This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/Tq5kRwEao-OyUWFaQRx4AwmpHsA.roa File: Tq5kRwEao-OyUWFaQRx4AwmpHsA.roa (raw, json) Hash identifier: hbeyCxUvYxY09fpLLNVHgBLPNg097amd0f2XaurjfCM= Subject key identifier: 4E:AE:64:47:01:1A:A3:E3:B2:51:61:5A:41:1C:78:03:09:A9:1E:C0 Certificate issuer: /CN=cfcd73f82c260da87386dcf7be26d5c5445526fa Certificate serial: 019B7C12AEA8676E57A7F3BAB092E0C26B52 Authority key identifier: CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/Tq5kRwEao-OyUWFaQRx4AwmpHsA.roa Signing time: Fri 02 Jan 2026 00:19:17 +0000 ROA not before: Fri 02 Jan 2026 00:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207518 IP address blocks: 85.158.187.0/24 maxlen: 24 2a09:d2c1:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:ae:a8:67:6e:57:a7:f3:ba:b0:92:e0:c2:6b:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcd73f82c260da87386dcf7be26d5c5445526fa Validity Not Before: Jan 2 00:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4eae6447011aa3e3b251615a411c780309a91ec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:12:8f:e3:d5:67:12:7c:ae:1e:50:ae:84:a5: 7a:87:d2:fd:19:aa:05:5e:22:83:ba:ca:78:9a:fc: b0:17:74:49:32:41:05:ce:68:37:72:dc:13:4a:78: d3:67:3b:c4:e8:e1:89:bc:81:91:5e:ea:4f:8b:8e: 13:6d:41:e4:e9:f6:c3:c1:03:16:f2:13:c6:0b:ba: fa:00:e8:f2:43:11:9c:75:a0:41:d8:e0:2f:9d:f8: d2:3f:f8:fb:0e:48:61:d5:d6:a5:d3:20:f9:5c:db: 72:fe:d9:91:ff:18:c8:f6:55:74:4e:92:0f:3e:88: 23:c1:f4:c5:ee:c7:1e:61:42:5a:4e:eb:32:7d:2c: 01:30:6c:f1:7d:26:7a:8f:d7:8b:5c:3a:ea:4b:38: 35:1b:7d:2d:ba:2c:84:8e:bd:5d:61:66:b6:87:65: d4:f1:80:71:77:35:6b:f9:7d:27:b4:4c:ad:59:bc: 41:ec:ac:69:5c:99:8c:ea:4a:ff:a9:8f:15:6e:43: a7:94:38:2b:b8:0f:58:15:c9:f8:3a:50:da:4a:10: 31:b1:0c:39:fe:6e:7f:80:ce:94:a9:92:b3:92:9e: 71:f8:f4:df:fe:d4:02:30:36:50:b9:1c:79:19:d7: f9:3e:59:7f:9c:0c:b3:f1:0f:ce:bb:4c:bb:33:8b: 15:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:AE:64:47:01:1A:A3:E3:B2:51:61:5A:41:1C:78:03:09:A9:1E:C0 X509v3 Authority Key Identifier: keyid:CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/Tq5kRwEao-OyUWFaQRx4AwmpHsA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.158.187.0/24 IPv6: 2a09:d2c1:4::/48 Signature Algorithm: sha256WithRSAEncryption e5:57:5d:ab:a8:b6:e0:05:62:0f:1c:d5:80:e2:aa:4d:1c:e1: