This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/tjHQL9126jSlMadUbx0UtwRmVpI.roa File: tjHQL9126jSlMadUbx0UtwRmVpI.roa (raw, json) Hash identifier: KKrhOiqiGWD/PXAF5L7Zxc0Yltf6jS4noyHNe6KHHoM= Subject key identifier: B6:31:D0:2F:DD:76:EA:34:A5:31:A7:54:6F:1D:14:B7:04:66:56:92 Certificate issuer: /CN=278f62f3a5f84722852fc70f052cf13dea2374d0 Certificate serial: 019B7BA4878E25E6AC4DCAC8A0EB6F944C67 Authority key identifier: 27:8F:62:F3:A5:F8:47:22:85:2F:C7:0F:05:2C:F1:3D:EA:23:74:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J49i86X4RyKFL8cPBSzxPeojdNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/tjHQL9126jSlMadUbx0UtwRmVpI.roa Signing time: Thu 01 Jan 2026 22:18:58 +0000 ROA not before: Thu 01 Jan 2026 22:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205741 IP address blocks: 94.136.176.0/22 maxlen: 24 94.136.176.0/23 maxlen: 23 94.136.176.0/24 maxlen: 24 94.136.177.0/24 maxlen: 24 94.136.178.0/24 maxlen: 24 94.136.179.0/24 maxlen: 24 185.141.64.0/22 maxlen: 22 185.141.64.0/24 maxlen: 24 185.141.65.0/24 maxlen: 24 185.141.66.0/24 maxlen: 24 185.141.67.0/24 maxlen: 24 185.207.208.0/22 maxlen: 22 185.207.208.0/24 maxlen: 24 185.207.209.0/24 maxlen: 24 185.207.210.0/24 maxlen: 24 185.207.211.0/24 maxlen: 24 185.235.56.0/24 maxlen: 24 185.235.57.0/24 maxlen: 24 185.235.58.0/24 maxlen: 24 185.235.59.0/24 maxlen: 24 2a0b:2c40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.crl rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.mft rsync://rpki.ripe.net/repository/DEFAULT/J49i86X4RyKFL8cPBSzxPeojdNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:87:8e:25:e6:ac:4d:ca:c8:a0:eb:6f:94:4c:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=278f62f3a5f84722852fc70f052cf13dea2374d0 Validity Not Before: Jan 1 22:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b631d02fdd76ea34a531a7546f1d14b704665692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a7:4b:a1:3b:d2:88:31:ce:0c:07:79:0c:95: 35:05:9c:5a:c7:b5:f4:89:64:b1:cc:44:24:80:c2: 69:44:be:87:ad:b4:45:d6:9b:9c:07:81:05:df:0a: 89:82:cb:ab:c8:da:f0:46:1e:48:f3:44:7d:49:4b: 78:e8:f0:02:43:ff:69:85:b5:25:0c:1a:5f:8c:21: cf:45:d1:24:e2:bb:f2:60:6c:b4:14:54:6a:6e:27: 89:cf:14:bd:3a:a4:53:ca:f0:5d:38:19:37:72:57: 57:f9:94:2d:35:2d:72:af:f8:89:2d:39:b2:d4:e3: 03:f7:0f:5a:af:91:0d:61:67:f7:24:e5:8c:8f:6f: 88:48:81:d2:31:3d:69:8a:38:56:30:2a:7e:c5:76: e4:38:d3:3f:9f:7b:c8:ce:32:da:55:c5:41:62:db: c9:15:a5:cb:e1:4d:ed:3f:56:62:f7:ef:e7:12:df: 97:3c:24:fb:63:e3:14:be:77:ad:45:4d:75:92:86: df:e9:a9:60:43:48:45:ca:19:9a:19:ca:2e:03:a0: e4:b8:22:6b:08:75:92:fb:31:63:c7:2a:a4:2d:4f: e2:ea:27:04:54:33:d2:9b:5a:75:77:f2:9b:2d:a4: ca:ea:67:9a:df:46:ba:19:ed:29:00:dd:47:61:62: 43:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:31:D0:2F:DD:76:EA:34:A5:31:A7:54:6F:1D:14:B7:04:66:56:92 X509v3 Authority Key Identifier: