This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/tyXTbOM2aibhtKIwqQDtVCtGWJA.roa File: tyXTbOM2aibhtKIwqQDtVCtGWJA.roa (raw, json) Hash identifier: cM4UhLIAVQkV+usljCsAJQWlgEI7aeqYZYi2MZfQYFw= Subject key identifier: B7:25:D3:6C:E3:36:6A:26:E1:B4:A2:30:A9:00:ED:54:2B:46:58:90 Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88 Certificate serial: 019ACDD7924A368EFE56325AFBEDCB0569F7 Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/tyXTbOM2aibhtKIwqQDtVCtGWJA.roa Signing time: Sat 29 Nov 2025 04:20:48 +0000 ROA not before: Sat 29 Nov 2025 04:20:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211056 IP address blocks: 94.184.14.0/24 maxlen: 24 94.184.15.0/24 maxlen: 24 94.184.19.0/24 maxlen: 24 94.184.20.0/24 maxlen: 24 94.184.23.0/24 maxlen: 24 94.184.24.0/24 maxlen: 24 94.184.25.0/24 maxlen: 24 94.184.26.0/24 maxlen: 24 94.184.27.0/24 maxlen: 24 94.184.28.0/24 maxlen: 24 94.184.29.0/24 maxlen: 24 94.184.30.0/24 maxlen: 24 94.184.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cd:d7:92:4a:36:8e:fe:56:32:5a:fb:ed:cb:05:69:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88 Validity Not Before: Nov 29 04:20:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b725d36ce3366a26e1b4a230a900ed542b465890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:00:05:34:20:ed:6d:ea:43:c7:87:75:d1:9e: 6d:b9:12:a6:1b:68:f2:49:80:1e:ce:61:6d:96:d4: ae:81:eb:33:2b:a8:f1:c4:1e:f8:5c:b2:0a:9e:06: a4:bd:03:49:bd:0d:5e:97:f7:db:e2:44:f5:73:8f: bd:47:03:ba:be:c8:33:08:59:d9:9c:1c:dc:32:dd: df:c6:02:cb:d8:73:a5:db:90:8d:5b:78:7d:eb:7f: fe:45:bc:ef:c0:9f:7e:0d:86:56:24:99:a9:29:c8: df:72:a7:d9:75:3a:f3:b8:5d:f8:00:7c:d1:41:d2: cb:c1:01:7a:03:1b:98:ea:25:1a:17:49:6f:79:e6: 1f:d3:40:7e:05:63:e1:7a:92:5b:4b:be:74:9e:65: 27:e3:a3:05:9b:98:43:d4:ed:09:43:4d:8f:c8:b2: 6d:06:69:04:f7:84:f4:83:1c:5a:5f:a6:29:60:1f: e3:cc:96:c5:6a:ab:f9:76:56:22:14:b1:ca:6f:09: f0:bc:cd:4f:ab:3c:79:04:ce:d7:a6:0c:10:3b:14: 15:ff:63:a5:05:48:5d:16:03:43:a3:00:f8:a0:da: 10:55:ff:78:ca:64:34:12:5d:bb:22:ba:09:8d:58: a3:dd:85:50:76:f2:9f:94:fb:5e:dd:73:9b:1c:0e: 18:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:25:D3:6C:E3:36:6A:26:E1:B4:A2:30:A9:00:ED:54:2B:46:58:90 X509v3 Authority Key Identifier: keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/tyXTbOM2aibhtKIwqQDtVCtGWJA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.184.14.0/23 94.184.19.0-94.184.20.255 