This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/tTro6Q3OQALzLcA8FA4eU5RfBWA.roa File: tTro6Q3OQALzLcA8FA4eU5RfBWA.roa (raw, json) Hash identifier: jtcqT3NEeBB17kUbe2vD9a8c2cug0yjIQxz7WQqkvtg= Subject key identifier: B5:3A:E8:E9:0D:CE:40:02:F3:2D:C0:3C:14:0E:1E:53:94:5F:05:60 Certificate issuer: /CN=85f4ee14f6d38a7cf071279dff7b391702e37135 Certificate serial: 019B7DCB52BAC7AA49C4F0E84CE8DDAF5E4C Authority key identifier: 85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/tTro6Q3OQALzLcA8FA4eU5RfBWA.roa Signing time: Fri 02 Jan 2026 08:20:35 +0000 ROA not before: Fri 02 Jan 2026 08:20:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203505 IP address blocks: 185.146.224.0/24 maxlen: 24 185.146.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:52:ba:c7:aa:49:c4:f0:e8:4c:e8:dd:af:5e:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85f4ee14f6d38a7cf071279dff7b391702e37135 Validity Not Before: Jan 2 08:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b53ae8e90dce4002f32dc03c140e1e53945f0560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e3:c9:bb:b1:06:6d:b3:5f:19:9b:3b:5c:72: 5a:bc:b4:90:47:ff:42:5e:d9:1d:67:88:ea:fe:7b: 14:51:53:1d:77:90:d5:4f:97:e3:90:30:92:f1:43: ad:7a:bd:03:bb:96:6a:d9:1e:e4:42:80:ca:87:38: 1b:18:f1:13:60:5a:40:25:e9:81:97:32:0f:22:70: 9f:22:af:f5:46:a5:84:5c:02:40:1f:68:21:d0:69: df:26:27:1c:68:93:ab:74:4a:66:d5:3e:3d:c5:a9: 7d:45:0e:5d:ad:06:4d:95:e6:34:18:1d:43:f0:c1: 03:82:1a:41:1a:35:0d:7f:54:66:f8:52:7a:6c:ce: 39:f6:06:de:3d:9d:3c:8d:ad:fe:3a:b4:c1:08:49: 29:b0:08:ab:24:63:e3:a3:3e:da:0d:71:e6:46:5d: 50:11:2c:bd:f8:70:99:72:c9:be:d1:86:5c:4b:1e: b5:4b:84:9c:ef:d1:80:64:b6:9b:11:57:bf:06:af: 4b:5b:99:8f:25:44:a8:90:f7:c8:3d:ce:97:30:52: e6:36:4f:4b:47:38:94:9f:41:85:d1:ea:e0:47:0b: 47:38:2d:a3:dd:58:1d:5d:a8:41:fc:cf:fe:cc:9c: 49:5b:d0:03:ab:02:3a:82:2e:49:93:e8:6d:95:63: a0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:3A:E8:E9:0D:CE:40:02:F3:2D:C0:3C:14:0E:1E:53:94:5F:05:60 X509v3 Authority Key Identifier: keyid:85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/tTro6Q3OQALzLcA8FA4eU5RfBWA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.146.224.0/23 Signature Algorithm: sha256WithRSAEncryption 96:5a:54:19:b6:a3:03:cf:b2:2f:e2:31:18:10:4a:78:52:76: 53:07:bb:61:62:d0:03:2d:ed:17:80:3e:27:2a:4d:d4:42:ae: 