This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/Tyzo_2vNrMxQHJQWXTKLW-2umcA.roa File: Tyzo_2vNrMxQHJQWXTKLW-2umcA.roa (raw, json) Hash identifier: 2+mp4pGqouT5AQ5gGYfkkRqSiV89UkJ5rYA2+HllnEg= Subject key identifier: 4F:2C:E8:FF:6B:CD:AC:CC:50:1C:94:16:5D:32:8B:5B:ED:AE:99:C0 Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e Certificate serial: 019B790FFAE138190BCFE0875C45213554C0 Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/Tyzo_2vNrMxQHJQWXTKLW-2umcA.roa Signing time: Thu 01 Jan 2026 10:17:28 +0000 ROA not before: Thu 01 Jan 2026 10:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48481 IP address blocks: 185.32.67.0/24 maxlen: 24 185.50.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:0f:fa:e1:38:19:0b:cf:e0:87:5c:45:21:35:54:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e Validity Not Before: Jan 1 10:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f2ce8ff6bcdaccc501c94165d328b5bedae99c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:bc:a6:fe:59:82:53:02:14:b2:23:70:05:90: 93:d8:f1:b7:71:6a:b8:75:47:a2:d7:09:75:9c:e2: 59:0f:aa:60:29:f4:67:d2:7a:9e:73:0b:f5:69:0e: 27:18:23:d4:cf:fa:89:f5:07:d4:e0:c5:48:1e:8d: 82:8f:25:d7:c8:6d:e4:90:2d:09:05:f7:39:6c:ab: 3c:ef:bd:a3:04:84:dc:22:e3:7f:2c:4b:c6:be:30: 7f:91:7e:35:ad:df:06:a4:b5:98:ab:30:aa:a7:1e: 6e:44:00:73:e2:4e:04:4d:f2:d0:0c:7f:24:4c:e0: 18:f1:90:3b:2d:e4:de:7c:98:12:88:66:63:5c:fd: 48:af:70:13:c6:d7:9c:b8:69:56:a1:ab:99:72:aa: 94:36:5e:fc:39:79:95:d2:7f:1c:82:1b:6f:40:96: d9:0c:55:c6:62:65:ba:84:5c:9a:06:e7:71:47:58: 6b:b0:e3:50:a0:c1:0b:9d:bb:56:db:da:6f:d7:17: d6:69:03:d6:2b:8d:f6:82:c4:20:99:3d:bc:89:75: 15:fc:c7:be:14:0b:13:20:c1:77:9d:b8:e8:bd:2c: da:76:ab:57:ba:38:ad:7d:b4:9e:05:ef:e2:c0:d2: f9:d4:b1:10:df:18:51:14:1f:37:ca:dc:30:20:c6: b1:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:2C:E8:FF:6B:CD:AC:CC:50:1C:94:16:5D:32:8B:5B:ED:AE:99:C0 X509v3 Authority Key Identifier: keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/Tyzo_2vNrMxQHJQWXTKLW-2umcA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.32.67.0/24 185.50.149.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:e6:0c:67:c8:6c:7c:40:0f:c7:d2:74:ae:c2:78:24:64:0d: 84:90:a9:3e:1a:db:98:cf:de:a1:96:6b:a5:6e:b7:85:b5:11: 72:b5:e7:3a:20:e3:3d:73:4b:16:9e:0b:72:48:59:13:d3:e8: 2f:bf:5e:6c:1b:1c:11:40:aa:24:9a:29:60:c5:2c:1e:ff:ea: 2e:ba:1c:67:03:39:52:e3:3d:40:01:24:33:25:d5:74:1a:f2: 47:f5:c4:41:44:bf:52:22:8d:88:bf:a2:32:50:0b:9f:15:3d: 3a:63:e4:80:d0:f9:aa:5f:c7:8d:87:6d:c4:36:20:62:e3:e5: 54:10:97:77:86:bd:db:ab:5b:a2:a3:de:aa:90:d4:c5:b9:93: 3e:ca:7d:9e:48:b8:ec:ac:cf:9a:cc:8c:b6:d0:80:f7:47:3e: 24:56:08:fd:69:9d:06:2c:09:cd:a9:c7:90:d6:59:62:93:89: ae:01:3d:e8:27:84:20:28:0e:c5:17:2d:e3:42:b9:c1:19:00: 07:4e:f7:dd:6a:b6:a0:30:fd:85:6c:c2:50:e4:4a:92:8e:ea: 25:be:ba:29:47:77:0c:3a:cf:2f:04:79:7b:69:e0:ef:7a:be: f6:e2:ff:34:94:0e:65:17:c3:11:bf:05:06:18:2d:7c:c0:db: 43:ab:d0:1d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5D/rhOBkLz+CHXEUhNVTAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmOTNkM2JhMTk3ZjVjZTMwOThiZmE3NzAwYjQzODU0ZWFh ODBlOWUwHhcNMjYwMTAxMTAxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjJjZThmZjZiY2RhY2NjNTAxYzk0MTY1ZDMyOGI1YmVkYWU5OWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbym/lmCUwIUsiNwBZCT2PG3cWq4 dUei1wl1nOJZD6pgKfRn0nqecwv1aQ4nGCPUz/qJ9QfU4MVIHo2CjyXXyG3kkC0J Bfc5bKs8772jBITcIuN/LEvGvjB/kX41rd8GpLWYqzCqpx5uRABz4k4ETfLQDH8k TOAY8ZA7LeTefJgSiGZjXP1Ir3ATxtecuGlWoauZcqqUNl78OXmV0n8cghtvQJbZ DFXGYmW6hFyaBudxR1hrsONQoMELnbtW29pv1xfWaQPWK432gsQgmT28iXUV/Me+ FAsTIMF3nbjovSzadqtXujitfbSeBe/iwNL51LEQ3xhRFB83ytwwIMaxyQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFE8s6P9rzazMUByUFl0yi1vtrpnAMB8GA1UdIwQY MBaAFC+T07oZf1zjCYv6dwC0OFTqqA6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUt OWU3MWRjMjRhNjgzLzEvVHl6b18ydk5yTXhRSEpRV1hUS0xXLTJ1bWNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUtOWU3MWRjMjRhNjgz LzEvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuSBDAwQA uTKVMA0GCSqGSIb3DQEBCwUAA4IBAQB65gxnyGx8QA/H0nSuwngkZA2EkKk+GtuY z96hlmulbreFtRFytec6IOM9c0sWngtySFkT0+gvv15sGxwRQKokmilgxSwe/+ou uhxnAzlS4z1AASQzJdV0GvJH9cRBRL9SIo2Iv6IyUAufFT06Y+SA0PmqX8eNh23E NiBi4+VUEJd3hr3bq1uio96qkNTFuZM+yn2eSLjsrM+azIy20ID3Rz4kVgj9aZ0G LAnNqceQ1llik4muAT3oJ4QgKA7FFy3jQrnBGQAHTvfdaragMP2FbMJQ5EqSjuol vropR3cMOs8vBHl7aeDver724v80lA5lF8MRvwUGGC18wNtDq9Ad -----END CERTIFICATE-----Generated at Sun Jan 25 15:06:38 2026 by rpki-client