This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/Tqlato6hgfzEdbYf2dONEfJUdxs.roa File: Tqlato6hgfzEdbYf2dONEfJUdxs.roa (raw, json) Hash identifier: ofRHaj+OD5n2VplXNOJ/mBpPh9ksUzqWEkQDDtAvD0w= Subject key identifier: 4E:A9:5A:B6:8E:A1:81:FC:C4:75:B6:1F:D9:D3:8D:11:F2:54:77:1B Certificate issuer: /CN=c875f76e8f894247923c0e276234d98a4c3ec5c2 Certificate serial: 019B7C80AE1BAE0C97A73571E3C7446552F6 Authority key identifier: C8:75:F7:6E:8F:89:42:47:92:3C:0E:27:62:34:D9:8A:4C:3E:C5:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/Tqlato6hgfzEdbYf2dONEfJUdxs.roa Signing time: Fri 02 Jan 2026 02:19:26 +0000 ROA not before: Fri 02 Jan 2026 02:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61207 IP address blocks: 185.41.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 11:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:ae:1b:ae:0c:97:a7:35:71:e3:c7:44:65:52:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c875f76e8f894247923c0e276234d98a4c3ec5c2 Validity Not Before: Jan 2 02:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ea95ab68ea181fcc475b61fd9d38d11f254771b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:fb:14:3a:7b:25:4c:aa:db:a1:28:3d:0f:da: 58:58:6b:9a:79:20:fd:9f:b1:4a:d7:cb:72:7c:60: db:0c:a5:21:12:b7:8c:24:67:9b:ce:bb:60:02:0d: 71:7c:e5:9f:93:85:5c:9b:d4:a1:2b:64:26:b2:05: cf:3b:bf:29:66:18:b1:57:18:1d:cd:a6:43:fa:f9: c6:91:1d:40:ca:87:bd:f0:02:71:47:ea:ca:8d:4b: a8:c5:87:8f:04:d9:9b:8d:51:d8:ec:60:a6:4a:b1: 1c:8a:83:c1:4d:c0:60:b3:48:06:35:d5:a4:a5:77: 5a:06:52:49:d5:83:53:50:b0:61:a6:ff:e0:89:0c: 12:0f:75:d5:42:4d:3e:c2:78:7c:ae:0c:4e:96:ba: 9c:f3:89:7e:c5:04:e5:71:38:cc:01:ae:be:86:55: 3b:0f:ee:9b:45:0b:22:e8:39:65:14:f9:79:64:d7: 89:6e:0c:95:b9:84:c5:9c:cf:78:bd:59:e6:10:a5: b3:b8:77:d9:e6:af:b5:f9:a7:44:31:60:e2:02:48: 05:67:ab:6f:c0:9e:16:8a:f1:eb:b5:fb:d9:cd:e1: fa:bf:9e:e4:2d:9e:b7:b5:26:2a:49:74:3b:f8:5f: 7b:4e:dd:a4:55:06:a6:a0:9a:68:3d:3e:2f:1d:b8: da:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A9:5A:B6:8E:A1:81:FC:C4:75:B6:1F:D9:D3:8D:11:F2:54:77:1B X509v3 Authority Key Identifier: keyid:C8:75:F7:6E:8F:89:42:47:92:3C:0E:27:62:34:D9:8A:4C:3E:C5:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/Tqlato6hgfzEdbYf2dONEfJUdxs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.41.148.0/24 Signature Algorithm: sha256WithRSAEncryption 72:7f:d6:0f:2f:bc:64:39:a1:05:85:12:25:d2:05:58:aa:9d: 