This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/Tq-tE6CuOk05WSXgDVKZUk5zeD8.roa File: Tq-tE6CuOk05WSXgDVKZUk5zeD8.roa (raw, json) Hash identifier: Fqy8tiNuEXzIOfq6aApCYelYLdv3s19nw0pSVDQC1/Y= Subject key identifier: 4E:AF:AD:13:A0:AE:3A:4D:39:59:25:E0:0D:52:99:52:4E:73:78:3F Certificate issuer: /CN=67565dfdf66b212e17a1d98a7f5e2b0b3264cdae Certificate serial: 019AA249C6CAF4F4BC0ECE84468B51132CF5 Authority key identifier: 67:56:5D:FD:F6:6B:21:2E:17:A1:D9:8A:7F:5E:2B:0B:32:64:CD:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1Zd_fZrIS4XodmKf14rCzJkza4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/Tq-tE6CuOk05WSXgDVKZUk5zeD8.roa Signing time: Thu 20 Nov 2025 17:22:15 +0000 ROA not before: Thu 20 Nov 2025 17:22:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 20473 IP address blocks: 188.116.50.0/24 maxlen: 24 188.116.51.0/24 maxlen: 24 2a0a:7180:80::/48 maxlen: 48 2a0a:7180:81::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/Z1Zd_fZrIS4XodmKf14rCzJkza4.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/Z1Zd_fZrIS4XodmKf14rCzJkza4.mft rsync://rpki.ripe.net/repository/DEFAULT/Z1Zd_fZrIS4XodmKf14rCzJkza4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 20:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a2:49:c6:ca:f4:f4:bc:0e:ce:84:46:8b:51:13:2c:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67565dfdf66b212e17a1d98a7f5e2b0b3264cdae Validity Not Before: Nov 20 17:22:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4eafad13a0ae3a4d395925e00d5299524e73783f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:26:b2:be:43:bd:77:5f:90:67:0e:5c:e9:0d: 04:7a:60:06:af:f8:50:84:4a:6d:5e:5e:ed:da:fc: ee:23:5b:89:c9:3a:6b:8d:14:42:e7:b6:9a:84:56: 8c:40:3e:96:19:50:14:1f:20:2e:3f:43:1b:4c:03: 77:10:3e:f1:13:fd:bb:b5:ee:29:46:22:85:a2:ec: 68:19:02:19:d9:22:e1:66:0e:2f:11:f3:b8:87:8e: 31:38:3b:6f:ce:89:ca:86:d9:ef:bc:90:35:d9:97: 22:02:ae:52:9a:21:11:4b:ec:9f:4a:79:5f:80:e6: 51:14:5a:04:16:7e:a8:44:73:a0:c0:01:3b:e7:e8: 8c:eb:e7:71:56:18:22:ab:2f:49:93:bc:50:79:f4: 99:06:bd:b7:fd:e2:f7:df:5d:a7:98:5d:f4:90:cd: 10:5e:42:56:80:df:f1:89:38:b0:3c:be:e7:09:f0: 72:93:97:2b:f6:d9:89:a5:91:15:19:d5:24:1f:d3: c1:2b:2d:47:e7:f8:22:38:5e:9c:cb:22:f6:e4:dc: d6:db:d7:5e:11:e5:d6:ba:3a:12:b8:4a:a4:d9:af: d9:90:5c:41:4d:49:d4:50:84:1e:8c:d9:1b:f6:5a: 5b:d5:fd:62:33:c5:91:42:49:f5:3f:7a:6b:f7:9e: 5d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:AF:AD:13:A0:AE:3A:4D:39:59:25:E0:0D:52:99:52:4E:73:78:3F X509v3 Authority Key Identifier: keyid:67:56:5D:FD:F6:6B:21:2E:17:A1:D9:8A:7F:5E:2B:0B:32:64:CD:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1Zd_fZrIS4XodmKf14rCzJkza4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/Tq-tE6CuOk05WSXgDVKZUk5zeD8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/Z1Zd_fZrIS4XodmKf14rCzJkza4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.116.50.0/23 