This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/TnQqYCMS5HYPe8dBEH3YlnPzvjc.roa File: TnQqYCMS5HYPe8dBEH3YlnPzvjc.roa (raw, json) Hash identifier: A1cRotYs392TxWY0uuURFIGpI1Dw1TTRzXx3nGsePZY= Subject key identifier: 4E:74:2A:60:23:12:E4:76:0F:7B:C7:41:10:7D:D8:96:73:F3:BE:37 Certificate issuer: /CN=c66dc60d16dfe1649d86c1693e17858c2306387f Certificate serial: 019B7C8025304349CE5718415E4F8849E8AF Authority key identifier: C6:6D:C6:0D:16:DF:E1:64:9D:86:C1:69:3E:17:85:8C:23:06:38:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/TnQqYCMS5HYPe8dBEH3YlnPzvjc.roa Signing time: Fri 02 Jan 2026 02:18:51 +0000 ROA not before: Fri 02 Jan 2026 02:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200569 IP address blocks: 185.99.204.0/22 maxlen: 22 2a06:1480::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:25:30:43:49:ce:57:18:41:5e:4f:88:49:e8:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66dc60d16dfe1649d86c1693e17858c2306387f Validity Not Before: Jan 2 02:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e742a602312e4760f7bc741107dd89673f3be37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:72:e9:f2:8d:b8:fc:ed:91:d3:fe:b1:85:b4: 6c:c5:1e:77:77:04:c2:f1:25:57:92:51:83:77:fc: ed:4d:6b:7b:4f:db:57:68:af:da:e1:91:3c:c0:f3: e2:05:33:ea:76:c6:9d:ff:3f:d0:74:b1:85:f1:76: 89:b2:60:e4:67:05:6b:5a:ee:b4:ba:8f:5e:b4:82: 19:fa:24:f7:13:2e:9a:b7:1e:e1:a9:8b:7c:29:12: 79:6e:76:7a:5a:a5:c9:e0:77:13:03:77:92:02:eb: 60:85:0b:22:8c:c1:4e:f9:96:e7:69:39:23:f7:8d: c7:c2:ec:5d:06:64:c3:2a:50:34:1f:66:e5:2e:c1: a3:c9:c8:75:d7:17:81:98:40:5f:bb:26:81:48:fa: f0:86:ef:26:98:0b:9c:cb:e6:10:ed:7d:ea:6b:b5: 57:03:23:4b:4a:0a:64:03:ea:47:a0:fa:50:32:78: 28:43:1c:5b:94:48:45:9a:71:0e:b8:26:cc:0c:a9: 20:89:82:fa:66:34:87:65:84:0a:aa:69:51:7b:27: b0:b2:25:3a:15:6b:d5:1f:dc:71:36:d4:d9:81:dc: b1:a9:82:14:58:00:b5:de:7d:6f:d5:6d:2d:6d:1f: 86:a0:78:9b:95:26:80:09:c3:54:b9:cd:f5:ce:e0: b8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:74:2A:60:23:12:E4:76:0F:7B:C7:41:10:7D:D8:96:73:F3:BE:37 X509v3 Authority Key Identifier: keyid:C6:6D:C6:0D:16:DF:E1:64:9D:86:C1:69:3E:17:85:8C:23:06:38:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/TnQqYCMS5HYPe8dBEH3YlnPzvjc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.99.204.0/22 IPv6: 2a06:1480::/29 Signature Algorithm: sha256WithRSAEncryption 8e:fd:5c:9c:ac:ab:f6:51:6c:07:f5:34:ee:53:42:f9:ae:d2: 8e:b5:b6:38:eb:ac:d6:41:70:06:c1:32:c2:e4:0f:85:ad:d6: