This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/tlqqKuREfvSDchQZG18OHn9THi0.roa File: tlqqKuREfvSDchQZG18OHn9THi0.roa (raw, json) Hash identifier: Wl7Ev0O/+N6l1ewgModoKbWom1OB+k9jR2molK76grA= Subject key identifier: B6:5A:AA:2A:E4:44:7E:F4:83:72:14:19:1B:5F:0E:1E:7F:53:1E:2D Certificate issuer: /CN=fa55d2877132aaadcdf54058acbf9e07eddb598c Certificate serial: 019B7B35CD13854A102A4761AD995C1B0A69 Authority key identifier: FA:55:D2:87:71:32:AA:AD:CD:F5:40:58:AC:BF:9E:07:ED:DB:59:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/tlqqKuREfvSDchQZG18OHn9THi0.roa Signing time: Thu 01 Jan 2026 20:18:01 +0000 ROA not before: Thu 01 Jan 2026 20:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25009 IP address blocks: 185.21.112.0/22 maxlen: 24 2a03:240::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:cd:13:85:4a:10:2a:47:61:ad:99:5c:1b:0a:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa55d2877132aaadcdf54058acbf9e07eddb598c Validity Not Before: Jan 1 20:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b65aaa2ae4447ef4837214191b5f0e1e7f531e2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d3:02:4a:e1:b2:89:9c:4a:4a:89:87:60:eb: b9:50:45:77:07:de:2b:bf:09:77:26:a2:5a:2d:cf: b2:97:07:c1:30:ad:ca:0d:70:71:12:53:91:35:36: a0:4c:13:20:f5:e1:de:eb:f3:11:9b:1e:60:35:34: 91:2f:1b:4e:98:29:ee:fa:83:72:22:1a:5a:99:90: b8:6e:0a:46:27:65:6f:d5:d0:49:cd:93:2a:84:7d: 7f:2b:81:4c:f3:a9:54:bd:fe:be:9d:27:2e:bd:ee: 9e:36:d6:7c:68:25:72:9c:cd:49:78:7c:04:fb:20: 83:b9:15:c5:e4:bd:a0:58:cb:69:a2:17:a1:54:b1: 19:11:57:ea:83:2e:bc:3c:b0:70:28:4c:d3:cf:4b: 85:c7:57:3e:e6:f7:74:19:d8:bf:74:5b:b4:16:89: 07:0c:20:83:56:c1:c8:92:0f:f7:c8:bb:80:3f:0d: 85:89:7f:27:27:79:76:6e:22:2c:c0:41:99:71:20: 87:7f:a7:1b:bb:3a:4c:c2:d5:70:d2:ab:d5:4c:a7: b3:7e:46:79:e0:19:9a:3f:2b:97:f2:25:3e:1e:15: 32:75:d4:ac:6e:70:54:f2:b1:f4:a6:85:72:ad:ee: ce:52:45:76:7d:9d:fa:45:55:d6:da:80:29:a2:b8: 1c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:5A:AA:2A:E4:44:7E:F4:83:72:14:19:1B:5F:0E:1E:7F:53:1E:2D X509v3 Authority Key Identifier: keyid:FA:55:D2:87:71:32:AA:AD:CD:F5:40:58:AC:BF:9E:07:ED:DB:59:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/tlqqKuREfvSDchQZG18OHn9THi0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.21.112.0/22 IPv6: 2a03:240::/32 Signature Algorithm: sha256WithRSAEncryption 99:f3:3d:55:6a:ce:76:5d:ab:e1:a3:e0:5d:4d:e5:ba:1d:6a: 5c:81:87:83:62:a6:30:45:c0:5d:d2:e4:98:94:17:b6:e3:de: 