This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/Tqhx4Fn_ogmc03013r8yI8JBIyo.roa File: Tqhx4Fn_ogmc03013r8yI8JBIyo.roa (raw, json) Hash identifier: n+rTrm4PulAJ0u2rK6/67Sh0qOIq9tX+Xq5NsrAfUfU= Subject key identifier: 4E:A8:71:E0:59:FF:A2:09:9C:D3:7D:35:DE:BF:32:23:C2:41:23:2A Certificate issuer: /CN=f81fc8c82986310c5f6a9b56fb76b6bd9877fcc0 Certificate serial: 019BDBDE5D8127BDABF8B98EB442788C7063 Authority key identifier: F8:1F:C8:C8:29:86:31:0C:5F:6A:9B:56:FB:76:B6:BD:98:77:FC:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-B_IyCmGMQxfaptW-3a2vZh3_MA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/Tqhx4Fn_ogmc03013r8yI8JBIyo.roa Signing time: Tue 20 Jan 2026 14:45:41 +0000 ROA not before: Tue 20 Jan 2026 14:45:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44684 IP address blocks: 36.255.148.0/22 maxlen: 22 45.139.80.0/22 maxlen: 22 45.139.80.0/24 maxlen: 24 46.235.224.0/21 maxlen: 24 93.93.128.0/21 maxlen: 21 103.105.48.0/22 maxlen: 22 103.209.164.0/22 maxlen: 22 176.126.240.0/21 maxlen: 21 185.47.60.0/22 maxlen: 22 185.101.96.0/24 maxlen: 24 185.139.144.0/22 maxlen: 22 195.10.223.0/24 maxlen: 24 195.191.54.0/23 maxlen: 23 195.191.56.0/23 maxlen: 23 2a00:1098::/32 maxlen: 48 2a04:ad80::/29 maxlen: 29 2a04:ad80::/47 maxlen: 48 2a06:1c80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.mft rsync://rpki.ripe.net/repository/DEFAULT/1-B_IyCmGMQxfaptW-3a2vZh3_MA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:db:de:5d:81:27:bd:ab:f8:b9:8e:b4:42:78:8c:70:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f81fc8c82986310c5f6a9b56fb76b6bd9877fcc0 Validity Not Before: Jan 20 14:45:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ea871e059ffa2099cd37d35debf3223c241232a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1c:e3:5e:26:6a:bc:f2:f9:26:ad:5d:57:0d: 22:e6:d5:f6:35:4c:fc:2e:a6:c2:51:90:fe:6d:ea: 91:8a:5f:12:13:ac:6e:5d:20:8b:e7:5a:b8:ea:25: c7:d0:30:d5:82:b0:74:67:c3:45:9b:1a:d1:30:9f: e0:de:2f:19:a2:07:8b:2f:67:1a:60:ad:c2:a7:d5: 1b:2d:92:61:23:25:db:20:3c:5e:4e:49:e2:59:4a: cc:fe:8c:7c:b3:a4:fc:32:bc:60:94:71:a3:6a:be: 5e:8c:0d:78:53:d6:a7:bc:d2:ec:2f:21:4a:22:d2: 70:47:06:59:90:e5:6b:0a:02:c6:58:37:75:7a:73: 07:e5:00:a5:19:31:b0:b6:26:5b:a6:89:1b:a6:c5: 65:bc:5e:44:52:53:6d:86:d0:95:17:ba:f8:b1:c9: f8:d1:7b:59:af:2e:57:fa:b9:3a:4b:ca:50:6b:09: e5:1f:d0:31:db:49:2b:8d:a5:ab:3e:a8:31:71:f5: 37:97:61:d2:bf:ad:c1:3f:96:a5:fd:96:e4:bf:e0: fa:28:8f:46:64:89:c4:13:aa:db:d4:4f:b3:70:38: 2f:11:7c:04:b4:39:b7:01:a5:64:ac:40:a4:a3:29: 7d:00:8a:71:4a:c6:1f:19:82:f9:92:f8:9b:12:27: d2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A8:71:E0:59:FF:A2:09:9C:D3:7D:35:DE:BF:32:23:C2:41:23:2A X509v3 Authority Key Identifier: keyid:F8:1F:C8:C8:29:86:31:0C:5F:6A:9B:56:FB:76:B6:BD:98:77:FC:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-B_IyCmGMQxfaptW-3a2vZh3_MA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/Tqhx4Fn_ogmc03013r8yI8JBIyo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 