This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/tTQT4HsHlUWlBxRkYb49ZrBAWtY.roa File: tTQT4HsHlUWlBxRkYb49ZrBAWtY.roa (raw, json) Hash identifier: +00YrVjwsl/7FXL7Et4Om6euiIMwhs1ab+9m+Zkr+NA= Subject key identifier: B5:34:13:E0:7B:07:95:45:A5:07:14:64:61:BE:3D:66:B0:40:5A:D6 Certificate issuer: /CN=454bf58119cfe99f1749bcd9bd124702ba9cb713 Certificate serial: 019B7B368B1E0AB54A3E79FDF02B445FC2F8 Authority key identifier: 45:4B:F5:81:19:CF:E9:9F:17:49:BC:D9:BD:12:47:02:BA:9C:B7:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/tTQT4HsHlUWlBxRkYb49ZrBAWtY.roa Signing time: Thu 01 Jan 2026 20:18:50 +0000 ROA not before: Thu 01 Jan 2026 20:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204912 IP address blocks: 185.225.164.0/24 maxlen: 24 185.225.165.0/24 maxlen: 24 185.225.166.0/24 maxlen: 24 185.225.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.crl rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:8b:1e:0a:b5:4a:3e:79:fd:f0:2b:44:5f:c2:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=454bf58119cfe99f1749bcd9bd124702ba9cb713 Validity Not Before: Jan 1 20:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b53413e07b079545a507146461be3d66b0405ad6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:af:9f:e8:7c:e9:79:8a:e9:90:7f:36:03:ec: 26:65:ed:63:f4:bf:c4:8c:82:8c:49:9f:e2:08:ca: b2:9b:05:6e:3a:dc:1b:38:62:a2:4d:e2:2d:41:49: e0:e5:8e:1f:50:0d:8a:35:36:ad:04:bb:d0:ca:78: 23:f0:10:b0:c7:40:7c:88:b6:a0:ff:f6:af:75:b1: 4f:63:99:50:5d:ad:98:de:69:74:3d:db:0b:2c:aa: a9:75:51:4d:a4:18:72:6f:ab:e7:93:c7:52:cb:42: 2c:3c:bd:1e:3e:1d:48:93:44:ef:21:b9:0a:34:0c: 28:d3:be:f3:ea:f3:66:ed:77:1c:3a:43:0d:09:79: 46:68:43:19:34:99:ba:f4:c8:c2:a2:88:24:bd:aa: 39:f5:c0:1b:25:6c:3a:d1:8d:89:05:1e:9c:58:79: ee:40:c3:1b:57:b9:45:b7:22:a6:ca:20:06:cc:b1: f8:4c:ac:83:26:54:e6:b2:8e:19:b7:a5:f0:c7:1e: 90:79:62:d9:04:5e:e4:48:89:69:11:61:53:b2:ad: 15:be:81:f4:97:cf:0e:c0:65:9b:44:7e:bc:bf:71: 6d:d9:d2:d7:dd:4b:c3:bc:9a:75:d2:80:6a:d1:65: 33:2c:cf:7a:d8:5a:ea:fd:51:85:a8:b5:05:e7:d1: 6c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:34:13:E0:7B:07:95:45:A5:07:14:64:61:BE:3D:66:B0:40:5A:D6 X509v3 Authority Key Identifier: keyid:45:4B:F5:81:19:CF:E9:9F:17:49:BC:D9:BD:12:47:02:BA:9C:B7:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/tTQT4HsHlUWlBxRkYb49ZrBAWtY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.225.164.0/22 Signature Algorithm: sha256WithRSAEncryption 