This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/TQnSP-doaEZ3QwoQxZQkKdn_Zm8.roa File: TQnSP-doaEZ3QwoQxZQkKdn_Zm8.roa (raw, json) Hash identifier: tNscAkBZYAiTq3QBweAAt6lTq4JqIfcKk5dVMuydvOY= Subject key identifier: 4D:09:D2:3F:E7:68:68:46:77:43:0A:10:C5:94:24:29:D9:FF:66:6F Certificate issuer: /CN=84184ce919023640bb9256c2d8d1a049fa102520 Certificate serial: 019B7BA34FBED123E4D21C8F85DCB9982D20 Authority key identifier: 84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/TQnSP-doaEZ3QwoQxZQkKdn_Zm8.roa Signing time: Thu 01 Jan 2026 22:17:38 +0000 ROA not before: Thu 01 Jan 2026 22:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64489 IP address blocks: 185.11.68.0/22 maxlen: 22 2a03:9080::/32 maxlen: 32 2a06:e080::/29 maxlen: 29 2a0b:3000::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:4f:be:d1:23:e4:d2:1c:8f:85:dc:b9:98:2d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84184ce919023640bb9256c2d8d1a049fa102520 Validity Not Before: Jan 1 22:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d09d23fe768684677430a10c5942429d9ff666f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:42:f3:ff:04:8a:9c:1a:e7:8c:8a:1e:85:43: 6f:c8:05:a8:17:eb:26:7c:1b:4e:0e:c6:cc:72:07: 61:5a:09:8b:a5:ca:1c:3e:fe:68:59:75:1a:b9:64: 13:98:d1:81:65:d8:81:86:6c:dd:37:26:7f:73:bd: d9:c4:29:c6:89:a0:2d:e8:4b:40:3a:0e:37:cc:50: 2a:f2:66:73:1e:ed:6b:80:a1:f4:44:57:91:fc:99: fb:72:7a:f4:e8:c8:75:a4:0e:6a:b4:64:6c:7d:69: 46:16:76:f0:00:0e:dd:9b:a0:24:dc:ec:2a:ea:c2: 7a:62:dc:5a:85:01:31:fe:99:57:f3:2c:52:58:28: f2:77:b4:1e:59:08:44:32:54:5b:fa:79:2b:40:e0: 96:63:d1:12:48:a2:96:17:48:a0:28:d9:3a:91:3e: 59:b1:3f:3e:d0:e1:82:e6:95:c3:64:c0:4b:13:40: 1f:67:9d:9f:d0:4b:33:84:e1:fc:2f:d3:16:c7:1e: a1:4d:c7:dd:f5:b0:b3:39:c0:27:08:70:66:ae:a5: c1:4c:21:c4:ac:49:e4:2c:9f:91:63:b9:75:20:97: 88:ff:1b:5d:cf:bf:e3:70:46:d7:9f:e0:55:c7:08: 9b:8a:89:21:e5:6f:cf:10:55:55:07:c8:c2:6f:73: bf:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:09:D2:3F:E7:68:68:46:77:43:0A:10:C5:94:24:29:D9:FF:66:6F X509v3 Authority Key Identifier: keyid:84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/TQnSP-doaEZ3QwoQxZQkKdn_Zm8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.11.68.0/22 IPv6: 2a03:9080::/32 2a06:e080::/29 2a0b:3000::/29 Signature Algorithm: sha256WithRSAEncryption 02:4e:b3:d7:20:64:ce:ad:97:92:47:d2:2c:32:d1:ec:cc:d5: 72:00:b1:1b:41:ae:06:e6:42:e9:2c:4f:a0:42:71:08:f0:d1: 