This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/TGFQ-v8iwwj26A1wGgSnz3RdIYI.roa File: TGFQ-v8iwwj26A1wGgSnz3RdIYI.roa (raw, json) Hash identifier: qpNJM6IYQFJO0DDo4i0rSAgHt9c5GNaow4wODjswgv8= Subject key identifier: 4C:61:50:FA:FF:22:C3:08:F6:E8:0D:70:1A:04:A7:CF:74:5D:21:82 Certificate issuer: /CN=3bce5ec73608e24885283e910eb87bf1ef823a02 Certificate serial: 019B7BA5226F6852C04AFCD5D6512F83D7F0 Authority key identifier: 3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/TGFQ-v8iwwj26A1wGgSnz3RdIYI.roa Signing time: Thu 01 Jan 2026 22:19:38 +0000 ROA not before: Thu 01 Jan 2026 22:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16347 IP address blocks: 185.117.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:22:6f:68:52:c0:4a:fc:d5:d6:51:2f:83:d7:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bce5ec73608e24885283e910eb87bf1ef823a02 Validity Not Before: Jan 1 22:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c6150faff22c308f6e80d701a04a7cf745d2182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e0:9b:97:f8:90:01:52:26:cc:69:0f:f4:6a: 02:e3:a5:2e:e8:7a:52:35:90:1c:3d:90:ba:d7:e6: a0:6e:2b:eb:e5:4d:61:99:7d:8e:10:0e:2b:4d:45: f1:f8:12:82:da:f5:7d:4f:0e:4a:42:a5:a5:7c:a0: 79:1d:59:16:3e:8c:3a:b9:38:dc:19:0c:a0:11:b8: 91:59:e2:13:fc:82:bd:ac:cf:e2:dd:aa:fe:c3:8f: 7f:aa:73:2c:b7:ed:15:75:40:a3:04:7b:6a:fd:43: 82:2d:a3:cd:d8:19:ba:b3:5d:36:37:17:a8:33:1f: c0:07:f6:1d:48:e7:06:4c:34:2e:bc:77:80:da:f7: 9e:53:72:70:fa:ac:03:00:e6:c0:c2:0d:c5:c2:2e: 2f:01:9c:30:1f:f4:49:18:b9:04:b7:43:56:5c:a7: 64:55:f3:dd:33:29:13:e0:6f:f9:96:2c:97:c8:dd: a2:68:b8:f5:6e:93:96:75:ce:fd:11:a7:e9:26:8a: 4c:05:7b:ca:26:fd:4c:d3:fe:5d:4c:d9:c8:ab:28: 5a:c3:e4:af:70:0f:55:1d:d4:ee:05:61:cf:e2:f0: 79:94:3f:62:2b:40:5d:4b:3a:93:af:ae:88:a3:d8: b0:b5:e6:b0:fe:24:b0:3b:a9:4b:92:47:cc:58:c3: d0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:61:50:FA:FF:22:C3:08:F6:E8:0D:70:1A:04:A7:CF:74:5D:21:82 X509v3 Authority Key Identifier: keyid:3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/TGFQ-v8iwwj26A1wGgSnz3RdIYI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.117.92.0/22 Signature Algorithm: sha256WithRSAEncryption 4d:e2:78:b2:4f:b4:68:de:b7:3d:79:60:19:90:23:42:d6:27: 51:c9:27:53:7d:cd:a5:1b:f3:ad:58:10:46:5f:0e:cf:42:4b: c6:5e:e5:dc:3d:d8:01:78:bf:18:7c:99:3d:23:57:fa:fb:22: