This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/Tfq0-Nhgv3VBbk9n3Vq4GI4iE_0.roa File: Tfq0-Nhgv3VBbk9n3Vq4GI4iE_0.roa (raw, json) Hash identifier: /bnj20jmvQ1RfURsnTm2hkQVvQm8WHvC5U4MWvcKmj0= Subject key identifier: 4D:FA:B4:F8:D8:60:BF:75:41:6E:4F:67:DD:5A:B8:18:8E:22:13:FD Certificate issuer: /CN=23662c9a980ad7584650abaa3545b9ea91d3e35e Certificate serial: 019B78A228B49FEF2DF4F982CB736E099BF9 Authority key identifier: 23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/Tfq0-Nhgv3VBbk9n3Vq4GI4iE_0.roa Signing time: Thu 01 Jan 2026 08:17:31 +0000 ROA not before: Thu 01 Jan 2026 08:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201701 IP address blocks: 185.66.192.0/22 maxlen: 22 185.66.193.0/24 maxlen: 24 185.66.194.0/24 maxlen: 24 185.66.195.0/24 maxlen: 24 2a03:2260::/30 maxlen: 30 2a03:2260:1000::/36 maxlen: 36 2a03:2260:2000::/36 maxlen: 36 2a03:2260:3000::/36 maxlen: 36 2a0a:d882::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:28:b4:9f:ef:2d:f4:f9:82:cb:73:6e:09:9b:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23662c9a980ad7584650abaa3545b9ea91d3e35e Validity Not Before: Jan 1 08:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4dfab4f8d860bf75416e4f67dd5ab8188e2213fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:fa:4c:c1:81:b1:d0:70:a7:80:f8:d9:48:21: 61:9b:ef:b3:c7:29:cc:c2:e9:99:a1:d6:b9:75:c3: 29:76:a0:39:4d:af:74:e1:5e:08:da:56:dd:3e:9c: c4:c7:b3:b7:ea:48:10:9a:fd:f3:3b:99:7c:cb:f1: ea:ee:68:e9:59:f2:56:6a:d0:04:4e:2c:84:2e:67: 85:28:8a:3b:18:16:4d:82:eb:9f:4c:e4:5f:d9:b4: 23:1e:e8:68:ec:47:a5:85:42:97:5d:a3:66:ac:b0: fe:61:1b:5f:ca:89:5f:a8:d1:23:6e:60:43:9d:76: 00:32:19:a9:e3:95:b6:9d:bd:71:c1:f9:39:fb:85: 78:3d:fb:65:3f:58:32:15:1d:b6:3b:b4:39:5e:71: d3:a4:fd:9c:05:32:39:1b:74:ca:87:37:15:37:03: 47:85:2a:b5:5a:a8:61:86:75:4a:4a:d1:77:0d:34: 8f:d3:0f:bf:b7:96:fb:76:69:1f:4b:ad:60:11:46: 0b:79:8a:c0:2a:69:ab:1d:66:f6:23:01:5b:64:17: 55:fb:36:85:37:6c:e6:d8:37:9f:e3:2e:25:47:78: 05:db:97:62:e9:a4:0b:c3:9b:f6:7a:21:c5:79:43: 33:8f:97:a8:a9:5f:a7:04:c0:60:cc:d6:ca:7a:59: df:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:FA:B4:F8:D8:60:BF:75:41:6E:4F:67:DD:5A:B8:18:8E:22:13:FD X509v3 Authority Key Identifier: keyid:23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/Tfq0-Nhgv3VBbk9n3Vq4GI4iE_0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.66.192.0/22 IPv6: 2a03:2260::/30 2a0a:d882::/48 Signature Algorithm: sha256WithRSAEncryption 4e:57:3f:8d:18:2e:1c:29:53:af:82:ac:8d:4e:81:d3:15:a8: 