This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/TQm8goqjLVI6iJwXimERg01NkD8.roa File: TQm8goqjLVI6iJwXimERg01NkD8.roa (raw, json) Hash identifier: Yb9LvZhPI+JqfVckpy3u12GtucpcmDjrrqhMvFWHU9U= Subject key identifier: 4D:09:BC:82:8A:A3:2D:52:3A:88:9C:17:8A:61:11:83:4D:4D:90:3F Certificate issuer: /CN=b025bac132e479a28df33573dd1096a9b7b78d32 Certificate serial: 019B7AC8EF8655E815224066C644B3E6AD6E Authority key identifier: B0:25:BA:C1:32:E4:79:A2:8D:F3:35:73:DD:10:96:A9:B7:B7:8D:32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/TQm8goqjLVI6iJwXimERg01NkD8.roa Signing time: Thu 01 Jan 2026 18:19:07 +0000 ROA not before: Thu 01 Jan 2026 18:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214169 IP address blocks: 185.132.68.0/22 maxlen: 22 185.214.0.0/22 maxlen: 22 2a0b:91c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:ef:86:55:e8:15:22:40:66:c6:44:b3:e6:ad:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b025bac132e479a28df33573dd1096a9b7b78d32 Validity Not Before: Jan 1 18:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d09bc828aa32d523a889c178a6111834d4d903f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:da:84:cd:a3:c3:aa:1a:4b:0b:55:75:20:df: a5:41:86:b9:d3:c3:4b:6f:de:5e:21:09:8d:5b:50: c2:01:64:a1:0e:a4:bf:e6:90:e8:12:e7:de:4c:4d: 2b:e0:5c:5d:ed:33:90:29:80:a6:7f:22:2e:92:d0: be:56:55:a6:51:1c:42:51:b2:7f:78:3d:f3:3b:fd: 96:07:12:4b:db:dd:48:54:b1:74:87:31:c3:d4:4f: 42:03:c4:fa:3b:49:34:65:e9:ca:26:86:b2:6c:59: 44:07:ad:fe:34:8e:d3:c4:33:ee:72:de:77:f5:ee: 69:c5:82:db:0b:c7:46:af:ce:67:aa:68:ae:9b:26: de:1b:7d:7e:6a:34:60:fc:34:49:ef:50:f2:2f:23: 9f:a2:0f:72:4f:4b:f9:c7:f3:97:c2:89:c8:0b:54: 28:f9:75:58:72:fc:52:8b:27:e1:23:d9:41:09:94: 4c:e7:c3:0c:98:0d:49:25:a7:40:b3:0e:08:8d:28: d2:09:26:98:d8:ca:7d:da:c7:9b:d5:e2:e0:ee:99: 7f:33:d6:4e:ce:05:b4:2f:a6:0a:4d:0d:71:af:09: 72:4b:ba:49:72:da:74:d2:ae:a7:28:21:5a:81:de: 93:24:83:90:dd:61:19:57:f2:6c:68:26:91:38:b8: 48:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:09:BC:82:8A:A3:2D:52:3A:88:9C:17:8A:61:11:83:4D:4D:90:3F X509v3 Authority Key Identifier: keyid:B0:25:BA:C1:32:E4:79:A2:8D:F3:35:73:DD:10:96:A9:B7:B7:8D:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/TQm8goqjLVI6iJwXimERg01NkD8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.132.68.0/22 185.214.0.0/22 IPv6: 2a0b:91c0::/29 Signature Algorithm: sha256WithRSAEncryption 16:69:f3:67:5a:37:c5:d9:5f:53:77:a6:2b:a2:4c:26:41:c2: 