This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/TayBP7whOn8uG-iZTgalyiKPGes.roa File: TayBP7whOn8uG-iZTgalyiKPGes.roa (raw, json) Hash identifier: P7tnKReQ+Y3epX8ceT4jhZXneWQc4RVJRl4N9gsisuk= Subject key identifier: 4D:AC:81:3F:BC:21:3A:7F:2E:1B:E8:99:4E:06:A5:CA:22:8F:19:EB Certificate issuer: /CN=9f7a47be773a8cad6d75980e739b7841ad4d9b91 Certificate serial: 019B7CED86D0296551228399229F7C70D236 Authority key identifier: 9F:7A:47:BE:77:3A:8C:AD:6D:75:98:0E:73:9B:78:41:AD:4D:9B:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/TayBP7whOn8uG-iZTgalyiKPGes.roa Signing time: Fri 02 Jan 2026 04:18:19 +0000 ROA not before: Fri 02 Jan 2026 04:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58123 IP address blocks: 46.19.4.0/24 maxlen: 24 46.19.5.0/24 maxlen: 24 2a01:7040::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.mft rsync://rpki.ripe.net/repository/DEFAULT/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:86:d0:29:65:51:22:83:99:22:9f:7c:70:d2:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f7a47be773a8cad6d75980e739b7841ad4d9b91 Validity Not Before: Jan 2 04:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4dac813fbc213a7f2e1be8994e06a5ca228f19eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b5:18:43:7b:8c:86:66:9f:04:3d:83:5e:db: ca:c2:f1:0c:9c:af:71:d2:b9:08:03:0d:db:0b:41: 2c:81:3d:2c:71:75:1d:d4:c6:1b:5d:fc:16:e5:1d: 2c:a7:88:6e:e6:cf:60:09:51:dc:3d:6e:30:04:64: 55:e7:c5:06:9f:a4:47:c0:0d:34:14:6f:b9:ec:c4: c3:5c:71:34:6f:27:e1:a0:5c:08:61:b3:be:94:6b: 2e:c6:91:e2:15:25:eb:a2:b3:bf:70:9c:53:52:b6: 48:e1:48:89:59:b9:f5:10:51:6c:cc:ec:83:e1:5f: bd:a6:ff:55:d2:b8:23:52:68:86:50:0f:f6:5c:3d: f8:40:ad:fb:b3:ae:5e:39:ee:d1:4e:1f:ec:6a:65: 07:f9:be:5e:cc:6c:b5:1d:5a:af:af:ff:7d:08:94: f5:43:cd:4d:06:53:96:e7:81:79:8d:f0:8b:a0:7b: 81:e4:ac:54:b3:cd:6d:4f:77:0c:72:41:d3:7e:0a: 39:f4:6d:a7:e3:bf:36:9c:16:06:58:05:b7:3a:85: eb:08:f0:fb:21:74:92:2b:9b:9d:fe:27:1d:90:7c: 94:95:f4:24:62:09:91:fb:95:66:1b:b4:2d:7e:72: 27:bc:ef:af:86:f9:f5:e5:3f:1e:e0:b7:5d:69:a5: 1e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:AC:81:3F:BC:21:3A:7F:2E:1B:E8:99:4E:06:A5:CA:22:8F:19:EB X509v3 Authority Key Identifier: keyid:9F:7A:47:BE:77:3A:8C:AD:6D:75:98:0E:73:9B:78:41:AD:4D:9B:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/TayBP7whOn8uG-iZTgalyiKPGes.