This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/TQAaFv5ALTHh63epl7LLu1DH9nc.roa File: TQAaFv5ALTHh63epl7LLu1DH9nc.roa (raw, json) Hash identifier: hUGYLBMhX2Ty5hzrbfSfblaqdRUKpDToGmssIdKl46w= Subject key identifier: 4D:00:1A:16:FE:40:2D:31:E1:EB:77:A9:97:B2:CB:BB:50:C7:F6:77 Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d Certificate serial: 019B7F8443DD08C4454DF7AF8974D954ECA2 Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/TQAaFv5ALTHh63epl7LLu1DH9nc.roa Signing time: Fri 02 Jan 2026 16:22:13 +0000 ROA not before: Fri 02 Jan 2026 16:22:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8100 IP address blocks: 45.141.60.0/24 maxlen: 24 185.227.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:24:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:43:dd:08:c4:45:4d:f7:af:89:74:d9:54:ec:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d Validity Not Before: Jan 2 16:22:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d001a16fe402d31e1eb77a997b2cbbb50c7f677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:78:14:e8:5b:96:ff:75:8d:a2:b1:72:b8:de: a5:be:f1:d9:b9:75:1e:bb:83:d1:8d:af:44:0e:4a: 52:83:7f:dd:4c:e6:d8:43:dc:b5:3e:ed:72:34:71: ba:72:0d:1d:11:79:6c:fe:e1:b0:c9:c5:2d:b7:f6: 69:00:2c:7e:b1:f7:dd:54:00:fc:36:d0:a0:43:6e: 8d:53:26:8b:c1:c5:8e:66:38:99:8f:c0:03:c8:2b: a7:b9:17:49:41:3f:c8:df:8f:8d:37:0f:58:17:bf: 58:65:36:88:13:20:8c:0b:fb:df:f1:e9:2b:d5:cb: a5:c8:0e:28:a2:46:d6:8d:d3:2f:22:f1:02:83:b2: 27:05:a0:2e:7f:33:f2:08:47:c0:57:d9:eb:5c:63: 46:5b:03:a9:2d:73:34:ed:18:0d:f1:ca:4c:e1:d2: 51:87:5f:7f:ac:11:36:a4:fa:9b:61:ee:bd:94:af: ad:d7:07:c1:20:83:36:64:b8:74:40:37:bb:93:2c: a4:b1:8b:ce:2d:d0:b8:b9:b6:8b:e1:88:ad:0f:e3: 71:72:fb:24:fa:c8:6a:cc:db:56:29:83:44:89:47: a1:f4:49:ca:89:2b:00:f4:c7:f6:8f:7d:20:92:47: 23:d7:27:e0:4e:e4:80:c4:6c:de:5e:a2:e5:90:0e: 9b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:00:1A:16:FE:40:2D:31:E1:EB:77:A9:97:B2:CB:BB:50:C7:F6:77 X509v3 Authority Key Identifier: keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/TQAaFv5ALTHh63epl7LLu1DH9nc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.141.60.0/24 185.227.83.0/24 Signature Algorithm: sha256WithRSAEncryption a1:62:c6:eb:da:67:20:2b:f9:8e:60:c6:09:5e:0e:62:e6:f7: 69:b0:fe:74:95:7b:c0:17:f7:5f:62:93:5b:32:68:51:56:06: 3d:5c:f2:af:4a:0a:9f:bd:4b:ae:1b:c2:81:bf:ed:f0:5b:de: a6:6a:83:e6:43:0e:50:20:37:72:51:a1:84:de:a7:25:0d:0b: 2e:ee:eb:5e:84:28:8d:1e:51:27:7a:01:66:7f:87:8c:b4:6c: f3:08:d9:48:a5:9e:1b:af:48:b5:cb:20:4c:2f:51:33:7d:8a: 43:a0:27:f7:49:76:c9:bb:ad:05:30:82:37:fc:2a:fa:b9:1d: ba:9c:9b:4f:61:a0:ce:5e:b1:1f:88:90:94:bc:72:ad:5c:41: 31:09:ed:77:1c:16:d4:58:ae:fa:a2:2f:af:a7:16:78:0e:46: 05:e9:c7:6b:20:bb:29:1a:fb:29:46:44:4b:ed:3c:66:e5:f5: 60:dc:b2:09:f6:a9:12:ee:34:97:33:fa:77:7c:a6:37:a9:ce: b5:c6:64:cd:51:6e:ad:54:99:0c:c2:ca:4a:1f:8e:17:56:a3: 2a:47:95:53:33:34:77:ac:94:8c:1f:3b:e6:ec:57:9a:6d:01: db:d7:f1:27:b6:24:23:f6:9d:93:75:77:11:f4:4c:47:9c:8d: 57:fd:77:bc -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hEPdCMRFTfeviXTZVOyiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw MTRiOGQwHhcNMjYwMTAyMTYyMjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDAwMWExNmZlNDAyZDMxZTFlYjc3YTk5N2IyY2JiYjUwYzdmNjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3gU6FuW/3WNorFyuN6lvvHZuXUe u4PRja9EDkpSg3/dTObYQ9y1Pu1yNHG6cg0dEXls/uGwycUtt/ZpACx+sffdVAD8 NtCgQ26NUyaLwcWOZjiZj8ADyCunuRdJQT/I34+NNw9YF79YZTaIEyCMC/vf8ekr 1culyA4ookbWjdMvIvECg7InBaAufzPyCEfAV9nrXGNGWwOpLXM07RgN8cpM4dJR h19/rBE2pPqbYe69lK+t1wfBIIM2ZLh0QDe7kyyksYvOLdC4ubaL4YitD+Nxcvsk +shqzNtWKYNEiUeh9EnKiSsA9Mf2j30gkkcj1yfgTuSAxGzeXqLlkA6bSQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFE0AGhb+QC0x4et3qZeyy7tQx/Z3MB8GA1UdIwQY MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt NmJjNzU1NzhiNGMzLzEvVFFBYUZ2NUFMVEhoNjNlcGw3TEx1MURIOW5jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALY08AwQA ueNTMA0GCSqGSIb3DQEBCwUAA4IBAQChYsbr2mcgK/mOYMYJXg5i5vdpsP50lXvA F/dfYpNbMmhRVgY9XPKvSgqfvUuuG8KBv+3wW96maoPmQw5QIDdyUaGE3qclDQsu 7utehCiNHlEnegFmf4eMtGzzCNlIpZ4br0i1yyBML1EzfYpDoCf3SXbJu60FMII3 /Cr6uR26nJtPYaDOXrEfiJCUvHKtXEExCe13HBbUWK76oi+vpxZ4DkYF6cdrILsp GvspRkRL7Txm5fVg3LIJ9qkS7jSXM/p3fKY3qc61xmTNUW6tVJkMwspKH44XVqMq R5VTMzR3rJSMHzvm7FeabQHb1/EntiQj9p2TdXcR9ExHnI1X/Xe8 -----END CERTIFICATE-----Generated at Wed Jan 21 16:56:59 2026 by rpki-client