This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/TzWq1qnWBn4k19NSOwTmTuj33kc.roa File: TzWq1qnWBn4k19NSOwTmTuj33kc.roa (raw, json) Hash identifier: Nw9JTG7M5i34iKuoPA+hKZe2GJ6kfRFbcg47nxl4mFc= Subject key identifier: 4F:35:AA:D6:A9:D6:06:7E:24:D7:D3:52:3B:04:E6:4E:E8:F7:DE:47 Certificate issuer: /CN=462231e713f0f834bd09c3f76e12e250e773c290 Certificate serial: 019B7C80C7B6FA4F9A35845D9F6EC81FE60D Authority key identifier: 46:22:31:E7:13:F0:F8:34:BD:09:C3:F7:6E:12:E2:50:E7:73:C2:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/TzWq1qnWBn4k19NSOwTmTuj33kc.roa Signing time: Fri 02 Jan 2026 02:19:33 +0000 ROA not before: Fri 02 Jan 2026 02:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42687 IP address blocks: 185.182.168.0/22 maxlen: 22 185.182.170.0/23 maxlen: 23 185.219.242.0/23 maxlen: 24 2a0d:25c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.crl rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:c7:b6:fa:4f:9a:35:84:5d:9f:6e:c8:1f:e6:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=462231e713f0f834bd09c3f76e12e250e773c290 Validity Not Before: Jan 2 02:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f35aad6a9d6067e24d7d3523b04e64ee8f7de47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:a4:2f:3d:70:dd:52:8b:98:42:65:a5:93:2c: 75:4a:f6:98:0d:95:29:87:a6:34:12:02:ab:63:9e: 9b:da:9e:51:75:d3:32:7f:54:5f:61:4f:53:84:9c: 20:a1:1f:a8:83:94:b3:05:71:26:c0:52:a7:c6:32: 7f:b4:7a:28:10:cd:75:7d:66:01:f7:9f:d7:1e:22: a0:95:f0:5f:13:fc:5d:5d:bc:37:50:cf:6d:59:41: d3:d9:5d:5d:61:c4:39:42:1b:ac:6d:2a:78:e0:c0: bc:3d:db:f2:02:8d:8e:91:73:c7:76:35:4c:50:9b: 23:c5:6c:0c:cf:6d:ed:4c:a5:40:d4:3d:d1:b9:f0: 12:b2:93:0a:02:07:3e:eb:c6:f1:62:3f:7d:cb:6f: 30:7c:6a:2c:aa:be:4f:5a:19:42:f3:de:48:35:7a: af:39:12:a2:1b:0b:b7:32:93:c3:dd:6b:4d:f7:05: 85:3d:5e:ea:72:cc:06:e1:85:93:31:34:0e:3b:85: 8b:69:bc:4a:3e:ce:bd:12:35:c7:4a:1c:87:0e:00: 21:9e:2a:fd:fa:fc:de:fb:69:38:6e:60:41:4f:86: c8:2b:81:da:bd:c3:f3:9e:61:ff:db:13:78:43:30: c4:cd:6b:83:0e:6a:c7:10:13:a1:a1:5d:da:ee:85: 30:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:35:AA:D6:A9:D6:06:7E:24:D7:D3:52:3B:04:E6:4E:E8:F7:DE:47 X509v3 Authority Key Identifier: keyid:46:22:31:E7:13:F0:F8:34:BD:09:C3:F7:6E:12:E2:50:E7:73:C2:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/TzWq1qnWBn4k19NSOwTmTuj33kc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.182.168.0/22 185.219.242.0/23 IPv6: 2a0d:25c0::/29 Signature Algorithm: sha256WithRSAEncryption 