This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/Ty9RnsnK3EDnysBvDikYp04oggo.roa File: Ty9RnsnK3EDnysBvDikYp04oggo.roa (raw, json) Hash identifier: oWmmAPgiMnRBuVQF4Wy8CU51nd17TmIJOxZ3k8HDTIo= Subject key identifier: 4F:2F:51:9E:C9:CA:DC:40:E7:CA:C0:6F:0E:29:18:A7:4E:28:82:0A Certificate issuer: /CN=29b3a717665a1137e99dc8fad22e3e7f98db8973 Certificate serial: 019B77593454F5859CE3EAB8B324AFD80C73 Authority key identifier: 29:B3:A7:17:66:5A:11:37:E9:9D:C8:FA:D2:2E:3E:7F:98:DB:89:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KbOnF2ZaETfpncj60i4-f5jbiXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/Ty9RnsnK3EDnysBvDikYp04oggo.roa Signing time: Thu 01 Jan 2026 02:18:13 +0000 ROA not before: Thu 01 Jan 2026 02:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42675 IP address blocks: 185.157.160.0/23 maxlen: 23 185.157.162.0/24 maxlen: 24 185.157.163.0/24 maxlen: 24 217.64.148.0/23 maxlen: 23 217.64.150.0/24 maxlen: 24 2a07:a880:3101::/48 maxlen: 48 2a07:a880:4601::/48 maxlen: 48 2a07:a880:4602::/48 maxlen: 48 2a07:a880:4603::/48 maxlen: 48 2a07:a880:4604::/48 maxlen: 48 2a07:a880:4701::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.crl rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.mft rsync://rpki.ripe.net/repository/DEFAULT/KbOnF2ZaETfpncj60i4-f5jbiXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:34:54:f5:85:9c:e3:ea:b8:b3:24:af:d8:0c:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29b3a717665a1137e99dc8fad22e3e7f98db8973 Validity Not Before: Jan 1 02:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f2f519ec9cadc40e7cac06f0e2918a74e28820a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2f:84:c4:90:f6:9e:df:0f:82:63:a6:ab:af: a0:28:bd:d6:00:7f:af:af:87:ba:3b:27:a3:a2:d0: 9b:bb:8e:36:87:ce:e7:2b:0f:1b:97:b6:65:89:32: ac:d2:fb:16:4a:eb:ca:58:b5:c8:cf:71:5d:fa:a8: 72:aa:02:5e:54:7c:2b:f0:c8:89:df:fb:be:e6:8d: cd:a0:f4:11:59:c9:fc:e5:23:e4:96:23:9c:04:66: 20:93:ba:47:3f:42:a5:26:dc:79:69:ce:12:1a:ce: 46:04:4f:60:57:c3:02:59:2f:33:72:13:9c:72:63: 36:62:bf:05:58:3f:98:32:2e:ef:e0:82:7f:da:eb: 19:4b:b0:b8:f0:1d:a5:f3:ec:88:91:b9:8b:3f:19: bc:bb:6e:93:29:28:71:b2:3d:9c:73:e0:66:ff:bd: 46:7f:0c:1d:c1:36:c3:64:3d:e6:3d:0b:b2:df:5e: 66:44:f3:b7:2d:d2:95:51:7c:95:54:76:80:d9:8a: 9b:e1:1f:e2:1d:b7:99:c1:26:70:65:49:96:12:40: 59:da:45:ad:27:fb:01:16:66:b5:09:51:76:80:13: 7a:49:e9:06:22:de:72:31:92:d3:71:39:56:a4:28: d4:3f:0b:b3:57:96:31:ef:e6:81:b4:a3:b4:14:dc: 78:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:2F:51:9E:C9:CA:DC:40:E7:CA:C0:6F:0E:29:18:A7:4E:28:82:0A X509v3 Authority Key Identifier: keyid:29:B3:A7:17:66:5A:11:37:E9:9D:C8:FA:D2:2E:3E:7F:98:DB:89:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbOnF2ZaETfpncj60i4-f5jbiXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/Ty9RnsnK3EDnysBvDikYp04oggo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.157.160.0/22 