This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/TqCJ8DGIsYRUqwvjpLpaEq5Smdw.roa File: TqCJ8DGIsYRUqwvjpLpaEq5Smdw.roa (raw, json) Hash identifier: uq4vQs4ODd9sCXDYk4Ut6c6LpnPmQWEBmYs07mf3VWY= Subject key identifier: 4E:A0:89:F0:31:88:B1:84:54:AB:0B:E3:A4:BA:5A:12:AE:52:99:DC Certificate issuer: /CN=585d968f5be1ce671e20d5831c170001f372d3dd Certificate serial: 019B7BA4DFCC849872A1A7EF21E26340BC8C Authority key identifier: 58:5D:96:8F:5B:E1:CE:67:1E:20:D5:83:1C:17:00:01:F3:72:D3:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/TqCJ8DGIsYRUqwvjpLpaEq5Smdw.roa Signing time: Thu 01 Jan 2026 22:19:21 +0000 ROA not before: Thu 01 Jan 2026 22:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20845 IP address blocks: 91.135.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.crl rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:df:cc:84:98:72:a1:a7:ef:21:e2:63:40:bc:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=585d968f5be1ce671e20d5831c170001f372d3dd Validity Not Before: Jan 1 22:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ea089f03188b18454ab0be3a4ba5a12ae5299dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:07:2c:6c:8d:19:e1:b9:bf:87:a2:11:80:90: 12:cd:1d:b1:03:f1:f8:10:a6:d8:c1:da:84:1a:83: d7:ca:dc:12:f8:58:c5:d0:79:1e:cc:86:37:10:b6: 06:be:23:9e:a3:b9:25:76:b0:9c:38:10:81:ab:10: 02:b9:d6:28:e1:87:ee:9c:0b:3c:93:44:9a:d9:e7: 73:fc:6c:fa:1b:cb:4f:58:4c:ff:21:13:a4:e9:50: 24:f4:ab:21:65:ae:68:3c:29:a4:5e:3c:f6:74:b7: 41:33:77:1b:e1:24:c3:8d:ea:5c:04:62:68:d8:6b: ee:8f:a4:6c:26:69:c6:67:09:a6:00:37:62:60:d5: f5:4c:06:13:91:2f:69:5c:57:09:5e:80:f0:03:d0: 5f:e2:60:be:c8:2b:c6:0c:bd:c9:d0:3f:ed:b6:17: a0:e9:65:3a:50:e4:d0:a8:f2:6d:40:7d:27:6b:88: 93:67:db:d5:33:07:58:53:54:67:d3:55:3b:11:06: 41:fd:fd:c5:4b:72:f6:45:d5:fe:63:d6:0c:19:f4: 78:1c:bb:48:17:ed:12:56:ae:27:d6:96:a7:bb:60: c9:aa:2c:07:6a:cb:f3:e2:06:ec:37:45:8a:5b:89: 30:91:86:a4:f2:ac:84:05:4e:b7:7b:20:85:ea:0c: 11:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A0:89:F0:31:88:B1:84:54:AB:0B:E3:A4:BA:5A:12:AE:52:99:DC X509v3 Authority Key Identifier: keyid:58:5D:96:8F:5B:E1:CE:67:1E:20:D5:83:1C:17:00:01:F3:72:D3:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/TqCJ8DGIsYRUqwvjpLpaEq5Smdw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.135.112.0/20 Signature Algorithm: sha256WithRSAEncryption 6e:6a:f1:18:a0:22:9f:45:c9:e1:6f:f2:4b:70:7c:b3:cb:b1: 