This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/tbK1AbVereS_NngI45L11SaPIkg.roa File: tbK1AbVereS_NngI45L11SaPIkg.roa (raw, json) Hash identifier: pGphgE8cOkuzyKQJOlm5N3l9aQFRIzUTSTIpMJ4LzH0= Subject key identifier: B5:B2:B5:01:B5:5E:AD:E4:BF:36:78:08:E3:92:F5:D5:26:8F:22:48 Certificate issuer: /CN=262341b433e1f8fcb796322d2fd926409396e7ad Certificate serial: 019B7758862BBF4A6A68645DD8DF8EBD92C9 Authority key identifier: 26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/tbK1AbVereS_NngI45L11SaPIkg.roa Signing time: Thu 01 Jan 2026 02:17:28 +0000 ROA not before: Thu 01 Jan 2026 02:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57030 IP address blocks: 45.12.36.0/22 maxlen: 24 176.62.200.0/21 maxlen: 21 185.66.0.0/22 maxlen: 22 185.177.120.0/22 maxlen: 22 195.42.150.0/24 maxlen: 24 195.42.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:86:2b:bf:4a:6a:68:64:5d:d8:df:8e:bd:92:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=262341b433e1f8fcb796322d2fd926409396e7ad Validity Not Before: Jan 1 02:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5b2b501b55eade4bf367808e392f5d5268f2248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a1:d9:a8:1e:36:6f:42:c2:97:75:ab:3d:9b: 29:06:4d:9f:f3:24:08:b4:c5:3f:cb:f4:37:ed:7d: 99:da:5e:32:7b:8d:c0:52:d1:dc:70:cd:99:cf:46: 95:b8:11:1b:8f:5a:f2:0b:a5:c0:aa:25:14:c9:e8: d6:0b:c2:a8:d7:f4:33:9b:19:e7:1d:5e:f7:3b:e7: aa:4e:23:fd:9f:aa:35:39:64:c7:75:f0:4a:3f:fe: b4:21:e3:7a:ff:27:28:d8:35:a4:24:b0:0b:c2:c5: 34:52:ce:e6:c5:b2:46:9d:07:a2:bd:c7:c3:8a:39: 03:68:77:d9:bb:44:78:4b:32:10:0e:73:55:41:d6: f4:af:90:68:57:e0:8b:00:d3:9a:21:ec:1b:00:2c: 22:fa:6f:d1:68:cb:10:98:d4:ff:fc:a6:5f:ee:0b: df:bd:c0:db:7d:a8:0d:cd:8b:40:0f:0d:bf:ca:d3: 74:66:bd:48:9d:d6:bd:ec:d3:32:cf:08:c1:05:9c: 8c:3d:65:21:2e:3e:df:56:ab:26:e7:c5:3b:45:05: c2:36:53:71:2e:d8:0b:d9:5b:35:c2:3c:31:62:2b: 43:e1:36:45:8e:1e:a6:7b:73:c1:30:4e:a0:e5:9b: 2b:54:08:52:36:96:9e:dc:f6:c0:69:20:59:a4:68: 36:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B2:B5:01:B5:5E:AD:E4:BF:36:78:08:E3:92:F5:D5:26:8F:22:48 X509v3 Authority Key Identifier: keyid:26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/tbK1AbVereS_NngI45L11SaPIkg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.12.36.0/22 176.62.200.0/21 185.66.0.0/22 185.177.120.0/22 195.42.150.0/23 Signature Algorithm: sha256WithRSAEncryption 3b:d3:18:a8:16:6b:f5:0b:f0:bc:d0:bc:55:54:40:9f:e3:26: 