This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/TYmQbCMoT4fS2qLD8XTST39V7ao.roa File: TYmQbCMoT4fS2qLD8XTST39V7ao.roa (raw, json) Hash identifier: AGtO8iqNaCFj7ECH8S64l5TD2JUqi3IXF+NQdgnWnfk= Subject key identifier: 4D:89:90:6C:23:28:4F:87:D2:DA:A2:C3:F1:74:D2:4F:7F:55:ED:AA Certificate issuer: /CN=5f3a6c21941c1e13bffc4d44d61bd2595fdd8fe8 Certificate serial: 019B7DCA7601AD6D951D9D289240BC4D7BA9 Authority key identifier: 5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/TYmQbCMoT4fS2qLD8XTST39V7ao.roa Signing time: Fri 02 Jan 2026 08:19:39 +0000 ROA not before: Fri 02 Jan 2026 08:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215082 IP address blocks: 91.233.120.0/24 maxlen: 24 194.104.235.0/24 maxlen: 24 2a14:3ec0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.crl rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:76:01:ad:6d:95:1d:9d:28:92:40:bc:4d:7b:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f3a6c21941c1e13bffc4d44d61bd2595fdd8fe8 Validity Not Before: Jan 2 08:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d89906c23284f87d2daa2c3f174d24f7f55edaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:fc:f6:aa:af:d8:b7:64:1c:d3:3c:fa:c7:ca: 45:b7:8d:41:75:85:9a:ce:23:2f:0b:fc:73:0e:ce: ef:4c:8a:4d:e3:43:ed:74:32:32:7c:ef:a9:31:e4: 66:e8:4b:7c:d3:66:9d:ad:5f:2e:27:3c:2c:5d:94: 5c:c6:36:27:6f:8a:3a:7d:d5:fe:2f:4f:ef:06:2f: 3f:0d:72:2c:14:20:55:3d:fc:7c:b8:fe:86:17:fe: 1e:72:3d:f5:3b:d2:fe:a1:71:18:43:5d:15:73:f8: 43:8b:14:4a:24:5b:22:98:db:7c:4c:f4:b8:82:1f: c8:65:9e:f2:77:3a:79:e7:7a:6c:fa:78:e1:59:00: 44:50:a8:3f:88:df:ea:fc:93:90:2d:e2:6c:50:87: d0:60:94:58:93:32:af:8a:f8:6e:eb:70:2c:8b:ce: 91:fc:ba:a9:c5:89:5a:23:07:bd:d5:63:ce:4b:5c: 9a:1d:06:3d:5f:15:d6:b6:f8:5e:b4:8a:c8:32:09: 4e:51:33:4c:62:9c:8c:35:ed:15:c6:6e:3c:d0:99: a8:ad:10:9c:d7:c3:14:65:a2:41:4e:01:4a:01:b9: 10:09:91:4a:bb:f5:c0:38:f3:50:47:8c:b7:d7:14: 70:b3:e8:69:58:3f:7d:b3:19:f7:47:f4:73:2e:99: 47:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:89:90:6C:23:28:4F:87:D2:DA:A2:C3:F1:74:D2:4F:7F:55:ED:AA X509v3 Authority Key Identifier: keyid:5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/TYmQbCMoT4fS2qLD8XTST39V7ao.