94.184.23.0-94.184.31.255 Signature Algorithm: sha256WithRSAEncryption 7f:b5:78:20:ae:59:a6:42:49:06:7d:7b:6e:80:f6:dc:d4:26: df:63:26:d9:a6:af:2c:74:0d:24:a7:7d:b4:31:40:5f:60:3a: 76:39:a2:7e:a8:04:4a:11:cf:6d:1e:cc:41:84:e0:c8:d8:ba: 55:fc:12:2b:e4:a1:70:04:b1:92:f0:77:4e:ae:eb:f3:7b:66: 5b:2b:a5:7a:b7:98:7f:f3:bd:f0:9f:53:62:8f:ee:5f:55:cf: b0:17:6a:31:f2:91:fe:f5:3a:34:d7:f5:0e:38:13:e3:87:fe: 31:43:76:8c:e7:d5:16:28:87:9c:85:12:ca:ab:b9:6c:0f:00: fa:5f:b4:72:1c:e3:19:a1:75:40:2f:2a:32:63:81:e6:f4:e9: 9b:a5:c6:de:f9:47:90:65:f9:40:47:f5:d6:e8:f3:e6:92:26: 63:bd:3a:e8:c2:bc:49:54:70:67:28:1d:32:b2:d5:e4:89:6b: ba:ad:84:7a:ea:1f:44:e2:b9:ae:36:4c:57:c8:a0:5d:25:6c: b1:47:98:73:da:0a:b5:8d:d5:86:4c:f8:42:3c:e0:b0:8d:01: 63:5f:4f:8c:6b:a0:35:b9:87:5c:25:7f:06:0b:70:ac:92:5d: 63:ef:71:c4:df:5e:3b:6c:d2:a6:e5:33:a6:13:55:e3:00:44: d3:d4:f5:67 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrN15JKNo7+VjJa++3LBWn3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4M2Q3NjA1MTAxN2QwYWZhOTE1ZmNmYjc5MGEwMGY0NjY3 YjBhODgwHhcNMjUxMTI5MDQyMDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzI1ZDM2Y2UzMzY2YTI2ZTFiNGEyMzBhOTAwZWQ1NDJiNDY1ODkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6QAFNCDtbepDx4d10Z5tuRKmG2jy SYAezmFtltSugeszK6jxxB74XLIKngakvQNJvQ1el/fb4kT1c4+9RwO6vsgzCFnZ nBzcMt3fxgLL2HOl25CNW3h963/+RbzvwJ9+DYZWJJmpKcjfcqfZdTrzuF34AHzR QdLLwQF6AxuY6iUaF0lveeYf00B+BWPhepJbS750nmUn46MFm5hD1O0JQ02PyLJt BmkE94T0gxxaX6YpYB/jzJbFaqv5dlYiFLHKbwnwvM1Pqzx5BM7XpgwQOxQV/2Ol BUhdFgNDowD4oNoQVf94ymQ0El27IroJjVij3YVQdvKflPte3XObHA4Y8wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFLcl02zjNmom4bSiMKkA7VQrRliQMB8GA1UdIwQY MBaAFFg9dgUQF9CvqRX8+3kKAPRmewqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGIt ZGE2MTUzODg1ZjNiLzEvdHlYVGJPTTJhaWJodEtJd3FRRHRWQ3RHV0pBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGItZGE2MTUzODg1ZjNi LzEvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiAwQBXrgOMAwD BABeuBMDBABeuBQwDAMEAF64FwMEBV64ADANBgkqhkiG9w0BAQsFAAOCAQEAf7V4 IK5ZpkJJBn17boD23NQm32Mm2aavLHQNJKd9tDFAX2A6djmifqgEShHPbR7MQYTg yNi6VfwSK+ShcASxkvB3Tq7r83tmWyulereYf/O98J9TYo/uX1XPsBdqMfKR/vU6 NNf1DjgT44f+MUN2jOfVFiiHnIUSyqu5bA8A+l+0chzjGaF1QC8qMmOB5vTpm6XG 3vlHkGX5QEf11ujz5pImY7066MK8SVRwZygdMrLV5Ilruq2EeuofROK5rjZMV8ig XSVssUeYc9oKtY3Vhkz4QjzgsI0BY19PjGugNbmHXCV/BgtwrJJdY+9xxN9eO2zS puUzphNV4wBE09T1Zw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:03:00 2025 by rpki-client