29:80:f8:56:b1:f2:8d:89:6e:32:10:d0:a3:da:56:6e:c5:ee: da:17:09:41:b4:29:f8:82:c8:a4:d2:a8:6e:37:70:37:bb:ad: 75:03:9c:53:e7:a2:9c:ab:52:a5:0d:77:0a:fc:8b:d0:b0:e0: 6e:96:95:dd:78:2a:4c:30:39:5b:5c:b7:f2:a5:ff:d8:8c:7c: 97:fc:8d:25:f9:07:3f:c0:71:c2:ce:a2:97:9c:ce:79:a5:dd: 2d:3c:3a:ef:9f:9d:c5:1d:98:80:74:62:26:04:c4:69:2e:c8: b8:11:1d:82:69:59:6e:f3:58:37:90:cf:1d:24:bb:0a:3a:06: 87:e3:e4:f3:e0:53:27:5a:ce:93:a5:e4:1a:49:dd:b0:fb:c7: f5:03:5e:e1:b9:c3:b4:71:77:58:d2:52:ea:ff:2e:f2:2d:46: 87:20:b3:ac:ff:c9:09:86:2b:3b:9d:69:de:cc:2c:48:b3:99: bc:6c:fb:6c:4e:c4:ad:27:71:92:1d:b3:83:d3:51:75:19:d7: 0e:bc:a0:ba:78:4c:e2:d2:14:07:b6:bb:42:a1:14:67:01:42: 30:76:32:33:18:99:43:d2:88:ca:48:48:86:57:4d:d2:14:72: 76:29:a6:a8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gK4brgyXpzVx48dEZVL2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NzVmNzZlOGY4OTQyNDc5MjNjMGUyNzYyMzRkOThhNGMz ZWM1YzIwHhcNMjYwMTAyMDIxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZWE5NWFiNjhlYTE4MWZjYzQ3NWI2MWZkOWQzOGQxMWYyNTQ3NzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8/sUOnslTKrboSg9D9pYWGuaeSD9 n7FK18tyfGDbDKUhEreMJGebzrtgAg1xfOWfk4Vcm9ShK2QmsgXPO78pZhixVxgd zaZD+vnGkR1Ayoe98AJxR+rKjUuoxYePBNmbjVHY7GCmSrEcioPBTcBgs0gGNdWk pXdaBlJJ1YNTULBhpv/giQwSD3XVQk0+wnh8rgxOlrqc84l+xQTlcTjMAa6+hlU7 D+6bRQsi6DllFPl5ZNeJbgyVuYTFnM94vVnmEKWzuHfZ5q+1+adEMWDiAkgFZ6tv wJ4WivHrtfvZzeH6v57kLZ63tSYqSXQ7+F97Tt2kVQamoJpoPT4vHbjawQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE6pWraOoYH8xHW2H9nTjRHyVHcbMB8GA1UdIwQY MBaAFMh1926PiUJHkjwOJ2I02YpMPsXCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUhYM2JvLUpRa2VTUEE0bllqVFppa3cteGNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lOWU3OTgtNGVmMy00YWE4LTgxZjAt MzA1NjU4ZjkxNjM1LzEvVHFsYXRvNmhnZnpFZGJZZjJkT05FZkpVZHhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9lOWU3OTgtNGVmMy00YWE4LTgxZjAtMzA1NjU4ZjkxNjM1 LzEveUhYM2JvLUpRa2VTUEE0bllqVFppa3cteGNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSmUMA0G CSqGSIb3DQEBCwUAA4IBAQByf9YPL7xkOaEFhRIl0gVYqp0pgPhWsfKNiW4yENCj 2lZuxe7aFwlBtCn4gsik0qhuN3A3u611A5xT56Kcq1KlDXcK/IvQsOBulpXdeCpM MDlbXLfypf/YjHyX/I0l+Qc/wHHCzqKXnM55pd0tPDrvn53FHZiAdGImBMRpLsi4 ER2CaVlu81g3kM8dJLsKOgaH4+Tz4FMnWs6TpeQaSd2w+8f1A17hucO0cXdY0lLq /y7yLUaHILOs/8kJhis7nWnezCxIs5m8bPtsTsStJ3GSHbOD01F1GdcOvKC6eEzi 0hQHtrtCoRRnAUIwdjIzGJlD0ojKSEiGV03SFHJ2Kaao -----END CERTIFICATE-----Generated at Mon Jan 26 20:13:30 2026 by rpki-client