11:0a:a8:7b:0c:d3:41:36:ce:4d:34:9e:46:4e:47:d8:9c:71: 90:71:ec:8d:29:a8:73:1f:49:b6:76:e8:6a:3a:90:76:3c:a3: 1d:cb:3c:bf:bb:ff:c2:b5:97:d8:8f:26:ba:2e:fa:cc:9a:67: 73:5f:aa:75:19:cf:76:e0:c8:7a:b9:98:51:79:c2:5d:b7:0c: 4d:ec:96:cb:fc:79:9b:13:c3:f5:a2:05:8e:42:ba:8b:84:4f: a6:7f:b4:db:a0:c2:21:f3:5e:71:f8:81:85:b7:c0:a7:69:cd: a0:a6:77:ba:ab:14:62:e9:77:99:23:a6:84:7d:40:5e:e6:8e: 78:77:6f:b8:3a:c3:9a:a6:73:d7:80:87:49:7e:b4:17:05:e2: 89:3c:46:b3:6f:cd:64:2c:e1:66:f7:8d:e2:43:50:7f:6c:94: a5:3e:ff:6f:a3:c6:4f:22:a4:c0:0e:00:e2:51:ff:be:e9:5f: a3:b1:76:cb:b8:d9:66:5f:e1:e0:52:28:cd:d3:d4:2a:0c:2c: a5:4b:84:67:d6:2d:e9:fb:81:d4:5e:75:76:55:8c:56:43:5d: b6:77:f2:20:3f:9a:7e:78:a8:70:1c:b5:84:d1:23:03:2f:a6: 0e:3d:38:4f:6c:c5:52:1c:02:e6:8d:80:84:ad:22:42:b5:36: ab:46:32:58 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NoseCrVKPnn98CtEX8L4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1NGJmNTgxMTljZmU5OWYxNzQ5YmNkOWJkMTI0NzAyYmE5 Y2I3MTMwHhcNMjYwMTAxMjAxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTM0MTNlMDdiMDc5NTQ1YTUwNzE0NjQ2MWJlM2Q2NmIwNDA1YWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAua+f6HzpeYrpkH82A+wmZe1j9L/E jIKMSZ/iCMqymwVuOtwbOGKiTeItQUng5Y4fUA2KNTatBLvQyngj8BCwx0B8iLag //avdbFPY5lQXa2Y3ml0PdsLLKqpdVFNpBhyb6vnk8dSy0IsPL0ePh1Ik0TvIbkK NAwo077z6vNm7XccOkMNCXlGaEMZNJm69MjCoogkvao59cAbJWw60Y2JBR6cWHnu QMMbV7lFtyKmyiAGzLH4TKyDJlTmso4Zt6Xwxx6QeWLZBF7kSIlpEWFTsq0VvoH0 l88OwGWbRH68v3Ft2dLX3UvDvJp10oBq0WUzLM962Frq/VGFqLUF59FskQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLU0E+B7B5VFpQcUZGG+PWawQFrWMB8GA1UdIwQY MBaAFEVL9YEZz+mfF0m82b0SRwK6nLcTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlV2MWdSblA2WjhYU2J6WnZSSkhBcnFjdHhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9jNmQwOTItY2M2MC00YTUxLWIwMTAt MGE2ZTZkZmJkMmUzLzEvdFRRVDRIc0hsVVdsQnhSa1liNDlackJBV3RZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9jNmQwOTItY2M2MC00YTUxLWIwMTAtMGE2ZTZkZmJkMmUz LzEvUlV2MWdSblA2WjhYU2J6WnZSSkhBcnFjdHhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCueGkMA0G CSqGSIb3DQEBCwUAA4IBAQARCqh7DNNBNs5NNJ5GTkfYnHGQceyNKahzH0m2duhq OpB2PKMdyzy/u//CtZfYjya6LvrMmmdzX6p1Gc924Mh6uZhRecJdtwxN7JbL/Hmb E8P1ogWOQrqLhE+mf7TboMIh815x+IGFt8Cnac2gpne6qxRi6XeZI6aEfUBe5o54 d2+4OsOapnPXgIdJfrQXBeKJPEazb81kLOFm943iQ1B/bJSlPv9vo8ZPIqTADgDi Uf++6V+jsXbLuNlmX+HgUijN09QqDCylS4Rn1i3p+4HUXnV2VYxWQ122d/IgP5p+ eKhwHLWE0SMDL6YOPThPbMVSHALmjYCErSJCtTarRjJY -----END CERTIFICATE-----Generated at Mon Jan 26 19:54:51 2026 by rpki-client