This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/tq8QxlpAQ6tiPZgbTTQLf8KLz9U.roa File: tq8QxlpAQ6tiPZgbTTQLf8KLz9U.roa (raw, json) Hash identifier: 342PBC8TnFXSEefteNXsajXj7RC7MDpoicGyHn4km3g= Subject key identifier: B6:AF:10:C6:5A:40:43:AB:62:3D:98:1B:4D:34:0B:7F:C2:8B:CF:D5 Certificate issuer: /CN=02d6e8273f9051ac31cb95792cb51400dab714aa Certificate serial: 019B7DCA704AAD9BE138C838B2DE3E1A3229 Authority key identifier: 02:D6:E8:27:3F:90:51:AC:31:CB:95:79:2C:B5:14:00:DA:B7:14:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/tq8QxlpAQ6tiPZgbTTQLf8KLz9U.roa Signing time: Fri 02 Jan 2026 08:19:37 +0000 ROA not before: Fri 02 Jan 2026 08:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51918 IP address blocks: 77.73.170.0/23 maxlen: 23 77.73.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.crl rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:70:4a:ad:9b:e1:38:c8:38:b2:de:3e:1a:32:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02d6e8273f9051ac31cb95792cb51400dab714aa Validity Not Before: Jan 2 08:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b6af10c65a4043ab623d981b4d340b7fc28bcfd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:50:29:98:df:10:e3:ca:55:70:ca:57:a0:af: 5e:c1:05:db:c8:7f:30:9c:0a:16:b0:e6:fa:66:0d: 6d:6a:d9:4e:ff:d8:93:8e:9e:d1:40:79:81:3b:4b: 8f:35:2d:53:4f:f1:3c:ea:cb:45:d2:09:ee:12:47: 94:8a:ee:f1:6b:d3:b3:01:51:b9:81:de:e7:56:45: 9c:10:51:0c:c7:68:d3:30:38:a0:9b:82:70:f2:44: 01:0f:a9:77:3e:ac:df:58:c1:e6:7f:90:34:08:c3: 7e:57:dc:c5:2c:ab:19:68:cd:54:f2:55:fe:71:07: e7:92:d6:c9:b6:27:fc:13:bf:51:8b:65:a5:10:8c: 48:5a:3a:0f:bb:9a:18:48:2d:21:d1:f1:39:ef:aa: 51:7a:ef:46:12:f0:2e:49:d2:38:00:08:d4:90:c0: 4c:ed:95:b4:ea:b5:d4:0c:b8:36:21:0d:7b:6b:13: ff:c2:67:66:27:de:f7:44:8b:c3:2f:09:29:49:60: 50:43:7a:3f:ea:0f:32:ee:4f:d7:5a:c0:67:ef:f3: f0:5c:70:73:c0:37:65:e0:77:b2:42:9b:96:5b:a7: c6:68:9f:17:42:d7:8e:77:ce:c4:06:2b:5b:20:bc: 5e:28:e3:4b:f9:b6:c6:3d:4f:c1:ea:b8:18:c8:a1: 3a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:AF:10:C6:5A:40:43:AB:62:3D:98:1B:4D:34:0B:7F:C2:8B:CF:D5 X509v3 Authority Key Identifier: keyid:02:D6:E8:27:3F:90:51:AC:31:CB:95:79:2C:B5:14:00:DA:B7:14:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/tq8QxlpAQ6tiPZgbTTQLf8KLz9U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.73.170.0-77.73.172.255 Signature Algorithm: sha256WithRSAEncryption 4f:85:80:4c:9e:fe:5a:98:b9:df:7c:70:85:25:ba:f8:fb:04: 