This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/TqaRlv7nhvg_q1QJfNxKvCz6Es4.roa File: TqaRlv7nhvg_q1QJfNxKvCz6Es4.roa (raw, json) Hash identifier: gXAZNWfcjeZpPsYrp9FhwN0x/FJK/I6F7O8+Py5tCqI= Subject key identifier: 4E:A6:91:96:FE:E7:86:F8:3F:AB:54:09:7C:DC:4A:BC:2C:FA:12:CE Certificate issuer: /CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1 Certificate serial: 019B7911003E25AEB395D82217C411E7FD22 Authority key identifier: D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/TqaRlv7nhvg_q1QJfNxKvCz6Es4.roa Signing time: Thu 01 Jan 2026 10:18:35 +0000 ROA not before: Thu 01 Jan 2026 10:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34549 IP address blocks: 77.221.46.0/23 maxlen: 23 77.221.46.0/24 maxlen: 24 77.221.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:00:3e:25:ae:b3:95:d8:22:17:c4:11:e7:fd:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1 Validity Not Before: Jan 1 10:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ea69196fee786f83fab54097cdc4abc2cfa12ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6d:fe:16:ab:c2:35:3d:ea:59:1c:c0:8a:35: bf:ed:06:94:78:39:af:0c:4a:63:68:de:04:41:2e: 46:b2:94:48:c8:8b:9a:ec:98:f5:14:94:29:3a:0d: c6:97:8b:4b:9a:e4:40:6d:40:a6:28:78:da:67:62: 42:58:90:f6:b1:d9:99:1b:25:e2:86:67:ca:8c:f6: 25:8e:3f:73:fc:0a:d3:ec:74:35:ce:77:e6:9e:9e: f3:58:ba:20:ff:77:61:c5:6a:c4:e6:2e:3f:a1:6f: b1:67:a5:5d:1f:dc:5f:f2:d9:f4:eb:9c:48:32:86: cd:b7:5d:ab:c4:41:37:c1:67:49:e3:9a:dc:15:c0: 81:1e:a5:bd:a0:6c:ba:9a:21:62:08:b5:85:96:d1: 2b:9c:5a:01:89:ab:82:c2:7f:92:17:eb:d3:a5:ca: 7e:51:8c:8f:b4:eb:6e:ef:58:09:b7:8a:7f:4c:16: 85:60:51:03:28:47:17:1b:36:35:5d:f0:a3:52:82: 97:80:15:86:06:24:94:68:9f:d8:5e:74:1e:a1:fb: be:49:9a:eb:c0:74:e2:71:e2:b4:74:82:48:c7:2e: 8c:f1:0a:ca:a6:8e:5a:48:31:55:f5:12:0f:fd:12: b2:91:78:2f:41:90:19:30:6f:25:82:89:53:5a:3c: 7d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A6:91:96:FE:E7:86:F8:3F:AB:54:09:7C:DC:4A:BC:2C:FA:12:CE X509v3 Authority Key Identifier: keyid:D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/TqaRlv7nhvg_q1QJfNxKvCz6Es4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.221.46.0/23 Signature Algorithm: sha256WithRSAEncryption 14:5c:2e:61:aa:03:74:13:a3:0f:4b:55:74:5d:8b:40:0c:f7: 2f:32:71:ab:11:08:21:6e:99:d9:38:71:13:cf:fc:37:2f:6a: e5:f9:9b:05:78:13:78:39:3c:4e:9c:66:e3:d2:99:f9:bd:1b: 5f:ac:d6:53:f0:b2:dc:6c:72:d8:40:ca:6d:6a:d8:c2:f0:ec: 6e:54:c1:d1:ac:98:45:e0:4c:0c:c9:09:04:06:68:a0:31:de: dd:ea:cc:2c:e8:0a:2a:a0:1d:5a:e7:4e:54:ee:4a:e0:ca:f5: c5:59:0f:bb:aa:3f:32:e8:72:f0:53:6f:86:59:4f:18:21:e8: dd:aa:cc:85:04:80:a9:a0:4a:ab:38:2f:df:90:37:60:3d:6e: 2a:48:49:71:ec:6e:95:f1:f1:bf:4f:af:ed:f2:e2:42:59:e6: 38:8e:d7:e9:62:ce:9b:6e:13:a0:e9:2b:b6:36:bc:2c:78:14: f7:57:fc:de:12:5d:91:1b:a8:03:07:26:52:b3:63:52:25:b9: df:4e:22:5d:24:6a:9e:cd:20:54:76:95:c8:9a:b4:df:3c:93: 14:f1:4a:ba:46:ea:04:61:0a:f0:65:b0:57:d3:86:ba:31:2f: 81:2c:4b:c7:41:cc:b5:64:8c:bd:b3:da:d9:d8:63:e1:d1:c6: 56:7f:75:43 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EQA+Ja6zldgiF8QR5/0iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MDM2NDIwNzZkMjdlMjUyZmE5MGJmMWE0Mjk2ZjhiY2Q5 ZDBjZjEwHhcNMjYwMTAxMTAxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZWE2OTE5NmZlZTc4NmY4M2ZhYjU0MDk3Y2RjNGFiYzJjZmExMmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu23+FqvCNT3qWRzAijW/7QaUeDmv DEpjaN4EQS5GspRIyIua7Jj1FJQpOg3Gl4tLmuRAbUCmKHjaZ2JCWJD2sdmZGyXi hmfKjPYljj9z/ArT7HQ1znfmnp7zWLog/3dhxWrE5i4/oW+xZ6VdH9xf8tn065xI MobNt12rxEE3wWdJ45rcFcCBHqW9oGy6miFiCLWFltErnFoBiauCwn+SF+vTpcp+ UYyPtOtu71gJt4p/TBaFYFEDKEcXGzY1XfCjUoKXgBWGBiSUaJ/YXnQeofu+SZrr wHTiceK0dIJIxy6M8QrKpo5aSDFV9RIP/RKykXgvQZAZMG8lgolTWjx9FQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE6mkZb+54b4P6tUCXzcSrws+hLOMB8GA1UdIwQY MBaAFNcDZCB20n4lL6kL8aQpb4vNnQzxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGIt NjU0NTA1YTJkMDQ1LzEvVHFhUmx2N25odmdfcTFRSmZOeEt2Q3o2RXM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGItNjU0NTA1YTJkMDQ1 LzEvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTd0uMA0G CSqGSIb3DQEBCwUAA4IBAQAUXC5hqgN0E6MPS1V0XYtADPcvMnGrEQghbpnZOHET z/w3L2rl+ZsFeBN4OTxOnGbj0pn5vRtfrNZT8LLcbHLYQMptatjC8OxuVMHRrJhF 4EwMyQkEBmigMd7d6sws6AoqoB1a505U7krgyvXFWQ+7qj8y6HLwU2+GWU8YIejd qsyFBICpoEqrOC/fkDdgPW4qSElx7G6V8fG/T6/t8uJCWeY4jtfpYs6bbhOg6Su2 NrwseBT3V/zeEl2RG6gDByZSs2NSJbnfTiJdJGqezSBUdpXImrTfPJMU8Uq6RuoE YQrwZbBX04a6MS+BLEvHQcy1ZIy9s9rZ2GPh0cZWf3VD -----END CERTIFICATE-----Generated at Wed Jan 21 21:49:19 2026 by rpki-client