This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/TQRQUvnH1PO5qcuLM2kiPL408f4.roa File: TQRQUvnH1PO5qcuLM2kiPL408f4.roa (raw, json) Hash identifier: 1Z+GYULrtYzOcdfSIr9RZ1XILJVYjGdvmENAEPPng/M= Subject key identifier: 4D:04:50:52:F9:C7:D4:F3:B9:A9:CB:8B:33:69:22:3C:BE:34:F1:FE Certificate issuer: /CN=8ad9281aafefc8375ad8b4b7e604899555952237 Certificate serial: 019B7B36877C7AFABA6A8B71E89D47516E53 Authority key identifier: 8A:D9:28:1A:AF:EF:C8:37:5A:D8:B4:B7:E6:04:89:95:55:95:22:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/TQRQUvnH1PO5qcuLM2kiPL408f4.roa Signing time: Thu 01 Jan 2026 20:18:49 +0000 ROA not before: Thu 01 Jan 2026 20:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207085 IP address blocks: 185.160.90.0/24 maxlen: 24 2a07:bbc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.crl rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:87:7c:7a:fa:ba:6a:8b:71:e8:9d:47:51:6e:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad9281aafefc8375ad8b4b7e604899555952237 Validity Not Before: Jan 1 20:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d045052f9c7d4f3b9a9cb8b3369223cbe34f1fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b7:46:84:76:ba:f3:e4:f3:60:1a:08:27:20: 3f:08:59:06:61:84:0a:d0:1e:3e:ae:c3:04:e5:f0: f4:cd:1d:3f:4f:fb:8a:3b:f6:e7:48:b5:d1:ef:77: 5a:d0:29:16:c4:b9:19:91:58:a7:20:42:01:cf:f4: fb:b4:7e:25:e1:3a:a6:fe:61:6b:fb:0c:fa:77:63: cf:82:2b:f6:d2:5f:cc:18:e6:1f:03:dd:1c:31:00: 9f:fd:89:96:46:db:87:38:e5:f7:7c:af:1e:87:37: 5a:e1:dd:64:6d:e8:ae:8d:a5:c8:8f:1b:dc:d3:76: ce:83:b7:3d:2c:44:e9:3a:2d:3c:56:70:6c:d4:2f: 1c:8f:e6:e5:05:0b:8e:99:c4:40:4a:f6:30:06:2f: 7c:6e:f7:39:5c:28:75:46:ec:47:2d:06:aa:13:cc: b8:30:89:30:27:3c:5d:f1:17:da:ba:e3:52:27:3a: 11:80:b1:10:53:80:14:a8:fe:dc:0b:80:07:f0:7d: 96:9f:a8:69:71:ce:be:d0:59:fa:be:3a:99:02:17: 57:b3:7c:c4:2f:19:ac:5d:67:0b:46:98:cd:e2:6f: c4:8b:a6:b6:0d:f1:0f:aa:6d:c7:6b:49:44:6d:48: d2:4b:ff:d2:cf:20:00:48:89:1f:55:e4:ed:d0:ec: f3:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:04:50:52:F9:C7:D4:F3:B9:A9:CB:8B:33:69:22:3C:BE:34:F1:FE X509v3 Authority Key Identifier: keyid:8A:D9:28:1A:AF:EF:C8:37:5A:D8:B4:B7:E6:04:89:95:55:95:22:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/TQRQUvnH1PO5qcuLM2kiPL408f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.160.90.0/24 IPv6: 2a07:bbc0::/48 Signature Algorithm: sha256WithRSAEncryption 83:12:72:14:77:0b:3f:e1:54:43:88:dc:e1:d4:eb:2f:e1:e3: