This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/TVT4_OBKA-2I4FrIkhh2iW24oPw.roa File: TVT4_OBKA-2I4FrIkhh2iW24oPw.roa (raw, json) Hash identifier: U1OVtJgMOPc/4XYbv8bLSVgA0GMg+CX+suR8Va/RqoY= Subject key identifier: 4D:54:F8:FC:E0:4A:03:ED:88:E0:5A:C8:92:18:76:89:6D:B8:A0:FC Certificate issuer: /CN=61323397d6e529dff06c7cf14d1760d6e706aa6f Certificate serial: 019B7CEE4DC8D5AB66CD525730E8B88F8147 Authority key identifier: 61:32:33:97:D6:E5:29:DF:F0:6C:7C:F1:4D:17:60:D6:E7:06:AA:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/TVT4_OBKA-2I4FrIkhh2iW24oPw.roa Signing time: Fri 02 Jan 2026 04:19:10 +0000 ROA not before: Fri 02 Jan 2026 04:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202663 IP address blocks: 89.35.135.0/24 maxlen: 24 171.22.240.0/24 maxlen: 24 2a0e:9400::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:4d:c8:d5:ab:66:cd:52:57:30:e8:b8:8f:81:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61323397d6e529dff06c7cf14d1760d6e706aa6f Validity Not Before: Jan 2 04:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d54f8fce04a03ed88e05ac8921876896db8a0fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5b:f3:10:45:3a:e0:79:13:fc:c3:08:cf:58: c7:75:9d:28:60:14:e1:ba:67:0c:76:1c:5a:5e:8c: 48:55:5b:b0:32:c0:3e:41:d4:d4:a3:93:bb:4a:f8: 91:8f:e0:f1:97:5e:7b:3a:a9:0f:d0:fd:e8:65:c0: 84:be:93:c1:98:ac:41:98:56:f4:2d:15:47:e1:04: 59:bf:37:7d:aa:45:99:d3:51:75:a0:3a:3c:7e:6e: 92:34:45:e0:4b:20:77:5b:ab:ef:09:5f:37:97:2e: 63:7e:dd:78:ff:6b:83:4a:8d:48:2e:e9:46:c4:d1: d3:73:75:17:58:61:e2:7d:5f:24:ce:5d:d7:23:6a: fe:96:6d:38:7b:a7:bd:48:d2:6a:5d:d2:bd:f9:5c: f7:32:df:c0:7c:88:b6:73:a0:f4:ea:7f:7e:77:58: b1:72:98:90:bc:aa:55:95:5f:cb:90:35:b8:f7:4b: 34:14:9e:d0:0a:70:08:f1:bd:80:ce:e5:d9:90:47: 3b:43:d8:60:42:ed:ba:34:b3:73:29:35:e4:2c:64: 7c:dc:d8:2e:cd:e1:d0:0d:54:45:00:04:ab:78:f8: aa:0e:76:73:4a:59:04:88:24:18:ec:91:01:79:81: 68:09:cd:89:d9:46:3f:d0:69:25:be:71:61:6c:dc: 13:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:54:F8:FC:E0:4A:03:ED:88:E0:5A:C8:92:18:76:89:6D:B8:A0:FC X509v3 Authority Key Identifier: keyid:61:32:33:97:D6:E5:29:DF:F0:6C:7C:F1:4D:17:60:D6:E7:06:AA:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/TVT4_OBKA-2I4FrIkhh2iW24oPw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.35.135.0/24 171.22.240.0/24 IPv6: 2a0e:9400::/29 Signature Algorithm: sha256WithRSAEncryption 01:6c:cc:55:36:d0:42:07:df:95:15:32:ad:3a:bb:4a:84:aa: 