This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/tJXMZewUy_qQorxapIfDeK0TRA4.roa File: tJXMZewUy_qQorxapIfDeK0TRA4.roa (raw, json) Hash identifier: 2jFBZw5YSsGd1/9a3dRJA3x3ClgECy8D4Vl48wSzo0Q= Subject key identifier: B4:95:CC:65:EC:14:CB:FA:90:A2:BC:5A:A4:87:C3:78:AD:13:44:0E Certificate issuer: /CN=e180ebbbca0f890de353891421a83dd5b653d940 Certificate serial: 019B76EB4F520806C33CF908B5A0251AEEDC Authority key identifier: E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/tJXMZewUy_qQorxapIfDeK0TRA4.roa Signing time: Thu 01 Jan 2026 00:18:11 +0000 ROA not before: Thu 01 Jan 2026 00:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214186 IP address blocks: 185.182.108.0/24 maxlen: 24 194.67.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:4f:52:08:06:c3:3c:f9:08:b5:a0:25:1a:ee:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e180ebbbca0f890de353891421a83dd5b653d940 Validity Not Before: Jan 1 00:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b495cc65ec14cbfa90a2bc5aa487c378ad13440e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2f:37:20:7f:bf:a7:77:8b:88:2a:82:ff:a3: a8:3c:0b:e8:60:27:02:64:28:18:4d:4f:4c:90:2e: 23:6c:7b:a4:43:99:23:a5:33:5c:45:e5:eb:ac:99: 62:d0:70:8d:ae:62:90:41:81:73:13:d1:dc:5b:8d: 99:67:44:0f:08:ef:06:77:a3:3e:9e:ab:cf:67:66: 57:8f:cb:82:77:cf:c3:fb:0b:cb:75:db:2b:fd:e9: eb:90:db:0a:17:33:d9:56:e0:fc:98:6b:14:08:49: 35:2f:2a:d0:fa:f3:64:d5:8b:3e:f2:07:95:c6:c8: b2:9c:50:fe:80:ce:e9:63:14:0d:ef:1e:be:27:8e: af:92:14:b4:9c:28:c6:e2:28:22:7a:c2:e5:a7:de: 13:b0:d7:9b:8e:be:76:1d:58:b3:5d:eb:d1:ba:3f: 15:9f:4d:b6:a6:ed:d6:cf:4d:37:84:c6:1d:e2:00: e2:48:db:14:ee:57:9e:c8:a1:90:86:cc:35:c4:7b: 04:73:90:a3:80:da:72:e0:14:be:4e:e9:9e:5b:63: 96:b5:cb:31:14:f4:62:9b:92:eb:ac:b2:9f:6b:44: b9:58:1b:43:56:e5:df:a7:8e:06:a8:58:e8:65:c1: 27:40:aa:51:7a:14:f7:22:4e:38:01:62:69:c1:f9: 94:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:95:CC:65:EC:14:CB:FA:90:A2:BC:5A:A4:87:C3:78:AD:13:44:0E X509v3 Authority Key Identifier: keyid:E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/tJXMZewUy_qQorxapIfDeK0TRA4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.182.108.0/24 194.67.95.0/24 Signature Algorithm: sha256WithRSAEncryption 59:f4:0c:57:4c:fe:67:44:23:22:0e:e4:7a:51:64:46:15:dd: 2b:25:c5:4e:39:1c:10:c2:bc:8a:62:9b:b7:8b:20:7b:42:70: 4c:8b:7c:37:71:eb:a1:0e:70:a3:f5:f1:e4:8d:12:3f:7f:c2: 24:c9:9e:d0:8e:f9:98:b8:92:22:ad:5b:ab:6e:6b:0d:b1:a6: 83:94:68:be:52:ba:74:9e:91:53:48:10:89:17:91:fd:1e:dc: 91:77:72:c9:9a:c4:1a:54:1f:14:34:09:05:8a:47:8f:37:ab: 66:5b:41:3d:b0:fa:2a:2a:4b:8e:f3:84:f0:13:79:64:cc:e9: 60:5f:d9:f7:8b:f8:77:ae:fa:e1:3e:47:e6:00:d3:ad:51:a6: 2a:83:26:8a:95:4d:d0:30:a5:db:71:36:e0:15:0f:ef:61:54: 42:35:79:6b:90:ca:bb:0a:1d:e0:6b:cf:21:d6:8a:43:0c:ac: a5:6c:44:49:15:ef:a8:44:bf:b9:e3:9e:fa:bd:76:7e:4d:f8: 47:01:97:b7:7e:90:b0:c6:07:6c:a3:4e:e6:51:95:43:75:0e: c8:08:eb:18:2f:65:d2:cb:0c:8c:7d:20:81:da:b1:8a:7b:2a: 34:33:69:9f:3a:09:b9:37:ee:61:c2:81:51:7b:c2:2e:be:2a: a4:62:78:d4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt2609SCAbDPPkItaAlGu7cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxODBlYmJiY2EwZjg5MGRlMzUzODkxNDIxYTgzZGQ1YjY1 M2Q5NDAwHhcNMjYwMTAxMDAxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDk1Y2M2NWVjMTRjYmZhOTBhMmJjNWFhNDg3YzM3OGFkMTM0NDBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwy83IH+/p3eLiCqC/6OoPAvoYCcC ZCgYTU9MkC4jbHukQ5kjpTNcReXrrJli0HCNrmKQQYFzE9HcW42ZZ0QPCO8Gd6M+ nqvPZ2ZXj8uCd8/D+wvLddsr/enrkNsKFzPZVuD8mGsUCEk1LyrQ+vNk1Ys+8geV xsiynFD+gM7pYxQN7x6+J46vkhS0nCjG4igiesLlp94TsNebjr52HVizXevRuj8V n022pu3Wz003hMYd4gDiSNsU7leeyKGQhsw1xHsEc5CjgNpy4BS+TumeW2OWtcsx FPRim5LrrLKfa0S5WBtDVuXfp44GqFjoZcEnQKpRehT3Ik44AWJpwfmUewIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLSVzGXsFMv6kKK8WqSHw3itE0QOMB8GA1UdIwQY MBaAFOGA67vKD4kN41OJFCGoPdW2U9lAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFlEcnU4b1BpUTNqVTRrVUlhZzkxYlpUMlVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9hMThjZjEtYTA4MC00OTQ1LThiMjEt MDU1NTY5NTljNDU1LzEvdEpYTVpld1V5X3FRb3J4YXBJZkRlSzBUUkE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9hMThjZjEtYTA4MC00OTQ1LThiMjEtMDU1NTY5NTljNDU1 LzEvNFlEcnU4b1BpUTNqVTRrVUlhZzkxYlpUMlVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAubZsAwQA wkNfMA0GCSqGSIb3DQEBCwUAA4IBAQBZ9AxXTP5nRCMiDuR6UWRGFd0rJcVOORwQ wryKYpu3iyB7QnBMi3w3ceuhDnCj9fHkjRI/f8IkyZ7QjvmYuJIirVurbmsNsaaD lGi+Urp0npFTSBCJF5H9HtyRd3LJmsQaVB8UNAkFikePN6tmW0E9sPoqKkuO84Tw E3lkzOlgX9n3i/h3rvrhPkfmANOtUaYqgyaKlU3QMKXbcTbgFQ/vYVRCNXlrkMq7 Ch3ga88h1opDDKylbERJFe+oRL+54576vXZ+TfhHAZe3fpCwxgdso07mUZVDdQ7I COsYL2XSywyMfSCB2rGKeyo0M2mfOgm5N+5hwoFRe8IuviqkYnjU -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:29 2026 by rpki-client