This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TK-8H2Knqm7tvXkuW3Se8EdHP6o.roa File: TK-8H2Knqm7tvXkuW3Se8EdHP6o.roa (raw, json) Hash identifier: bcguw208m1bQ9QlMEqNuftJNe4Bh9omDLtWcVKbWlSs= Subject key identifier: 4C:AF:BC:1F:62:A7:AA:6E:ED:BD:79:2E:5B:74:9E:F0:47:47:3F:AA Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B270C3722D8470171164025C9A5A358F1 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TK-8H2Knqm7tvXkuW3Se8EdHP6o.roa Signing time: Tue 16 Dec 2025 12:04:30 +0000 ROA not before: Tue 16 Dec 2025 12:04:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 397081 IP address blocks: 194.113.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:0c:37:22:d8:47:01:71:16:40:25:c9:a5:a3:58:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Dec 16 12:04:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4cafbc1f62a7aa6eedbd792e5b749ef047473faa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ab:f8:2c:b6:df:bd:1c:b7:b2:47:3a:dd:ab: ce:a0:89:06:45:2f:35:65:e0:d3:2b:40:9d:e7:40: f1:a8:d5:de:f7:f2:26:c4:55:20:b5:78:f0:ce:79: e3:25:91:9c:47:e7:ac:98:fb:82:b6:2e:45:17:c2: f9:bf:16:01:c9:31:38:45:77:6b:1e:a7:f0:1e:27: c7:92:06:65:66:2a:e5:40:47:fb:10:82:8f:36:24: 2c:c8:62:15:19:e3:35:a9:7d:0a:8b:e9:d2:de:45: b9:31:18:55:61:d9:6f:14:e8:ac:00:7c:a6:82:f4: f9:7e:3a:b3:7b:1b:77:4f:87:99:44:0c:32:55:91: 6f:8e:8f:76:3a:2f:64:31:4e:aa:e5:c2:5a:8d:bc: 0b:b5:78:e5:b6:ca:f6:b3:e4:2b:fc:fe:a9:76:5e: 15:5e:39:21:63:49:aa:a6:f2:30:0b:97:ce:34:c6: d6:02:93:ef:33:59:69:01:33:9e:cc:94:4b:a7:85: 16:4e:4b:a4:66:df:e2:eb:3d:6c:9d:69:a7:78:7f: a2:e8:bd:9f:0c:56:fc:e2:83:ad:7f:c2:67:71:69: 56:e9:98:e1:fb:a0:06:20:69:fa:c0:f3:6c:ce:74: 34:b5:9a:62:ed:e7:e7:96:4e:e5:90:25:0e:52:5c: f2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:AF:BC:1F:62:A7:AA:6E:ED:BD:79:2E:5B:74:9E:F0:47:47:3F:AA X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TK-8H2Knqm7tvXkuW3Se8EdHP6o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.113.39.0/24 Signature Algorithm: sha256WithRSAEncryption 43:44:9e:6e:48:83:01:a2:3c:19:89:4f:d6:85:dc:7e:e4:56: 4e:4d:de:b8:f6:08:f5:b0:8f:38:ca:ef:c6:c1:7e:05:84:62: 97:f2:be:f3:5d:cb:14:2e:c6:97:82:51:0c:9c:03:12:7c:70: 65:00:b3:b4:ff:5f:40:16:ba:f3:bd:ea:ec:55:64:9b:46:6b: 43:ff:f2:8a:86:69:2c:e0:04:0f:d0:eb:66:dc:c6:25:11:84: 98:cf:58:58:71:2b:4e:59:8f:36:81:23:a7:f3:22:73:f9:11: a8:f8:cd:6e:f1:2c:cf:14:e4:b4:cb:26:e5:20:ac:b5:c0:28: e3:ed:be:1a:ed:1f:45:de:8f:d7:8f:93:03:55:d6:b1:3b:1c: 63:57:22:47:e1:0e:a8:1c:b2:e3:96:98:af:db:ab:0e:80:2f: 40:44:d6:d7:04:bb:d8:f4:43:01:89:86:9a:59:81:53:02:18: 77:a1:b8:5f:17:9b:0a:55:55:27:32:32:e9:c6:4f:05:a4:9a: c3:75:ba:58:3a:bc:b7:4e:6e:c0:fd:33:e0:b6:cf:3c:07:4a: e9:de:a7:71:c6:fc:9a:b0:3b:80:8d:a8:2e:c7:a9:6a:20:d6: 69:52:43:af:c1:79:33:84:1f:20:4d:f6:85:55:87:9c:89:3d: c2:2c:3f:9a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsnDDci2EcBcRZAJcmlo1jxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjUxMjE2MTIwNDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Y2FmYmMxZjYyYTdhYTZlZWRiZDc5MmU1Yjc0OWVmMDQ3NDczZmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qv4LLbfvRy3skc63avOoIkGRS81 ZeDTK0Cd50DxqNXe9/ImxFUgtXjwznnjJZGcR+esmPuCti5FF8L5vxYByTE4RXdr HqfwHifHkgZlZirlQEf7EIKPNiQsyGIVGeM1qX0Ki+nS3kW5MRhVYdlvFOisAHym gvT5fjqzext3T4eZRAwyVZFvjo92Oi9kMU6q5cJajbwLtXjltsr2s+Qr/P6pdl4V XjkhY0mqpvIwC5fONMbWApPvM1lpATOezJRLp4UWTkukZt/i6z1snWmneH+i6L2f DFb84oOtf8JncWlW6Zjh+6AGIGn6wPNsznQ0tZpi7efnlk7lkCUOUlzyTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEyvvB9ip6pu7b15Llt0nvBHRz+qMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvVEstOEgyS25xbTd0dlhrdVczU2U4RWRIUDZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwnEnMA0G CSqGSIb3DQEBCwUAA4IBAQBDRJ5uSIMBojwZiU/Whdx+5FZOTd649gj1sI84yu/G wX4FhGKX8r7zXcsULsaXglEMnAMSfHBlALO0/19AFrrzversVWSbRmtD//KKhmks 4AQP0Otm3MYlEYSYz1hYcStOWY82gSOn8yJz+RGo+M1u8SzPFOS0yyblIKy1wCjj 7b4a7R9F3o/Xj5MDVdaxOxxjVyJH4Q6oHLLjlpiv26sOgC9ARNbXBLvY9EMBiYaa WYFTAhh3obhfF5sKVVUnMjLpxk8FpJrDdbpYOry3Tm7A/TPgts88B0rp3qdxxvya sDuAjagux6lqINZpUkOvwXkzhB8gTfaFVYeciT3CLD+a -----END CERTIFICATE-----Generated at Sat Dec 20 05:59:50 2025 by rpki-client