This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/TVtbh1EANk8EpH4TcxXImCilqP0.roa File: TVtbh1EANk8EpH4TcxXImCilqP0.roa (raw, json) Hash identifier: 5hMvEtcOioS7prhLcCPmlP/Vf0m5SBNaV6YIJBfJFvk= Subject key identifier: 4D:5B:5B:87:51:00:36:4F:04:A4:7E:13:73:15:C8:98:28:A5:A8:FD Certificate issuer: /CN=5f7f70250082c3e056f3fe528bd77b06e20e407c Certificate serial: 019B2D0E494E00330A9DE49E9C1957B6CE9B Authority key identifier: 5F:7F:70:25:00:82:C3:E0:56:F3:FE:52:8B:D7:7B:06:E2:0E:40:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X39wJQCCw-BW8_5Si9d7BuIOQHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/TVtbh1EANk8EpH4TcxXImCilqP0.roa Signing time: Wed 17 Dec 2025 16:04:29 +0000 ROA not before: Wed 17 Dec 2025 16:04:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 397373 IP address blocks: 185.136.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.mft rsync://rpki.ripe.net/repository/DEFAULT/X39wJQCCw-BW8_5Si9d7BuIOQHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0e:49:4e:00:33:0a:9d:e4:9e:9c:19:57:b6:ce:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f7f70250082c3e056f3fe528bd77b06e20e407c Validity Not Before: Dec 17 16:04:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4d5b5b875100364f04a47e137315c89828a5a8fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6d:f2:40:10:67:65:40:f1:f4:bb:9e:97:0b: 7b:c5:48:86:63:7b:01:1e:a7:6a:25:5b:9d:82:64: d4:47:b8:5f:e6:71:ab:44:a7:df:8c:34:75:ee:e5: 1e:01:30:61:09:02:57:53:4e:49:e2:b3:42:25:80: 68:97:b5:33:00:d9:84:e4:db:37:65:c2:b0:a9:f9: 8b:12:09:13:3c:2f:42:7b:78:b5:4b:c3:b2:b6:73: 07:19:b2:11:8d:61:6b:f0:77:9b:da:9f:49:64:e8: ff:6a:5c:54:67:25:2f:9a:90:f6:49:e6:bd:a7:14: e0:f3:b5:47:32:b3:55:a7:78:dc:65:9c:e0:44:2b: c7:bf:0e:40:16:c0:f5:fe:b0:31:51:39:22:3a:47: 91:6e:f9:12:93:90:12:78:45:9f:85:65:ff:b3:d2: ec:1b:70:56:3f:68:d3:b2:6f:8b:a4:32:58:d7:d3: a3:22:df:56:5f:97:1c:a9:c4:c8:f1:0d:bc:f0:b4: 11:a8:6c:e0:70:1b:cd:72:27:63:a3:c0:79:a5:fd: c3:eb:0f:81:f0:4f:9a:7f:a5:49:5a:4d:96:23:6e: d3:ba:da:a5:0f:39:13:73:37:05:cf:01:db:5b:60: b7:fb:41:f4:b2:bd:7c:12:43:25:24:8d:43:52:bb: 74:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:5B:5B:87:51:00:36:4F:04:A4:7E:13:73:15:C8:98:28:A5:A8:FD X509v3 Authority Key Identifier: keyid:5F:7F:70:25:00:82:C3:E0:56:F3:FE:52:8B:D7:7B:06:E2:0E:40:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X39wJQCCw-BW8_5Si9d7BuIOQHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/TVtbh1EANk8EpH4TcxXImCilqP0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.136.15.