This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/TkVIENg5yxh_iBn69iwP-Gzs7M0.roa File: TkVIENg5yxh_iBn69iwP-Gzs7M0.roa (raw, json) Hash identifier: XN4b40QKJDQSEm8B3f99MTAbjS4H9rL0ddzhBtlCaKw= Subject key identifier: 4E:45:48:10:D8:39:CB:18:7F:88:19:FA:F6:2C:0F:F8:6C:EC:EC:CD Certificate issuer: /CN=d3c6178fb034905130af0ce1cd275154f2b59b78 Certificate serial: 019B7A5AA56C17F7F2806183F6676A9A6FC6 Authority key identifier: D3:C6:17:8F:B0:34:90:51:30:AF:0C:E1:CD:27:51:54:F2:B5:9B:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/TkVIENg5yxh_iBn69iwP-Gzs7M0.roa Signing time: Thu 01 Jan 2026 16:18:39 +0000 ROA not before: Thu 01 Jan 2026 16:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205166 IP address blocks: 185.228.28.0/22 maxlen: 22 185.228.29.0/24 maxlen: 24 185.228.30.0/24 maxlen: 24 185.228.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.crl rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 01:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:a5:6c:17:f7:f2:80:61:83:f6:67:6a:9a:6f:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3c6178fb034905130af0ce1cd275154f2b59b78 Validity Not Before: Jan 1 16:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e454810d839cb187f8819faf62c0ff86cececcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0d:75:f1:58:7d:28:4a:a2:85:34:58:2c:d3: cf:be:64:a9:65:c4:e8:8d:b4:e4:24:3c:18:dc:2b: 99:15:7f:5b:c5:b1:b8:df:00:df:8c:47:52:fb:4b: 71:ab:e8:9b:cf:a9:4b:67:59:c1:2e:b7:49:5b:f6: 38:2f:98:75:db:fa:b8:16:7a:51:fd:7a:da:9e:09: db:82:6d:d6:19:03:dd:c2:d5:46:64:b7:8a:8d:09: b6:81:17:22:65:92:ee:77:eb:99:ce:d2:71:a3:3a: 2e:0d:c1:4d:62:dd:53:05:91:aa:29:ff:a8:47:29: c3:75:0f:a0:af:c3:c2:74:44:95:60:67:69:fd:f4: 5b:27:d1:bf:13:da:9b:d3:1b:d6:b9:f9:04:f3:f6: af:c3:6b:46:a3:a0:18:6c:42:1e:92:c3:d9:9a:28: a0:8e:35:36:b7:92:bc:e3:de:17:0c:2d:4a:35:90: 00:c6:65:d8:d2:ad:f4:c5:eb:d0:4e:2d:7f:47:80: 55:3a:80:31:a2:53:0b:fd:fb:1a:97:dd:1b:d9:e7: 77:f4:4d:32:92:4a:44:c7:5f:9d:6a:bd:f0:63:00: 52:00:fd:19:64:02:f5:a0:6f:d5:24:53:99:ce:f9: 22:3c:ba:53:f1:ae:34:3d:71:fe:c5:17:1e:91:c8: 61:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:45:48:10:D8:39:CB:18:7F:88:19:FA:F6:2C:0F:F8:6C:EC:EC:CD X509v3 Authority Key Identifier: keyid:D3:C6:17:8F:B0:34:90:51:30:AF:0C:E1:CD:27:51:54:F2:B5:9B:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/TkVIENg5yxh_iBn69iwP-Gzs7M0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.228.28.0/22 Signature Algorithm: sha256WithRSAEncryption 