This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/tyebwX9dtoblB-aYegsfiptUf7E.roa File: tyebwX9dtoblB-aYegsfiptUf7E.roa (raw, json) Hash identifier: GzZf/MmYLJqtpK0w9G4jyJ6xCOlR0/lvXGTAT0moDyc= Subject key identifier: B7:27:9B:C1:7F:5D:B6:86:E5:07:E6:98:7A:0B:1F:8A:9B:54:7F:B1 Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Certificate serial: 019B7F853416A44499561C9184116C1B9BC1 Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/tyebwX9dtoblB-aYegsfiptUf7E.roa Signing time: Fri 02 Jan 2026 16:23:14 +0000 ROA not before: Fri 02 Jan 2026 16:23:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25288 IP address blocks: 195.138.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:34:16:a4:44:99:56:1c:91:84:11:6c:1b:9b:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Validity Not Before: Jan 2 16:23:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7279bc17f5db686e507e6987a0b1f8a9b547fb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:64:bf:16:6a:a0:e3:f7:f9:62:ec:4b:67:94: 11:76:3b:01:57:ba:15:1d:c0:be:1c:b3:7b:d1:dc: f2:4b:c2:1a:25:a0:49:7b:87:52:10:da:f5:d9:69: 3f:c4:ad:3f:12:ef:c6:c7:60:69:a1:56:b5:9e:93: 36:8c:e7:12:a5:be:2d:b3:a4:86:f9:07:b8:d0:2b: 74:8c:4b:36:35:3b:fb:76:bb:40:84:ad:1f:50:8e: a1:81:b1:41:0d:1e:16:0f:34:00:02:95:fd:66:b0: 02:a2:c3:9a:cc:d1:43:62:8b:43:b7:a2:9f:7b:3a: 99:e4:f0:9a:b7:48:0d:cd:c4:7f:fc:e8:a6:5b:5c: fc:ff:7d:ed:00:0c:55:5e:07:96:0e:84:2b:f9:f2: ed:75:ef:69:31:32:38:9b:4c:18:b7:bf:bc:f4:4d: 1d:de:c2:36:54:ea:9a:c3:4d:61:87:95:d0:af:d5: 65:c0:2b:2b:74:5e:4f:3c:3a:8f:a6:80:e0:90:e6: b5:27:08:17:2f:59:16:3e:cc:46:ec:87:09:89:c1: 1d:df:8f:ae:2d:23:d1:2a:a5:75:9c:90:3e:83:a9: e4:1f:c4:bc:84:3e:c1:9d:69:b4:72:de:fa:cd:89: e9:04:24:8a:bd:55:be:d7:12:14:03:ef:99:c8:1a: 11:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:27:9B:C1:7F:5D:B6:86:E5:07:E6:98:7A:0B:1F:8A:9B:54:7F:B1 X509v3 Authority Key Identifier: keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/tyebwX9dtoblB-aYegsfiptUf7E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.138.116.0/24 Signature Algorithm: sha256WithRSAEncryption 83:29:5f:b1:82:3d:27:e1:b5:32:ac:be:a6:c2:0f:4a:2f:a1: 12:d4:6c:f5:2f:b0:f2:5f:fe:91:34:bc:71:d6:7f:77:f7:15: 05:9c:1a:5b:97:4a:73:a2:aa:d3:9c:17:0c:14:01:86:91:18: 31:2c:b7:65:ff:8a:3e:3e:8f:e5:dc:9d:eb:c6:0c:bf:97:ad: 09:7e:79:6d:51:fe:3f:7a:56:62:7e:2c:7b:de:6e:a1:41:97: 2f:03:b6:8d:54:88:d1:f5:61:c0:0e:72:62:e0:42:93:4a:d0: 30:ff:b4:9b:a9:48:7b:43:61:1d:86:a8:d2:7b:d5:1f:9b:a2: 1f:bd:3b:42:b8:48:e1:55:1b:cf:97:50:9d:2c:ab:1c:13:41: cc:f4:d9:cc:43:41:78:89:37:5d:ca:ab:ef:8e:ec:33:ae:d7: 03:99:4a:ca:7d:99:fe:77:20:1a:d0:32:09:0d:16:b3:a9:11: 81:d1:a5:66:ba:8d:0d:d5:c4:c2:41:6b:59:59:54:b2:01:d9: ee:ca:49:80:45:dc:42:16:02:c6:f2:6e:e5:b0:cd:89:69:2d: af:4d:6a:e7:01:05:28:46:d0:23:74:25:11:65:37:18:6f:53: f9:ed:0c:13:e8:16:74:4f:ee:ef:dc:06:ac:bd:9d:ab:f5:6a: b7:42:b3:01 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hTQWpESZVhyRhBFsG5vBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3 MWE5YTgwHhcNMjYwMTAyMTYyMzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzI3OWJjMTdmNWRiNjg2ZTUwN2U2OTg3YTBiMWY4YTliNTQ3ZmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWS/Fmqg4/f5YuxLZ5QRdjsBV7oV HcC+HLN70dzyS8IaJaBJe4dSENr12Wk/xK0/Eu/Gx2BpoVa1npM2jOcSpb4ts6SG +Qe40Ct0jEs2NTv7drtAhK0fUI6hgbFBDR4WDzQAApX9ZrACosOazNFDYotDt6Kf ezqZ5PCat0gNzcR//OimW1z8/33tAAxVXgeWDoQr+fLtde9pMTI4m0wYt7+89E0d 3sI2VOqaw01hh5XQr9VlwCsrdF5PPDqPpoDgkOa1JwgXL1kWPsxG7IcJicEd34+u LSPRKqV1nJA+g6nkH8S8hD7BnWm0ct76zYnpBCSKvVW+1xIUA++ZyBoRiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLcnm8F/XbaG5QfmmHoLH4qbVH+xMB8GA1UdIwQY MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt M2FjOWU1NmMzMDg5LzEvdHllYndYOWR0b2JsQi1hWWVnc2ZpcHRVZjdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5 LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw4p0MA0G CSqGSIb3DQEBCwUAA4IBAQCDKV+xgj0n4bUyrL6mwg9KL6ES1Gz1L7DyX/6RNLxx 1n939xUFnBpbl0pzoqrTnBcMFAGGkRgxLLdl/4o+Po/l3J3rxgy/l60JfnltUf4/ elZifix73m6hQZcvA7aNVIjR9WHADnJi4EKTStAw/7SbqUh7Q2EdhqjSe9Ufm6If vTtCuEjhVRvPl1CdLKscE0HM9NnMQ0F4iTddyqvvjuwzrtcDmUrKfZn+dyAa0DIJ DRazqRGB0aVmuo0N1cTCQWtZWVSyAdnuykmARdxCFgLG8m7lsM2JaS2vTWrnAQUo RtAjdCURZTcYb1P57QwT6BZ0T+7v3AasvZ2r9Wq3QrMB -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:29 2026 by rpki-client