This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/tl_q-hSPqgL5VpoDk8C2Ua5xTVc.roa File: tl_q-hSPqgL5VpoDk8C2Ua5xTVc.roa (raw, json) Hash identifier: P7Vo08T4BVo4faac/Yk9jWiigRql2vSCBoh+fxrW89w= Subject key identifier: B6:5F:EA:FA:14:8F:AA:02:F9:56:9A:03:93:C0:B6:51:AE:71:4D:57 Certificate issuer: /CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619 Certificate serial: 019B7834EC266A757F9237F23092726CDD69 Authority key identifier: 3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/tl_q-hSPqgL5VpoDk8C2Ua5xTVc.roa Signing time: Thu 01 Jan 2026 06:18:12 +0000 ROA not before: Thu 01 Jan 2026 06:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 134433 IP address blocks: 185.71.228.0/22 maxlen: 24 185.71.228.0/24 maxlen: 24 185.71.229.0/24 maxlen: 24 185.71.230.0/24 maxlen: 24 185.71.231.0/24 maxlen: 24 185.125.84.0/22 maxlen: 24 185.125.84.0/24 maxlen: 24 185.125.85.0/24 maxlen: 24 185.125.86.0/24 maxlen: 24 185.125.87.0/24 maxlen: 24 193.0.180.0/22 maxlen: 24 193.0.180.0/24 maxlen: 24 193.0.181.0/24 maxlen: 24 193.0.182.0/24 maxlen: 24 193.0.183.0/24 maxlen: 24 2a05:3340::/29 maxlen: 64 2a05:3340::/42 maxlen: 42 2a05:3340:140::/42 maxlen: 48 2a05:3343:4::/48 maxlen: 48 2a05:3343:5::/48 maxlen: 48 2a05:3343:6::/48 maxlen: 48 2a05:3343:7::/48 maxlen: 48 2a05:3343:a::/48 maxlen: 48 2a05:3343:b::/48 maxlen: 48 2a05:3343:c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:ec:26:6a:75:7f:92:37:f2:30:92:72:6c:dd:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619 Validity Not Before: Jan 1 06:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b65feafa148faa02f9569a0393c0b651ae714d57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:dd:fb:5c:94:61:0f:42:48:e7:ca:96:c7:dd: f2:dd:22:de:46:f3:32:46:fe:e1:a1:ce:f6:4c:8e: 81:61:ee:3a:c6:ba:36:a5:02:68:60:7b:cd:a1:d6: 31:91:39:2f:a5:31:c2:15:aa:90:b7:63:9b:4b:04: e9:ea:4c:b1:80:69:19:a6:b2:2e:ca:75:5f:6d:75: 1a:90:4b:22:64:54:d8:58:56:db:7e:9c:4e:85:ff: 87:a7:e7:63:8c:4f:3e:2c:c2:56:45:ae:d2:98:56: 96:f4:8d:7f:99:b3:7b:19:86:cb:85:5e:30:36:df: c0:8d:ee:d1:9e:05:9c:bc:2e:18:89:47:c3:9d:83: 96:45:1e:bb:d5:d4:5e:28:e8:59:83:8b:af:1b:53: 00:d7:b7:cf:9b:07:78:9f:be:57:9b:29:ef:2e:2f: 75:e5:32:9a:a0:f1:aa:0c:78:83:47:13:d4:70:3b: 6d:3d:bd:3e:f5:14:2d:f4:a4:7d:88:0d:29:56:5d: f1:b7:0d:ab:7b:a7:be:81:a0:03:b6:34:52:48:d8: 0c:d6:e3:f9:49:24:47:a6:d2:51:27:aa:08:f0:a9: a6:27:ab:8b:ce:90:3a:f7:7e:a4:4c:69:28:47:19: 6d:98:20:a8:c6:f5:d3:8a:30:d7:9e:1c:87:cd:6e: a7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:5F:EA:FA:14:8F:AA:02:F9:56:9A:03:93:C0:B6:51:AE:71:4D:57 X509v3 Authority Key Identifier: keyid:3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/tl_q-hSPqgL5VpoDk8C2Ua5xTVc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.71.228.0/22 