This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/TqPtGzYoLspunrwYwjZawqiHS4s.roa File: TqPtGzYoLspunrwYwjZawqiHS4s.roa (raw, json) Hash identifier: YZMEyVa4a7dd+CqogixeL6+a0S/5nnQm0Sd2vgm2qdk= Subject key identifier: 4E:A3:ED:1B:36:28:2E:CA:6E:9E:BC:18:C2:36:5A:C2:A8:87:4B:8B Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346 Certificate serial: 019B7E38AF3759670B8CF65DF8AFE04DE386 Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/TqPtGzYoLspunrwYwjZawqiHS4s.roa Signing time: Fri 02 Jan 2026 10:20:02 +0000 ROA not before: Fri 02 Jan 2026 10:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208643 IP address blocks: 195.178.150.0/24 maxlen: 24 195.178.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:af:37:59:67:0b:8c:f6:5d:f8:af:e0:4d:e3:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19426325acb8ce609a686fa655b058968809b346 Validity Not Before: Jan 2 10:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ea3ed1b36282eca6e9ebc18c2365ac2a8874b8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:5b:4e:4a:e4:ad:29:ba:54:c7:da:bd:ef:85: f4:79:32:87:2b:d9:68:ee:5a:b7:53:3c:40:9f:9e: c8:f4:bb:23:c2:61:74:ca:56:49:bf:9a:56:32:4a: ab:6c:a5:04:d4:3c:f5:99:97:6c:f7:23:f5:bc:21: b7:dd:96:c4:c2:a3:a3:d0:f1:b1:a5:35:3f:42:35: 62:3d:4a:4e:a4:68:c0:aa:dd:f1:f9:d7:d1:30:cb: 8b:88:72:91:65:a6:e9:5a:a7:8b:b6:d1:9f:99:d6: 60:ba:4c:82:4c:a1:c6:a5:d3:09:3b:b6:d6:5c:54: 04:9c:22:bd:30:07:ef:14:f2:6c:67:77:48:69:2d: aa:e0:b0:13:bb:7d:8f:0f:b0:bd:1e:66:a9:e8:1c: cc:02:0a:f6:a1:41:b1:02:76:5c:02:3a:60:72:5e: 90:f4:2e:b4:4a:c5:fc:93:0b:02:e6:75:8c:83:bc: 6d:27:58:ef:d0:d4:4a:a8:72:ed:d6:b1:b6:b3:71: 3b:f3:1e:43:92:b3:01:3c:28:60:a1:17:ed:62:74: cb:32:cb:5d:31:6a:a5:ef:e0:0b:d3:28:03:cf:4d: 06:05:6b:dd:11:27:b7:69:c7:82:a3:f7:a9:33:44: 48:2c:01:95:a7:e0:a8:1d:76:56:53:23:d2:2c:8b: e3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A3:ED:1B:36:28:2E:CA:6E:9E:BC:18:C2:36:5A:C2:A8:87:4B:8B X509v3 Authority Key Identifier: keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/TqPtGzYoLspunrwYwjZawqiHS4s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.178.150.0/24 195.178.157.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:3e:d5:12:94:71:02:93:b2:a8:c7:f0:42:32:a4:0a:c2:f2: ba:cd:1b:f7:99:1a:ed:04:ad:f4:d1:b8:0c:a3:1c:ca:6d:de: 14:b1:17:41:a7:94:a9:34:7a:ac:52:d3:01:c0:b7:b0:1e:74: 4e:85:ae:d8:9c:19:96:48:ee:20:7b:c8:25:bb:f5:e5:7e:e4: c3:01:17:ba:ad:bf:97:3b:bd:1b:b5:eb:82:ee:1d:94:24:c1: 72:a8:2c:49:34:a9:8a:5c:ce:83:c8:0a:19:37:c6:b7:44:e4: c0:58:48:13:c0:f4:9c:99:6a:b6:60:78:1c:4a:76:2e:2d:71: d1:87:22:4e:45:72:49:76:7e:99:f3:89:a9:f2:e9:42:7b:3c: c6:19:08:cd:06:ab:c6:b0:1d:f4:44:0d:52:1c:30:ab:e9:5a: 8a:5b:07:f5:29:47:19:6c:cc:8f:7b:f9:52:18:81:7c:4a:86: 57:20:51:6c:28:40:82:91:d7:6f:09:c7:1f:ce:70:08:34:4d: 89:62:21:5e:4b:c0:46:ef:e1:d7:79:12:4a:2e:95:a9:75:b4: 09:a3:80:9c:a1:09:93:bf:30:70:53:00:76:68:b0:24:a6:e1: 76:68:2b:2b:69:9d:2f:9e:4e:42:25:6b:f2:88:59:a9:8e:58: e7:17:71:58 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OK83WWcLjPZd+K/gTeOGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw OWIzNDYwHhcNMjYwMTAyMTAyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZWEzZWQxYjM2MjgyZWNhNmU5ZWJjMThjMjM2NWFjMmE4ODc0YjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA81tOSuStKbpUx9q974X0eTKHK9lo 7lq3UzxAn57I9LsjwmF0ylZJv5pWMkqrbKUE1Dz1mZds9yP1vCG33ZbEwqOj0PGx pTU/QjViPUpOpGjAqt3x+dfRMMuLiHKRZabpWqeLttGfmdZgukyCTKHGpdMJO7bW XFQEnCK9MAfvFPJsZ3dIaS2q4LATu32PD7C9Hmap6BzMAgr2oUGxAnZcAjpgcl6Q 9C60SsX8kwsC5nWMg7xtJ1jv0NRKqHLt1rG2s3E78x5DkrMBPChgoRftYnTLMstd MWql7+AL0ygDz00GBWvdESe3aceCo/epM0RILAGVp+CoHXZWUyPSLIvjywIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFE6j7Rs2KC7Kbp68GMI2WsKoh0uLMB8GA1UdIwQY MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt MDNmNGM3MTEzYzM0LzEvVHFQdEd6WW9Mc3B1bnJ3WXdqWmF3cWlIUzRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0 LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAw7KWAwQA w7KdMA0GCSqGSIb3DQEBCwUAA4IBAQAePtUSlHECk7Kox/BCMqQKwvK6zRv3mRrt BK300bgMoxzKbd4UsRdBp5SpNHqsUtMBwLewHnROha7YnBmWSO4ge8glu/XlfuTD ARe6rb+XO70bteuC7h2UJMFyqCxJNKmKXM6DyAoZN8a3ROTAWEgTwPScmWq2YHgc SnYuLXHRhyJORXJJdn6Z84mp8ulCezzGGQjNBqvGsB30RA1SHDCr6VqKWwf1KUcZ bMyPe/lSGIF8SoZXIFFsKECCkddvCccfznAINE2JYiFeS8BG7+HXeRJKLpWpdbQJ o4CcoQmTvzBwUwB2aLAkpuF2aCsraZ0vnk5CJWvyiFmpjljnF3FY -----END CERTIFICATE-----Generated at Sat Jan 10 04:59:36 2026 by rpki-client