This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/Tx1QRE1K0CqqbNISdem5mSeFyhY.roa File: Tx1QRE1K0CqqbNISdem5mSeFyhY.roa (raw, json) Hash identifier: TsoYEEq1X+nTDdaU6FQwegqSC4XnT5STovO4gDOXBsw= Subject key identifier: 4F:1D:50:44:4D:4A:D0:2A:AA:6C:D2:12:75:E9:B9:99:27:85:CA:16 Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20 Certificate serial: 019B7E38B3B475107B6A27787B0B0ABCFB39 Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/Tx1QRE1K0CqqbNISdem5mSeFyhY.roa Signing time: Fri 02 Jan 2026 10:20:03 +0000 ROA not before: Fri 02 Jan 2026 10:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206621 IP address blocks: 141.105.133.0/24 maxlen: 24 141.105.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:b3:b4:75:10:7b:6a:27:78:7b:0b:0a:bc:fb:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20 Validity Not Before: Jan 2 10:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f1d50444d4ad02aaa6cd21275e9b9992785ca16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d6:c3:db:5d:9a:f7:c4:8f:20:a8:42:14:84: fb:5f:fb:7c:58:97:c0:17:63:75:89:0c:31:13:20: 37:00:04:ba:24:fd:49:12:07:fb:32:ef:29:f3:7b: 4e:87:22:fc:0e:d8:da:0a:96:c3:1e:d7:df:7c:b3: 41:91:ef:4f:d4:51:5b:23:8c:d7:6e:88:fd:66:b3: fe:ce:e3:ff:03:07:ec:31:51:0f:fa:32:05:e7:7e: d2:56:05:15:b6:45:8e:4e:54:46:5d:84:75:aa:ab: 99:51:ae:0f:67:e6:5f:0f:13:59:61:26:d5:44:f5: 48:54:25:f4:5e:5b:a3:17:b5:51:c8:73:56:c6:74: aa:d1:bf:c6:54:43:12:9f:cf:b8:f1:5f:10:8e:3c: a2:19:f0:6b:e7:cb:4c:b0:e2:de:0f:97:e8:5f:56: 75:90:2d:88:82:a8:03:d8:a1:fc:45:eb:69:5f:28: db:46:b1:d4:87:fc:2d:6c:01:41:9b:b8:d4:e4:d8: c3:12:8e:8e:f3:6a:75:16:bf:0c:18:b2:80:75:9e: d6:56:74:26:68:13:3c:76:88:7c:ea:ef:d5:5f:81: f2:bc:25:4a:ea:03:17:fe:f2:8d:c8:5c:6f:11:a5: 96:73:20:09:fc:bb:7e:ea:f6:e7:33:d5:bb:a8:5f: d3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:1D:50:44:4D:4A:D0:2A:AA:6C:D2:12:75:E9:B9:99:27:85:CA:16 X509v3 Authority Key Identifier: keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/Tx1QRE1K0CqqbNISdem5mSeFyhY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.105.133.0/24 141.105.136.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:33:c7:c6:29:bd:8e:46:fc:5a:aa:3b:d9:9d:1e:e6:30:38: 5c:9a:9a:ab:42:45:6d:bf:a2:f8:ba:c9:c6:49:71:db:7d:42: 9a:04:b5:c9:bd:dd:21:87:6c:87:db:f2:ea:67:df:5f:cd:ab: 80:ff:91:3b:2b:9c:1c:f2:63:c0:a0:d3:7d:4c:a9:58:b5:cb: c7:47:48:11:b7:cc:fb:dd:45:ad:44:7a:1a:41:9a:ef:b8:b2: 09:c1:d8:80:ce:25:6b:37:1c:09:b2:d7:23:f8:50:5b:5c:8d: b7:45:0e:a0:9f:3a:c7:7c:b8:d5:04:2d:be:c3:1f:bf:49:14: 01:50:4c:07:48:4c:44:86:f8:c9:bf:47:3b:50:85:14:e8:12: 32:21:7d:f8:86:28:a2:33:6b:95:d8:91:53:51:e0:6e:39:2f: 91:48:97:6e:83:46:61:b1:d6:32:19:c7:c3:87:ba:b8:8a:4f: fb:31:88:9d:d1:1f:a8:e9:c3:06:a6:1b:12:6d:89:58:9c:7b: 34:6e:59:d7:a8:9f:3c:80:95:ff:7c:80:fc:c0:b4:04:84:f2: 78:94:1e:28:66:b3:db:d1:2d:26:4b:3b:05:f7:f4:cc:e9:a9: 50:a1:02:94:28:f0:85:8a:7a:54:ff:47:c4:09:4b:a9:01:6f: 11:87:b7:c4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OLO0dRB7aid4ewsKvPs5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyYTE1Y2M4ODY1OWY1NzhjYzE1OWM1MmIzYTdlOWVjNTgx OWZiMjAwHhcNMjYwMTAyMTAyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjFkNTA0NDRkNGFkMDJhYWE2Y2QyMTI3NWU5Yjk5OTI3ODVjYTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdbD212a98SPIKhCFIT7X/t8WJfA F2N1iQwxEyA3AAS6JP1JEgf7Mu8p83tOhyL8DtjaCpbDHtfffLNBke9P1FFbI4zX boj9ZrP+zuP/AwfsMVEP+jIF537SVgUVtkWOTlRGXYR1qquZUa4PZ+ZfDxNZYSbV RPVIVCX0XlujF7VRyHNWxnSq0b/GVEMSn8+48V8QjjyiGfBr58tMsOLeD5foX1Z1 kC2IgqgD2KH8RetpXyjbRrHUh/wtbAFBm7jU5NjDEo6O82p1Fr8MGLKAdZ7WVnQm aBM8doh86u/VX4HyvCVK6gMX/vKNyFxvEaWWcyAJ/Lt+6vbnM9W7qF/TKQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFE8dUERNStAqqmzSEnXpuZknhcoWMB8GA1UdIwQY MBaAFGKhXMiGWfV4zBWcUrOn6exYGfsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAt NDI2OWI1NmJmN2Q0LzEvVHgxUVJFMUswQ3FxYk5JU2RlbTVtU2VGeWhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAtNDI2OWI1NmJmN2Q0 LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjWmFAwQA jWmIMA0GCSqGSIb3DQEBCwUAA4IBAQCLM8fGKb2ORvxaqjvZnR7mMDhcmpqrQkVt v6L4usnGSXHbfUKaBLXJvd0hh2yH2/LqZ99fzauA/5E7K5wc8mPAoNN9TKlYtcvH R0gRt8z73UWtRHoaQZrvuLIJwdiAziVrNxwJstcj+FBbXI23RQ6gnzrHfLjVBC2+ wx+/SRQBUEwHSExEhvjJv0c7UIUU6BIyIX34hiiiM2uV2JFTUeBuOS+RSJdug0Zh sdYyGcfDh7q4ik/7MYid0R+o6cMGphsSbYlYnHs0blnXqJ88gJX/fID8wLQEhPJ4 lB4oZrPb0S0mSzsF9/TM6alQoQKUKPCFinpU/0fECUupAW8Rh7fE -----END CERTIFICATE-----Generated at Sun Jan 25 16:27:39 2026 by rpki-client