217.64.148.0-217.64.150.255 IPv6: 2a07:a880:3101::/48 2a07:a880:4601::-2a07:a880:4604:ffff:ffff:ffff:ffff:ffff 2a07:a880:4701::/48 Signature Algorithm: sha256WithRSAEncryption 22:d2:af:ec:44:db:27:1b:0e:3b:71:6b:80:fa:5c:38:68:36: 5a:33:29:e8:92:5b:3b:f2:08:58:d0:e0:f2:34:be:32:16:e6: 37:4f:33:a5:ae:d3:d3:c9:d7:72:27:2f:57:1d:43:d7:e2:fd: a8:b3:10:56:7c:a6:ab:03:12:88:85:8f:c5:12:e9:ab:a3:c5: 80:ec:7f:36:ab:29:95:82:69:df:aa:08:bb:a4:7b:2f:3a:be: e7:79:a7:ea:00:52:a2:b1:05:45:28:ea:ef:77:73:7b:ab:27: ec:74:a0:0a:c7:4a:23:0f:aa:44:b5:9d:d9:26:6c:a8:4c:17: ab:dc:dd:76:a7:c8:be:a4:6c:d3:bd:0e:1d:48:a4:67:34:ff: 34:b6:da:61:6c:87:fe:cf:57:93:cd:e6:bf:0e:56:04:94:3f: 10:e2:48:47:14:de:c5:41:ce:9d:d5:62:03:55:7a:f0:26:29: e6:02:59:67:2f:7a:b0:9e:be:ee:c0:5b:d6:e0:72:4a:b2:bc: ce:90:2c:b6:8a:67:b3:5f:c3:d7:19:93:9a:22:4b:ba:e4:14: e4:19:7e:48:20:0b:64:9a:8b:7f:6b:6f:53:62:c1:e1:ea:13: f4:d7:08:ca:75:c6:06:61:aa:33:ba:56:9f:12:c5:39:05:6f: 97:c1:ad:7b -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZt3WTRU9YWc4+q4sySv2AxzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YjNhNzE3NjY1YTExMzdlOTlkYzhmYWQyMmUzZTdmOThk Yjg5NzMwHhcNMjYwMTAxMDIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjJmNTE5ZWM5Y2FkYzQwZTdjYWMwNmYwZTI5MThhNzRlMjg4MjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoS+ExJD2nt8PgmOmq6+gKL3WAH+v r4e6OyejotCbu442h87nKw8bl7ZliTKs0vsWSuvKWLXIz3Fd+qhyqgJeVHwr8MiJ 3/u+5o3NoPQRWcn85SPkliOcBGYgk7pHP0KlJtx5ac4SGs5GBE9gV8MCWS8zchOc cmM2Yr8FWD+YMi7v4IJ/2usZS7C48B2l8+yIkbmLPxm8u26TKShxsj2cc+Bm/71G fwwdwTbDZD3mPQuy315mRPO3LdKVUXyVVHaA2Yqb4R/iHbeZwSZwZUmWEkBZ2kWt J/sBFma1CVF2gBN6SekGIt5yMZLTcTlWpCjUPwuzV5Yx7+aBtKO0FNx49wIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFE8vUZ7JytxA58rAbw4pGKdOKIIKMB8GA1UdIwQY MBaAFCmzpxdmWhE36Z3I+tIuPn+Y24lzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2JPbkYyWmFFVGZwbmNqNjBpNC1mNWpiaVhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hY2QyOGUtNTJhZS00YWM5LWIwMjgt NjY5ZjdhNzYxNjMxLzEvVHk5Um5zbkszRURueXNCdkRpa1lwMDRvZ2dvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hY2QyOGUtNTJhZS00YWM5LWIwMjgtNjY5ZjdhNzYxNjMx LzEvS2JPbkYyWmFFVGZwbmNqNjBpNC1mNWpiaVhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjAaBAIAATAUAwQCuZ2gMAwD BALZQJQDBADZQJYwLAQCAAIwJgMHACoHqIAxATASAwcAKgeogEYBAwcAKgeogEYE AwcAKgeogEcBMA0GCSqGSIb3DQEBCwUAA4IBAQAi0q/sRNsnGw47cWuA+lw4aDZa Mynokls78ghY0ODyNL4yFuY3TzOlrtPTyddyJy9XHUPX4v2osxBWfKarAxKIhY/F Eumro8WA7H82qymVgmnfqgi7pHsvOr7neafqAFKisQVFKOrvd3N7qyfsdKAKx0oj D6pEtZ3ZJmyoTBer3N12p8i+pGzTvQ4dSKRnNP80ttphbIf+z1eTzea/DlYElD8Q 4khHFN7FQc6d1WIDVXrwJinmAllnL3qwnr7uwFvW4HJKsrzOkCy2imezX8PXGZOa Iku65BTkGX5IIAtkmot/a29TYsHh6hP01wjKdcYGYaozulafEsU5BW+Xwa17 -----END CERTIFICATE-----Generated at Sun Jan 25 15:02:14 2026 by rpki-client