This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/T-Qpf2laS9B4oqA-l43pYYoUJBk.roa File: T-Qpf2laS9B4oqA-l43pYYoUJBk.roa (raw, json) Hash identifier: t46DpvrWC/vui809tnn3ajl3f+hjX2aU4WQg5zWnjoA= Subject key identifier: 4F:E4:29:7F:69:5A:4B:D0:78:A2:A0:3E:97:8D:E9:61:8A:14:24:19 Certificate issuer: /CN=70bb5e54f2748ecb5d8698d379339cc15f32b893 Certificate serial: 019B7B36D998B5F5EBA4284AAA4B982F0188 Authority key identifier: 70:BB:5E:54:F2:74:8E:CB:5D:86:98:D3:79:33:9C:C1:5F:32:B8:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLteVPJ0jstdhpjTeTOcwV8yuJM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/T-Qpf2laS9B4oqA-l43pYYoUJBk.roa Signing time: Thu 01 Jan 2026 20:19:10 +0000 ROA not before: Thu 01 Jan 2026 20:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210182 IP address blocks: 185.250.112.0/22 maxlen: 22 185.250.112.0/24 maxlen: 24 185.250.113.0/24 maxlen: 24 185.250.114.0/24 maxlen: 24 185.250.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft rsync://rpki.ripe.net/repository/DEFAULT/cLteVPJ0jstdhpjTeTOcwV8yuJM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:d9:98:b5:f5:eb:a4:28:4a:aa:4b:98:2f:01:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70bb5e54f2748ecb5d8698d379339cc15f32b893 Validity Not Before: Jan 1 20:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4fe4297f695a4bd078a2a03e978de9618a142419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9a:b8:e0:f6:72:55:a6:47:7e:35:51:4d:1b: 1f:e8:e2:99:4e:e5:c6:f3:86:2a:71:0e:d2:9e:55: fa:04:a6:dc:1e:fa:d2:26:7b:0d:9b:db:d6:84:e4: 45:b8:73:28:e1:dd:00:2d:e8:c9:ae:68:80:ff:f3: 9d:92:9d:5e:a2:7a:28:45:2d:89:19:c9:76:9d:9c: 61:08:b7:52:83:ba:12:3f:97:9d:42:16:55:2b:21: 9d:44:ac:49:cf:91:ce:75:3f:58:b3:57:c1:f8:3d: fe:f1:b7:b8:82:26:a4:2c:45:8b:a3:9f:f3:c8:21: 3d:8f:4b:98:74:c8:23:1b:11:4a:a7:56:c9:2f:56: d6:f6:de:f9:b9:a5:27:7b:21:15:cd:fd:e2:33:32: 8e:09:b4:61:56:6c:fe:24:63:dd:97:7c:10:04:8e: 1f:b9:f2:7d:be:e9:f6:40:84:62:92:7d:d3:e8:5a: 3a:38:26:e1:93:6e:d8:a3:cd:c5:2d:42:2d:8e:c0: 0e:62:f1:1f:02:9e:00:f6:e9:8e:14:b4:68:28:22: 57:83:cc:8e:9b:da:cb:15:85:39:58:85:cc:17:21: 2f:40:cd:db:e7:4e:55:7c:c2:f4:aa:d1:42:da:24: 45:dc:96:97:f9:56:8f:58:8c:08:6e:fe:7b:fb:57: 20:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:E4:29:7F:69:5A:4B:D0:78:A2:A0:3E:97:8D:E9:61:8A:14:24:19 X509v3 Authority Key Identifier: keyid:70:BB:5E:54:F2:74:8E:CB:5D:86:98:D3:79:33:9C:C1:5F:32:B8:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLteVPJ0jstdhpjTeTOcwV8yuJM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/T-Qpf2laS9B4oqA-l43pYYoUJBk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.250.112.0/22 