This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/TjgQANrKozyjOw4w5hYOpjN8uMI.roa File: TjgQANrKozyjOw4w5hYOpjN8uMI.roa (raw, json) Hash identifier: ZPk1Xebxi+DiSuX9N5KulEgI7Xg4MHf0W/5nIFTVTvE= Subject key identifier: 4E:38:10:00:DA:CA:A3:3C:A3:3B:0E:30:E6:16:0E:A6:33:7C:B8:C2 Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045 Certificate serial: 019B76EB8A8BF73ABA73AA618F91CF7C8938 Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/TjgQANrKozyjOw4w5hYOpjN8uMI.roa Signing time: Thu 01 Jan 2026 00:18:26 +0000 ROA not before: Thu 01 Jan 2026 00:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206991 IP address blocks: 185.123.100.0/24 maxlen: 24 185.123.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:8a:8b:f7:3a:ba:73:aa:61:8f:91:cf:7c:89:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045 Validity Not Before: Jan 1 00:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e381000dacaa33ca33b0e30e6160ea6337cb8c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2d:50:30:32:8c:90:2b:4e:3f:a9:d8:14:14: bd:3f:05:39:8b:0a:58:ee:7f:ac:aa:8a:33:d1:a2: 92:7f:1b:af:05:52:1e:52:08:4e:82:ce:30:ea:78: 48:c2:e2:f6:d3:4f:cc:59:87:61:0d:60:ad:44:a2: 07:c8:85:a7:99:e9:3a:6c:e6:c3:c4:86:12:52:7a: 7b:f1:da:21:49:89:12:ae:e6:8b:c0:98:2f:09:e7: e8:3c:ad:69:63:d8:5b:fb:c6:2c:9e:63:c4:c0:59: ec:75:c7:10:96:32:5f:49:a6:ac:ae:43:53:da:0e: 54:1e:83:d0:50:e0:e6:55:07:f0:dc:eb:4c:90:f4: ae:c7:42:d1:9c:49:d5:4f:50:a1:a0:c9:0f:b1:78: 51:a2:57:ab:73:7c:1d:ba:b0:db:4a:d8:17:57:55: 5c:5c:d3:9f:f6:eb:d2:70:71:55:29:10:7c:b4:98: 69:18:09:f6:11:e1:0b:dd:b3:8c:0b:0e:15:89:90: 17:65:c9:57:61:b1:97:b1:8b:f6:40:31:f2:e3:27: 78:b0:e0:8d:c4:f1:36:6b:9b:30:94:84:8d:d9:32: 70:a9:38:fe:ab:b3:99:f7:53:89:11:9f:46:6f:4e: 1c:52:a0:4e:fd:90:c0:6b:2d:ef:07:29:e8:88:2d: a8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:38:10:00:DA:CA:A3:3C:A3:3B:0E:30:E6:16:0E:A6:33:7C:B8:C2 X509v3 Authority Key Identifier: keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/TjgQANrKozyjOw4w5hYOpjN8uMI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.123.100.0/23 Signature Algorithm: sha256WithRSAEncryption 78:25:63:fd:61:cb:55:27:eb:4a:ab:c2:05:e3:15:56:44:84: bc:fa:5f:7d:3b:04:fb:d2:bf:d5:ca:03:86:49:05:4c:6b:8c: ed:a8:c1:cc:e5:1a:8f:be:bc:61:9f:85:85:e2:cb:ad:3b:65: 0b:68:ac:c8:a6:4d:10:b3:2e:f5:1e:75:f1:1e:2b:f6:42:6f: a3:cb:f1:34:54:19:f5:6a:0a:f8:3e:94:b5:bf:e1:0c:33:22: 7c:3b:ef:d8:c2:92:99:26:13:ec:db:85:5f:48:1c:6c:72:ba: c8:ab:9c:f7:3a:7e:e9:4c:72:9d:b9:84:50:35:83:13:eb:17: d9:b1:0f:e6:26:ae:fa:39:02:42:12:03:6e:2e:0a:f3:ef:ea: 0d:72:1c:c0:c7:68:d1:5a:9a:1c:39:f0:49:7f:f7:1a:24:7d: ae:b4:92:94:26:63:a4:7a:d7:79:a2:3b:c8:58:f9:46:de:8a: 2f:a8:ea:e8:48:e0:49:97:ee:24:12:1f:ef:7e:8c:f3:b1:b8: 82:d5:c2:27:07:1e:45:74:e0:da:ac:67:70:4f:91:38:c5:73: df:35:0c:ba:98:6c:94:0c:fe:37:47:d6:4c:a1:90:e5:0b:82: b7:48:ed:4b:99:45:0c:38:68:91:e3:4f:8a:b4:6f:d5:42:eb: 30:d1:ea:60 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt264qL9zq6c6phj5HPfIk4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MDU2ZmE5NjI1YjZjODc0MDQyNjdjNmRjMjE5OTI0YWMx NjAwNDUwHhcNMjYwMTAxMDAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTM4MTAwMGRhY2FhMzNjYTMzYjBlMzBlNjE2MGVhNjMzN2NiOGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoC1QMDKMkCtOP6nYFBS9PwU5iwpY 7n+sqooz0aKSfxuvBVIeUghOgs4w6nhIwuL200/MWYdhDWCtRKIHyIWnmek6bObD xIYSUnp78dohSYkSruaLwJgvCefoPK1pY9hb+8YsnmPEwFnsdccQljJfSaasrkNT 2g5UHoPQUODmVQfw3OtMkPSux0LRnEnVT1ChoMkPsXhRolerc3wdurDbStgXV1Vc XNOf9uvScHFVKRB8tJhpGAn2EeEL3bOMCw4ViZAXZclXYbGXsYv2QDHy4yd4sOCN xPE2a5swlISN2TJwqTj+q7OZ91OJEZ9Gb04cUqBO/ZDAay3vBynoiC2oawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE44EADayqM8ozsOMOYWDqYzfLjCMB8GA1UdIwQY MBaAFIkFb6liW2yHQEJnxtwhmSSsFgBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQt NTE5MjAzNzMzNTNjLzEvVGpnUUFOcktvenlqT3c0dzVoWU9wak44dU1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQtNTE5MjAzNzMzNTNj LzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuXtkMA0G CSqGSIb3DQEBCwUAA4IBAQB4JWP9YctVJ+tKq8IF4xVWRIS8+l99OwT70r/VygOG SQVMa4ztqMHM5RqPvrxhn4WF4sutO2ULaKzIpk0Qsy71HnXxHiv2Qm+jy/E0VBn1 agr4PpS1v+EMMyJ8O+/YwpKZJhPs24VfSBxscrrIq5z3On7pTHKduYRQNYMT6xfZ sQ/mJq76OQJCEgNuLgrz7+oNchzAx2jRWpocOfBJf/caJH2utJKUJmOketd5ojvI WPlG3oovqOroSOBJl+4kEh/vfozzsbiC1cInBx5FdODarGdwT5E4xXPfNQy6mGyU DP43R9ZMoZDlC4K3SO1LmUUMOGiR40+KtG/VQusw0epg -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:05 2026 by rpki-client