d1:9a:ef:bd:62:b3:da:3b:91:85:91:8d:ad:f5:e0:4d:7a:43: 79:28:81:0d:04:6e:3e:aa:cd:cb:d7:42:fe:31:96:fd:36:25: 26:3a:e2:9c:82:dc:a4:be:e7:4a:d9:e8:69:12:b9:b4:df:21: fd:f5:f9:91:03:3f:d8:12:8b:37:18:ef:14:49:33:0a:0e:c7: 00:a7:7d:b6:7f:cd:27:e8:f0:9c:64:cf:d6:75:27:87:ac:40: 77:16:53:43:2a:6e:02:d9:18:a7:b7:8a:d7:f9:10:a9:4c:3e: ef:48:55:91:95:3f:28:8f:51:18:fe:f2:7e:8a:bf:86:ee:d0: f8:6d:bd:91:f0:49:ff:33:37:a7:ab:e4:7d:35:02:1e:43:a6: c5:49:b5:0b:35:15:27:71:bb:7b:2e:56:fd:30:3b:b4:35:20: 17:81:fb:07:dc:a9:6b:f4:cd:7c:c0:cb:ab:85:3f:01:2f:d5: 8c:a1:a8:ec:93:90:b7:21:04:73:26:45:29:04:c5:0e:ed:b5: 49:63:2e:83:37:de:d7:f1:23:7c:54:a7:e9:6c:c2:a4:5d:ff: 7a:f6:97:ea -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8gCUwQ0nOVxhBXk+ISeivMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NmRjNjBkMTZkZmUxNjQ5ZDg2YzE2OTNlMTc4NThjMjMw NjM4N2YwHhcNMjYwMTAyMDIxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTc0MmE2MDIzMTJlNDc2MGY3YmM3NDExMDdkZDg5NjczZjNiZTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3Lp8o24/O2R0/6xhbRsxR53dwTC 8SVXklGDd/ztTWt7T9tXaK/a4ZE8wPPiBTPqdsad/z/QdLGF8XaJsmDkZwVrWu60 uo9etIIZ+iT3Ey6atx7hqYt8KRJ5bnZ6WqXJ4HcTA3eSAutghQsijMFO+ZbnaTkj 943HwuxdBmTDKlA0H2blLsGjych11xeBmEBfuyaBSPrwhu8mmAucy+YQ7X3qa7VX AyNLSgpkA+pHoPpQMngoQxxblEhFmnEOuCbMDKkgiYL6ZjSHZYQKqmlReyewsiU6 FWvVH9xxNtTZgdyxqYIUWAC13n1v1W0tbR+GoHiblSaACcNUuc31zuC46QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFE50KmAjEuR2D3vHQRB92JZz8743MB8GA1UdIwQY MBaAFMZtxg0W3+FknYbBaT4XhYwjBjh/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG0zR0RSYmY0V1NkaHNGcFBoZUZqQ01HT0g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9mMGUxNjEtYTQzYy00ZDMxLWI2NWQt ZDRmZWQ1MDg1MzkyLzEvVG5RcVlDTVM1SFlQZThkQkVIM1lsblB6dmpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9mMGUxNjEtYTQzYy00ZDMxLWI2NWQtZDRmZWQ1MDg1Mzky LzEveG0zR0RSYmY0V1NkaHNGcFBoZUZqQ01HT0g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuWPMMA0E AgACMAcDBQMqBhSAMA0GCSqGSIb3DQEBCwUAA4IBAQCO/VycrKv2UWwH9TTuU0L5 rtKOtbY466zWQXAGwTLC5A+FrdbRmu+9YrPaO5GFkY2t9eBNekN5KIENBG4+qs3L 10L+MZb9NiUmOuKcgtykvudK2ehpErm03yH99fmRAz/YEos3GO8USTMKDscAp322 f80n6PCcZM/WdSeHrEB3FlNDKm4C2Rint4rX+RCpTD7vSFWRlT8oj1EY/vJ+ir+G 7tD4bb2R8En/Mzenq+R9NQIeQ6bFSbULNRUncbt7Llb9MDu0NSAXgfsH3Klr9M18 wMurhT8BL9WMoajsk5C3IQRzJkUpBMUO7bVJYy6DN97X8SN8VKfpbMKkXf969pfq -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:19 2026 by rpki-client