75:0b:85:4f:08:31:0e:61:65:ec:7b:e9:ca:b8:ca:b9:dc:77: cc:ca:46:6a:25:8c:68:3e:f4:74:c3:e2:63:37:c0:ec:41:a9: 90:4f:69:0a:c7:18:38:e2:7f:80:a3:a4:29:70:50:36:ce:5e: 45:5d:5f:d9:7a:b1:65:56:fd:7c:41:40:ef:2f:02:47:48:79: 1e:c0:07:43:26:3b:eb:52:68:8e:39:78:ee:64:4d:13:b2:4e: e0:16:6c:3e:38:10:8b:fa:11:e9:2c:b6:e5:0d:26:b5:69:87: d3:ae:db:9d:e9:4f:55:3a:e7:d9:f3:f3:e9:95:4c:fc:a4:5a: 41:c2:f8:18:99:89:b1:ce:40:d9:97:82:f5:c3:aa:c8:7a:69: 05:a3:da:2d:1f:25:29:33:13:68:97:6c:61:64:46:fb:01:27: bf:b3:57:07:d6:77:e2:86:df:7a:26:f5:a0:19:84:22:e7:54: c2:25:65:d9:c9:84:67:51:c1:4d:6d:91:41:52:0c:65:1d:7a: 1c:6f:db:cc:75:54:8e:50:34:14:77:c7:fd:b9:19:8f:47:eb: 70:cf:9a:c1:30:cb:bf:3e:b7:a4:93:b5:81:83:d1:90:c4:86: 8b:d0:c4:f0 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt4oii0n+8t9PmCy3NuCZv5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNjYyYzlhOTgwYWQ3NTg0NjUwYWJhYTM1NDViOWVhOTFk M2UzNWUwHhcNMjYwMTAxMDgxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZGZhYjRmOGQ4NjBiZjc1NDE2ZTRmNjdkZDVhYjgxODhlMjIxM2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPpMwYGx0HCngPjZSCFhm++zxynM wumZoda5dcMpdqA5Ta904V4I2lbdPpzEx7O36kgQmv3zO5l8y/Hq7mjpWfJWatAE TiyELmeFKIo7GBZNguufTORf2bQjHuho7EelhUKXXaNmrLD+YRtfyolfqNEjbmBD nXYAMhmp45W2nb1xwfk5+4V4PftlP1gyFR22O7Q5XnHTpP2cBTI5G3TKhzcVNwNH hSq1WqhhhnVKStF3DTSP0w+/t5b7dmkfS61gEUYLeYrAKmmrHWb2IwFbZBdV+zaF N2zm2Def4y4lR3gF25di6aQLw5v2eiHFeUMzj5eoqV+nBMBgzNbKelnftQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFE36tPjYYL91QW5PZ91auBiOIhP9MB8GA1UdIwQY MBaAFCNmLJqYCtdYRlCrqjVFueqR0+NeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTJZc21wZ0sxMWhHVUt1cU5VVzU2cEhUNDE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8wMTc1ZTYtNDI3Yi00ZWY5LThlYjEt ODIzMmUzNTBkNDU4LzEvVGZxMC1OaGd2M1ZCYms5bjNWcTRHSTRpRV8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8wMTc1ZTYtNDI3Yi00ZWY5LThlYjEtODIzMmUzNTBkNDU4 LzEvSTJZc21wZ0sxMWhHVUt1cU5VVzU2cEhUNDE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQCuULAMBYE AgACMBADBQIqAyJgAwcAKgrYggAAMA0GCSqGSIb3DQEBCwUAA4IBAQBOVz+NGC4c KVOvgqyNToHTFah1C4VPCDEOYWXse+nKuMq53HfMykZqJYxoPvR0w+JjN8DsQamQ T2kKxxg44n+Ao6QpcFA2zl5FXV/ZerFlVv18QUDvLwJHSHkewAdDJjvrUmiOOXju ZE0Tsk7gFmw+OBCL+hHpLLblDSa1aYfTrtud6U9VOufZ8/PplUz8pFpBwvgYmYmx zkDZl4L1w6rIemkFo9otHyUpMxNol2xhZEb7ASe/s1cH1nfiht96JvWgGYQi51TC JWXZyYRnUcFNbZFBUgxlHXocb9vMdVSOUDQUd8f9uRmPR+twz5rBMMu/Prekk7WB g9GQxIaL0MTw -----END CERTIFICATE-----Generated at Sun Jan 25 21:19:37 2026 by rpki-client