88:be:2f:ed:81:2e:67:91:67:83:59:76:8d:c3:5c:f5:d0:14: e9:fb:c7:17:af:24:8d:2c:1e:f4:27:c3:a4:8b:81:64:39:0e: c2:a0:23:6a:3b:ce:5e:fd:f3:a2:18:62:7c:11:62:8c:ec:71: f1:aa:9b:e6:07:fd:1d:2c:81:7a:9e:3b:70:34:b9:66:a0:3b: 61:29:0d:a8:9e:ff:74:67:61:6b:e5:f6:f1:66:be:c9:28:d1: 21:23:1b:98:ac:49:c2:cf:4c:85:65:21:0a:b0:8a:51:e0:d3: d5:16:e8:46:79:20:c0:53:54:b7:c9:88:86:df:d8:86:8e:91: ff:2e:3b:bc:b6:76:a5:d0:76:1c:3d:f7:ee:59:bd:19:75:67: 91:da:9a:48:b5:98:a6:4c:dd:f1:b5:30:9a:a6:d2:9e:fa:ab: b2:08:bf:d0:7a:e0:06:63:cb:3d:99:ea:7a:62:55:37:c7:ad: df:61:83:7c:13:68:31:f5:18:59:df:54:92:c6:e4:c6:58:4b: 5d:29:1a:ba:b6:d9:05:fc:ca:41:f7:b3:05:c9:54:1a:8a:ce: 83:e5:39:d6:6b:fd:26:43:05:cf:a2:b0:a7:77:0e:8c:21:97: f9:32:eb:d1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pN/MhJhyoafvIeJjQLyMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4NWQ5NjhmNWJlMWNlNjcxZTIwZDU4MzFjMTcwMDAxZjM3 MmQzZGQwHhcNMjYwMTAxMjIxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZWEwODlmMDMxODhiMTg0NTRhYjBiZTNhNGJhNWExMmFlNTI5OWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QcsbI0Z4bm/h6IRgJASzR2xA/H4 EKbYwdqEGoPXytwS+FjF0HkezIY3ELYGviOeo7kldrCcOBCBqxACudYo4YfunAs8 k0Sa2edz/Gz6G8tPWEz/IROk6VAk9KshZa5oPCmkXjz2dLdBM3cb4STDjepcBGJo 2Gvuj6RsJmnGZwmmADdiYNX1TAYTkS9pXFcJXoDwA9Bf4mC+yCvGDL3J0D/ttheg 6WU6UOTQqPJtQH0na4iTZ9vVMwdYU1Rn01U7EQZB/f3FS3L2RdX+Y9YMGfR4HLtI F+0SVq4n1panu2DJqiwHasvz4gbsN0WKW4kwkYak8qyEBU63eyCF6gwRWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE6gifAxiLGEVKsL46S6WhKuUpncMB8GA1UdIwQY MBaAFFhdlo9b4c5nHiDVgxwXAAHzctPdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0YyV2oxdmh6bWNlSU5XREhCY0FBZk55MDkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9hY2FjMWUtZTY5MC00MWIwLTgzYmUt OWVkMzVkNWIzNzM1LzEvVHFDSjhER0lzWVJVcXd2anBMcGFFcTVTbWR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9hY2FjMWUtZTY5MC00MWIwLTgzYmUtOWVkMzVkNWIzNzM1 LzEvV0YyV2oxdmh6bWNlSU5XREhCY0FBZk55MDkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEW4dwMA0G CSqGSIb3DQEBCwUAA4IBAQBuavEYoCKfRcnhb/JLcHyzy7GIvi/tgS5nkWeDWXaN w1z10BTp+8cXrySNLB70J8Oki4FkOQ7CoCNqO85e/fOiGGJ8EWKM7HHxqpvmB/0d LIF6njtwNLlmoDthKQ2onv90Z2Fr5fbxZr7JKNEhIxuYrEnCz0yFZSEKsIpR4NPV FuhGeSDAU1S3yYiG39iGjpH/Lju8tnal0HYcPffuWb0ZdWeR2ppItZimTN3xtTCa ptKe+quyCL/QeuAGY8s9mep6YlU3x63fYYN8E2gx9RhZ31SSxuTGWEtdKRq6ttkF /MpB97MFyVQais6D5TnWa/0mQwXPorCndw6MIZf5MuvR -----END CERTIFICATE-----Generated at Sun Jan 25 20:30:12 2026 by rpki-client