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.19.4.0/23 IPv6: 2a01:7040::/32 Signature Algorithm: sha256WithRSAEncryption 1f:6f:a9:de:61:49:34:2b:7b:19:36:ea:d5:73:ed:d9:bb:ba: b1:0d:bc:52:1b:e6:3b:07:78:4b:bb:20:8d:ad:61:c8:8a:bd: 02:58:c2:16:11:fa:7a:e7:31:b9:22:ee:e8:c5:20:15:3c:3d: 6c:ee:46:a8:e9:f8:ac:a1:ea:95:c8:05:1c:47:f4:1d:26:94: 46:75:a0:9e:98:c7:f1:c8:3c:88:ff:34:cd:1d:9f:36:ff:e2: 8e:71:c7:7e:c2:4e:58:43:c2:90:55:9a:9e:02:c9:07:49:79: bf:ae:77:bb:46:f1:8c:cb:11:a0:a2:20:50:d0:0a:b2:02:3a: c2:de:eb:12:cb:03:c8:a5:0a:28:07:d3:54:de:4b:8d:88:85: ed:c4:bd:a5:46:90:f6:a0:69:5c:ac:7e:97:71:ab:f1:e6:06: a1:bc:5c:ba:85:7a:f6:b2:50:4e:bd:36:5c:16:70:d1:cb:47: 33:45:67:a8:01:14:48:d1:92:3c:49:ca:60:2a:19:95:e1:f8: 8e:c3:e3:f2:23:3c:44:5e:25:d5:91:c3:d2:56:a2:07:d6:a1: 5e:73:e7:e5:29:1e:33:86:64:27:4b:14:da:4e:fb:34:e5:35: bc:96:34:7a:bc:03:67:d9:27:7c:c8:9f:11:58:af:88:c6:50: f6:29:16:df -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87YbQKWVRIoOZIp98cNI2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmN2E0N2JlNzczYThjYWQ2ZDc1OTgwZTczOWI3ODQxYWQ0 ZDliOTEwHhcNMjYwMTAyMDQxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZGFjODEzZmJjMjEzYTdmMmUxYmU4OTk0ZTA2YTVjYTIyOGYxOWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLUYQ3uMhmafBD2DXtvKwvEMnK9x 0rkIAw3bC0EsgT0scXUd1MYbXfwW5R0sp4hu5s9gCVHcPW4wBGRV58UGn6RHwA00 FG+57MTDXHE0byfhoFwIYbO+lGsuxpHiFSXrorO/cJxTUrZI4UiJWbn1EFFszOyD 4V+9pv9V0rgjUmiGUA/2XD34QK37s65eOe7RTh/samUH+b5ezGy1HVqvr/99CJT1 Q81NBlOW54F5jfCLoHuB5KxUs81tT3cMckHTfgo59G2n4782nBYGWAW3OoXrCPD7 IXSSK5ud/icdkHyUlfQkYgmR+5VmG7QtfnInvO+vhvn15T8e4LddaaUexQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFE2sgT+8ITp/LhvomU4GpcoijxnrMB8GA1UdIwQY MBaAFJ96R753OoytbXWYDnObeEGtTZuRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjNwSHZuYzZqSzF0ZFpnT2M1dDRRYTFObTVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi81OWExMmMtY2M3Zi00MjcxLTgzMWEt ZTdmMmMwN2ZjMGY4LzEvVGF5QlA3d2hPbjh1Ry1pWlRnYWx5aUtQR2VzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi81OWExMmMtY2M3Zi00MjcxLTgzMWEtZTdmMmMwN2ZjMGY4 LzEvbjNwSHZuYzZqSzF0ZFpnT2M1dDRRYTFObTVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBLhMEMA0E AgACMAcDBQAqAXBAMA0GCSqGSIb3DQEBCwUAA4IBAQAfb6neYUk0K3sZNurVc+3Z u7qxDbxSG+Y7B3hLuyCNrWHIir0CWMIWEfp65zG5Iu7oxSAVPD1s7kao6fisoeqV yAUcR/QdJpRGdaCemMfxyDyI/zTNHZ82/+KOccd+wk5YQ8KQVZqeAskHSXm/rne7 RvGMyxGgoiBQ0AqyAjrC3usSywPIpQooB9NU3kuNiIXtxL2lRpD2oGlcrH6Xcavx 5gahvFy6hXr2slBOvTZcFnDRy0czRWeoARRI0ZI8ScpgKhmV4fiOw+PyIzxEXiXV kcPSVqIH1qFec+flKR4zhmQnSxTaTvs05TW8ljR6vANn2Sd8yJ8RWK+IxlD2KRbf -----END CERTIFICATE-----Generated at Sun Jan 25 07:16:14 2026 by rpki-client