60:78:38:0e:6d:bd:9a:bd:60:ea:e5:2f:4c:53:b4:45:c7:b0: 7f:15:66:92:9e:96:ca:b5:b3:5e:44:7b:8b:b6:03:30:d2:cb: d9:ec:ab:60:df:cc:7b:ce:07:4b:c2:91:4e:d0:16:49:71:af: 1e:f4:6e:94:8d:2e:ab:de:14:80:3e:8c:ec:b1:8b:5c:d9:f9: 66:36:f9:8f:05:4f:3d:e1:cd:5a:5d:92:17:8e:7f:90:36:b1: d2:ef:2b:6d:7d:b8:9f:eb:ce:6c:db:b9:55:23:66:d4:56:41: 18:dd:fc:2f:93:b8:a3:ae:b1:b0:f6:ed:67:14:f7:8f:88:a0: 2f:b1:62:6f:93:ae:6f:90:fb:1b:fa:18:73:01:b7:00:a4:29: 60:d7:a8:97:ab:62:71:87:bd:62:af:8d:01:34:60:8f:08:53: 2b:f9:fa:ed:77:64:ba:ef:93:5a:46:a3:6e:a6:3f:c2:c5:f8: 23:8c:5f:3d:62:33:e5:6a:7e:32:b6:2e:37:a6:6f:a0:e4:73: 10:e5:b6:d9:f1:14:41:01:22:05:77:90:96:aa:9e:e1:e4:85: 91:51:0f:8c:2e:3d:77:36:b2:f6:91:ae:7e:05:83:7d:ae:85: 05:6c:2e:1c -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt87k3I1atmzVJXMOi4j4FHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxMzIzMzk3ZDZlNTI5ZGZmMDZjN2NmMTRkMTc2MGQ2ZTcw NmFhNmYwHhcNMjYwMTAyMDQxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDU0ZjhmY2UwNGEwM2VkODhlMDVhYzg5MjE4NzY4OTZkYjhhMGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1vzEEU64HkT/MMIz1jHdZ0oYBTh umcMdhxaXoxIVVuwMsA+QdTUo5O7SviRj+Dxl157OqkP0P3oZcCEvpPBmKxBmFb0 LRVH4QRZvzd9qkWZ01F1oDo8fm6SNEXgSyB3W6vvCV83ly5jft14/2uDSo1ILulG xNHTc3UXWGHifV8kzl3XI2r+lm04e6e9SNJqXdK9+Vz3Mt/AfIi2c6D06n9+d1ix cpiQvKpVlV/LkDW490s0FJ7QCnAI8b2AzuXZkEc7Q9hgQu26NLNzKTXkLGR83Ngu zeHQDVRFAASrePiqDnZzSlkEiCQY7JEBeYFoCc2J2UY/0GklvnFhbNwTfwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFE1U+PzgSgPtiOBayJIYdoltuKD8MB8GA1UdIwQY MBaAFGEyM5fW5Snf8Gx88U0XYNbnBqpvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVRJemw5YmxLZF93Ykh6eFRSZGcxdWNHcW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9iYTM5MWItY2I4OS00ZTIxLTk0NGEt ZWYzM2Q4NWE0YTg2LzEvVFZUNF9PQktBLTJJNEZySWtoaDJpVzI0b1B3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9iYTM5MWItY2I4OS00ZTIxLTk0NGEtZWYzM2Q4NWE0YTg2 LzEvWVRJemw5YmxLZF93Ykh6eFRSZGcxdWNHcW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAWSOHAwQA qxbwMA0EAgACMAcDBQMqDpQAMA0GCSqGSIb3DQEBCwUAA4IBAQABbMxVNtBCB9+V FTKtOrtKhKpgeDgObb2avWDq5S9MU7RFx7B/FWaSnpbKtbNeRHuLtgMw0svZ7Ktg 38x7zgdLwpFO0BZJca8e9G6UjS6r3hSAPozssYtc2flmNvmPBU894c1aXZIXjn+Q NrHS7yttfbif685s27lVI2bUVkEY3fwvk7ijrrGw9u1nFPePiKAvsWJvk65vkPsb +hhzAbcApClg16iXq2Jxh71ir40BNGCPCFMr+frtd2S675NaRqNupj/CxfgjjF89 YjPlan4yti43pm+g5HMQ5bbZ8RRBASIFd5CWqp7h5IWRUQ+MLj13NrL2ka5+BYN9 roUFbC4c -----END CERTIFICATE-----Generated at Mon Jan 12 13:29:08 2026 by rpki-client