91:a2:5d:14:fe:7e:84:de:dd:0b:49:9c:21:83:e3:de:c2:4d: e8:1c:4a:7d:b1:53:5e:b9:b5:60:cd:30:a5:3d:a2:59:f7:9a: 54:7b:78:e8:d9:70:20:14:68:f8:b6:e4:a0:30:a4:8e:4e:be: 0c:8d:82:b7:a0:00:e2:be:e9:26:e9:c4:f4:44:63:77:4f:6f: 4e:be:94:19:a3:29:37:d3:53:04:47:6b:7e:96:75:d6:d2:98: e5:84:98:1a:b3:b5:d2:49:3c:07:fe:bf:39:83:f4:73:bf:66: 81:28:fa:11:67:eb:a8:8a:37:02:80:bb:10:5f:eb:44:f8:e1: 2e:7f:be:cb:b4:0e:c0:9b:89:12:c9:95:e8:84:ca:29:9c:e3: ce:a9:cd:f0:73:50:27:12:59:27:ee:6e:be:73:ee:2c:91:06: 6c:15:3e:99:90:19:c4:5b:24:57:7c:52:7c:bb:01:af:d3:cf: 5d:36:d2:81:8f:61:a1:ac:4f:0b:1e:9c:3d:4f:9d:70:af:33: 76:cd:e5:57:72:d8:ab:43:19:5d:9f:d5:e3:9e:b9:89:e9:37: 83:1f:b8:3f:05:c8:e2:e2:78:81:8a:21:13:7d:77:ca:e5:bd: de:eb:b7:8c:41:99:13:6e:ee:85:12:de:1e:7b:f5:48:a2:c0: af:0c:2b:17 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt8gMe2+k+aNYRdn27IH+YNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MjIzMWU3MTNmMGY4MzRiZDA5YzNmNzZlMTJlMjUwZTc3 M2MyOTAwHhcNMjYwMTAyMDIxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjM1YWFkNmE5ZDYwNjdlMjRkN2QzNTIzYjA0ZTY0ZWU4ZjdkZTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7KQvPXDdUouYQmWlkyx1SvaYDZUp h6Y0EgKrY56b2p5RddMyf1RfYU9ThJwgoR+og5SzBXEmwFKnxjJ/tHooEM11fWYB 95/XHiKglfBfE/xdXbw3UM9tWUHT2V1dYcQ5QhusbSp44MC8PdvyAo2OkXPHdjVM UJsjxWwMz23tTKVA1D3RufASspMKAgc+68bxYj99y28wfGosqr5PWhlC895INXqv ORKiGwu3MpPD3WtN9wWFPV7qcswG4YWTMTQOO4WLabxKPs69EjXHShyHDgAhnir9 +vze+2k4bmBBT4bIK4HavcPznmH/2xN4QzDEzWuDDmrHEBOhoV3a7oUwFwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFE81qtap1gZ+JNfTUjsE5k7o995HMB8GA1UdIwQY MBaAFEYiMecT8Pg0vQnD924S4lDnc8KQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmlJeDV4UHctRFM5Q2NQM2JoTGlVT2R6d3BBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85YWIzYTUtMWM0Ni00YmUwLTg5Mzct YWQ0YmQ3ZjIzY2U0LzEvVHpXcTFxbldCbjRrMTlOU093VG1UdWozM2tjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi85YWIzYTUtMWM0Ni00YmUwLTg5MzctYWQ0YmQ3ZjIzY2U0 LzEvUmlJeDV4UHctRFM5Q2NQM2JoTGlVT2R6d3BBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCubaoAwQB udvyMA0EAgACMAcDBQMqDSXAMA0GCSqGSIb3DQEBCwUAA4IBAQCRol0U/n6E3t0L SZwhg+Pewk3oHEp9sVNeubVgzTClPaJZ95pUe3jo2XAgFGj4tuSgMKSOTr4MjYK3 oADivukm6cT0RGN3T29OvpQZoyk301MER2t+lnXW0pjlhJgas7XSSTwH/r85g/Rz v2aBKPoRZ+uoijcCgLsQX+tE+OEuf77LtA7Am4kSyZXohMopnOPOqc3wc1AnElkn 7m6+c+4skQZsFT6ZkBnEWyRXfFJ8uwGv089dNtKBj2GhrE8LHpw9T51wrzN2zeVX ctirQxldn9XjnrmJ6TeDH7g/Bcji4niBiiETfXfK5b3e67eMQZkTbu6FEt4ee/VI osCvDCsX -----END CERTIFICATE-----Generated at Mon Feb 9 22:37:29 2026 by rpki-client