73:b2:0d:93:85:28:6e:fb:78:2c:6e:ec:80: 2b:f7:11:27:64:c1:9a:89:6b:8c:90:31:5e:ba:ab: c5:42:97:a3:53:a6:be:d6:c0:04:c0:40:c8:1c:c3: 89:72:a8:52:7f:b2:93:9e:b9:61:d3:d0:ad:f6:6c: 2a:3f:61:5e:ff:83:de:71:d8:f3:d1:40:e5:ea:56: 62:5a:bc:24:8a:59:2f:01:b0:a8:d2:63:fd:47:87: 32:b5:b0:31:24:dd:75:f2:6c:45:06:92:19:09:80: b3:e6:a7:77:23:2d:71:e6:fd:9c:84:a6:5b:8a:52: d3:7f:af:c4:6c:51:7b:20:79:a4:7c:5c:52:c4:ef: f2:49:59:43:cb:14:e0:1f:41:92:f1:e6:8f:bc:53: 32:50:e8:96:e5:26:ef:32:45:2f:9c:66:88:7e:f5: e9:7b:8f:3c:7d:aa:a1:cb:a7:6f:87:dd:2d:80:07: e2:89:7e:be:c5:43:1d:f6:43:ac:f8:ff:23:eb:14: 8a:d8:92:c2:0e:87:a5:90:21:cd:1e:93:2a:38:da: 1e:ad:33:e4:8b:32:cf:f0:07:c1:7c:ce:ed:1d:0d: 02:a4:38:89:77:1c:3c:06:04:80:ec:1a:93:74:b2: 14:3a:4a:2a:12:0b:6e:2c:2f:0a:5f:ee:3c:a8:0d: fa:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:FF:B5:96:EE:C6:56:F6:0A:08:23:49:AE:3B:29:29:0A:B3:F9:46 X509v3 Authority Key Identifier: keyid:54:0B:63:D1:9D:86:EA:34:5C:9B:5F:16:93:00:C3:A2:9D:4C:31:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/Tv-1lu7GVvYKCCNJrjspKQqz-UY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.18.136.0/21 46.31.200.0/21 185.48.76.0/22 IPv6: 2a04:b240::/29 Signature Algorithm: sha256WithRSAEncryption 56:85:fa:cb:1e:83:80:bd:3a:5b:ec:2b:af:cf:91:09:49:9e: eb:64:a1:b8:cc:25:b8:c7:aa:47:a3:07:3e:3b:e4:6a:5d:22: 46:e1:b9:58:51:e1:34:a0:9a:d8:ed:4e:48:69:f5:4d:1e:c6: 3f:3a:25:4f:26:57:3a:86:ac:f5:ba:c4:ef:31:30:59:73:ac: 47:28:31:35:07:45:b1:0c:34:45:65:89:00:43:cc:44:b2:ec: f6:3b:0f:0b:5d:0e:30:c5:d8:28:af:22:b6:f5:ee:d4:ed:54: 2b:5a:ba:10:c8:1c:9c:ec:06:38:cb:0e:3d:fb:fe:db:45:59: 30:ac:52:c1:2b:2d:45:9a:fe:5e:e8:be:0c:af:10:86:8e:bc: 8f:d4:f5:4e:2c:6c:76:e2:a2:1d:cc:c7:bc:49:25:ac:22:0f: 0b:d8:f2:cd:70:04:1e:a7:b9:ba:74:33:a1:a7:ea:6e:98:bf: c7:c3:30:93:1d:e7:99:ca:6e:77:24:bd:a8:6d:f0:54:8c:e9: 03:89:75:cf:24:02:3a:bb:cb:63:d0:53:52:eb:31:6a:57:08: 8a:1f:82:81:46:06:e7:48:47:62:6d:2e:00:cd:3a:0c:34:5d: 5f:55:3d:c4:2d:83:12:5e:da:77:8c:51:32:24:c9:24:14:8c: a7:f4:6d:75 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt5ffPRXm9olhhim1Him8DVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MGI2M2QxOWQ4NmVhMzQ1YzliNWYxNjkzMDBjM2EyOWQ0 YzMxYzQwHhcNMjYwMTAxMTIxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZWZmYjU5NmVlYzY1NmY2MGEwODIzNDlhZTNiMjkyOTBhYjNmOTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnOyDZOFKG77eCxu7IAr9xEnZMGa iWuMkDFeuqvFQpejU6a+1sAEwEDIHMOJcqhSf7KTnrlh09Ct9mwqP2Fe/4Pecdjz 0UDl6lZiWrwkilkvAbCo0mP9R4cytbAxJN118mxFBpIZCYCz5qd3Iy1x5v2chKZb ilLTf6/EbFF7IHmkfFxSxO/ySVlDyxTgH0GS8eaPvFMyUOiW5SbvMkUvnGaIfvXp e488faqhy6dvh90tgAfiiX6+xUMd9kOs+P8j6xSK2JLCDoelkCHNHpMqONoerTPk izLP8AfBfM7tHQ0CpDiJdxw8BgSA7BqTdLIUOkoqEgtuLC8KX+48qA36vwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFE7/tZbuxlb2CggjSa47KSkKs/lGMB8GA1UdIwQY MBaAFFQLY9Gdhuo0XJtfFpMAw6KdTDHEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkF0ajBaMkc2alJjbTE4V2t3RERvcDFNTWNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9kOTg0NzItZjBiNy00ZGYzLTkyNWIt MDAwNGIyNzQ2MzBiLzEvVHYtMWx1N0dWdllLQ0NOSnJqc3BLUXF6LVVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9kOTg0NzItZjBiNy00ZGYzLTkyNWItMDAwNGIyNzQ2MzBi LzEvVkF0ajBaMkc2alJjbTE4V2t3RERvcDFNTWNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDJRKIAwQD Lh/IAwQCuTBMMA0EAgACMAcDBQMqBLJAMA0GCSqGSIb3DQEBCwUAA4IBAQBWhfrL HoOAvTpb7Cuvz5EJSZ7rZKG4zCW4x6pHowc+O+RqXSJG4blYUeE0oJrY7U5IafVN HsY/OiVPJlc6hqz1usTvMTBZc6xHKDE1B0WxDDRFZYkAQ8xEsuz2Ow8LXQ4wxdgo ryK29e7U7VQrWroQyByc7AY4yw49+/7bRVkwrFLBKy1Fmv5e6L4MrxCGjryP1PVO LGx24qIdzMe8SSWsIg8L2PLNcAQep7m6dDOhp+pumL/HwzCTHeeZym53JL2obfBU jOkDiXXPJAI6u8tj0FNS6zFqVwiKH4KBRgbnSEdibS4AzToMNF1fVT3ELYMSXtp3 jFEyJMkkFIyn9G11 -----END CERTIFICATE-----Generated at Mon Jan 26 09:25:40 2026 by rpki-client