7a:72:78:c7:d2:bf:84:0c:bf:f2:f7:5f:ec:51:38:2c:7c:21: 3a:7a:e8:53:4c:54:20:97:ee:59:4f:20:76:d5:33:1b:af:b7: 00:35:4c:1f:e1:44:ca:3c:b1:9a:37:00:bd:f7:59:67:af:95: 78:bf:fc:53:78:fd:6b:66:ac:a5:fc:5c:e9:e9:16:00:14:4d: 48:70:ee:87:a1:c9:ca:3f:0c:d3:95:0c:fe:6a:b3:90:b6:05: c5:d3:3e:50:fd:4b:6f:cd:e4:f4:f2:25:50:38:ce:b1:8b:d9: ea:77:95:79:76:8f:cf:87:da:45:fb:3b:5e:69:33:dd:20:03: e0:bc:12:6a:37:e5:87:ae:9f:d1:c7:25:10:f0:21:de:80:24: fb:3b:70:a6:14:4e:06:1c:83:db:6a:ca:0e:f6:6c:75:98:7d: 21:55:bb:15:14:75:ce:53:11:ed:1c:9e:36:0e:7c:8e:d4:13: 54:31:43:22:3d:55:9d:d2:f7:03:d7:f7:42:f1:30:cc:86:c4: 6d:2e:1a:90:fd:80:b2:00:44:89:36:8f:08:5f:97:3e:61:30: a2:b3:ba:a3 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt7o0++0SPk0hyPhdy5mC0gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0MTg0Y2U5MTkwMjM2NDBiYjkyNTZjMmQ4ZDFhMDQ5ZmEx MDI1MjAwHhcNMjYwMTAxMjIxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDA5ZDIzZmU3Njg2ODQ2Nzc0MzBhMTBjNTk0MjQyOWQ5ZmY2NjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvELz/wSKnBrnjIoehUNvyAWoF+sm fBtODsbMcgdhWgmLpcocPv5oWXUauWQTmNGBZdiBhmzdNyZ/c73ZxCnGiaAt6EtA Og43zFAq8mZzHu1rgKH0RFeR/Jn7cnr06Mh1pA5qtGRsfWlGFnbwAA7dm6Ak3Owq 6sJ6YtxahQEx/plX8yxSWCjyd7QeWQhEMlRb+nkrQOCWY9ESSKKWF0igKNk6kT5Z sT8+0OGC5pXDZMBLE0AfZ52f0EszhOH8L9MWxx6hTcfd9bCzOcAnCHBmrqXBTCHE rEnkLJ+RY7l1IJeI/xtdz7/jcEbXn+BVxwibiokh5W/PEFVVB8jCb3O/SwIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFE0J0j/naGhGd0MKEMWUJCnZ/2ZvMB8GA1UdIwQY MBaAFIQYTOkZAjZAu5JWwtjRoEn6ECUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEJoTTZSa0NOa0M3a2xiQzJOR2dTZm9RSlNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8yOTIyY2YtMTg2MS00MTlkLTllZWEt MGE3OWQ1NDk2NWE5LzEvVFFuU1AtZG9hRVozUXdvUXhaUWtLZG5fWm04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8yOTIyY2YtMTg2MS00MTlkLTllZWEtMGE3OWQ1NDk2NWE5 LzEvaEJoTTZSa0NOa0M3a2xiQzJOR2dTZm9RSlNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAMBAIAATAGAwQCuQtEMBsE AgACMBUDBQAqA5CAAwUDKgbggAMFAyoLMAAwDQYJKoZIhvcNAQELBQADggEBAAJO s9cgZM6tl5JH0iwy0ezM1XIAsRtBrgbmQuksT6BCcQjw0XpyeMfSv4QMv/L3X+xR OCx8ITp66FNMVCCX7llPIHbVMxuvtwA1TB/hRMo8sZo3AL33WWevlXi//FN4/Wtm rKX8XOnpFgAUTUhw7oehyco/DNOVDP5qs5C2BcXTPlD9S2/N5PTyJVA4zrGL2ep3 lXl2j8+H2kX7O15pM90gA+C8Emo35Yeun9HHJRDwId6AJPs7cKYUTgYcg9tqyg72 bHWYfSFVuxUUdc5TEe0cnjYOfI7UE1QxQyI9VZ3S9wPX90LxMMyGxG0uGpD9gLIA RIk2jwhflz5hMKKzuqM= -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:46 2026 by rpki-client