94:c6:ac:d9:73:50:0b:5c:38:56:ae:e1:20:72:fb:c5:c5:a7: 5b:c8:b9:99:1e:2f:54:29:41:6e:8f:0e:9b:d3:8b:36:88:b9: fc:7d:c1:db:24:eb:6b:fd:25:36:44:ff:69:df:ec:a0:55:e5: 08:fe:4f:49:27:c0:18:bd:99:7b:cf:a3:ca:05:2f:8b:8b:de: e4:ce:45:dc:49:6d:50:42:c7:2f:37:a8:bc:be:b2:3e:cd:5d: 97:8b:ca:f0:f0:5a:39:35:a2:0d:bd:1b:18:9a:a2:12:98:cc: 4b:49:46:15:44:fb:32:76:9a:42:69:f4:55:44:22:99:7a:ce: eb:00:b9:47:0c:25:aa:c1:b0:79:69:95:f1:6c:3f:05:d0:64: d6:18:d1:9e:1b:aa:71:81:5e:2b:52:18:38:0e:29:e6:56:d7: 47:4e:c6:3b:e4:2b:41:63:7c:d1:2c:c7:dd:15:7a:96:1f:f2: dd:ba:d1:38:41:c1:ed:ac:70:e6:bf:db:aa:ed:f5:df:51:da: cb:7f:1b:ad:24:32:8b:93:38:93:5a:81:3c:c7:bf:fc:74:56: 97:e4:34:3f:71:0e:34:d1:2c:70:a4:f5:22:64:55:8d:4c:87: 80:9d:46:33 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6yO+GVegVIkBmxkSz5q1uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMjViYWMxMzJlNDc5YTI4ZGYzMzU3M2RkMTA5NmE5Yjdi NzhkMzIwHhcNMjYwMTAxMTgxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDA5YmM4MjhhYTMyZDUyM2E4ODljMTc4YTYxMTE4MzRkNGQ5MDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6NqEzaPDqhpLC1V1IN+lQYa508NL b95eIQmNW1DCAWShDqS/5pDoEufeTE0r4Fxd7TOQKYCmfyIuktC+VlWmURxCUbJ/ eD3zO/2WBxJL291IVLF0hzHD1E9CA8T6O0k0ZenKJoaybFlEB63+NI7TxDPuct53 9e5pxYLbC8dGr85nqmiumybeG31+ajRg/DRJ71DyLyOfog9yT0v5x/OXwonIC1Qo +XVYcvxSiyfhI9lBCZRM58MMmA1JJadAsw4IjSjSCSaY2Mp92seb1eLg7pl/M9ZO zgW0L6YKTQ1xrwlyS7pJctp00q6nKCFagd6TJIOQ3WEZV/JsaCaROLhIQwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFE0JvIKKoy1SOoicF4phEYNNTZA/MB8GA1UdIwQY MBaAFLAlusEy5HmijfM1c90Qlqm3t40yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0NXNndUTGtlYUtOOHpWejNSQ1dxYmUzalRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9kMmQ5ZjMtOGQ1Ni00ODFjLThiYzQt N2M4ZjNmZWNkYjJjLzEvVFFtOGdvcWpMVkk2aUp3WGltRVJnMDFOa0Q4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9kMmQ5ZjMtOGQ1Ni00ODFjLThiYzQtN2M4ZjNmZWNkYjJj LzEvc0NXNndUTGtlYUtOOHpWejNSQ1dxYmUzalRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuYREAwQC udYAMA0EAgACMAcDBQMqC5HAMA0GCSqGSIb3DQEBCwUAA4IBAQAWafNnWjfF2V9T d6YrokwmQcKUxqzZc1ALXDhWruEgcvvFxadbyLmZHi9UKUFujw6b04s2iLn8fcHb JOtr/SU2RP9p3+ygVeUI/k9JJ8AYvZl7z6PKBS+Li97kzkXcSW1QQscvN6i8vrI+ zV2Xi8rw8Fo5NaINvRsYmqISmMxLSUYVRPsydppCafRVRCKZes7rALlHDCWqwbB5 aZXxbD8F0GTWGNGeG6pxgV4rUhg4DinmVtdHTsY75CtBY3zRLMfdFXqWH/LdutE4 QcHtrHDmv9uq7fXfUdrLfxutJDKLkziTWoE8x7/8dFaX5DQ/cQ400SxwpPUiZFWN TIeAnUYz -----END CERTIFICATE-----Generated at Mon Jan 26 18:19:19 2026 by rpki-client