65:a8:dd:df:69:e3:99:3d:3b:30:fb:42:8d:9c:c9:93:7d:5a: d5:a0:08:b5:56:ca:2b:cb:fb:6c:ec:bb:52:34:f3:ac:a2:f3: 20:81:17:33:5d:72:73:46:7f:e9:f5:31:30:91:38:13:d8:d5: 0f:ac:22:da:45:7e:d2:b5:4d:7b:b1:72:77:15:65:c3:2e:d0: 7b:c8:f3:eb:75:28:7a:4d:f8:a6:98:80:ec:d2:33:6b:93:93: 81:10:af:d7:ac:dc:5e:13:9c:b7:9c:27:18:fe:19:a1:ee:3f: d1:25:79:9d:96:46:44:8e:b1:89:18:bf:7d:46:2e:04:a0:18: 07:b7:59:a1:b7:d1:bd:02:30:75:79:0a:ec:56:1b:25:72:72: 06:e8:80:f7:9f:75:c6:53:ff:26:a8:eb:4e:b6:1d:24:85:db: e7:33:a9:9e:aa:27:ad:e0:89:b8:0e:3c:59:c4:b9:b4:42:47: d7:61:1f:86:d7:d1:db:de:22:bc:92:09:c3:8b:74:3c:1d:1b: da:8d:23:94:08:7c:f1:eb:30:31:e0:2d:9a:84:76:8b:0f:a1: 62:21:e8:3d:e8:28:63:54:c6:f2:68:f4:82:4c:12:02:f3:e1: 91:8c:bd:9e -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt9ynBKrZvhOMg4st4+GjIpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyZDZlODI3M2Y5MDUxYWMzMWNiOTU3OTJjYjUxNDAwZGFi NzE0YWEwHhcNMjYwMTAyMDgxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNmFmMTBjNjVhNDA0M2FiNjIzZDk4MWI0ZDM0MGI3ZmMyOGJjZmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01ApmN8Q48pVcMpXoK9ewQXbyH8w nAoWsOb6Zg1tatlO/9iTjp7RQHmBO0uPNS1TT/E86stF0gnuEkeUiu7xa9OzAVG5 gd7nVkWcEFEMx2jTMDigm4Jw8kQBD6l3PqzfWMHmf5A0CMN+V9zFLKsZaM1U8lX+ cQfnktbJtif8E79Ri2WlEIxIWjoPu5oYSC0h0fE576pReu9GEvAuSdI4AAjUkMBM 7ZW06rXUDLg2IQ17axP/wmdmJ973RIvDLwkpSWBQQ3o/6g8y7k/XWsBn7/PwXHBz wDdl4HeyQpuWW6fGaJ8XQteOd87EBitbILxeKONL+bbGPU/B6rgYyKE6fQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFLavEMZaQEOrYj2YG000C3/Ci8/VMB8GA1UdIwQY MBaAFALW6Cc/kFGsMcuVeSy1FADatxSqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXRib0p6LVFVYXd4eTVWNUxMVVVBTnEzRktvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC83Y2EzZGUtOTJjOC00OWZiLWFjYWUt OWYxYTVkYmI0MWQ2LzEvdHE4UXhscEFRNnRpUFpnYlRUUUxmOEtMejlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC83Y2EzZGUtOTJjOC00OWZiLWFjYWUtOWYxYTVkYmI0MWQ2 LzEvQXRib0p6LVFVYXd4eTVWNUxMVVVBTnEzRktvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAFNSaoD BABNSawwDQYJKoZIhvcNAQELBQADggEBAE+FgEye/lqYud98cIUluvj7BGWo3d9p 45k9OzD7Qo2cyZN9WtWgCLVWyivL+2zsu1I086yi8yCBFzNdcnNGf+n1MTCROBPY 1Q+sItpFftK1TXuxcncVZcMu0HvI8+t1KHpN+KaYgOzSM2uTk4EQr9es3F4TnLec Jxj+GaHuP9EleZ2WRkSOsYkYv31GLgSgGAe3WaG30b0CMHV5CuxWGyVycgbogPef dcZT/yao6062HSSF2+czqZ6qJ63gibgOPFnEubRCR9dhH4bX0dveIrySCcOLdDwd G9qNI5QIfPHrMDHgLZqEdosPoWIh6D3oKGNUxvJo9IJMEgLz4ZGMvZ4= -----END CERTIFICATE-----Generated at Mon Feb 9 20:05:27 2026 by rpki-client