This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/tqaZWzQOONuL8X5Ttv1_aR0SBeA.roa File: tqaZWzQOONuL8X5Ttv1_aR0SBeA.roa (raw, json) Hash identifier: I8ohGSxZ/k/bp4akujtG1SbYswguKs5oqy4Uk65ywNQ= Subject key identifier: B6:A6:99:5B:34:0E:38:DB:8B:F1:7E:53:B6:FD:7F:69:1D:12:05:E0 Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7 Certificate serial: 019B7F836E21B7A6A1B9CFDEE2E674CA38E6 Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/tqaZWzQOONuL8X5Ttv1_aR0SBeA.roa Signing time: Fri 02 Jan 2026 16:21:18 +0000 ROA not before: Fri 02 Jan 2026 16:21:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209927 IP address blocks: 92.118.132.0/24 maxlen: 24 92.118.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:6e:21:b7:a6:a1:b9:cf:de:e2:e6:74:ca:38:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7 Validity Not Before: Jan 2 16:21:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b6a6995b340e38db8bf17e53b6fd7f691d1205e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a5:60:31:5e:2b:63:1a:9f:5a:18:a7:b8:db: 02:52:57:f7:e4:62:b8:08:34:c0:74:77:e6:54:3c: 0d:ec:3e:59:da:50:b1:d5:ce:2b:92:e4:cf:ef:ff: 10:b0:79:f5:f1:97:85:2c:b8:07:01:e4:1f:13:e9: b4:42:0e:0f:c6:9b:97:83:eb:a9:ae:c4:f2:fb:98: e5:fe:4d:74:3e:02:e8:9f:94:58:16:ba:f5:45:0c: a2:c7:3b:9d:7f:b3:10:1f:a9:48:2d:94:78:aa:79: 5b:15:46:f0:5d:23:f8:6d:6e:dd:57:e8:a9:c7:63: e3:50:8e:b2:11:a0:a1:ef:cd:fe:a5:b9:4d:28:18: cb:80:f2:78:0d:24:57:44:6e:e3:2a:35:4c:b0:1b: 1d:05:eb:12:9e:79:78:32:fc:37:1d:03:53:7c:fc: 03:4e:a8:9c:c9:6f:9e:ff:30:c2:78:39:98:fc:88: 3e:40:d7:22:56:16:8e:e3:99:92:ca:b8:fc:1b:03: d5:b4:37:f0:57:37:15:6a:e4:5c:69:3e:dc:6e:1e: b3:87:4e:13:57:e0:8c:a5:b0:b5:b9:c2:aa:e8:f2: 61:02:ce:4e:56:ec:db:b0:e6:81:ba:d1:3a:90:dc: d1:e4:10:33:69:6b:64:cc:48:12:b0:44:3a:1e:51: f0:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A6:99:5B:34:0E:38:DB:8B:F1:7E:53:B6:FD:7F:69:1D:12:05:E0 X509v3 Authority Key Identifier: keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/tqaZWzQOONuL8X5Ttv1_aR0SBeA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.118.132.0/23 Signature Algorithm: sha256WithRSAEncryption 95:d9:a1:d8:6a:25:8f:4f:b9:51:7e:6d:9f:9f:c2:25:a4:75: 3c:9d:5c:7e:d8:1f:ed:27:10:01:0b:f7:0f:65:d3:17:0c:45: 35:28:d9:79:a4:6c:28:00:44:15:1c:7a:08:17:61:cd:5b:46: bb:24:0b:bc:28:fd:19:78:b9:20:f0:82:e7:48:9e:43:ce:be: f3:e8:85:97:88:ae:83:df:91:33:08:0a:80:1e:21:34:03:92: 65:5a:74:7c:67:7f:c0:37:e3:4f:38:cb:f6:93:b8:3f:bd:39: 4e:cd:58:7b:3a:8b:5e:f9:9c:86:49:72:7e:2f:de:5a:ba:4c: 5a:ad:86:5a:c9:1c:89:53:a0:34:77:2d:69:cd:bd:d2:60:46: c8:e6:fb:a2:5f:68:90:26:23:1b:22:66:13:e5:89:3d:a4:fa: b7:c3:7e:a5:bf:81:68:6d:a2:a1:4f:23:09:3a:d4:f2:26:c2: a7:5b:44:ff:19:b0:c9:87:22:8a:8f:fa:71:56:73:28:5a:e4: e3:61:cc:31:59:2a:a0:fc:76:c8:58:c8:dc:01:e2:97:60:10: 60:6c:bc:92:61:ea:c8:4d:2a:44:fa:b4:96:dc:30:19:51:a1: fa:79:5c:bc:02:9a:75:09:89:a3:1e:32:1c:ee:50:77:09:05: 5b:31:34:0a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g24ht6ahuc/e4uZ0yjjmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYWY1YzJlNWVkYzE5NzgzNGQwN2YzNDU5NjJiMDc0NWJl ZTY2ZDcwHhcNMjYwMTAyMTYyMTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNmE2OTk1YjM0MGUzOGRiOGJmMTdlNTNiNmZkN2Y2OTFkMTIwNWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaVgMV4rYxqfWhinuNsCUlf35GK4 CDTAdHfmVDwN7D5Z2lCx1c4rkuTP7/8QsHn18ZeFLLgHAeQfE+m0Qg4PxpuXg+up rsTy+5jl/k10PgLon5RYFrr1RQyixzudf7MQH6lILZR4qnlbFUbwXSP4bW7dV+ip x2PjUI6yEaCh783+pblNKBjLgPJ4DSRXRG7jKjVMsBsdBesSnnl4Mvw3HQNTfPwD TqicyW+e/zDCeDmY/Ig+QNciVhaO45mSyrj8GwPVtDfwVzcVauRcaT7cbh6zh04T V+CMpbC1ucKq6PJhAs5OVuzbsOaButE6kNzR5BAzaWtkzEgSsEQ6HlHwhQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLammVs0Djjbi/F+U7b9f2kdEgXgMB8GA1UdIwQY MBaAFB6vXC5e3Bl4NNB/NFlisHRb7mbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODIt NGEzNGMxYmJhYjJiLzEvdHFhWld6UU9PTnVMOFg1VHR2MV9hUjBTQmVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODItNGEzNGMxYmJhYjJi LzEvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXHaEMA0G CSqGSIb3DQEBCwUAA4IBAQCV2aHYaiWPT7lRfm2fn8IlpHU8nVx+2B/tJxABC/cP ZdMXDEU1KNl5pGwoAEQVHHoIF2HNW0a7JAu8KP0ZeLkg8ILnSJ5Dzr7z6IWXiK6D 35EzCAqAHiE0A5JlWnR8Z3/AN+NPOMv2k7g/vTlOzVh7Oote+ZyGSXJ+L95aukxa rYZayRyJU6A0dy1pzb3SYEbI5vuiX2iQJiMbImYT5Yk9pPq3w36lv4FobaKhTyMJ OtTyJsKnW0T/GbDJhyKKj/pxVnMoWuTjYcwxWSqg/HbIWMjcAeKXYBBgbLySYerI TSpE+rSW3DAZUaH6eVy8App1CYmjHjIc7lB3CQVbMTQK -----END CERTIFICATE-----Generated at Mon Jan 26 04:41:04 2026 by rpki-client