This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/tpS4SRewgQveWEqN8jQYHocUHz4.roa File: tpS4SRewgQveWEqN8jQYHocUHz4.roa (raw, json) Hash identifier: Qa6Rge99iiaCXX5JRqulbHyK6kc2b9lfPPgKkNoLLbM= Subject key identifier: B6:94:B8:49:17:B0:81:0B:DE:58:4A:8D:F2:34:18:1E:87:14:1F:3E Certificate issuer: /CN=f3c86ea2995e934b65041911cb9eb65872c2289f Certificate serial: 019B76EB988ACD443212BD8FCFED00DE1513 Authority key identifier: F3:C8:6E:A2:99:5E:93:4B:65:04:19:11:CB:9E:B6:58:72:C2:28:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88huoplek0tlBBkRy562WHLCKJ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/tpS4SRewgQveWEqN8jQYHocUHz4.roa Signing time: Thu 01 Jan 2026 00:18:30 +0000 ROA not before: Thu 01 Jan 2026 00:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213063 IP address blocks: 94.142.176.0/22 maxlen: 24 185.159.144.0/22 maxlen: 24 185.226.165.0/24 maxlen: 24 2a0d:e200::/29 maxlen: 29 2a0f:d540::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.mft rsync://rpki.ripe.net/repository/DEFAULT/88huoplek0tlBBkRy562WHLCKJ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:98:8a:cd:44:32:12:bd:8f:cf:ed:00:de:15:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3c86ea2995e934b65041911cb9eb65872c2289f Validity Not Before: Jan 1 00:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b694b84917b0810bde584a8df234181e87141f3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:3a:73:86:75:e2:ca:e5:cb:99:4c:5e:dd:ee: 3e:c2:a8:96:37:8c:60:10:de:de:bb:11:9e:79:0a: 32:e5:31:16:db:d6:a7:e3:d2:6f:07:ee:71:6b:ca: 18:cc:68:b9:cf:44:82:ec:af:c2:33:16:9b:ea:04: 8c:c5:b5:e4:44:a8:6c:77:2d:7e:89:79:76:2e:98: d4:d0:9d:e0:30:4e:03:ac:e2:33:cf:7b:27:23:bb: c3:63:3a:3d:e3:d3:56:1a:c1:07:d4:99:81:bb:35: 70:cb:cb:6c:8b:1d:1a:c9:23:44:6a:8d:a1:a5:0c: dd:bd:06:8b:bb:30:b6:86:55:d0:ef:8e:2c:16:d5: 30:b6:70:e7:98:00:e6:00:5f:c8:4b:74:26:bf:0c: 65:4c:23:73:04:10:9c:e7:e8:1b:db:ed:9c:c3:3b: 68:82:49:56:25:d5:6e:5e:d5:86:f6:19:5d:44:3f: 61:fb:4c:20:ce:8f:96:15:fc:25:00:16:0e:ae:b0: 72:f1:ba:62:8c:59:ec:70:cd:77:73:e9:7b:51:a8: ff:80:2e:fa:b7:94:4c:02:87:33:cd:98:73:1d:f2: aa:36:bb:44:a7:1d:b0:d8:93:85:9d:9e:5a:4a:34: 8e:2f:a2:e3:8d:d8:10:73:69:54:ee:6e:cc:62:24: f7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:94:B8:49:17:B0:81:0B:DE:58:4A:8D:F2:34:18:1E:87:14:1F:3E X509v3 Authority Key Identifier: keyid:F3:C8:6E:A2:99:5E:93:4B:65:04:19:11:CB:9E:B6:58:72:C2:28:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88huoplek0tlBBkRy562WHLCKJ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/tpS4SRewgQveWEqN8jQYHocUHz4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.142.176.0/22 185.159.144.0/22 