25:d4:24:1c:f9:56:b3:8d:91:cb:2f:cc:f0:b4:4a:33:83:75: ba:9f:0a:73:97:43:a2:12:9d:a4:d5:90:12:06:9a:50:63:0d: cf:51:4d:5c:0b:cc:b8:fe:d1:4d:04:fa:20:5d:60:d5:2c:4d: 2c:ca:5e:d3:a2:33:eb:20:80:49:ae:a9:1f:8a:44:5e:0f:dc: ed:59:f9:2a:fd:14:9d:8a:67:7d:90:35:37:59:7a:0d:26:43: 32:d3:17:1d:c9:ee:8c:a5:0e:f9:1b:72:77:3f:e8:a3:5c:f2: 14:a1:25:63:42:dc:1f:e2:7b:73:bb:57:c6:01:15:25:ad:1d: 0c:ef:61:a6:25:8b:1e:f9:c7:9b:09:f5:ac:b6:77:d5:0b:2e: 02:d8:53:f3:56:32:62:35:25:6b:38:f3:4a:34:a7:86:b6:56: 1d:0c:bc:29:e6:b2:17:e0:55:c3:21:50:53:33:23:fd:dd:68: 01:d0:c2:7f:d2:d1:08:35:18:cb:71:56:52:95:8b:0c:8e:74: 46:59:f9:1c:91:c9:a5:20:bd:af:07:23:3c:29:fb:c8:eb:ce: 0e:c7:a2:ea -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y1K6x6pJxPDoTOjdr15MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ZjRlZTE0ZjZkMzhhN2NmMDcxMjc5ZGZmN2IzOTE3MDJl MzcxMzUwHhcNMjYwMTAyMDgyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTNhZThlOTBkY2U0MDAyZjMyZGMwM2MxNDBlMWU1Mzk0NWYwNTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsePJu7EGbbNfGZs7XHJavLSQR/9C XtkdZ4jq/nsUUVMdd5DVT5fjkDCS8UOter0Du5Zq2R7kQoDKhzgbGPETYFpAJemB lzIPInCfIq/1RqWEXAJAH2gh0GnfJiccaJOrdEpm1T49xal9RQ5drQZNleY0GB1D 8MEDghpBGjUNf1Rm+FJ6bM459gbePZ08ja3+OrTBCEkpsAirJGPjoz7aDXHmRl1Q ESy9+HCZcsm+0YZcSx61S4Sc79GAZLabEVe/Bq9LW5mPJUSokPfIPc6XMFLmNk9L RziUn0GF0ergRwtHOC2j3VgdXahB/M/+zJxJW9ADqwI6gi5Jk+htlWOgBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLU66OkNzkAC8y3APBQOHlOUXwVgMB8GA1UdIwQY MBaAFIX07hT204p88HEnnf97ORcC43E1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGZUdUZQYlRpbnp3Y1NlZF8zczVGd0xqY1RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80ZGYzOWEtNzgzYy00ZDdkLWIxYmUt YmZkOTVhOWE2ZTY0LzEvdFRybzZRM09RQUx6TGNBOEZBNGVVNVJmQldBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi80ZGYzOWEtNzgzYy00ZDdkLWIxYmUtYmZkOTVhOWE2ZTY0 LzEvaGZUdUZQYlRpbnp3Y1NlZF8zczVGd0xqY1RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuZLgMA0G CSqGSIb3DQEBCwUAA4IBAQCWWlQZtqMDz7Iv4jEYEEp4UnZTB7thYtADLe0XgD4n Kk3UQq4l1CQc+VazjZHLL8zwtEozg3W6nwpzl0OiEp2k1ZASBppQYw3PUU1cC8y4 /tFNBPogXWDVLE0syl7TojPrIIBJrqkfikReD9ztWfkq/RSdimd9kDU3WXoNJkMy 0xcdye6MpQ75G3J3P+ijXPIUoSVjQtwf4ntzu1fGARUlrR0M72GmJYse+cebCfWs tnfVCy4C2FPzVjJiNSVrOPNKNKeGtlYdDLwp5rIX4FXDIVBTMyP93WgB0MJ/0tEI NRjLcVZSlYsMjnRGWfkckcmlIL2vByM8KfvI684Ox6Lq -----END CERTIFICATE-----Generated at Mon Jan 26 18:19:26 2026 by rpki-client