This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/t0QBYip-CBcaexWzFHfrZsOfrrY.roa File: t0QBYip-CBcaexWzFHfrZsOfrrY.roa (raw, json) Hash identifier: MKWgITXjC5gS8+w5TmOqk5XZUPOAr5/mF7O9VrDUrNM= Subject key identifier: B7:44:01:62:2A:7E:08:17:1A:7B:15:B3:14:77:EB:66:C3:9F:AE:B6 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84FFBA29A6F027006C108CF0B17229 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/t0QBYip-CBcaexWzFHfrZsOfrrY.roa Signing time: Fri 02 Jan 2026 16:23:01 +0000 ROA not before: Fri 02 Jan 2026 16:23:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207506 IP address blocks: 146.120.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:ff:ba:29:a6:f0:27:00:6c:10:8c:f0:b1:72:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:23:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b74401622a7e08171a7b15b31477eb66c39faeb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6b:11:a1:57:a0:6b:8b:e2:f4:4a:f7:0e:6d: fa:8f:78:e0:b3:bf:ad:0b:d9:77:f3:1e:97:8a:15: a1:ab:42:39:4c:be:fb:5a:44:a2:6f:eb:90:a3:53: 70:ff:fc:7f:43:bb:0e:12:64:03:36:48:73:2a:27: eb:f5:15:ce:16:03:b8:54:d6:de:57:b6:ba:6e:16: 76:d3:f2:7c:d6:19:db:5f:a6:36:98:61:a6:58:aa: 1f:91:b0:0c:64:75:a0:36:9a:8e:c4:74:bf:bd:c5: fe:a7:ae:5f:90:e1:d8:fc:ea:cd:a2:6a:83:c3:c8: be:ef:f8:d9:10:6b:60:25:17:7f:5e:e3:45:97:ca: 88:86:ba:97:55:1e:a7:83:6f:c2:01:a3:9b:35:7b: d9:e9:e5:dd:9b:03:8c:dc:5f:e9:47:32:de:52:85: bd:b8:f6:c4:da:0a:06:c1:c6:f8:7d:b2:a5:41:8a: 13:34:d9:a7:75:5b:b7:f9:d5:d3:63:99:cf:29:37: e6:27:36:5b:1d:41:d5:24:73:9b:f4:f5:8b:b2:ac: a4:55:66:c6:db:2b:51:75:7e:a3:a3:dd:0b:50:43: cc:78:d6:81:3a:a3:ee:04:68:24:23:c4:09:1a:78: 19:fd:88:db:a6:68:9f:c3:74:e9:ad:e2:08:51:5d: 45:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:44:01:62:2A:7E:08:17:1A:7B:15:B3:14:77:EB:66:C3:9F:AE:B6 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/t0QBYip-CBcaexWzFHfrZsOfrrY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.120.241.0/24 Signature Algorithm: sha256WithRSAEncryption 88:39:a0:26:a9:8f:58:42:71:c6:ef:18:57:39:2b:a6:b6:17: e6:a1:86:d0:4c:4b:0e:2c:f2:0c:98:77:35:45:59:58:27:72: 68:90:96:d6:4a:86:da:f4:5b:2c:0d:08:8a:10:fa:bd:4b:07: 05:bb:b7:60:07:8a:7a:b2:d7:91:d9:74:ef:62:e2:e5:bf:8d: 6d:96:19:bc:0b:e1:e5:32:cc:92:4a:07:62:58:05:3a:11:a3: 54:c7:61:02:71:3a:42:53:69:1f:ff:a7:ce:bf:f9:6b:3e:27: 95:b4:88:d7:c6:c9:51:ed:44:0e:64:b3:2b:c5:b2:9c:bd:20: a9:7c:6f:20:a2:65:24:3b:f0:5f:ff:0a:40:65:ce:0a:cd:f9: 1f:84:3a:d5:2b:a6:0a:b5:66:b0:ac:62:96:39:99:64:c5:6c: b7:cf:06:ca:85:2e:e1:85:b8:9a:2b:a9:e9:27:68:68:d0:37: ac:c1:c1:c1:23:14:c2:ee:ed:59:0a:d1:db:39:95:24:c8:56: cb:5d:6d:2e:23:a0:73:40:68:90:b8:37:d2:09:94:eb:63:04: 24:e6:19:b0:75:84:9b:d7:05:41:ae:81:1a:e1:09:d7:f7:19: b3:dc:e3:c2:db:39:ad:98:60:b0:f1:75:47:41:5f:2f:0d:a9: d6:0e:b2:5a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hP+6KabwJwBsEIzwsXIpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMzAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzQ0MDE2MjJhN2UwODE3MWE3YjE1YjMxNDc3ZWI2NmMzOWZhZWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWsRoVega4vi9Er3Dm36j3jgs7+t C9l38x6XihWhq0I5TL77WkSib+uQo1Nw//x/Q7sOEmQDNkhzKifr9RXOFgO4VNbe V7a6bhZ20/J81hnbX6Y2mGGmWKofkbAMZHWgNpqOxHS/vcX+p65fkOHY/OrNomqD w8i+7/jZEGtgJRd/XuNFl8qIhrqXVR6ng2/CAaObNXvZ6eXdmwOM3F/pRzLeUoW9 uPbE2goGwcb4fbKlQYoTNNmndVu3+dXTY5nPKTfmJzZbHUHVJHOb9PWLsqykVWbG 2ytRdX6jo90LUEPMeNaBOqPuBGgkI8QJGngZ/Yjbpmifw3TpreIIUV1F7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLdEAWIqfggXGnsVsxR362bDn662MB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvdDBRQllpcC1DQmNhZXhXekZIZnJac09mcnJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAknjxMA0G CSqGSIb3DQEBCwUAA4IBAQCIOaAmqY9YQnHG7xhXOSumthfmoYbQTEsOLPIMmHc1 RVlYJ3JokJbWSoba9FssDQiKEPq9SwcFu7dgB4p6steR2XTvYuLlv41tlhm8C+Hl MsySSgdiWAU6EaNUx2ECcTpCU2kf/6fOv/lrPieVtIjXxslR7UQOZLMrxbKcvSCp fG8gomUkO/Bf/wpAZc4KzfkfhDrVK6YKtWawrGKWOZlkxWy3zwbKhS7hhbiaK6np J2ho0DeswcHBIxTC7u1ZCtHbOZUkyFbLXW0uI6BzQGiQuDfSCZTrYwQk5hmwdYSb 1wVBroEa4QnX9xmz3OPC2zmtmGCw8XVHQV8vDanWDrJa -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:24 2026 by rpki-client