36.255.148.0/22 45.139.80.0/22 46.235.224.0/21 93.93.128.0/21 103.105.48.0/22 103.209.164.0/22 176.126.240.0/21 185.47.60.0/22 185.101.96.0/24 185.139.144.0/22 195.10.223.0/24 195.191.54.0-195.191.57.255 IPv6: 2a00:1098::/32 2a04:ad80::/29 2a06:1c80::/29 Signature Algorithm: sha256WithRSAEncryption 6a:e6:21:a3:af:3c:3b:78:19:66:ad:2a:16:73:42:8b:69:32: e9:21:0a:e4:82:6f:30:a0:ff:8f:67:b0:07:0b:0e:7c:c1:2b: b9:5a:66:e7:e8:4b:06:d3:3c:a3:40:ad:df:fb:ce:30:70:35: 10:1c:69:fc:b4:5e:c2:8c:80:b0:79:d9:5a:84:e3:46:eb:15: ea:8e:0b:7b:a4:4f:e0:52:96:66:a4:73:de:5d:82:62:c5:ca: bf:d1:05:f7:76:94:43:1b:32:ec:74:ba:8e:92:4b:2f:29:60: bf:5d:19:a7:cb:c0:4a:65:a0:1a:17:a8:2b:e1:5b:d0:eb:4c: 8c:3c:eb:a4:26:a4:9e:9c:fd:6f:60:4c:c7:aa:00:d5:6c:1e: e7:17:c9:a4:ce:e5:d8:a8:1a:1b:5f:07:b2:7b:c5:15:66:37: 56:0b:ea:c4:94:ee:24:99:45:33:d2:74:20:49:69:ad:92:ab: 37:65:f2:eb:17:15:f4:77:29:cb:c1:7d:ef:89:ab:a7:a9:48: b8:a7:d9:ff:3d:72:87:69:0a:39:62:52:5f:a9:96:e3:fc:1f: bb:9e:89:66:ad:57:13:35:2e:2c:5a:a5:b3:17:bb:36:0e:17: dc:62:89:e8:55:c5:60:5d:24:a6:7c:80:10:a9:8f:e8:9e:7b: 7e:72:20:18 -----BEGIN CERTIFICATE----- MIIFZzCCBE+gAwIBAgISAZvb3l2BJ72r+LmOtEJ4jHBjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MWZjOGM4Mjk4NjMxMGM1ZjZhOWI1NmZiNzZiNmJkOTg3 N2ZjYzAwHhcNMjYwMTIwMTQ0NTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZWE4NzFlMDU5ZmZhMjA5OWNkMzdkMzVkZWJmMzIyM2MyNDEyMzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRzjXiZqvPL5Jq1dVw0i5tX2NUz8 LqbCUZD+beqRil8SE6xuXSCL51q46iXH0DDVgrB0Z8NFmxrRMJ/g3i8ZogeLL2ca YK3Cp9UbLZJhIyXbIDxeTkniWUrM/ox8s6T8MrxglHGjar5ejA14U9anvNLsLyFK ItJwRwZZkOVrCgLGWDd1enMH5QClGTGwtiZbpokbpsVlvF5EUlNthtCVF7r4scn4 0XtZry5X+rk6S8pQawnlH9Ax20krjaWrPqgxcfU3l2HSv63BP5al/Zbkv+D6KI9G ZInEE6rb1E+zcDgvEXwEtDm3AaVkrECkoyl9AIpxSsYfGYL5kvibEifSUwIDAQAB o4ICczCCAm8wHQYDVR0OBBYEFE6oceBZ/6IJnNN9Nd6/MiPCQSMqMB8GA1UdIwQY MBaAFPgfyMgphjEMX2qbVvt2tr2Yd/zAMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1CX0l5Q21HTVF4ZmFwdFctM2EydlpoM19NQS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGYvM2U1OWM5LTlmMDEtNDU2Mi05MjFk LTUxM2NhOGU2Y2VjZS8xL1RxaHg0Rm5fb2dtYzAzMDEzcjh5SThKQkl5by5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOGYvM2U1OWM5LTlmMDEtNDU2Mi05MjFkLTUxM2NhOGU2Y2Vj ZS8xLzEtQl9JeUNtR01ReGZhcHRXLTNhMnZaaDNfTUEuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwgYYGCCsGAQUFBwEHAQH/BHcwdTBWBAIAATBQAwQCJP+U AwQCLYtQAwQDLuvgAwQDXV2AAwQCZ2kwAwQCZ9GkAwQDsH7wAwQCuS88AwQAuWVg AwQCuYuQAwQAwwrfMAwDBAHDvzYDBAHDvzgwGwQCAAIwFQMFACoAEJgDBQMqBK2A AwUDKgYcgDANBgkqhkiG9w0BAQsFAAOCAQEAauYho688O3gZZq0qFnNCi2ky6SEK 5IJvMKD/j2ewBwsOfMEruVpm5+hLBtM8o0Ct3/vOMHA1EBxp/LRewoyAsHnZWoTj RusV6o4Le6RP4FKWZqRz3l2CYsXKv9EF93aUQxsy7HS6jpJLLylgv10Zp8vASmWg GheoK+Fb0OtMjDzrpCaknpz9b2BMx6oA1Wwe5xfJpM7l2KgaG18HsnvFFWY3Vgvq xJTuJJlFM9J0IElprZKrN2Xy6xcV9Hcpy8F974mrp6lIuKfZ/z1yh2kKOWJSX6mW 4/wfu56JZq1XEzUuLFqlsxe7Ng4X3GKJ6FXFYF0kpnyAEKmP6J57fnIgGA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:25:26 2026 by rpki-client