This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/TAHQBaXvNoEqJwVwuxNKlcHwMBY.roa File: TAHQBaXvNoEqJwVwuxNKlcHwMBY.roa (raw, json) Hash identifier: 1l7RMaksGMvJALttYQHPmRPplRyW7anaFOwZ35pYzSw= Subject key identifier: 4C:01:D0:05:A5:EF:36:81:2A:27:05:70:BB:13:4A:95:C1:F0:30:16 Certificate issuer: /CN=a3464820dcc46769fd154c8cbae66b8bb38fea03 Certificate serial: 019B77592B31CF2B9BB4FCE2F4C326B1C621 Authority key identifier: A3:46:48:20:DC:C4:67:69:FD:15:4C:8C:BA:E6:6B:8B:B3:8F:EA:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o0ZIINzEZ2n9FUyMuuZri7OP6gM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/TAHQBaXvNoEqJwVwuxNKlcHwMBY.roa Signing time: Thu 01 Jan 2026 02:18:11 +0000 ROA not before: Thu 01 Jan 2026 02:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16286 IP address blocks: 185.113.112.0/24 maxlen: 24 185.113.113.0/24 maxlen: 24 185.113.114.0/24 maxlen: 24 185.113.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/o0ZIINzEZ2n9FUyMuuZri7OP6gM.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/o0ZIINzEZ2n9FUyMuuZri7OP6gM.mft rsync://rpki.ripe.net/repository/DEFAULT/o0ZIINzEZ2n9FUyMuuZri7OP6gM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:2b:31:cf:2b:9b:b4:fc:e2:f4:c3:26:b1:c6:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3464820dcc46769fd154c8cbae66b8bb38fea03 Validity Not Before: Jan 1 02:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c01d005a5ef36812a270570bb134a95c1f03016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:41:ce:cb:86:cd:9a:23:15:05:07:89:12:97: 6d:56:cd:52:54:6b:2c:97:2e:b7:78:92:14:f1:a9: 95:1a:a9:f8:fe:10:7c:b0:42:22:bb:0c:6c:08:c5: 6b:64:90:97:c8:2a:20:da:48:8c:dd:04:1b:b0:2b: a2:b8:f7:37:59:98:69:33:d4:35:4c:9d:e2:ad:db: d1:8e:93:b7:99:7c:80:4c:85:85:4c:27:f6:aa:21: 72:00:29:20:79:da:48:35:98:cb:51:09:39:55:22: 81:c5:46:bc:ea:25:cd:a6:48:0d:c5:4a:10:b8:37: 5f:88:60:32:6f:57:93:9a:94:5b:48:ab:e2:cc:e6: b1:dc:fb:9d:14:6b:91:0b:39:e6:1b:bd:33:c8:56: 82:c5:af:56:20:7c:0c:19:f0:a3:a6:85:3c:7c:51: 2b:41:b0:09:a6:25:95:c4:4c:a4:f6:da:79:0e:31: 08:15:f9:1c:7f:cc:3e:8b:2f:6c:4a:b9:92:a7:64: d6:b6:89:3b:73:72:4e:30:fb:a9:d1:82:d8:50:b9: e8:db:be:e5:eb:29:ee:b1:86:63:5f:4c:50:83:25: 7f:1f:10:df:2d:52:b7:4a:23:48:19:36:55:b1:26: 6f:88:9e:da:a2:02:f4:86:bb:88:87:79:68:a3:19: c6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:01:D0:05:A5:EF:36:81:2A:27:05:70:BB:13:4A:95:C1:F0:30:16 X509v3 Authority Key Identifier: keyid:A3:46:48:20:DC:C4:67:69:FD:15:4C:8C:BA:E6:6B:8B:B3:8F:EA:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o0ZIINzEZ2n9FUyMuuZri7OP6gM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/TAHQBaXvNoEqJwVwuxNKlcHwMBY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/o0ZIINzEZ2n9FUyMuuZri7OP6gM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.113.112.0/22 