keyid:27:8F:62:F3:A5:F8:47:22:85:2F:C7:0F:05:2C:F1:3D:EA:23:74:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J49i86X4RyKFL8cPBSzxPeojdNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/tjHQL9126jSlMadUbx0UtwRmVpI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.136.176.0/22 185.141.64.0/22 185.207.208.0/22 185.235.56.0/22 IPv6: 2a0b:2c40::/29 Signature Algorithm: sha256WithRSAEncryption 4c:53:bd:cc:d1:17:4b:3a:a3:51:f4:8a:34:a0:65:b5:99:0e: 86:cc:2e:eb:0b:1b:6f:41:68:38:2e:9b:cf:3f:72:ba:67:57: 2d:12:d4:f4:9c:92:ec:83:0e:89:ec:6a:5c:f4:9b:16:e9:e6: 84:32:96:ad:cb:26:f0:bd:52:b4:ac:ea:16:7b:1f:47:d5:dc: 59:e0:9d:1c:a4:5f:25:e5:84:81:11:32:e0:03:2f:77:b9:e2: e7:1e:0c:69:6d:5d:9a:28:9c:79:67:7a:b2:b5:55:67:a2:32: 23:d2:a1:24:04:19:63:aa:8e:1a:13:bf:0b:43:26:47:e0:85: 7e:44:0d:3a:e1:8c:8c:78:c7:c3:12:f2:1a:95:1e:b3:02:c3: 15:0e:81:10:3d:c7:33:82:5c:45:2f:4e:0f:1b:7f:3a:30:d8: 73:32:29:b1:46:90:f3:d5:06:06:ce:2e:01:cd:73:01:dd:1a: 4a:84:d0:d8:80:66:3d:17:2b:2d:84:00:d1:9e:c4:44:27:68: cb:7e:5c:8e:ff:20:29:d2:5c:52:51:e3:92:b6:6b:2e:ec:67: b4:75:25:69:cf:cd:a2:32:66:31:a4:de:5d:e2:14:b0:02:8b: 12:8a:ab:97:89:e2:11:83:84:ea:60:65:b5:7b:65:0a:ae:f3: 67:18:ac:95 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt7pIeOJeasTcrIoOtvlExnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OGY2MmYzYTVmODQ3MjI4NTJmYzcwZjA1MmNmMTNkZWEy Mzc0ZDAwHhcNMjYwMTAxMjIxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjMxZDAyZmRkNzZlYTM0YTUzMWE3NTQ2ZjFkMTRiNzA0NjY1NjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36dLoTvSiDHODAd5DJU1BZxax7X0 iWSxzEQkgMJpRL6HrbRF1pucB4EF3wqJgsuryNrwRh5I80R9SUt46PACQ/9phbUl DBpfjCHPRdEk4rvyYGy0FFRqbieJzxS9OqRTyvBdOBk3cldX+ZQtNS1yr/iJLTmy 1OMD9w9ar5ENYWf3JOWMj2+ISIHSMT1pijhWMCp+xXbkONM/n3vIzjLaVcVBYtvJ FaXL4U3tP1Zi9+/nEt+XPCT7Y+MUvnetRU11kobf6algQ0hFyhmaGcouA6DkuCJr CHWS+zFjxyqkLU/i6icEVDPSm1p1d/KbLaTK6mea30a6Ge0pAN1HYWJD1QIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFLYx0C/dduo0pTGnVG8dFLcEZlaSMB8GA1UdIwQY MBaAFCePYvOl+EcihS/HDwUs8T3qI3TQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjQ5aTg2WDRSeUtGTDhjUEJTenhQZW9qZE5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9lNDkxMmItNTQ4NC00YWMwLTg3Njgt NTM1YmY5YjFlOGI3LzEvdGpIUUw5MTI2alNsTWFkVWJ4MFV0d1JtVnBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9lNDkxMmItNTQ4NC00YWMwLTg3NjgtNTM1YmY5YjFlOGI3 LzEvSjQ5aTg2WDRSeUtGTDhjUEJTenhQZW9qZE5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCXoiwAwQC uY1AAwQCuc/QAwQCues4MA0EAgACMAcDBQMqCyxAMA0GCSqGSIb3DQEBCwUAA4IB AQBMU73M0RdLOqNR9Io0oGW1mQ6GzC7rCxtvQWg4LpvPP3K6Z1ctEtT0nJLsgw6J 7Gpc9JsW6eaEMpatyybwvVK0rOoWex9H1dxZ4J0cpF8l5YSBETLgAy93ueLnHgxp bV2aKJx5Z3qytVVnojIj0qEkBBljqo4aE78LQyZH4IV+RA064YyMeMfDEvIalR6z AsMVDoEQPcczglxFL04PG386MNhzMimxRpDz1QYGzi4BzXMB3RpKhNDYgGY9Fyst hADRnsREJ2jLflyO/yAp0lxSUeOStmsu7Ge0dSVpz82iMmYxpN5d4hSwAosSiquX ieIRg4TqYGW1e2UKrvNnGKyV -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:58 2026 by rpki-client