This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/TqnPMVDh9HpYev_FIZchp86-qnU.roa File: TqnPMVDh9HpYev_FIZchp86-qnU.roa (raw, json) Hash identifier: PYVLbHuRs4EcM0BL7ja7AFfgZkv0Ouc4hw35RTYQcM4= Subject key identifier: 4E:A9:CF:31:50:E1:F4:7A:58:7A:FF:C5:21:97:21:A7:CE:BE:AA:75 Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Certificate serial: 019B7BA31FD050CC5D52EBB2B958874225D5 Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/TqnPMVDh9HpYev_FIZchp86-qnU.roa Signing time: Thu 01 Jan 2026 22:17:26 +0000 ROA not before: Thu 01 Jan 2026 22:17:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 54339 IP address blocks: 62.112.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:1f:d0:50:cc:5d:52:eb:b2:b9:58:87:42:25:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Validity Not Before: Jan 1 22:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ea9cf3150e1f47a587affc5219721a7cebeaa75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8f:ba:7c:a9:72:b1:9d:c2:d5:65:d0:de:80: a8:9f:73:b9:3d:64:ba:14:00:63:8f:35:08:05:85: 9e:8f:01:af:9d:68:b6:6f:9b:8b:de:fa:e0:ef:cd: 26:4d:c0:eb:c9:52:80:46:14:63:f0:d8:24:20:4e: 3d:c9:47:f9:eb:35:9c:1a:c0:de:fb:4b:8a:e9:9d: 92:bf:c9:b6:c7:71:90:f9:62:af:37:6e:3b:63:fb: 11:08:b3:ea:68:a2:5d:02:36:6e:bc:06:c6:8d:2d: 7d:3e:9f:01:af:7b:80:c1:3a:e4:11:19:d1:c8:28: 33:17:12:b3:cb:00:bf:ff:e2:ef:7a:49:2b:b9:52: 6d:4e:fc:a3:1d:cb:b8:d2:a0:01:99:79:03:ce:3e: 3b:c4:6a:26:5b:3b:0e:3f:0f:ba:3f:37:2f:98:0b: 93:72:3f:04:de:ce:42:8c:9f:bc:d6:f2:35:fa:20: f8:45:d0:18:a9:54:48:3f:19:0d:0f:8c:26:a2:ce: d7:b2:34:44:57:4c:15:00:51:22:39:32:73:5c:88: 3d:04:a7:6e:f2:41:7c:26:15:86:88:80:7b:a0:14: 62:f2:4e:89:17:e0:fc:16:28:88:ef:cf:59:c8:44: ec:e8:e1:a2:11:ee:bf:34:ce:b2:3a:5f:9d:99:76: 05:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A9:CF:31:50:E1:F4:7A:58:7A:FF:C5:21:97:21:A7:CE:BE:AA:75 X509v3 Authority Key Identifier: keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/TqnPMVDh9HpYev_FIZchp86-qnU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.112.206.0/24 Signature Algorithm: sha256WithRSAEncryption ad:03:8d:3d:39:ac:98:61:48:5b:9f:26:5d:73:7f:a1:36:3e: 58:d1:9e:77:d2:d3:3e:8d:99:77:2f:2a:e6:bb:ac:a6:74:45: 65:e5:73:b3:68:6d:fc:df:75:3d:0e:a3:46:81:e3:d3:a9:6d: bc:29:66:16:a9:bc:1f:dd:a6:45:3e:67:2c:a7:8b:dd:c8:35: 70:d4:64:7c:97:bb:92:e2:c4:49:bf:ec:8a:1b:06:ce:79:98: 91:1c:50:62:3c:0a:e5:56:5c:5d:db:2c:8e:6f:85:79:c8:59: 62:43:0c:7c:ec:f3:e1:73:38:43:fb:a4:02:bc:67:af:fc:83: 5f:da:92:ca:94:47:c7:8b:ae:81:56:e0:db:c1:72:11:f7:38: 7d:b2:f5:48:cb:81:00:e7:1c:d8:0d:42:08:61:d1:da:54:d7: e3:8b:62:61:72:77:b9:85:7b:c7:ee:34:f4:bb:52:43:af:ba: a2:b5:c5:d3:95:aa:a3:63:ed:ba:e5:88:cc:d2:d1:9e:18:8a: e3:61:ce:0c:18:3d:ef:a7:7c:1d:e8:60:18:78:5c:ab:93:7a: f9:55:5e:e4:d5:06:8c:77:4a:8c:d8:ac:25:8d:ae:02:06:60: 3d:8b:43:ca:5e:3c:a9:6c:8b:82:6a:22:d3:a1:5a:5d:6e:06: 27:4d:39:fa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7ox/QUMxdUuuyuViHQiXVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NmFmYzUxYzkyMmZkODQyZmVjNWIwY2JiZDI2ZWJkYmQx YTE2MWUwHhcNMjYwMTAxMjIxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZWE5Y2YzMTUwZTFmNDdhNTg3YWZmYzUyMTk3MjFhN2NlYmVhYTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4+6fKlysZ3C1WXQ3oCon3O5PWS6 FABjjzUIBYWejwGvnWi2b5uL3vrg780mTcDryVKARhRj8NgkIE49yUf56zWcGsDe +0uK6Z2Sv8m2x3GQ+WKvN247Y/sRCLPqaKJdAjZuvAbGjS19Pp8Br3uAwTrkERnR yCgzFxKzywC//+LvekkruVJtTvyjHcu40qABmXkDzj47xGomWzsOPw+6PzcvmAuT cj8E3s5CjJ+81vI1+iD4RdAYqVRIPxkND4wmos7XsjREV0wVAFEiOTJzXIg9BKdu 8kF8JhWGiIB7oBRi8k6JF+D8FiiI789ZyETs6OGiEe6/NM6yOl+dmXYF+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE6pzzFQ4fR6WHr/xSGXIafOvqp1MB8GA1UdIwQY MBaAFBZq/FHJIv2EL+xbDLvSbr29GhYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEt MTNiOTExMGNlMjBjLzEvVHFuUE1WRGg5SHBZZXZfRklaY2hwODYtcW5VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEtMTNiOTExMGNlMjBj LzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPnDOMA0G CSqGSIb3DQEBCwUAA4IBAQCtA409OayYYUhbnyZdc3+hNj5Y0Z530tM+jZl3Lyrm u6ymdEVl5XOzaG3833U9DqNGgePTqW28KWYWqbwf3aZFPmcsp4vdyDVw1GR8l7uS 4sRJv+yKGwbOeZiRHFBiPArlVlxd2yyOb4V5yFliQwx87PPhczhD+6QCvGev/INf 2pLKlEfHi66BVuDbwXIR9zh9svVIy4EA5xzYDUIIYdHaVNfji2Jhcne5hXvH7jT0 u1JDr7qitcXTlaqjY+265YjM0tGeGIrjYc4MGD3vp3wd6GAYeFyrk3r5VV7k1QaM d0qM2Kwlja4CBmA9i0PKXjypbIuCaiLToVpdbgYnTTn6 -----END CERTIFICATE-----Generated at Fri Jan 9 21:28:19 2026 by rpki-client