c6:c9:5f:de:79:35:c7:74:6d:f7:15:c2:34:eb:ff:68:41:84: a8:af:7a:93:e0:74:04:78:25:05:a3:48:42:2b:18:37:f1:e8: 70:b0:b7:70:15:3d:a8:bc:3b:3e:45:a6:e7:12:24:39:4c:0b: d2:46:63:71:50:db:60:35:ef:59:c0:2e:1a:48:6f:fe:70:c0: a8:e9:13:8d:37:67:88:17:0b:1e:7e:e6:c5:15:c8:54:77:53: dd:34:e5:35:d9:dd:4b:9e:38:58:34:9e:e3:75:e2:55:55:b9: a3:e4:b6:96:f3:0e:d1:5f:82:1f:d1:97:c9:a1:37:d1:85:d8: f2:91:1e:60:bd:b6:26:46:4d:5b:1d:3b:29:cf:9d:3e:0e:41: d3:02:f8:5a:01:97:05:47:b3:5c:25:f3:6c:e8:b2:db:6a:64: 72:60:2a:70:30:ea:f6:64:f3:28:45:9f:51:2d:53:c5:d7:80: 22:36:5d:6c:43:4c:85:8a:27:dd:f6:69:87:f6:b4:34:10:ed: cb:2b:6b:20 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pSJvaFLASvzV1lEvg9fwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiY2U1ZWM3MzYwOGUyNDg4NTI4M2U5MTBlYjg3YmYxZWY4 MjNhMDIwHhcNMjYwMTAxMjIxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzYxNTBmYWZmMjJjMzA4ZjZlODBkNzAxYTA0YTdjZjc0NWQyMTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuCbl/iQAVImzGkP9GoC46Uu6HpS NZAcPZC61+agbivr5U1hmX2OEA4rTUXx+BKC2vV9Tw5KQqWlfKB5HVkWPow6uTjc GQygEbiRWeIT/IK9rM/i3ar+w49/qnMst+0VdUCjBHtq/UOCLaPN2Bm6s102Nxeo Mx/AB/YdSOcGTDQuvHeA2veeU3Jw+qwDAObAwg3Fwi4vAZwwH/RJGLkEt0NWXKdk VfPdMykT4G/5liyXyN2iaLj1bpOWdc79EafpJopMBXvKJv1M0/5dTNnIqyhaw+Sv cA9VHdTuBWHP4vB5lD9iK0BdSzqTr66Io9iwteaw/iSwO6lLkkfMWMPQxwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFExhUPr/IsMI9ugNcBoEp890XSGCMB8GA1UdIwQY MBaAFDvOXsc2COJIhSg+kQ64e/HvgjoCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzg1ZXh6WUk0a2lGS0Q2UkRyaDc4ZS1DT2dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9mZmY1MTQtMWUwZS00OTNlLTllZTUt NmU5OWI3OWRhNTIwLzEvVEdGUS12OGl3d2oyNkExd0dnU256M1JkSVlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9mZmY1MTQtMWUwZS00OTNlLTllZTUtNmU5OWI3OWRhNTIw LzEvTzg1ZXh6WUk0a2lGS0Q2UkRyaDc4ZS1DT2dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXVcMA0G CSqGSIb3DQEBCwUAA4IBAQBN4niyT7Ro3rc9eWAZkCNC1idRySdTfc2lG/OtWBBG Xw7PQkvGXuXcPdgBeL8YfJk9I1f6+yLGyV/eeTXHdG33FcI06/9oQYSor3qT4HQE eCUFo0hCKxg38ehwsLdwFT2ovDs+RabnEiQ5TAvSRmNxUNtgNe9ZwC4aSG/+cMCo 6RONN2eIFwsefubFFchUd1PdNOU12d1LnjhYNJ7jdeJVVbmj5LaW8w7RX4If0ZfJ oTfRhdjykR5gvbYmRk1bHTspz50+DkHTAvhaAZcFR7NcJfNs6LLbamRyYCpwMOr2 ZPMoRZ9RLVPF14AiNl1sQ0yFiifd9mmH9rQ0EO3LK2sg -----END CERTIFICATE-----Generated at Sun Jan 25 23:03:53 2026 by rpki-client