IPv6: 2a0a:7180:80::/47 Signature Algorithm: sha256WithRSAEncryption b1:ec:3a:1b:30:d3:31:48:ff:39:06:34:83:5c:5d:25:22:69: f1:34:79:19:85:d8:18:a2:26:52:74:da:9e:1b:3d:10:24:ad: d6:77:0f:24:d1:57:39:b6:b3:c8:cb:2b:d4:89:29:07:9e:c3: 80:62:46:75:2f:19:02:a5:7b:90:ee:47:37:71:4e:e4:db:2a: 4e:2c:94:c5:af:da:d1:c9:cc:ee:1e:58:cd:02:ce:4b:69:19: f1:7e:63:74:70:1a:b0:ba:69:9b:1b:92:2a:2e:2e:4f:44:c8: b9:b2:23:65:68:95:28:2f:55:4a:26:75:00:55:fe:87:f7:55: f7:3a:13:f3:23:76:d6:37:e2:a8:d1:05:88:77:5a:24:7d:c1: b2:e0:66:ea:59:5a:16:a5:6b:3f:d0:6d:39:6c:56:4e:1f:c8: b7:1d:02:44:31:4e:c7:9d:0e:95:ba:8c:54:47:00:2c:03:65: a7:ce:37:50:6c:a2:99:c4:eb:a1:96:fc:aa:7d:4f:7c:16:1b: 8a:9d:d2:4a:4c:2d:72:1d:df:8b:09:41:7a:e8:34:ab:7a:1f: c7:f0:28:4b:1e:97:00:09:2e:fd:f0:bd:3e:8e:13:95:83:39: 77:85:a3:d9:c2:91:ca:34:65:2e:a5:2a:68:1d:ee:60:46:1e: 5d:85:c1:8b -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZqiScbK9PS8Ds6ERotREyz1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NTY1ZGZkZjY2YjIxMmUxN2ExZDk4YTdmNWUyYjBiMzI2 NGNkYWUwHhcNMjUxMTIwMTcyMjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZWFmYWQxM2EwYWUzYTRkMzk1OTI1ZTAwZDUyOTk1MjRlNzM3ODNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSayvkO9d1+QZw5c6Q0EemAGr/hQ hEptXl7t2vzuI1uJyTprjRRC57aahFaMQD6WGVAUHyAuP0MbTAN3ED7xE/27te4p RiKFouxoGQIZ2SLhZg4vEfO4h44xODtvzonKhtnvvJA12ZciAq5SmiERS+yfSnlf gOZRFFoEFn6oRHOgwAE75+iM6+dxVhgiqy9Jk7xQefSZBr23/eL3312nmF30kM0Q XkJWgN/xiTiwPL7nCfByk5cr9tmJpZEVGdUkH9PBKy1H5/giOF6cyyL25NzW29de EeXWujoSuEqk2a/ZkFxBTUnUUIQejNkb9lpb1f1iM8WRQkn1P3pr955d4wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFE6vrROgrjpNOVkl4A1SmVJOc3g/MB8GA1UdIwQY MBaAFGdWXf32ayEuF6HZin9eKwsyZM2uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjFaZF9mWnJJUzRYb2RtS2YxNHJDekpremE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy83YWI2MjYtZGUxYS00ZGNmLWExMGUt OGNjMzg3MThkMjE5LzEvVHEtdEU2Q3VPazA1V1NYZ0RWS1pVazV6ZUQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy83YWI2MjYtZGUxYS00ZGNmLWExMGUtOGNjMzg3MThkMjE5 LzEvWjFaZF9mWnJJUzRYb2RtS2YxNHJDekpremE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBvHQyMA8E AgACMAkDBwEqCnGAAIAwDQYJKoZIhvcNAQELBQADggEBALHsOhsw0zFI/zkGNINc XSUiafE0eRmF2BiiJlJ02p4bPRAkrdZ3DyTRVzm2s8jLK9SJKQeew4BiRnUvGQKl e5DuRzdxTuTbKk4slMWv2tHJzO4eWM0CzktpGfF+Y3RwGrC6aZsbkiouLk9EyLmy I2VolSgvVUomdQBV/of3Vfc6E/MjdtY34qjRBYh3WiR9wbLgZupZWhalaz/QbTls Vk4fyLcdAkQxTsedDpW6jFRHACwDZafON1BsopnE66GW/Kp9T3wWG4qd0kpMLXId 34sJQXroNKt6H8fwKEselwAJLv3wvT6OE5WDOXeFo9nCkco0ZS6lKmgd7mBGHl2F wYs= -----END CERTIFICATE-----Generated at Fri Nov 28 05:00:26 2025 by rpki-client