This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/TCQSeVzJwjEr7_aTg_wyy8uk6RM.roa File: TCQSeVzJwjEr7_aTg_wyy8uk6RM.roa (raw, json) Hash identifier: QmsaqQhRAEGLEdE3C26cYEAQUOOxk2PCRLum00KwaiU= Subject key identifier: 4C:24:12:79:5C:C9:C2:31:2B:EF:F6:93:83:FC:32:CB:CB:A4:E9:13 Certificate issuer: /CN=412add9455bc132b730e727051f0b64ba45fcda4 Certificate serial: 019C31CD20F53ECCF8FB0F8E548EBDCE73FF Authority key identifier: 41:2A:DD:94:55:BC:13:2B:73:0E:72:70:51:F0:B6:4B:A4:5F:CD:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSrdlFW8EytzDnJwUfC2S6RfzaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/TCQSeVzJwjEr7_aTg_wyy8uk6RM.roa Signing time: Fri 06 Feb 2026 07:14:12 +0000 ROA not before: Fri 06 Feb 2026 07:14:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59463 IP address blocks: 78.108.248.0/23 maxlen: 23 78.108.248.0/24 maxlen: 24 78.108.249.0/24 maxlen: 24 185.98.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/QSrdlFW8EytzDnJwUfC2S6RfzaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:31:cd:20:f5:3e:cc:f8:fb:0f:8e:54:8e:bd:ce:73:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=412add9455bc132b730e727051f0b64ba45fcda4 Validity Not Before: Feb 6 07:14:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c2412795cc9c2312beff69383fc32cbcba4e913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ef:37:62:71:0d:96:b6:27:f8:c4:89:6c:da: f8:0f:9d:f2:c0:ca:b3:60:5a:8d:d8:79:80:97:1d: d5:6d:f0:3b:ec:16:23:01:62:9b:79:8b:ef:88:0a: 8f:e9:bf:bd:bb:6c:4a:7d:70:37:7e:b8:6a:9a:ef: c2:cd:8e:ad:9e:a9:d1:6d:a5:b9:af:c0:0f:bc:77: f2:1a:80:27:f6:2a:8d:e9:8b:88:1c:6f:d1:fe:35: 31:af:c8:3e:96:33:fd:be:93:47:26:7d:a0:e4:39: 13:54:f8:44:a6:6c:0a:76:40:f6:48:f9:4f:64:41: 96:58:cf:03:fd:d3:b5:00:87:39:f7:65:55:10:d9: 92:fe:ce:36:73:9a:35:38:25:ab:42:36:dc:60:6a: a2:c6:e0:75:61:0e:b6:eb:a1:ee:7d:0c:07:21:8b: 42:f0:9d:bf:28:43:48:39:f7:f1:be:9f:96:06:1f: 65:b1:95:8f:b2:77:15:97:56:d7:a8:71:2f:8b:20: b5:2a:1c:d9:27:d8:cb:05:ed:ee:a8:a8:0a:06:c4: 9f:9a:d1:2d:b7:e1:11:7f:2c:3e:59:8c:44:7e:47: 2f:72:b6:21:5a:5b:19:67:dc:06:85:e0:9e:ce:a4: 8e:4c:f1:04:c3:52:7e:f1:0f:1f:b6:df:78:27:9d: b6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:24:12:79:5C:C9:C2:31:2B:EF:F6:93:83:FC:32:CB:CB:A4:E9:13 X509v3 Authority Key Identifier: keyid:41:2A:DD:94:55:BC:13:2B:73:0E:72:70:51:F0:B6:4B:A4:5F:CD:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSrdlFW8EytzDnJwUfC2S6RfzaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/TCQSeVzJwjEr7_aTg_wyy8uk6RM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.108.248.0/23 