Signature Algorithm: sha256WithRSAEncryption 85:68:c1:03:7b:7b:02:c5:0c:de:20:1e:dd:2b:39:7a:8c:34: 1c:17:9e:c5:9d:50:57:ca:7a:79:f3:6e:dc:b4:54:fd:0a:c8: b1:e2:4f:74:62:89:65:97:dc:f4:db:a2:b0:43:c6:bd:b8:c3: 54:c1:5e:3b:a3:1c:71:93:89:ed:60:6c:8d:80:fe:1b:9c:65: 14:bf:1b:c6:f1:52:eb:c6:bf:94:27:51:1a:ff:5e:27:33:0e: 88:e8:72:4d:14:64:f2:69:21:1d:99:52:a5:ce:da:09:74:67: 31:94:75:3d:79:c5:8d:73:af:a3:e2:99:fd:3a:f8:c3:77:2d: 47:6e:0e:4b:84:3b:19:e6:fe:23:24:82:a3:65:9c:5f:ef:f6: 56:5a:51:f1:81:ac:da:55:95:0c:4a:43:73:6b:06:f8:58:e0: 2b:70:d3:1b:dd:19:74:a2:ae:ab:7b:eb:8f:25:e4:92:a3:3c: 09:af:1a:70:f3:cd:c5:ed:92:8f:8d:b1:95:69:68:26:10:a3: 5e:41:f8:20:c5:f8:13:6a:b4:31:ca:9b:a2:b4:6f:f2:95:0a: ea:d2:59:a9:3d:e5:66:07:70:8e:bb:72:10:f5:71:ea:b2:e5: 44:14:7f:a7:c0:31:94:57:4b:8b:b6:4a:dd:45:9b:e6:b0:7f: 15:5c:30:62 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NtmYtfXrpChKqkuYLwGIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwYmI1ZTU0ZjI3NDhlY2I1ZDg2OThkMzc5MzM5Y2MxNWYz MmI4OTMwHhcNMjYwMTAxMjAxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZmU0Mjk3ZjY5NWE0YmQwNzhhMmEwM2U5NzhkZTk2MThhMTQyNDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZq44PZyVaZHfjVRTRsf6OKZTuXG 84YqcQ7SnlX6BKbcHvrSJnsNm9vWhORFuHMo4d0ALejJrmiA//Odkp1eonooRS2J Gcl2nZxhCLdSg7oSP5edQhZVKyGdRKxJz5HOdT9Ys1fB+D3+8be4giakLEWLo5/z yCE9j0uYdMgjGxFKp1bJL1bW9t75uaUneyEVzf3iMzKOCbRhVmz+JGPdl3wQBI4f ufJ9vun2QIRikn3T6Fo6OCbhk27Yo83FLUItjsAOYvEfAp4A9umOFLRoKCJXg8yO m9rLFYU5WIXMFyEvQM3b505VfML0qtFC2iRF3JaX+VaPWIwIbv57+1cgCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE/kKX9pWkvQeKKgPpeN6WGKFCQZMB8GA1UdIwQY MBaAFHC7XlTydI7LXYaY03kznMFfMriTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0x0ZVZQSjBqc3RkaHBqVGVUT2N3Vjh5dUpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9kYzMyNDYtYzg1YS00NmRmLThjMzAt NDhjZWUyNmM1NWJiLzEvVC1RcGYybGFTOUI0b3FBLWw0M3BZWW9VSkJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9kYzMyNDYtYzg1YS00NmRmLThjMzAtNDhjZWUyNmM1NWJi LzEvY0x0ZVZQSjBqc3RkaHBqVGVUT2N3Vjh5dUpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufpwMA0G CSqGSIb3DQEBCwUAA4IBAQCFaMEDe3sCxQzeIB7dKzl6jDQcF57FnVBXynp5827c tFT9Csix4k90Yolll9z026KwQ8a9uMNUwV47oxxxk4ntYGyNgP4bnGUUvxvG8VLr xr+UJ1Ea/14nMw6I6HJNFGTyaSEdmVKlztoJdGcxlHU9ecWNc6+j4pn9OvjDdy1H bg5LhDsZ5v4jJIKjZZxf7/ZWWlHxgazaVZUMSkNzawb4WOArcNMb3Rl0oq6re+uP JeSSozwJrxpw883F7ZKPjbGVaWgmEKNeQfggxfgTarQxypuitG/ylQrq0lmpPeVm B3COu3IQ9XHqsuVEFH+nwDGUV0uLtkrdRZvmsH8VXDBi -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:05 2026 by rpki-client