This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/tyC-pTUzo6nFgSSwAa_6pbmsyAg.roa File: tyC-pTUzo6nFgSSwAa_6pbmsyAg.roa (raw, json) Hash identifier: RK6LVWTWWbUKXe8FdCeUVJN0A7lPCOyvPPPfNNmHAao= Subject key identifier: B7:20:BE:A5:35:33:A3:A9:C5:81:24:B0:01:AF:FA:A5:B9:AC:C8:08 Certificate issuer: /CN=f49502c97482b28502852c97ef9bd3a0a2a5e9f0 Certificate serial: 019B7C80B936C3B89862C0FF5B0593A07077 Authority key identifier: F4:95:02:C9:74:82:B2:85:02:85:2C:97:EF:9B:D3:A0:A2:A5:E9:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/tyC-pTUzo6nFgSSwAa_6pbmsyAg.roa Signing time: Fri 02 Jan 2026 02:19:29 +0000 ROA not before: Fri 02 Jan 2026 02:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48854 IP address blocks: 94.137.128.0/20 maxlen: 20 193.223.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:b9:36:c3:b8:98:62:c0:ff:5b:05:93:a0:70:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49502c97482b28502852c97ef9bd3a0a2a5e9f0 Validity Not Before: Jan 2 02:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b720bea53533a3a9c58124b001affaa5b9acc808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:02:55:b5:ed:93:55:9a:c7:38:4b:1f:91:5d: d8:e1:b4:06:9a:4f:ea:02:99:84:88:2f:a1:83:1b: 29:b9:d9:ae:5e:eb:9b:14:cd:ff:cf:0b:5b:46:df: be:10:73:41:43:33:5c:fc:84:02:a3:f2:cb:49:56: d5:be:61:00:bd:d8:ef:25:31:7a:a1:0c:7d:a7:1b: 9b:14:4a:b7:04:53:85:a6:e1:e7:e2:92:33:a7:31: 91:8f:28:55:4a:d8:9c:8c:66:27:38:03:a1:57:5a: b5:ca:82:95:1b:c7:92:11:0d:56:b8:c8:a6:6e:71: 16:63:28:97:91:cb:9e:ab:d3:a7:c2:81:52:8d:f1: 99:18:eb:ea:fa:36:31:9e:16:bf:9f:31:c9:ea:d2: 27:1a:2b:4e:94:5c:98:bb:e5:43:20:03:f6:e5:87: 7c:2e:9e:1e:21:79:11:27:af:75:0e:d4:b9:0d:5a: c9:f2:43:b8:51:c1:24:82:40:49:8e:a4:a4:77:ca: 91:53:8d:3d:d7:20:b8:96:0a:4f:b6:3c:c5:fa:78: d9:de:49:49:c9:29:97:7b:94:57:97:ac:58:38:4f: 69:ce:49:23:79:14:d4:09:d3:6c:53:16:50:d5:d8: 86:80:c5:40:94:1b:d0:e8:8e:e1:8f:df:36:84:6d: 78:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:20:BE:A5:35:33:A3:A9:C5:81:24:B0:01:AF:FA:A5:B9:AC:C8:08 X509v3 Authority Key Identifier: keyid:F4:95:02:C9:74:82:B2:85:02:85:2C:97:EF:9B:D3:A0:A2:A5:E9:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/tyC-pTUzo6nFgSSwAa_6pbmsyAg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.137.128.0/20 193.223.248.0/22 Signature Algorithm: sha256WithRSAEncryption 51:93:ea:26:4c:62:73:31:d3:91:b8:84:8c:3c:a8:83:af:ed: 