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:c3:44:e6:c2:33:e0:20:e2:07:23:ed:07:a0:10:83:1f:8e: 1d:3e:ce:20:e9:94:25:24:51:ff:9e:16:63:fd:8b:6d:eb:93: 73:b9:d9:61:aa:6d:5c:43:6b:02:8e:84:e2:e8:d2:a6:30:fe: 67:8a:2b:6d:dc:63:b1:bc:23:e8:da:19:5c:3c:64:43:ff:42: 97:19:0c:77:f0:5e:42:f2:f3:39:8a:b4:d6:64:e2:f6:af:1c: 5d:15:f4:2c:14:e6:cd:d4:73:82:01:7e:bc:f5:24:b0:e2:28: b8:70:74:89:89:3d:1a:62:61:4d:a1:1a:97:be:95:01:68:da: 9c:b2:e1:c2:7a:0f:66:16:70:1f:f1:e7:68:48:48:d5:b9:07: 02:7e:7f:a0:eb:7c:63:6f:34:a0:06:30:17:02:0b:d4:ec:15: ce:f0:07:1f:f4:9e:f6:eb:e8:ff:bc:f8:fc:c8:1f:ba:1f:aa: 91:36:f7:cf:31:42:fa:b0:bd:54:d4:76:32:eb:2f:bf:91:8d: 48:9f:83:09:30:54:83:e2:52:fe:2b:89:ca:0d:a7:f6:09:3c: d6:8c:b1:6f:06:86:d5:b8:4e:de:23:2c:0b:c4:bc:10:6a:60: ee:9b:a3:52:ad:1b:c2:e8:a8:9d:ee:16:b2:d2:69:7e:3e:03: f7:bd:72:3f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZstDklOADMKneSenBlXts6bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmN2Y3MDI1MDA4MmMzZTA1NmYzZmU1MjhiZDc3YjA2ZTIw ZTQwN2MwHhcNMjUxMjE3MTYwNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDViNWI4NzUxMDAzNjRmMDRhNDdlMTM3MzE1Yzg5ODI4YTVhOGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtG3yQBBnZUDx9Luelwt7xUiGY3sB HqdqJVudgmTUR7hf5nGrRKffjDR17uUeATBhCQJXU05J4rNCJYBol7UzANmE5Ns3 ZcKwqfmLEgkTPC9Ce3i1S8OytnMHGbIRjWFr8Heb2p9JZOj/alxUZyUvmpD2Sea9 pxTg87VHMrNVp3jcZZzgRCvHvw5AFsD1/rAxUTkiOkeRbvkSk5ASeEWfhWX/s9Ls G3BWP2jTsm+LpDJY19OjIt9WX5ccqcTI8Q288LQRqGzgcBvNcidjo8B5pf3D6w+B 8E+af6VJWk2WI27TutqlDzkTczcFzwHbW2C3+0H0sr18EkMlJI1DUrt0KQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE1bW4dRADZPBKR+E3MVyJgopaj9MB8GA1UdIwQY MBaAFF9/cCUAgsPgVvP+UovXewbiDkB8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDM5d0pRQ0N3LUJXOF81U2k5ZDdCdUlPUUh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC80ZTk0MTQtYmM0ZC00ZjJjLWI5ZjEt MjNmMGMwNGQyYzE3LzEvVFZ0YmgxRUFOazhFcEg0VGN4WEltQ2lscVAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC80ZTk0MTQtYmM0ZC00ZjJjLWI5ZjEtMjNmMGMwNGQyYzE3 LzEvWDM5d0pRQ0N3LUJXOF81U2k5ZDdCdUlPUUh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYgPMA0G CSqGSIb3DQEBCwUAA4IBAQB+w0TmwjPgIOIHI+0HoBCDH44dPs4g6ZQlJFH/nhZj /Ytt65Nzudlhqm1cQ2sCjoTi6NKmMP5niitt3GOxvCPo2hlcPGRD/0KXGQx38F5C 8vM5irTWZOL2rxxdFfQsFObN1HOCAX689SSw4ii4cHSJiT0aYmFNoRqXvpUBaNqc suHCeg9mFnAf8edoSEjVuQcCfn+g63xjbzSgBjAXAgvU7BXO8Acf9J726+j/vPj8 yB+6H6qRNvfPMUL6sL1U1HYy6y+/kY1In4MJMFSD4lL+K4nKDaf2CTzWjLFvBobV uE7eIywLxLwQamDum6NSrRvC6Kid7hay0ml+PgP3vXI/ -----END CERTIFICATE-----Generated at Sat Dec 20 03:21:07 2025 by rpki-client