c3:09:22:6f:0f:00:da:70:09:8e:e9:78:1a:15:36:03:b8:b5: d5:2b:84:e5:9f:a9:42:e1:aa:7c:4f:84:32:f5:7c:1b:08:c2: 62:9a:2b:75:11:03:19:52:9d:1b:27:e0:b9:ff:79:89:4a:77: 1b:77:c0:ac:a1:64:34:be:99:dc:8f:71:25:71:67:51:ce:fd: 5c:d6:a9:8e:a4:3d:db:b5:b4:af:2b:53:b7:d4:5b:7f:26:f5: 42:b9:69:42:df:7f:c7:e3:d1:67:b6:57:5b:ed:66:b8:c6:3e: 68:26:7f:6b:cc:93:7a:8b:f2:00:b9:45:60:4d:2b:0f:16:a1: 8f:d1:9b:e4:47:84:06:47:d6:0d:d2:22:71:0c:7b:fc:5b:1b: 2e:b5:c3:bc:42:0d:15:f2:ba:46:a9:e6:93:e3:b1:cf:73:1b: cf:d8:4c:87:c4:b5:ee:c5:f1:38:fe:a2:26:82:12:e6:34:72: 7a:c0:64:7c:2f:6f:6d:10:c5:79:3d:2b:57:e0:13:a0:16:84: e3:f8:cf:43:62:39:0a:15:5f:37:07:d2:7d:ea:00:bc:41:37: 18:32:af:2d:98:51:c9:64:56:6a:00:da:d4:a7:70:aa:05:f4: 08:74:aa:72 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt7Nod8evq6aotx6J1HUW5TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhZDkyODFhYWZlZmM4Mzc1YWQ4YjRiN2U2MDQ4OTk1NTU5 NTIyMzcwHhcNMjYwMTAxMjAxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDA0NTA1MmY5YzdkNGYzYjlhOWNiOGIzMzY5MjIzY2JlMzRmMWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7dGhHa68+TzYBoIJyA/CFkGYYQK 0B4+rsME5fD0zR0/T/uKO/bnSLXR73da0CkWxLkZkVinIEIBz/T7tH4l4Tqm/mFr +wz6d2PPgiv20l/MGOYfA90cMQCf/YmWRtuHOOX3fK8ehzda4d1kbeiujaXIjxvc 03bOg7c9LETpOi08VnBs1C8cj+blBQuOmcRASvYwBi98bvc5XCh1RuxHLQaqE8y4 MIkwJzxd8RfauuNSJzoRgLEQU4AUqP7cC4AH8H2Wn6hpcc6+0Fn6vjqZAhdXs3zE LxmsXWcLRpjN4m/Ei6a2DfEPqm3Ha0lEbUjSS//SzyAASIkfVeTt0OzzswIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFE0EUFL5x9TzuanLizNpIjy+NPH+MB8GA1UdIwQY MBaAFIrZKBqv78g3Wti0t+YEiZVVlSI3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXRrb0dxX3Z5RGRhMkxTMzVnU0psVldWSWpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8wNTg1MDktMmZlNy00ODZiLWI0YWQt OGM3NGY5ZGQ2N2ZjLzEvVFFSUVV2bkgxUE81cWN1TE0ya2lQTDQwOGY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8wNTg1MDktMmZlNy00ODZiLWI0YWQtOGM3NGY5ZGQ2N2Zj LzEvaXRrb0dxX3Z5RGRhMkxTMzVnU0psVldWSWpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuaBaMA8E AgACMAkDBwAqB7vAAAAwDQYJKoZIhvcNAQELBQADggEBAIMSchR3Cz/hVEOI3OHU 6y/h48MJIm8PANpwCY7peBoVNgO4tdUrhOWfqULhqnxPhDL1fBsIwmKaK3URAxlS nRsn4Ln/eYlKdxt3wKyhZDS+mdyPcSVxZ1HO/VzWqY6kPdu1tK8rU7fUW38m9UK5 aULff8fj0We2V1vtZrjGPmgmf2vMk3qL8gC5RWBNKw8WoY/Rm+RHhAZH1g3SInEM e/xbGy61w7xCDRXyukap5pPjsc9zG8/YTIfEte7F8Tj+oiaCEuY0cnrAZHwvb20Q xXk9K1fgE6AWhOP4z0NiOQoVXzcH0n3qALxBNxgyry2YUclkVmoA2tSncKoF9Ah0 qnI= -----END CERTIFICATE-----Generated at Mon Jan 26 22:58:21 2026 by rpki-client