This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/TQrtuJqVJ0yT9DG7MEeC7YVamP0.roa File: TQrtuJqVJ0yT9DG7MEeC7YVamP0.roa (raw, json) Hash identifier: F3JOsifgipj8NSl+bt/0MEJ3mxQ+tdxtpprOlwYgUAw= Subject key identifier: 4D:0A:ED:B8:9A:95:27:4C:93:F4:31:BB:30:47:82:ED:85:5A:98:FD Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933 Certificate serial: 019B7D5D0BB9D1B86142E0E23083EE188C0B Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/TQrtuJqVJ0yT9DG7MEeC7YVamP0.roa Signing time: Fri 02 Jan 2026 06:20:08 +0000 ROA not before: Fri 02 Jan 2026 06:20:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203920 IP address blocks: 157.25.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:0b:b9:d1:b8:61:42:e0:e2:30:83:ee:18:8c:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933 Validity Not Before: Jan 2 06:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d0aedb89a95274c93f431bb304782ed855a98fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f7:85:a3:69:b4:c1:cc:26:3a:0d:5e:c1:a4: bc:56:ae:bf:5d:85:25:93:fb:fb:28:5d:80:39:c8: 8a:4e:32:69:08:56:7b:0e:f2:30:b4:3b:3f:cd:70: eb:dc:5e:bc:94:b4:8b:f1:bc:b2:6b:c9:0a:ab:67: 6e:92:cb:d4:ea:e7:7d:05:fb:e0:1d:c8:13:a7:93: 7e:cb:d4:0c:83:3d:1b:0c:68:c3:fe:be:c5:e9:90: 8f:56:74:2a:87:e1:93:18:da:ad:01:2b:0d:85:f0: 51:29:8a:31:4b:39:19:94:ec:3e:56:7c:d1:c8:b4: d7:b7:ae:de:ce:b6:1a:24:98:e6:ca:b9:b7:92:46: 2d:4c:42:6d:34:e3:c3:75:0d:df:e2:a6:95:59:76: 2c:0d:3e:9f:64:5c:7a:15:8f:c9:5d:ec:52:3d:e8: 99:29:d5:21:68:b3:75:17:66:b3:ed:db:50:f5:9c: 70:67:13:9c:b1:6f:aa:db:55:50:a5:66:3d:bd:78: 87:a7:5d:d6:5a:92:bd:20:d4:94:95:58:ce:d4:ae: a5:36:e2:19:0f:28:c6:8f:dd:48:21:0e:74:44:1a: 7e:7e:eb:c3:30:d5:e1:60:bf:be:5b:8d:a0:07:80: 8f:20:a4:a2:f6:51:fd:fa:ab:d8:3e:3f:21:8e:58: b3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:0A:ED:B8:9A:95:27:4C:93:F4:31:BB:30:47:82:ED:85:5A:98:FD X509v3 Authority Key Identifier: keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/TQrtuJqVJ0yT9DG7MEeC7YVamP0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.25.140.0/24 Signature Algorithm: sha256WithRSAEncryption 53:94:b2:b5:3a:04:82:5e:12:86:f8:67:8a:e6:c4:6f:5b:e2: e5:8b:77:7e:df:aa:62:91:65:ef:f1:44:28:65:af:97:bc:7b: 47:21:30:7f:c5:fd:1e:37:72:5a:4a:c1:21:06:ee:5f:2d:00: 3f:8d:39:8f:6e:40:c7:b9:7a:42:eb:ad:19:7e:e3:de:16:f2: 4f:8e:5f:6d:f3:fa:b9:41:a7:fb:2c:9e:22:d5:8c:de:22:f8: dd:f1:7b:81:fe:e3:99:1b:58:7f:83:49:b3:1c:96:91:1c:38: db:7d:38:c5:cb:a1:9f:6f:ca:47:26:c7:0f:cb:be:82:62:99: af:ca:27:cf:e5:da:af:a9:c4:a7:c5:0a:d5:4f:5e:a0:b3:7b: d9:78:d7:61:0f:0e:6d:f1:28:23:27:68:7a:5c:5c:d7:43:3c: e3:7e:af:f9:1a:79:3c:6b:75:4f:4e:cf:4a:00:80:81:81:cd: 3e:d6:45:77:11:4b:f9:91:f3:7e:11:4b:1b:b2:79:54:de:ba: 6a:27:d3:08:24:13:0c:31:0f:bd:59:31:11:a6:42:9b:c9:68: ee:6f:62:40:6f:e2:e4:19:f9:73:f9:01:8e:b5:4f:17:de:ef: 57:05:0d:02:21:6a:aa:34:95:17:03:61:37:66:91:a4:56:e1: 00:ec:b4:84 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XQu50bhhQuDiMIPuGIwLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2E2M2RmMjQ4YjdhZGYzZGRkMDdlOGMyZDNlZWRkMDJj ZWY5MzMwHhcNMjYwMTAyMDYyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDBhZWRiODlhOTUyNzRjOTNmNDMxYmIzMDQ3ODJlZDg1NWE5OGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtveFo2m0wcwmOg1ewaS8Vq6/XYUl k/v7KF2AOciKTjJpCFZ7DvIwtDs/zXDr3F68lLSL8byya8kKq2duksvU6ud9Bfvg HcgTp5N+y9QMgz0bDGjD/r7F6ZCPVnQqh+GTGNqtASsNhfBRKYoxSzkZlOw+VnzR yLTXt67ezrYaJJjmyrm3kkYtTEJtNOPDdQ3f4qaVWXYsDT6fZFx6FY/JXexSPeiZ KdUhaLN1F2az7dtQ9ZxwZxOcsW+q21VQpWY9vXiHp13WWpK9INSUlVjO1K6lNuIZ DyjGj91IIQ50RBp+fuvDMNXhYL++W42gB4CPIKSi9lH9+qvYPj8hjlizfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE0K7bialSdMk/QxuzBHgu2FWpj9MB8GA1UdIwQY MBaAFBrKY98ki3rfPd0H6MLT7t0CzvkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzIt OTFlMzE4NGJiMGFiLzEvVFFydHVKcVZKMHlUOURHN01FZUM3WVZhbVAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzItOTFlMzE4NGJiMGFi LzEvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnRmMMA0G CSqGSIb3DQEBCwUAA4IBAQBTlLK1OgSCXhKG+GeK5sRvW+Lli3d+36pikWXv8UQo Za+XvHtHITB/xf0eN3JaSsEhBu5fLQA/jTmPbkDHuXpC660ZfuPeFvJPjl9t8/q5 Qaf7LJ4i1YzeIvjd8XuB/uOZG1h/g0mzHJaRHDjbfTjFy6Gfb8pHJscPy76CYpmv yifP5dqvqcSnxQrVT16gs3vZeNdhDw5t8SgjJ2h6XFzXQzzjfq/5Gnk8a3VPTs9K AICBgc0+1kV3EUv5kfN+EUsbsnlU3rpqJ9MIJBMMMQ+9WTERpkKbyWjub2JAb+Lk Gflz+QGOtU8X3u9XBQ0CIWqqNJUXA2E3ZpGkVuEA7LSE -----END CERTIFICATE-----Generated at Sun Jan 25 22:14:08 2026 by rpki-client