This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/tYmXAiohX3AcRjPUBEAHeBUsE58.roa File: tYmXAiohX3AcRjPUBEAHeBUsE58.roa (raw, json) Hash identifier: FN7T5567tN5nhPmv6bO1Q8VmVLE2iMv0mhNHydh4B2Y= Subject key identifier: B5:89:97:02:2A:21:5F:70:1C:46:33:D4:04:40:07:78:15:2C:13:9F Certificate issuer: /CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd Certificate serial: 019B7758998E0B629C72356669C1B640F048 Authority key identifier: 91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/tYmXAiohX3AcRjPUBEAHeBUsE58.roa Signing time: Thu 01 Jan 2026 02:17:33 +0000 ROA not before: Thu 01 Jan 2026 02:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12213 IP address blocks: 185.143.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:99:8e:0b:62:9c:72:35:66:69:c1:b6:40:f0:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd Validity Not Before: Jan 1 02:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b58997022a215f701c4633d404400778152c139f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:43:f4:ab:aa:7e:80:34:d6:85:fc:e9:f0:f4: e1:aa:2a:e6:4b:99:25:d3:56:ac:43:94:6c:22:7e: 17:ba:93:d5:12:32:7e:54:6a:1b:f2:38:57:24:fd: a6:27:a9:54:ec:fc:3f:08:15:e3:d1:9e:8c:d5:a9: 9e:16:fa:c9:45:33:65:1a:b9:97:d1:03:71:63:f0: 39:1e:cd:79:92:c5:bb:9b:ff:5e:2c:12:fd:57:a2: b2:d0:93:7a:ed:13:5a:33:0c:8f:b0:a2:3c:81:7f: 1c:bd:04:be:ff:35:3c:eb:ea:73:18:4d:e6:ce:1a: c6:a0:0f:fd:8b:a7:23:5c:12:5c:da:62:66:78:a2: 4d:09:90:f0:46:30:73:a6:f1:d9:1b:ae:bb:c6:50: e1:c7:93:87:ee:cf:56:09:d5:ea:20:10:5f:bd:b0: bc:67:81:0c:3d:73:7a:89:46:c9:e9:40:39:41:22: 2a:26:aa:a8:49:b1:45:33:af:a2:60:1d:47:13:1f: 9f:68:c3:09:34:62:97:a1:58:b6:43:c1:23:cf:01: 64:b1:db:40:38:c7:52:47:c5:44:e3:8b:a6:c8:c3: cf:19:2b:20:17:fe:c8:f6:63:ba:ae:67:f1:13:9f: 7b:6a:61:24:78:88:a4:80:81:27:05:a6:59:dc:06: 31:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:89:97:02:2A:21:5F:70:1C:46:33:D4:04:40:07:78:15:2C:13:9F X509v3 Authority Key Identifier: keyid:91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/tYmXAiohX3AcRjPUBEAHeBUsE58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.143.78.0/24 Signature Algorithm: sha256WithRSAEncryption a9:19:f1:c6:ec:f9:7d:55:1a:e0:50:ed:49:f6:5f:15:89:4c: af:40:5f:3e:e8:32:bc:3a:de:6d:5b:be:0c:c3:d5:7b:89:77: 67:f1:58:64:12:79:4b:6c:b0:a9:f8:19:d2:a3:8d:64:02:54: 8e:38:8d:f2:49:78:ac:47:11:58:f7:c0:a2:f0:5f:df:07:10: 27:da:ec:22:1f:40:04:4d:e8:34:33:64:cf:6a:20:22:60:73: 83:93:3c:a6:16:55:bb:94:e3:ba:1d:dc:65:69:97:82:33:fc: de:a4:5c:cc:b8:05:d3:a1:fc:2c:69:08:7c:12:aa:6e:c1:0b: fd:08:97:3f:76:e4:9e:7d:c5:44:b3:5d:e9:68:1a:a4:39:9c: 5b:6f:6f:bb:a1:51:95:49:fd:f3:c3:83:33:f6:59:3b:b7:04: ed:21:21:e2:e5:2d:57:85:c5:cc:b9:9e:51:eb:12:a5:e3:73: e4:1b:d5:f9:23:19:72:2a:03:5a:e2:a6:cd:74:66:06:45:14: 9c:48:85:15:0e:f6:da:85:a8:bc:c1:b4:ca:ba:ad:08:49:f5: 54:a3:7e:05:1f:66:aa:97:0d:d2:63:36:f2:c5:08:e4:fc:f7: 49:0e:16:e4:e4:15:81:2b:f6:e8:ef:1e:6c:be:29:32:70:ab: 5a:3d:1a:d2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WJmOC2KccjVmacG2QPBIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxMzgxYmM5NjlkZTZhZGMzZDFkZGMwZWI4OWJkZWVhY2U5 ODA1Y2QwHhcNMjYwMTAxMDIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTg5OTcwMjJhMjE1ZjcwMWM0NjMzZDQwNDQwMDc3ODE1MmMxMzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kP0q6p+gDTWhfzp8PThqirmS5kl 01asQ5RsIn4XupPVEjJ+VGob8jhXJP2mJ6lU7Pw/CBXj0Z6M1ameFvrJRTNlGrmX 0QNxY/A5Hs15ksW7m/9eLBL9V6Ky0JN67RNaMwyPsKI8gX8cvQS+/zU86+pzGE3m zhrGoA/9i6cjXBJc2mJmeKJNCZDwRjBzpvHZG667xlDhx5OH7s9WCdXqIBBfvbC8 Z4EMPXN6iUbJ6UA5QSIqJqqoSbFFM6+iYB1HEx+faMMJNGKXoVi2Q8EjzwFksdtA OMdSR8VE44umyMPPGSsgF/7I9mO6rmfxE597amEkeIikgIEnBaZZ3AYxyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLWJlwIqIV9wHEYz1ARAB3gVLBOfMB8GA1UdIwQY MBaAFJE4G8lp3mrcPR3cDrib3urOmAXNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1RnYnlXbmVhdHc5SGR3T3VKdmU2czZZQmMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9mMzU0MDYtZDhjNC00ZjVjLTkyYWMt MjU2ZGE5NWQxMzQ1LzEvdFltWEFpb2hYM0FjUmpQVUJFQUhlQlVzRTU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9mMzU0MDYtZDhjNC00ZjVjLTkyYWMtMjU2ZGE5NWQxMzQ1 LzEva1RnYnlXbmVhdHc5SGR3T3VKdmU2czZZQmMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuY9OMA0G CSqGSIb3DQEBCwUAA4IBAQCpGfHG7Pl9VRrgUO1J9l8ViUyvQF8+6DK8Ot5tW74M w9V7iXdn8VhkEnlLbLCp+BnSo41kAlSOOI3ySXisRxFY98Ci8F/fBxAn2uwiH0AE Teg0M2TPaiAiYHODkzymFlW7lOO6HdxlaZeCM/zepFzMuAXTofwsaQh8EqpuwQv9 CJc/duSefcVEs13paBqkOZxbb2+7oVGVSf3zw4Mz9lk7twTtISHi5S1XhcXMuZ5R 6xKl43PkG9X5IxlyKgNa4qbNdGYGRRScSIUVDvbahai8wbTKuq0ISfVUo34FH2aq lw3SYzbyxQjk/PdJDhbk5BWBK/bo7x5svikycKtaPRrS -----END CERTIFICATE-----Generated at Sun Jan 25 10:21:03 2026 by rpki-client