This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/TQhEe58URpNrN2Jnycph0QGXtiU.roa File: TQhEe58URpNrN2Jnycph0QGXtiU.roa (raw, json) Hash identifier: SDBWT+lQSW/dRwGfON3QNcLwUvZTXcwca4jMtzmswvM= Subject key identifier: 4D:08:44:7B:9F:14:46:93:6B:37:62:67:C9:CA:61:D1:01:97:B6:25 Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Certificate serial: 019B7F83B4E07ACEDDA0BD72D5648673E6CE Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/TQhEe58URpNrN2Jnycph0QGXtiU.roa Signing time: Fri 02 Jan 2026 16:21:36 +0000 ROA not before: Fri 02 Jan 2026 16:21:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205502 IP address blocks: 188.72.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:b4:e0:7a:ce:dd:a0:bd:72:d5:64:86:73:e6:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Validity Not Before: Jan 2 16:21:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d08447b9f1446936b376267c9ca61d10197b625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:09:7b:05:a4:3a:29:d3:b9:10:61:32:c0:ae: ba:d0:48:24:89:f5:4d:13:4e:a5:27:60:8a:b8:62: 32:0a:ac:05:88:c0:19:bf:94:a9:af:32:fa:6e:f8: 21:84:0e:f5:49:e4:33:0c:16:8a:14:1b:bf:60:10: 27:bc:34:67:03:99:e6:69:47:a6:89:bd:52:c3:d3: ae:42:fb:89:4d:40:db:a0:a9:46:66:7c:d7:1a:0e: e4:5e:0c:41:cb:ed:96:af:0f:e2:31:8b:8f:18:b0: b5:86:db:6b:d2:77:ac:e6:3b:44:87:f7:96:bd:8d: 56:8d:29:b6:e5:bd:04:8f:7f:ce:67:6a:f5:ca:e8: 6c:e1:9a:9b:84:be:2d:51:9b:fc:6f:a1:b3:b7:5b: 5d:c0:55:5c:05:1e:0b:bf:c9:c9:3a:d5:f8:d9:5d: 87:21:90:b0:42:ff:71:d8:1d:ff:a8:93:1a:2c:ef: bd:63:57:de:b9:bd:07:9c:9a:cc:d5:c0:d8:25:8d: 65:94:2c:71:43:d0:2f:eb:cc:aa:5f:7a:e5:44:33: 88:36:c6:1c:c0:c8:97:dc:59:37:52:c0:9e:1d:a4: 7f:b8:71:f0:49:e9:90:21:7f:34:65:7a:de:d7:ab: a5:f7:d9:c2:0a:62:c0:7b:76:67:c2:2f:a1:13:3f: 17:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:08:44:7B:9F:14:46:93:6B:37:62:67:C9:CA:61:D1:01:97:B6:25 X509v3 Authority Key Identifier: keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/TQhEe58URpNrN2Jnycph0QGXtiU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.72.93.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:49:e2:9c:6d:b4:49:b3:ca:be:bb:3d:40:8a:94:b3:62:12: 6f:6c:09:17:93:16:d9:bb:cf:38:27:4d:9d:63:0a:a5:f3:b9: 7e:22:a4:ad:81:1d:a0:34:17:ab:bf:41:a0:7f:b5:16:ff:c9: 89:57:d3:87:2a:81:6a:b4:30:24:1b:b8:d5:cf:94:3b:68:39: 01:15:e0:e5:35:05:38:06:31:39:c8:68:8b:a8:9e:cd:0b:b1: ec:f7:52:07:33:97:b3:6f:72:65:7e:41:ef:74:af:2d:59:c5: 22:3b:a4:91:5d:66:27:09:9b:15:28:e9:8e:cb:2e:a3:96:dd: 28:32:03:f2:4d:64:2b:c8:df:e7:24:ac:51:a8:70:97:3c:8c: 3c:f6:97:ce:b5:10:69:f8:dc:eb:0a:5c:22:64:04:f0:8c:9c: 62:42:6e:63:6f:66:75:49:25:84:54:81:c2:02:0f:ed:50:91: a2:86:e5:21:67:c3:5a:e8:08:d1:dd:f8:58:79:7a:cb:12:46: cd:4d:9f:df:e3:e6:1b:39:84:be:e6:e4:91:ea:9c:bb:3c:45: 36:1d:5f:c6:c4:55:35:d1:07:07:24:c4:5b:a7:4c:d3:c9:52: 1d:8e:dc:a8:ed:29:3d:93:b3:f1:91:1c:fb:7f:d6:f6:89:54: 09:ec:a0:78 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g7Tges7doL1y1WSGc+bOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0 NzA2N2UwHhcNMjYwMTAyMTYyMTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDA4NDQ3YjlmMTQ0NjkzNmIzNzYyNjdjOWNhNjFkMTAxOTdiNjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Al7BaQ6KdO5EGEywK660EgkifVN E06lJ2CKuGIyCqwFiMAZv5SprzL6bvghhA71SeQzDBaKFBu/YBAnvDRnA5nmaUem ib1Sw9OuQvuJTUDboKlGZnzXGg7kXgxBy+2Wrw/iMYuPGLC1httr0nes5jtEh/eW vY1WjSm25b0Ej3/OZ2r1yuhs4ZqbhL4tUZv8b6Gzt1tdwFVcBR4Lv8nJOtX42V2H IZCwQv9x2B3/qJMaLO+9Y1feub0HnJrM1cDYJY1llCxxQ9Av68yqX3rlRDOINsYc wMiX3Fk3UsCeHaR/uHHwSemQIX80ZXre16ul99nCCmLAe3Znwi+hEz8XWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE0IRHufFEaTazdiZ8nKYdEBl7YlMB8GA1UdIwQY MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt OGM5NTgxZDk2ZDhmLzEvVFFoRWU1OFVScE5yTjJKbnljcGgwUUdYdGlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvEhdMA0G CSqGSIb3DQEBCwUAA4IBAQAuSeKcbbRJs8q+uz1AipSzYhJvbAkXkxbZu884J02d Ywql87l+IqStgR2gNBerv0Ggf7UW/8mJV9OHKoFqtDAkG7jVz5Q7aDkBFeDlNQU4 BjE5yGiLqJ7NC7Hs91IHM5ezb3JlfkHvdK8tWcUiO6SRXWYnCZsVKOmOyy6jlt0o MgPyTWQryN/nJKxRqHCXPIw89pfOtRBp+NzrClwiZATwjJxiQm5jb2Z1SSWEVIHC Ag/tUJGihuUhZ8Na6AjR3fhYeXrLEkbNTZ/f4+YbOYS+5uSR6py7PEU2HV/GxFU1 0QcHJMRbp0zTyVIdjtyo7Sk9k7PxkRz7f9b2iVQJ7KB4 -----END CERTIFICATE-----Generated at Mon Jan 26 04:51:39 2026 by rpki-client