This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/tQeq3gyDlggE_iMVfQtijaWolKE.roa File: tQeq3gyDlggE_iMVfQtijaWolKE.roa (raw, json) Hash identifier: +8U51vzZRoC0d7LUoiUC8rmqZBGQmF1Hqr6UPr/Xav8= Subject key identifier: B5:07:AA:DE:0C:83:96:08:04:FE:23:15:7D:0B:62:8D:A5:A8:94:A1 Certificate issuer: /CN=aba835d060176ee8160c7930f87e693559090d78 Certificate serial: 019B7A5B54283695C5BE08D4C91795D87AD2 Authority key identifier: AB:A8:35:D0:60:17:6E:E8:16:0C:79:30:F8:7E:69:35:59:09:0D:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6g10GAXbugWDHkw-H5pNVkJDXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/tQeq3gyDlggE_iMVfQtijaWolKE.roa Signing time: Thu 01 Jan 2026 16:19:24 +0000 ROA not before: Thu 01 Jan 2026 16:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9135 IP address blocks: 213.164.128.0/19 maxlen: 19 213.164.137.0/24 maxlen: 24 213.164.138.0/24 maxlen: 24 2a00:fcc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft rsync://rpki.ripe.net/repository/DEFAULT/q6g10GAXbugWDHkw-H5pNVkJDXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:54:28:36:95:c5:be:08:d4:c9:17:95:d8:7a:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aba835d060176ee8160c7930f87e693559090d78 Validity Not Before: Jan 1 16:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b507aade0c83960804fe23157d0b628da5a894a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3e:16:d2:f6:ac:fc:71:02:10:2d:fe:08:1a: ba:88:5e:b7:5e:d1:2b:56:4a:04:77:3d:34:e5:53: d0:15:ff:bc:ad:2a:48:08:7f:b8:8b:f6:d9:2a:08: b3:52:97:92:85:f0:11:e0:95:70:a9:c2:a3:12:64: 78:dd:4e:52:2a:11:4f:ac:fc:ed:ed:ed:63:eb:d6: 09:14:44:f9:c5:49:a2:89:ea:bc:ff:c7:2a:8a:b4: af:01:af:21:d2:ee:da:92:14:de:63:fa:9f:fc:be: 52:30:fd:ac:59:e5:cf:4b:f6:b0:1f:4d:15:9d:e2: f1:94:13:4e:49:3c:ae:28:27:3d:3b:d0:c6:c7:85: f9:94:f9:60:bf:29:41:8d:ec:a0:6e:ba:0f:9c:db: a0:9d:6e:9d:e5:01:4f:54:0c:73:2e:a7:b3:82:73: 61:08:23:fb:70:db:56:d2:76:51:d3:04:71:ed:76: c7:34:9e:c8:b2:48:a2:2f:62:2d:ad:5c:4c:f5:eb: be:67:d0:a5:e1:6e:fb:03:0a:a5:63:59:af:86:f8: 12:2b:89:8b:f2:02:7a:64:6f:fe:89:5c:58:c5:a6: 3b:40:86:aa:3d:31:1f:06:64:af:dc:b1:da:c6:4c: 4f:04:08:8c:01:a4:59:e8:09:cd:eb:c5:4a:27:d7: 10:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:07:AA:DE:0C:83:96:08:04:FE:23:15:7D:0B:62:8D:A5:A8:94:A1 X509v3 Authority Key Identifier: keyid:AB:A8:35:D0:60:17:6E:E8:16:0C:79:30:F8:7E:69:35:59:09:0D:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6g10GAXbugWDHkw-H5pNVkJDXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/tQeq3gyDlggE_iMVfQtijaWolKE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.164.128.0/19 