185.226.165.0/24 IPv6: 2a0d:e200::/29 2a0f:d540::/29 Signature Algorithm: sha256WithRSAEncryption 0a:13:77:05:25:b0:db:8a:1d:6a:0c:16:7e:fc:84:46:12:6b: 54:3b:ef:35:f3:4e:f5:38:6a:88:e1:db:ac:bf:80:fd:be:74: 97:0e:33:b2:01:b8:67:ca:ef:6e:28:46:f9:19:55:c8:63:0e: bf:3a:10:ce:d0:14:bb:0d:9b:4a:57:10:bc:fe:aa:f2:6d:fd: dd:0d:ef:c0:48:e9:1b:6b:cb:84:5c:91:f0:1a:f0:97:6f:c4: b7:87:1f:60:6a:b3:50:22:a1:4c:17:b7:71:5a:6f:58:58:53: 9d:24:7d:64:c2:7d:ca:8d:c6:e0:0a:da:9f:2d:22:c3:de:30: 8f:a0:a3:06:59:cd:9a:3d:74:31:97:b1:1d:e2:15:1a:94:08: 1d:d3:95:36:e6:47:50:b8:89:20:76:a3:f2:aa:03:ba:18:b5: d2:26:98:a1:1d:13:ec:36:0e:4a:c8:7b:6b:34:bf:f7:f6:ac: dd:fd:06:68:d7:3a:e7:05:ac:34:f9:aa:4f:7d:d7:41:26:e7: 65:e8:27:66:b7:59:a8:a2:87:87:d9:65:21:c2:72:80:eb:ad: 57:4e:c7:83:63:60:8c:6e:f4:f8:98:b2:6b:8b:50:de:a8:97: f8:2c:42:c4:f8:fb:24:89:82:a3:9e:ad:12:f5:83:1a:69:97: 75:89:44:0c -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt265iKzUQyEr2Pz+0A3hUTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzYzg2ZWEyOTk1ZTkzNGI2NTA0MTkxMWNiOWViNjU4NzJj MjI4OWYwHhcNMjYwMTAxMDAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjk0Yjg0OTE3YjA4MTBiZGU1ODRhOGRmMjM0MTgxZTg3MTQxZjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5TpzhnXiyuXLmUxe3e4+wqiWN4xg EN7euxGeeQoy5TEW29an49JvB+5xa8oYzGi5z0SC7K/CMxab6gSMxbXkRKhsdy1+ iXl2LpjU0J3gME4DrOIzz3snI7vDYzo949NWGsEH1JmBuzVwy8tsix0aySNEao2h pQzdvQaLuzC2hlXQ744sFtUwtnDnmADmAF/IS3QmvwxlTCNzBBCc5+gb2+2cwzto gklWJdVuXtWG9hldRD9h+0wgzo+WFfwlABYOrrBy8bpijFnscM13c+l7Uaj/gC76 t5RMAoczzZhzHfKqNrtEpx2w2JOFnZ5aSjSOL6LjjdgQc2lU7m7MYiT3TwIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFLaUuEkXsIEL3lhKjfI0GB6HFB8+MB8GA1UdIwQY MBaAFPPIbqKZXpNLZQQZEcuetlhywiifMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODhodW9wbGVrMHRsQkJrUnk1NjJXSExDS0o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9lNTU0YWEtZTRlZC00OTQ4LWI2ZmMt YzYzNWQ4ZWVkNDQ3LzEvdHBTNFNSZXdnUXZlV0VxTjhqUVlIb2NVSHo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9lNTU0YWEtZTRlZC00OTQ4LWI2ZmMtYzYzNWQ4ZWVkNDQ3 LzEvODhodW9wbGVrMHRsQkJrUnk1NjJXSExDS0o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAYBAIAATASAwQCXo6wAwQC uZ+QAwQAueKlMBQEAgACMA4DBQMqDeIAAwUDKg/VQDANBgkqhkiG9w0BAQsFAAOC AQEAChN3BSWw24odagwWfvyERhJrVDvvNfNO9ThqiOHbrL+A/b50lw4zsgG4Z8rv bihG+RlVyGMOvzoQztAUuw2bSlcQvP6q8m393Q3vwEjpG2vLhFyR8Brwl2/Et4cf YGqzUCKhTBe3cVpvWFhTnSR9ZMJ9yo3G4Arany0iw94wj6CjBlnNmj10MZexHeIV GpQIHdOVNuZHULiJIHaj8qoDuhi10iaYoR0T7DYOSsh7azS/9/as3f0GaNc65wWs NPmqT33XQSbnZegnZrdZqKKHh9llIcJygOutV07Hg2NgjG70+Jiya4tQ3qiX+CxC xPj7JImCo56tEvWDGmmXdYlEDA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:29:08 2026 by rpki-client