a4:6e:f6:e5:d3:9d:1a:44:3b:94:59:30:b6:80:ae:6a:dc:46: af:80:dd:7d:6c:cc:37:b6:d6:21:c6:4d:ff:92:8b:d1:0d:5f: eb:7d:a9:9c:62:f4:72:bf:4a:2f:e3:73:20:2b:f6:c3:cc:87: b2:f4:54:03:76:19:05:aa:1a:e7:74:fb:71:02:08:40:97:16: 79:db:a7:e8:8a:26:de:1d:8a:4c:8d:4b:67:c3:ce:6c:35:6a: e7:c2:6d:bb:db:72:a7:77:7c:65:00:ce:8c:4d:00:82:65:32: 6a:ee:0f:cd:9c:99:a4:be:33:7e:e9:cf:c5:7d:ae:f7:13:ff: 8e:bc:ed:a6:e8:c1:aa:c5:e5:4d:65:3b:3f:0d:23:de:ce:b3: 87:60:24:62:84:50:94:5b:3e:2f:78:72:b3:8b:2d:d1:fd:cf: 00:bb:6d:b6:c2:b5:37:d0:da:f2:51:32:72:1d:f6:c3:c8:0b: e2:e5:3d:69:86:3d:d2:be:d4:a8:2a:a9:c1:db:14:28:c4:a8: 7d:2a:a1:be:2f:d9:3d:17:ac:07:de:1e:9f:63:fd:d5:51:f7: bb:b0:70:4a:32:cd:f2:33:4b:a7:e0:7f:96:20:31:e2:f6:b6: a8:2d:12:dd -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8Eq6oZ25Xp/O6sJLgwmtSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2Q3M2Y4MmMyNjBkYTg3Mzg2ZGNmN2JlMjZkNWM1NDQ1 NTI2ZmEwHhcNMjYwMTAyMDAxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZWFlNjQ0NzAxMWFhM2UzYjI1MTYxNWE0MTFjNzgwMzA5YTkxZWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxKP49VnEnyuHlCuhKV6h9L9GaoF XiKDusp4mvywF3RJMkEFzmg3ctwTSnjTZzvE6OGJvIGRXupPi44TbUHk6fbDwQMW 8hPGC7r6AOjyQxGcdaBB2OAvnfjSP/j7Dkhh1dal0yD5XNty/tmR/xjI9lV0TpIP PogjwfTF7sceYUJaTusyfSwBMGzxfSZ6j9eLXDrqSzg1G30tuiyEjr1dYWa2h2XU 8YBxdzVr+X0ntEytWbxB7KxpXJmM6kr/qY8VbkOnlDgruA9YFcn4OlDaShAxsQw5 /m5/gM6UqZKzkp5x+PTf/tQCMDZQuRx5Gdf5Pll/nAyz8Q/Ou0y7M4sVEQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFE6uZEcBGqPjslFhWkEceAMJqR7AMB8GA1UdIwQY MBaAFM/Nc/gsJg2oc4bc974m1cVEVSb6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80MGFkZTAtOThkYS00YWE1LWI4MTct NmVkYzFiMjI1NjI1LzEvVHE1a1J3RWFvLU95VVdGYVFSeDRBd21wSHNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy80MGFkZTAtOThkYS00YWE1LWI4MTctNmVkYzFiMjI1NjI1 LzEvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAVZ67MA8E AgACMAkDBwAqCdLBAAQwDQYJKoZIhvcNAQELBQADggEBAOVXXauotuAFYg8c1YDi qk0c4aRu9uXTnRpEO5RZMLaArmrcRq+A3X1szDe21iHGTf+Si9ENX+t9qZxi9HK/ Si/jcyAr9sPMh7L0VAN2GQWqGud0+3ECCECXFnnbp+iKJt4dikyNS2fDzmw1aufC bbvbcqd3fGUAzoxNAIJlMmruD82cmaS+M37pz8V9rvcT/4687abowarF5U1lOz8N I97Os4dgJGKEUJRbPi94crOLLdH9zwC7bbbCtTfQ2vJRMnId9sPIC+LlPWmGPdK+ 1KgqqcHbFCjEqH0qob4v2T0XrAfeHp9j/dVR97uwcEoyzfIzS6fgf5YgMeL2tqgt Et0= -----END CERTIFICATE-----Generated at Sun Jan 25 14:38:25 2026 by rpki-client