This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/TQJC17LRiHCpRzm6vZH98Kx2YGE.roa File: TQJC17LRiHCpRzm6vZH98Kx2YGE.roa (raw, json) Hash identifier: CC6/FdzY8rWN99NywJxlTj8KoAeOw5QMq59YsrbSols= Subject key identifier: 4D:02:42:D7:B2:D1:88:70:A9:47:39:BA:BD:91:FD:F0:AC:76:60:61 Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7 Certificate serial: 019B77C7076F3D7ED56672E332A06079EFE6 Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/TQJC17LRiHCpRzm6vZH98Kx2YGE.roa Signing time: Thu 01 Jan 2026 04:18:10 +0000 ROA not before: Thu 01 Jan 2026 04:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 142019 IP address blocks: 188.209.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:07:6f:3d:7e:d5:66:72:e3:32:a0:60:79:ef:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7 Validity Not Before: Jan 1 04:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d0242d7b2d18870a94739babd91fdf0ac766061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:10:56:d1:9f:7e:06:7a:d4:4b:af:3b:62:16: 92:19:48:41:ad:bd:f7:08:88:d6:b5:21:bc:87:32: 55:68:c7:d8:e9:70:ae:06:ed:f1:09:91:7a:2c:17: 50:04:19:91:fb:40:e5:17:2f:d4:01:62:9c:d4:8e: 58:79:e9:6e:55:ce:b9:38:1a:02:75:0b:34:a1:14: 34:5b:8d:64:b3:e4:f1:4e:37:c5:19:ff:f3:7f:53: 24:12:e1:68:65:8a:8e:ea:c6:7d:e0:d5:67:54:2f: de:a4:5c:e9:23:3a:c3:db:8d:fe:92:d4:5e:28:b3: 42:8c:9e:41:55:01:b4:69:0a:8e:f9:bb:7b:7a:71: 1b:ce:ae:dc:42:06:5a:45:f2:d9:9f:7b:42:41:1e: 24:35:3c:78:c5:92:3f:d4:5a:1a:57:f5:eb:db:ba: fe:55:a0:3b:1d:ae:e4:a6:bb:27:01:5f:de:77:9c: 97:ee:f7:75:69:03:df:da:70:e7:17:e3:b9:0c:73: 61:1d:94:87:b2:4e:3f:a3:94:b0:59:8b:3c:7e:14: c9:90:6a:6a:55:af:ea:28:a1:b8:07:e6:24:d9:cb: 85:09:f7:57:b1:01:09:43:1f:2b:5f:c5:eb:d3:d9: b3:21:e0:cf:0d:4e:e7:7e:bb:f9:14:6d:70:54:3b: ef:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:02:42:D7:B2:D1:88:70:A9:47:39:BA:BD:91:FD:F0:AC:76:60:61 X509v3 Authority Key Identifier: keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/TQJC17LRiHCpRzm6vZH98Kx2YGE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.209.223.0/24 Signature Algorithm: sha256WithRSAEncryption 03:9b:07:78:50:cc:5f:23:9e:7d:ee:c1:24:9f:5b:71:0d:bc: 5a:82:df:11:b3:0e:25:6c:5e:32:f0:96:59:5b:1f:58:bb:64: 29:1a:f3:57:95:f8:29:9d:c9:58:48:33:c4:8a:ea:da:75:b6: c1:c2:3b:32:e5:7d:1e:fd:b2:e2:87:95:bb:21:78:d6:78:6e: 4f:7c:71:9e:f4:8d:9d:c6:58:fb:d4:1e:01:c2:21:2c:6e:c7: a0:fa:ed:3e:04:c2:42:03:6f:82:7f:2d:7d:e3:95:bb:04:bc: b7:b5:d0:bd:6d:9f:bc:7b:38:f1:19:a1:2c:6a:a9:76:d0:5e: 98:62:ab:07:31:a3:c2:bb:ba:04:05:6c:95:a3:d3:38:49:70: 6b:38:0e:df:06:c9:09:bd:d4:da:24:00:f0:e6:22:dc:c0:e6: 2c:49:71:7d:da:f7:a6:df:37:aa:de:e5:62:8d:58:5e:8d:0b: b2:35:e7:a7:94:84:67:46:d9:21:26:da:1f:d9:92:a2:fb:63: 72:08:45:bd:fd:e2:a2:75:07:1e:00:65:50:7f:eb:34:c4:0b: 88:65:0c:26:54:fc:54:78:2b:66:bd:09:70:0e:b6:d6:40:10: e6:c1:d5:6c:eb:dc:18:4e:b2:39:49:c8:36:4c:97:ae:f9:77: c6:02:45:f2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xwdvPX7VZnLjMqBgee/mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMDg4ZTA2ZDU1M2NmZjI5M2QyNzdmNGQ3NmMzYTcxMGJk OGIyZjcwHhcNMjYwMTAxMDQxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDAyNDJkN2IyZDE4ODcwYTk0NzM5YmFiZDkxZmRmMGFjNzY2MDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxBW0Z9+BnrUS687YhaSGUhBrb33 CIjWtSG8hzJVaMfY6XCuBu3xCZF6LBdQBBmR+0DlFy/UAWKc1I5YeeluVc65OBoC dQs0oRQ0W41ks+TxTjfFGf/zf1MkEuFoZYqO6sZ94NVnVC/epFzpIzrD243+ktRe KLNCjJ5BVQG0aQqO+bt7enEbzq7cQgZaRfLZn3tCQR4kNTx4xZI/1FoaV/Xr27r+ VaA7Ha7kprsnAV/ed5yX7vd1aQPf2nDnF+O5DHNhHZSHsk4/o5SwWYs8fhTJkGpq Va/qKKG4B+Yk2cuFCfdXsQEJQx8rX8Xr09mzIeDPDU7nfrv5FG1wVDvvlQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE0CQtey0YhwqUc5ur2R/fCsdmBhMB8GA1UdIwQY MBaAFKIIjgbVU8/yk9J39NdsOnEL2LL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTct YmJlYTI5MThlMTAyLzEvVFFKQzE3TFJpSENwUnptNnZaSDk4S3gyWUdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTctYmJlYTI5MThlMTAy LzEvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNHfMA0G CSqGSIb3DQEBCwUAA4IBAQADmwd4UMxfI5597sEkn1txDbxagt8Rsw4lbF4y8JZZ Wx9Yu2QpGvNXlfgpnclYSDPEiuradbbBwjsy5X0e/bLih5W7IXjWeG5PfHGe9I2d xlj71B4BwiEsbseg+u0+BMJCA2+Cfy1945W7BLy3tdC9bZ+8ezjxGaEsaql20F6Y YqsHMaPCu7oEBWyVo9M4SXBrOA7fBskJvdTaJADw5iLcwOYsSXF92vem3zeq3uVi jVhejQuyNeenlIRnRtkhJtof2ZKi+2NyCEW9/eKidQceAGVQf+s0xAuIZQwmVPxU eCtmvQlwDrbWQBDmwdVs69wYTrI5Scg2TJeu+XfGAkXy -----END CERTIFICATE-----Generated at Sun Jan 25 15:12:10 2026 by rpki-client