72:f3:38:74:bd:d2:ba:4d:c2:0d:0b:57:ac:71:97:c0:89:ec: 6f:67:7f:4a:d7:29:8f:25:70:eb:36:57:e8:d7:f2:12:51:00: b0:a5:1e:ad:16:7e:70:66:66:83:89:67:5d:a5:02:e7:5e:de: 30:3f:b9:12:29:10:91:61:0f:d2:59:c2:3d:50:f5:94:d0:ca: 00:85:58:bb:1a:44:4b:26:bd:a2:16:f7:c2:0f:f7:0e:e3:aa: f5:b0:0b:46:3c:af:30:03:43:c8:55:b6:85:92:06:16:9e:b8: 34:fa:69:f9:5d:29:63:a3:58:bd:a6:e2:e9:d6:af:4b:19:12: c1:36:6b:ea:51:73:0c:99:34:30:26:1f:d6:d3:04:35:7b:06: c6:60:3d:ca:c8:1b:cd:c9:26:6d:5d:dd:48:5e:2d:78:fc:a1: 74:65:33:32:13:5c:40:8d:e3:c8:40:c3:aa:80:61:90:75:69: c3:6d:25:1d:d0:09:7c:1e:22:fa:e7:38:72:90:23:d8:86:5f: 1b:ad:ee:a9:c2:29:c1:f9:11:41:53:f6:17:1e:25:51:ab:3e: cc:36:fa:68:a0:5d:6d:af:0f:62:0c:43:78:0c:52:e9:83:0f: 1d:32:08:7a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gLk2w7iYYsD/WwWToHB3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0OTUwMmM5NzQ4MmIyODUwMjg1MmM5N2VmOWJkM2EwYTJh NWU5ZjAwHhcNMjYwMTAyMDIxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzIwYmVhNTM1MzNhM2E5YzU4MTI0YjAwMWFmZmFhNWI5YWNjODA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QJVte2TVZrHOEsfkV3Y4bQGmk/q ApmEiC+hgxspudmuXuubFM3/zwtbRt++EHNBQzNc/IQCo/LLSVbVvmEAvdjvJTF6 oQx9pxubFEq3BFOFpuHn4pIzpzGRjyhVSticjGYnOAOhV1q1yoKVG8eSEQ1WuMim bnEWYyiXkcueq9OnwoFSjfGZGOvq+jYxnha/nzHJ6tInGitOlFyYu+VDIAP25Yd8 Lp4eIXkRJ691DtS5DVrJ8kO4UcEkgkBJjqSkd8qRU4091yC4lgpPtjzF+njZ3klJ ySmXe5RXl6xYOE9pzkkjeRTUCdNsUxZQ1diGgMVAlBvQ6I7hj982hG14oQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLcgvqU1M6OpxYEksAGv+qW5rMgIMB8GA1UdIwQY MBaAFPSVAsl0grKFAoUsl++b06CipenwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUpVQ3lYU0Nzb1VDaFN5WDc1dlRvS0tsNmZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8xZjg2ZDMtMDg3ZC00ZDY5LWI4ZTct NzNiMGM3NGU5YjY0LzEvdHlDLXBUVXpvNm5GZ1NTd0FhXzZwYm1zeUFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8xZjg2ZDMtMDg3ZC00ZDY5LWI4ZTctNzNiMGM3NGU5YjY0 LzEvOUpVQ3lYU0Nzb1VDaFN5WDc1dlRvS0tsNmZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEXomAAwQC wd/4MA0GCSqGSIb3DQEBCwUAA4IBAQBRk+omTGJzMdORuISMPKiDr+1y8zh0vdK6 TcINC1escZfAiexvZ39K1ymPJXDrNlfo1/ISUQCwpR6tFn5wZmaDiWddpQLnXt4w P7kSKRCRYQ/SWcI9UPWU0MoAhVi7GkRLJr2iFvfCD/cO46r1sAtGPK8wA0PIVbaF kgYWnrg0+mn5XSljo1i9puLp1q9LGRLBNmvqUXMMmTQwJh/W0wQ1ewbGYD3KyBvN ySZtXd1IXi14/KF0ZTMyE1xAjePIQMOqgGGQdWnDbSUd0Al8HiL65zhykCPYhl8b re6pwinB+RFBU/YXHiVRqz7MNvpooF1trw9iDEN4DFLpgw8dMgh6 -----END CERTIFICATE-----Generated at Mon Jan 26 05:05:26 2026 by rpki-client