185.125.84.0/22 193.0.180.0/22 IPv6: 2a05:3340::/29 Signature Algorithm: sha256WithRSAEncryption 3f:28:22:50:3f:d1:12:4e:28:4c:20:57:95:6a:1c:b6:46:d3: 9c:0d:e8:1a:dc:b7:7c:7f:ed:06:37:59:12:2f:fc:36:08:f0: 12:e8:e5:94:96:91:f1:95:7c:8b:ea:92:17:8a:f4:18:29:52: e1:b3:9f:73:ff:6a:09:a3:1d:2b:34:30:d7:d6:d8:50:06:bd: 35:51:d2:ae:9a:bf:db:0a:d9:19:23:94:8f:c0:b1:a3:81:b8: 66:3a:1d:4b:c7:49:85:58:ac:b7:b6:a5:47:59:da:e6:f2:38: fd:69:a0:41:8a:f8:3b:a5:22:31:08:79:1f:11:47:bd:c1:78: 09:f8:e1:7b:36:96:4b:4c:90:e4:67:e3:3a:8e:29:0c:85:b5: b3:46:20:20:c3:de:89:2d:8e:db:69:3e:1a:23:72:f8:75:27: 13:83:26:c9:bb:25:36:97:b9:84:20:78:d8:e8:1a:ce:d0:b5: a2:dc:be:5c:0c:ba:b7:6d:9f:76:21:61:a3:20:c0:69:c3:e7: 56:4c:f5:87:37:78:85:dd:77:79:d1:4a:ab:ec:53:dc:fb:f1: e4:a5:34:61:85:8a:ff:f7:95:6a:eb:cd:c4:73:b9:4e:89:ed: 55:ed:33:32:f8:a5:dc:1e:d3:45:44:77:ae:ba:a9:11:ad:d3: 32:67:9b:3b -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt4NOwmanV/kjfyMJJybN1pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMjRjN2VjZmEzN2QyNDg3MTUyZmI5YmJiYWI1MGJlNzlk ZTI2MTkwHhcNMjYwMTAxMDYxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjVmZWFmYTE0OGZhYTAyZjk1NjlhMDM5M2MwYjY1MWFlNzE0ZDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt37XJRhD0JI58qWx93y3SLeRvMy Rv7hoc72TI6BYe46xro2pQJoYHvNodYxkTkvpTHCFaqQt2ObSwTp6kyxgGkZprIu ynVfbXUakEsiZFTYWFbbfpxOhf+Hp+djjE8+LMJWRa7SmFaW9I1/mbN7GYbLhV4w Nt/Aje7RngWcvC4YiUfDnYOWRR671dReKOhZg4uvG1MA17fPmwd4n75XmynvLi91 5TKaoPGqDHiDRxPUcDttPb0+9RQt9KR9iA0pVl3xtw2re6e+gaADtjRSSNgM1uP5 SSRHptJRJ6oI8KmmJ6uLzpA6936kTGkoRxltmCCoxvXTijDXnhyHzW6nDQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFLZf6voUj6oC+VaaA5PAtlGucU1XMB8GA1UdIwQY MBaAFD4kx+z6N9JIcVL7m7urUL553iYZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGlUSDdQbzMwa2h4VXZ1YnU2dFF2bm5lSmhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8zOWE1ZmMtZDI2ZS00ZDUzLTkxZTMt NDkzZDc3NGFhMWZmLzEvdGxfcS1oU1BxZ0w1VnBvRGs4QzJVYTV4VFZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8zOWE1ZmMtZDI2ZS00ZDUzLTkxZTMtNDkzZDc3NGFhMWZm LzEvUGlUSDdQbzMwa2h4VXZ1YnU2dFF2bm5lSmhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCuUfkAwQC uX1UAwQCwQC0MA0EAgACMAcDBQMqBTNAMA0GCSqGSIb3DQEBCwUAA4IBAQA/KCJQ P9ESTihMIFeVahy2RtOcDega3Ld8f+0GN1kSL/w2CPAS6OWUlpHxlXyL6pIXivQY KVLhs59z/2oJox0rNDDX1thQBr01UdKumr/bCtkZI5SPwLGjgbhmOh1Lx0mFWKy3 tqVHWdrm8jj9aaBBivg7pSIxCHkfEUe9wXgJ+OF7NpZLTJDkZ+M6jikMhbWzRiAg w96JLY7baT4aI3L4dScTgybJuyU2l7mEIHjY6BrO0LWi3L5cDLq3bZ92IWGjIMBp w+dWTPWHN3iF3Xd50Uqr7FPc+/HkpTRhhYr/95Vq683Ec7lOie1V7TMy+KXcHtNF RHeuuqkRrdMyZ5s7 -----END CERTIFICATE-----Generated at Sun Jan 25 19:38:18 2026 by rpki-client