00:1c:67:e7:80:a8:9b:9e:c4:ef:58:94:c0:6b:5a:d4:78:14: 06:5b:97:74:84:f1:6d:fe:82:d3:a8:49:5e:da:8b:0e:64:f1: 37:a4:88:72:01:6b:73:3e:c2:08:4a:59:0f:66:f8:76:2b:c5: a7:47:0a:95:14:16:a2:f4:3a:15:19:d5:ee:43:c4:df:5a:62: 4e:a7:81:1f:37:ea:79:68:0d:ec:eb:5b:ff:b6:da:08:53:3a: 6b:63:d3:f6:e5:04:73:ef:d0:1f:52:ba:e1:00:9d:04:56:de: fb:ed:c4:a5:51:10:11:69:8b:5c:d0:ab:00:90:47:c3:d2:7c: c5:ad:40:d0:70:00:61:26:3c:41:df:01:a2:db:1a:d7:e6:d0: 4d:8e:44:2d:d3:80:3d:88:5a:a9:fe:07:46:1d:f5:6a:c6:39: 0a:6c:9b:41:ea:ab:29:ff:81:a8:60:e8:ff:79:50:66:b2:e1: ca:6e:3d:9c:69:98:ae:59:05:cc:01:76:bf:1e:2a:13:5e:e3: 89:f1:4c:7b:1a:82:9f:e3:33:b2:97:08:52:f4:b9:85:e7:0e: 6e:e1:95:79:18:a6:0f:4f:9b:d3:43:96:37:52:22:fc:cf:e0: 27:4e:1d:b9 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt3WIYrv0pqaGRd2N+OvZLJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2MjM0MWI0MzNlMWY4ZmNiNzk2MzIyZDJmZDkyNjQwOTM5 NmU3YWQwHhcNMjYwMTAxMDIxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNWIyYjUwMWI1NWVhZGU0YmYzNjc4MDhlMzkyZjVkNTI2OGYyMjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKHZqB42b0LCl3WrPZspBk2f8yQI tMU/y/Q37X2Z2l4ye43AUtHccM2Zz0aVuBEbj1ryC6XAqiUUyejWC8Ko1/Qzmxnn HV73O+eqTiP9n6o1OWTHdfBKP/60IeN6/yco2DWkJLALwsU0Us7mxbJGnQeivcfD ijkDaHfZu0R4SzIQDnNVQdb0r5BoV+CLANOaIewbACwi+m/RaMsQmNT//KZf7gvf vcDbfagNzYtADw2/ytN0Zr1Inda97NMyzwjBBZyMPWUhLj7fVqsm58U7RQXCNlNx LtgL2Vs1wjwxYitD4TZFjh6me3PBME6g5ZsrVAhSNpae3PbAaSBZpGg23wIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFLWytQG1Xq3kvzZ4COOS9dUmjyJIMB8GA1UdIwQY MBaAFCYjQbQz4fj8t5YyLS/ZJkCTluetMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmlOQnREUGgtUHkzbGpJdEw5a21RSk9XNTYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi81NjhlMjEtNTNhNC00ZTU1LTljNTct OTgyODJjODlmNTE2LzEvdGJLMUFiVmVyZVNfTm5nSTQ1TDExU2FQSWtnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi81NjhlMjEtNTNhNC00ZTU1LTljNTctOTgyODJjODlmNTE2 LzEvSmlOQnREUGgtUHkzbGpJdEw5a21RSk9XNTYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCLQwkAwQD sD7IAwQCuUIAAwQCubF4AwQBwyqWMA0GCSqGSIb3DQEBCwUAA4IBAQA70xioFmv1 C/C80LxVVECf4yYAHGfngKibnsTvWJTAa1rUeBQGW5d0hPFt/oLTqEle2osOZPE3 pIhyAWtzPsIISlkPZvh2K8WnRwqVFBai9DoVGdXuQ8TfWmJOp4EfN+p5aA3s61v/ ttoIUzprY9P25QRz79AfUrrhAJ0EVt777cSlURARaYtc0KsAkEfD0nzFrUDQcABh JjxB3wGi2xrX5tBNjkQt04A9iFqp/gdGHfVqxjkKbJtB6qsp/4GoYOj/eVBmsuHK bj2caZiuWQXMAXa/HioTXuOJ8Ux7GoKf4zOylwhS9LmF5w5u4ZV5GKYPT5vTQ5Y3 UiL8z+AnTh25 -----END CERTIFICATE-----Generated at Mon Jan 26 15:31:47 2026 by rpki-client