IPv6: 2a00:fcc0::/32 Signature Algorithm: sha256WithRSAEncryption b4:4b:cb:55:e5:75:b9:c1:02:15:a2:5c:56:d9:f1:55:79:72: d1:07:cf:ee:ee:4f:05:35:da:5b:28:e5:3d:6b:f0:92:64:fa: 51:b5:2d:34:08:7e:0b:92:5b:df:fe:6c:ad:d3:84:12:21:15: ac:56:30:dc:42:06:e1:44:a8:f4:14:18:34:15:61:97:c1:ae: 86:4a:22:b1:cf:b9:52:b8:bd:a9:2e:e9:b8:25:e5:c8:b4:2b: 08:bb:68:ee:be:24:8d:00:e1:d4:60:98:90:88:9a:33:bb:69: 32:70:a7:67:a5:a7:f9:54:f1:82:3c:16:ac:5e:b8:7c:9d:0f: f6:40:d9:65:26:0c:73:cf:95:bf:c3:2f:dc:99:cd:a3:fd:47: 38:b8:93:54:f3:1c:2b:35:5a:76:d0:dc:97:c3:a8:bb:37:fe: ff:17:6e:47:0b:68:a4:bf:5f:46:4d:2f:7d:c1:45:43:f4:3d: 09:a1:72:78:80:50:51:d8:cd:a1:e6:19:37:07:e8:20:b4:ff: 98:9a:4b:d6:82:76:39:6c:0d:5b:8f:9e:a6:12:77:df:22:9f: 55:cb:3a:b0:f0:0c:53:aa:ab:af:a4:4b:c4:4b:e3:3e:10:e7: 6d:b7:d6:be:d1:9d:eb:4a:ca:38:e0:38:f0:fe:1b:1f:7b:db: cc:e3:e7:f2 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6W1QoNpXFvgjUyReV2HrSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYTgzNWQwNjAxNzZlZTgxNjBjNzkzMGY4N2U2OTM1NTkw OTBkNzgwHhcNMjYwMTAxMTYxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTA3YWFkZTBjODM5NjA4MDRmZTIzMTU3ZDBiNjI4ZGE1YTg5NGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArD4W0vas/HECEC3+CBq6iF63XtEr VkoEdz005VPQFf+8rSpICH+4i/bZKgizUpeShfAR4JVwqcKjEmR43U5SKhFPrPzt 7e1j69YJFET5xUmiieq8/8cqirSvAa8h0u7akhTeY/qf/L5SMP2sWeXPS/awH00V neLxlBNOSTyuKCc9O9DGx4X5lPlgvylBjeygbroPnNugnW6d5QFPVAxzLqezgnNh CCP7cNtW0nZR0wRx7XbHNJ7IskiiL2ItrVxM9eu+Z9Cl4W77AwqlY1mvhvgSK4mL 8gJ6ZG/+iVxYxaY7QIaqPTEfBmSv3LHaxkxPBAiMAaRZ6AnN68VKJ9cQAwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLUHqt4Mg5YIBP4jFX0LYo2lqJShMB8GA1UdIwQY MBaAFKuoNdBgF27oFgx5MPh+aTVZCQ14MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTZnMTBHQVhidWdXREhrdy1INXBOVmtKRFhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80NmQxZDItYTZjMC00N2JlLTg3NzEt YzNhYjZiMzQ2NmMwLzEvdFFlcTNneURsZ2dFX2lNVmZRdGlqYVdvbEtFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi80NmQxZDItYTZjMC00N2JlLTg3NzEtYzNhYjZiMzQ2NmMw LzEvcTZnMTBHQVhidWdXREhrdy1INXBOVmtKRFhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQF1aSAMA0E AgACMAcDBQAqAPzAMA0GCSqGSIb3DQEBCwUAA4IBAQC0S8tV5XW5wQIVolxW2fFV eXLRB8/u7k8FNdpbKOU9a/CSZPpRtS00CH4Lklvf/myt04QSIRWsVjDcQgbhRKj0 FBg0FWGXwa6GSiKxz7lSuL2pLum4JeXItCsIu2juviSNAOHUYJiQiJozu2kycKdn paf5VPGCPBasXrh8nQ/2QNllJgxzz5W/wy/cmc2j/Uc4uJNU8xwrNVp20NyXw6i7 N/7/F25HC2ikv19GTS99wUVD9D0JoXJ4gFBR2M2h5hk3B+ggtP+YmkvWgnY5bA1b j56mEnffIp9Vyzqw8AxTqquvpEvES+M+EOdtt9a+0Z3rSso44Djw/hsfe9vM4+fy -----END CERTIFICATE-----Generated at Mon Feb 9 22:30:45 2026 by rpki-client