Signature Algorithm: sha256WithRSAEncryption 6a:8f:44:bd:55:29:14:dd:20:d8:80:50:e4:05:eb:ef:99:13: 89:33:78:f5:02:b9:a5:9f:f2:73:40:fe:cf:43:1e:eb:1e:2d: b9:0f:95:5a:4d:5b:6e:62:50:74:4a:ac:25:6e:65:3a:e9:73: 1c:a4:2f:b3:8c:a4:88:b0:a9:39:1d:01:62:38:1a:af:9c:3f: 80:f5:8c:22:9e:6b:4f:c5:ab:cc:e2:f0:da:ba:f8:05:7d:0a: cf:b2:2f:74:6d:72:63:7d:1e:67:e4:52:74:63:a0:8f:da:6c: ca:1c:2b:e4:6b:f5:7b:03:20:b9:6d:0c:2f:a1:a3:ea:ef:b8: e5:19:d2:c3:ff:58:e8:38:84:fa:3d:de:22:00:3a:87:5b:64: 5a:f3:c7:ae:64:71:f7:d1:5d:0a:f5:99:87:fe:a9:83:3a:08: 60:8e:86:b5:77:0f:13:58:0e:87:6f:ed:85:47:55:bd:4d:92: 1b:38:82:5c:15:5d:c9:1d:6e:e2:2c:58:4a:58:5e:b2:98:a2: 20:a3:fe:22:8d:2a:29:92:9d:29:97:57:ff:e4:4b:19:1e:dc: fb:09:2c:0d:d6:53:84:d9:67:eb:0f:cb:14:43:66:ac:79:92: 87:d1:2c:11:e0:9c:84:01:a6:b6:15:1b:05:65:f3:7e:04:1e: ba:0b:32:b5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WSsxzyubtPzi9MMmscYhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNDY0ODIwZGNjNDY3NjlmZDE1NGM4Y2JhZTY2YjhiYjM4 ZmVhMDMwHhcNMjYwMTAxMDIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzAxZDAwNWE1ZWYzNjgxMmEyNzA1NzBiYjEzNGE5NWMxZjAzMDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40HOy4bNmiMVBQeJEpdtVs1SVGss ly63eJIU8amVGqn4/hB8sEIiuwxsCMVrZJCXyCog2kiM3QQbsCuiuPc3WZhpM9Q1 TJ3irdvRjpO3mXyATIWFTCf2qiFyACkgedpINZjLUQk5VSKBxUa86iXNpkgNxUoQ uDdfiGAyb1eTmpRbSKvizOax3PudFGuRCznmG70zyFaCxa9WIHwMGfCjpoU8fFEr QbAJpiWVxEyk9tp5DjEIFfkcf8w+iy9sSrmSp2TWtok7c3JOMPup0YLYULno277l 6ynusYZjX0xQgyV/HxDfLVK3SiNIGTZVsSZviJ7aogL0hruIh3looxnGtQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEwB0AWl7zaBKicFcLsTSpXB8DAWMB8GA1UdIwQY MBaAFKNGSCDcxGdp/RVMjLrma4uzj+oDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzBaSUlOekVaMm45RlV5TXV1WnJpN09QNmdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lMmMzOWQtMWIxZi00ZTQxLTkyYjAt ZTBhMmEyYzc5NDJlLzEvVEFIUUJhWHZOb0VxSndWd3V4TktsY0h3TUJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lMmMzOWQtMWIxZi00ZTQxLTkyYjAtZTBhMmEyYzc5NDJl LzEvbzBaSUlOekVaMm45RlV5TXV1WnJpN09QNmdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXFwMA0G CSqGSIb3DQEBCwUAA4IBAQBqj0S9VSkU3SDYgFDkBevvmROJM3j1Armln/JzQP7P Qx7rHi25D5VaTVtuYlB0SqwlbmU66XMcpC+zjKSIsKk5HQFiOBqvnD+A9YwinmtP xavM4vDauvgFfQrPsi90bXJjfR5n5FJ0Y6CP2mzKHCvka/V7AyC5bQwvoaPq77jl GdLD/1joOIT6Pd4iADqHW2Ra88euZHH30V0K9ZmH/qmDOghgjoa1dw8TWA6Hb+2F R1W9TZIbOIJcFV3JHW7iLFhKWF6ymKIgo/4ijSopkp0pl1f/5EsZHtz7CSwN1lOE 2WfrD8sUQ2aseZKH0SwR4JyEAaa2FRsFZfN+BB66CzK1 -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:04 2026 by rpki-client