82:81:58:ab:a3:95:76:46:e0:1e:67:a5:7f:5a:53:8f:32:3c: 6a:b1:1b:f8:77:7a:f2:5d:9e:f4:b5:62:6f:1c:ac:a8:66:f9: 5d:0b:e1:49:3b:6f:19:e1:52:7f:ca:22:d3:99:c2:2d:69:db: ec:a8:45:83:06:a3:e8:06:79:e2:4e:8f:d7:04:a4:96:ae:9d: 35:55:37:8f:4a:4f:b7:7e:8e:31:5b:9b:54:5e:1a:c6:c8:12: 83:ab:5b:28:45:9b:dd:a1:a7:74:fb:6c:9c:f6:7b:b8:ce:5b: 9d:2e:1d:01:d4:c9:3f:a3:19:e8:82:a1:77:90:76:9d:9c:5d: bd:9b:fa:7d:ad:1b:29:37:81:04:b4:be:03:26:95:17:da:8b: 78:ad:22:b2:82:7c:40:0a:fd:ee:c5:dd:c7:04:66:81:1f:03: 28:bc:7c:9c:f8:81:95:89:20:68:b8:e5:f3:db:c7:af:64:68: a3:59:00:f7:97:ce:84:9f:e7:d8:0c:ee:32:8a:16:aa:1c:d4: 55:67:84:9b:b2:12:f0:e5:a2:51:a3:e6:ec:19:8e:a8:eb:ec: 61:4a:50:8b:79:2d:cf:34:75:2b:0b:2d:e6:f8:b2:ba:18:35: cb:f0:89:94:cc:86:a3:9d:0e:c4:09:ae:eb:d3:a4:1c:ab:c4: 72:7a:08:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WqVsF/fygGGD9mdqmm/GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYzYxNzhmYjAzNDkwNTEzMGFmMGNlMWNkMjc1MTU0ZjJi NTliNzgwHhcNMjYwMTAxMTYxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTQ1NDgxMGQ4MzljYjE4N2Y4ODE5ZmFmNjJjMGZmODZjZWNlY2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQ118Vh9KEqihTRYLNPPvmSpZcTo jbTkJDwY3CuZFX9bxbG43wDfjEdS+0txq+ibz6lLZ1nBLrdJW/Y4L5h12/q4FnpR /Xrangnbgm3WGQPdwtVGZLeKjQm2gRciZZLud+uZztJxozouDcFNYt1TBZGqKf+o RynDdQ+gr8PCdESVYGdp/fRbJ9G/E9qb0xvWufkE8/avw2tGo6AYbEIeksPZmiig jjU2t5K8494XDC1KNZAAxmXY0q30xevQTi1/R4BVOoAxolML/fsal90b2ed39E0y kkpEx1+dar3wYwBSAP0ZZAL1oG/VJFOZzvkiPLpT8a40PXH+xRcekchhPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE5FSBDYOcsYf4gZ+vYsD/hs7OzNMB8GA1UdIwQY MBaAFNPGF4+wNJBRMK8M4c0nUVTytZt4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDhZWGo3QTBrRkV3cnd6aHpTZFJWUEsxbTNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83OGZkZTktNmRmMC00YWUyLTliMzct YTdjNGIyZjZlMjc2LzEvVGtWSUVOZzV5eGhfaUJuNjlpd1AtR3pzN00wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83OGZkZTktNmRmMC00YWUyLTliMzctYTdjNGIyZjZlMjc2 LzEvMDhZWGo3QTBrRkV3cnd6aHpTZFJWUEsxbTNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCueQcMA0G CSqGSIb3DQEBCwUAA4IBAQCCgViro5V2RuAeZ6V/WlOPMjxqsRv4d3ryXZ70tWJv HKyoZvldC+FJO28Z4VJ/yiLTmcItadvsqEWDBqPoBnniTo/XBKSWrp01VTePSk+3 fo4xW5tUXhrGyBKDq1soRZvdoad0+2yc9nu4zludLh0B1Mk/oxnogqF3kHadnF29 m/p9rRspN4EEtL4DJpUX2ot4rSKygnxACv3uxd3HBGaBHwMovHyc+IGViSBouOXz 28evZGijWQD3l86En+fYDO4yihaqHNRVZ4SbshLw5aJRo+bsGY6o6+xhSlCLeS3P NHUrCy3m+LK6GDXL8ImUzIajnQ7ECa7r06Qcq8RyegiR -----END CERTIFICATE-----Generated at Fri Jan 2 09:50:04 2026 by rpki-client