11:7d:18:d3:35:a6:ee:00:18:05:1f:fa:03:56:ec:41:22:f0: 47:75:0d:bb:f7:90:da:91:e8:2e:be:99:99:87:ac:f3:32:82: 23:76:86:a3:b5:b4:f6:fa:af:30:50:2a:b1:d0:c1:3c:77:8a: 2f:ab:73:f6:9d:0c:f3:1a:53:ad:90:ff:5a:77:f6:6a:9b:d0: 5e:d3:bd:83:7d:78:fa:38:a0:2f:f6:6f:b3:f5:06:8e:0b:ed: 96:27:42:c9:f5:e4:d7:03:2d:81:b1:cc:47:ea:66:3d:fd:c1: 8f:04:43:b3:27:a9:d4:2e:c5:9c:cd:6f:00:a8:b8:7d:6f:af: 23:08:a5:7e:ee:72:c7:b9:ed:b7:45:2b:0d:96:c7:7c:d1:63: 4d:50:d5:2d:11:c3:b9:86:01:26:de:90:30:ab:e3:2b:db:0e: 63:0a:8c:f6:cd:2b:89:95:d7:e3:28:89:2a:33:86:b5:aa:90: bb:92:27:3b:dc:22:35:fd:c2:16:be:32:32:ed:96:9b:ac:97: b5:9c:c3:39:95:53:75:1f:5c:37:a7:4f:ca:c2:4b:b3:3b:db: 0d:e5:d5:10 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt7Nc0ThUoQKkdhrZlcGwppMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNTVkMjg3NzEzMmFhYWRjZGY1NDA1OGFjYmY5ZTA3ZWRk YjU5OGMwHhcNMjYwMTAxMjAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjVhYWEyYWU0NDQ3ZWY0ODM3MjE0MTkxYjVmMGUxZTdmNTMxZTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptMCSuGyiZxKSomHYOu5UEV3B94r vwl3JqJaLc+ylwfBMK3KDXBxElORNTagTBMg9eHe6/MRmx5gNTSRLxtOmCnu+oNy IhpamZC4bgpGJ2Vv1dBJzZMqhH1/K4FM86lUvf6+nScuve6eNtZ8aCVynM1JeHwE +yCDuRXF5L2gWMtpohehVLEZEVfqgy68PLBwKEzTz0uFx1c+5vd0Gdi/dFu0FokH DCCDVsHIkg/3yLuAPw2FiX8nJ3l2biIswEGZcSCHf6cbuzpMwtVw0qvVTKezfkZ5 4BmaPyuX8iU+HhUyddSsbnBU8rH0poVyre7OUkV2fZ36RVXW2oAporgc1wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFLZaqirkRH70g3IUGRtfDh5/Ux4tMB8GA1UdIwQY MBaAFPpV0odxMqqtzfVAWKy/ngft21mMMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1sWFNoM0V5cXEzTjlVQllyTC1lQi0zYldZdy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDIvOTJkMjA4LWEyMmEtNDIxYy04YzVi LWVhZjlkYTRhZGVmNi8xL3RscXFLdVJFZnZTRGNoUVpHMThPSG45VEhpMC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMDIvOTJkMjA4LWEyMmEtNDIxYy04YzViLWVhZjlkYTRhZGVm Ni8xLzEtbFhTaDNFeXFxM045VUJZckwtZUItM2JXWXcuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAK5FXAw DQQCAAIwBwMFACoDAkAwDQYJKoZIhvcNAQELBQADggEBAJnzPVVqznZdq+Gj4F1N 5bodalyBh4NipjBFwF3S5JiUF7bj3hF9GNM1pu4AGAUf+gNW7EEi8Ed1Dbv3kNqR 6C6+mZmHrPMygiN2hqO1tPb6rzBQKrHQwTx3ii+rc/adDPMaU62Q/1p39mqb0F7T vYN9ePo4oC/2b7P1Bo4L7ZYnQsn15NcDLYGxzEfqZj39wY8EQ7MnqdQuxZzNbwCo uH1vryMIpX7ucse57bdFKw2Wx3zRY01Q1S0Rw7mGASbekDCr4yvbDmMKjPbNK4mV 1+MoiSozhrWqkLuSJzvcIjX9wha+MjLtlpusl7WcwzmVU3UfXDenT8rCS7M72w3l 1RA= -----END CERTIFICATE-----Generated at Tue Feb 10 02:54:50 2026 by rpki-client