185.98.132.0/24 Signature Algorithm: sha256WithRSAEncryption 61:11:16:98:9e:07:d2:ce:a6:60:97:48:46:e9:0f:6b:49:d4: 93:df:bc:74:24:8f:ed:57:e6:10:07:33:37:7a:f3:c7:6c:61: 2f:fa:7c:37:1c:c1:76:e2:e4:4b:29:1f:83:a2:3d:2c:fe:f8: 73:29:41:68:b4:c9:82:c5:f3:89:5d:72:8c:8c:5b:a2:75:0b: c5:bd:f2:9c:06:c2:b2:93:1e:e3:39:8a:5a:0a:45:94:fb:53: a9:73:51:c9:42:7c:1d:e1:6c:b0:28:ed:0a:8d:0c:a9:25:fe: ed:ff:4a:b8:7d:af:7c:39:0e:92:70:ec:cd:1a:7a:03:4d:f6: 6a:77:28:f1:88:6f:72:c7:c6:c0:7f:37:e5:a5:da:d6:bb:70: 88:19:2d:11:8e:db:d6:7b:92:84:df:4a:ac:d7:13:24:af:99: db:e4:27:91:82:04:a9:1a:50:4a:1b:04:0d:fd:1e:ad:56:cd: 30:25:0c:fa:fe:ea:0e:18:c3:d2:95:68:4b:78:68:45:b3:1c: 4c:01:0e:c2:88:76:07:e8:10:22:ae:f3:83:18:86:66:cf:fc: 34:46:b1:24:28:60:d9:6b:22:5a:a3:8e:d1:4a:e2:82:3c:3c: ed:cf:10:01:be:1b:f4:88:64:d5:79:69:21:4e:85:bb:18:a2: 79:a1:c1:a9 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZwxzSD1Psz4+w+OVI69znP/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMmFkZDk0NTViYzEzMmI3MzBlNzI3MDUxZjBiNjRiYTQ1 ZmNkYTQwHhcNMjYwMjA2MDcxNDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzI0MTI3OTVjYzljMjMxMmJlZmY2OTM4M2ZjMzJjYmNiYTRlOTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAju83YnENlrYn+MSJbNr4D53ywMqz YFqN2HmAlx3VbfA77BYjAWKbeYvviAqP6b+9u2xKfXA3frhqmu/CzY6tnqnRbaW5 r8APvHfyGoAn9iqN6YuIHG/R/jUxr8g+ljP9vpNHJn2g5DkTVPhEpmwKdkD2SPlP ZEGWWM8D/dO1AIc592VVENmS/s42c5o1OCWrQjbcYGqixuB1YQ6266HufQwHIYtC 8J2/KENIOffxvp+WBh9lsZWPsncVl1bXqHEviyC1KhzZJ9jLBe3uqKgKBsSfmtEt t+ERfyw+WYxEfkcvcrYhWlsZZ9wGheCezqSOTPEEw1J+8Q8ftt94J522PQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEwkEnlcycIxK+/2k4P8MsvLpOkTMB8GA1UdIwQY MBaAFEEq3ZRVvBMrcw5ycFHwtkukX82kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVNyZGxGVzhFeXR6RG5Kd1VmQzJTNlJmemFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9lOWM2YTYtNmJjNi00MWUyLTgwZTkt YmM5ODg3YTdiNTUzLzEvVENRU2VWekp3akVyN19hVGdfd3l5OHVrNlJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9lOWM2YTYtNmJjNi00MWUyLTgwZTktYmM5ODg3YTdiNTUz LzEvUVNyZGxGVzhFeXR6RG5Kd1VmQzJTNlJmemFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBTmz4AwQA uWKEMA0GCSqGSIb3DQEBCwUAA4IBAQBhERaYngfSzqZgl0hG6Q9rSdST37x0JI/t V+YQBzM3evPHbGEv+nw3HMF24uRLKR+Doj0s/vhzKUFotMmCxfOJXXKMjFuidQvF vfKcBsKykx7jOYpaCkWU+1Opc1HJQnwd4WywKO0KjQypJf7t/0q4fa98OQ6ScOzN GnoDTfZqdyjxiG9yx8bAfzflpdrWu3CIGS0RjtvWe5KE30qs1xMkr5nb5CeRggSp GlBKGwQN/R6tVs0wJQz6/uoOGMPSlWhLeGhFsxxMAQ7CiHYH6BAirvODGIZmz/w0 RrEkKGDZayJao47RSuKCPDztzxABvhv0iGTVeWkhToW7GKJ5ocGp -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:06 2026 by rpki-client