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.233.120.0/24 194.104.235.0/24 IPv6: 2a14:3ec0::/48 Signature Algorithm: sha256WithRSAEncryption 95:3c:40:61:73:e7:5e:a5:c9:de:9d:7a:ba:6a:cc:10:ca:d1: 19:3d:e8:77:cc:8b:05:61:e7:42:f7:8f:c0:8d:86:08:a5:31: f9:b2:81:37:ec:d2:8e:ba:04:84:ef:be:01:5f:db:4a:81:94: 3e:9c:64:dd:59:f0:a3:e5:06:cf:fd:7c:c7:c6:6e:af:28:f2: 8a:b1:94:08:c7:08:1c:ab:5d:f3:41:79:4d:69:63:e2:92:d0: 04:02:81:b4:06:b3:a8:7d:64:da:77:fd:65:84:b1:4c:82:e5: a5:0b:87:12:8b:d5:dd:8c:c3:66:54:da:0a:97:44:69:a1:0e: 1e:4e:ba:b0:9e:cd:21:c6:f8:1a:b3:e4:59:84:7c:01:2d:3f: 15:ba:b1:01:cc:29:79:15:e5:cf:ee:a8:d7:63:3b:3d:96:70: d3:31:2f:01:b9:c7:58:6e:5f:37:dd:45:7e:54:99:f2:2c:c6: 09:66:cb:db:3d:2e:77:25:42:70:70:9e:c8:79:43:e5:6f:e3: 14:ad:8d:a8:72:ed:57:60:b3:f4:0e:7d:d5:39:ae:e4:d8:33: e5:0f:22:03:eb:5c:b4:e9:9b:b2:3d:26:40:45:56:69:bb:2e: 68:dd:25:57:5d:57:e1:9b:97:c9:78:95:d9:81:35:db:8e:99: 45:c2:04:97 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt9ynYBrW2VHZ0okkC8TXupMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmM2E2YzIxOTQxYzFlMTNiZmZjNGQ0NGQ2MWJkMjU5NWZk ZDhmZTgwHhcNMjYwMTAyMDgxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDg5OTA2YzIzMjg0Zjg3ZDJkYWEyYzNmMTc0ZDI0ZjdmNTVlZGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Pz2qq/Yt2Qc0zz6x8pFt41BdYWa ziMvC/xzDs7vTIpN40PtdDIyfO+pMeRm6Et802adrV8uJzwsXZRcxjYnb4o6fdX+ L0/vBi8/DXIsFCBVPfx8uP6GF/4ecj31O9L+oXEYQ10Vc/hDixRKJFsimNt8TPS4 gh/IZZ7ydzp553ps+njhWQBEUKg/iN/q/JOQLeJsUIfQYJRYkzKvivhu63Asi86R /LqpxYlaIwe91WPOS1yaHQY9XxXWtvhetIrIMglOUTNMYpyMNe0Vxm480JmorRCc 18MUZaJBTgFKAbkQCZFKu/XAOPNQR4y31xRws+hpWD99sxn3R/RzLplHyQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFE2JkGwjKE+H0tqiw/F00k9/Ve2qMB8GA1UdIwQY MBaAFF86bCGUHB4Tv/xNRNYb0llf3Y/oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHpwc0laUWNIaE9fX0UxRTFodlNXVl9kai1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9iYTMwYmItYWMwYi00NWEwLTlmMGMt Y2Y4Njk4NzU3ZDM3LzEvVFltUWJDTW9UNGZTMnFMRDhYVFNUMzlWN2FvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9iYTMwYmItYWMwYi00NWEwLTlmMGMtY2Y4Njk4NzU3ZDM3 LzEvWHpwc0laUWNIaE9fX0UxRTFodlNXVl9kai1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAW+l4AwQA wmjrMA8EAgACMAkDBwAqFD7AAAAwDQYJKoZIhvcNAQELBQADggEBAJU8QGFz516l yd6derpqzBDK0Rk96HfMiwVh50L3j8CNhgilMfmygTfs0o66BITvvgFf20qBlD6c ZN1Z8KPlBs/9fMfGbq8o8oqxlAjHCByrXfNBeU1pY+KS0AQCgbQGs6h9ZNp3/WWE sUyC5aULhxKL1d2Mw2ZU2gqXRGmhDh5OurCezSHG+Bqz5FmEfAEtPxW6sQHMKXkV 5c/uqNdjOz2WcNMxLwG5x1huXzfdRX5UmfIsxglmy9s9LnclQnBwnsh5Q+Vv4xSt jahy7Vdgs/QOfdU5ruTYM+UPIgPrXLTpm7I9JkBFVmm7LmjdJVddV+Gbl8l4ldmB NduOmUXCBJc= -----END CERTIFICATE-----Generated at Mon Jan 26 06:18:00 2026 by rpki-client