This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/Tuyu4PDijXamcoBmvHaUR3Zhx1I.roa File: Tuyu4PDijXamcoBmvHaUR3Zhx1I.roa (raw, json) Hash identifier: QNb3CvjoOXufsYPkEn/ZOrzMSuEn5o0O6f8GFs+m4Pc= Subject key identifier: 4E:EC:AE:E0:F0:E2:8D:76:A6:72:80:66:BC:76:94:47:76:61:C7:52 Certificate issuer: /CN=e22a93ceb82b675a84b0d78e79ae4a797ca98231 Certificate serial: 019B7DC92DBD8FBEC978D32A562021FCE5D4 Authority key identifier: E2:2A:93:CE:B8:2B:67:5A:84:B0:D7:8E:79:AE:4A:79:7C:A9:82:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/Tuyu4PDijXamcoBmvHaUR3Zhx1I.roa Signing time: Fri 02 Jan 2026 08:18:15 +0000 ROA not before: Fri 02 Jan 2026 08:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47176 IP address blocks: 185.159.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.crl rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:2d:bd:8f:be:c9:78:d3:2a:56:20:21:fc:e5:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e22a93ceb82b675a84b0d78e79ae4a797ca98231 Validity Not Before: Jan 2 08:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4eecaee0f0e28d76a6728066bc7694477661c752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:df:74:d8:63:48:a0:f1:53:d6:ac:62:2e:a2: 9a:41:d3:e9:7b:31:64:0c:3b:05:7e:b4:d6:e1:e4: 5c:2b:c2:36:aa:b6:5b:c1:0b:fe:0a:8b:e3:63:cc: a1:a8:be:6c:1e:ad:90:bc:0d:4e:4e:3a:68:02:37: d2:23:04:9e:58:1d:b2:fb:0a:54:be:ba:fc:d7:93: 7c:c8:34:1a:69:fa:c7:91:bc:9f:d0:8c:01:74:d7: af:85:a9:99:fd:65:1e:e6:85:7e:8a:34:8d:9f:08: a9:0d:52:7b:72:47:29:cf:d1:f1:7c:92:f2:1d:b0: 0c:52:ad:d0:64:ee:fb:e0:5c:07:df:06:00:6b:ca: 0d:e7:bf:76:6e:7b:44:78:df:ce:95:d5:34:c2:09: f5:02:26:7e:48:d8:d3:f1:9e:29:8a:64:0b:51:27: f0:dc:c3:02:bd:5f:b8:f7:9a:eb:f8:a7:f0:9b:59: 1d:a5:f9:e1:e9:dc:2c:27:85:9a:01:0a:11:a1:d1: be:ef:f5:3e:59:dd:ce:9d:af:66:76:09:c9:95:90: 4d:a9:28:40:eb:ef:9e:4f:65:5f:ed:b8:9b:df:89: d5:40:fd:4c:47:83:f2:95:40:3c:58:ae:5f:04:ec: 83:6c:2b:27:4d:e5:39:fc:1d:29:f4:d8:f4:d6:7a: 73:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:EC:AE:E0:F0:E2:8D:76:A6:72:80:66:BC:76:94:47:76:61:C7:52 X509v3 Authority Key Identifier: keyid:E2:2A:93:CE:B8:2B:67:5A:84:B0:D7:8E:79:AE:4A:79:7C:A9:82:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/Tuyu4PDijXamcoBmvHaUR3Zhx1I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.159.204.0/22 Signature Algorithm: sha256WithRSAEncryption 56:fc:78:0d:31:62:88:f0:22:5b:19:0d:e6:f8:4e:57:94:cf: 82:4b:dc:18:54:24:16:98:f3:3f:ab:11:4a:6a:7d:4f:e9:be: a4:91:07:1e:34:b9:4e:7d:1e:85:22:e9:d6:6f:85:d0:89:78: 15:69:cd:27:8d:ac:f4:91:92:3f:5f:25:bb:ef:3e:31:43:fc: bd:de:bf:e1:48:29:f5:ee:af:91:fa:86:97:5b:a8:d9:a3:51: 2c:19:09:b3:f9:f9:6b:ed:1f:b2:00:a3:9f:9e:dc:f6:db:74: 14:1e:e1:5b:5e:da:cf:bd:69:63:6a:64:90:54:4f:34:b5:23: e4:8d:99:ab:82:44:fd:a7:b9:c9:5e:78:56:aa:b2:8e:1d:cd: 1d:42:04:01:ae:e9:fe:50:d7:5a:9c:00:53:df:95:0f:d1:81: d2:5b:a8:c2:81:88:3d:e5:f3:e9:62:cc:e2:29:07:0e:d1:0f: c0:6a:28:1c:03:a4:fa:55:22:18:67:90:fe:e5:2a:36:f1:c5: c1:2b:27:cf:45:31:e3:b1:1b:46:18:e5:82:50:52:7c:9e:44: ff:73:0b:67:fe:54:bd:23:26:0c:03:c0:33:a6:3b:65:cb:e8: 18:26:1c:d7:27:ff:49:00:38:ba:cf:95:3e:bd:d1:d0:b7:c5: 3f:38:c4:61 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yS29j77JeNMqViAh/OXUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMmE5M2NlYjgyYjY3NWE4NGIwZDc4ZTc5YWU0YTc5N2Nh OTgyMzEwHhcNMjYwMTAyMDgxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZWVjYWVlMGYwZTI4ZDc2YTY3MjgwNjZiYzc2OTQ0Nzc2NjFjNzUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjN902GNIoPFT1qxiLqKaQdPpezFk DDsFfrTW4eRcK8I2qrZbwQv+CovjY8yhqL5sHq2QvA1OTjpoAjfSIwSeWB2y+wpU vrr815N8yDQaafrHkbyf0IwBdNevhamZ/WUe5oV+ijSNnwipDVJ7ckcpz9HxfJLy HbAMUq3QZO774FwH3wYAa8oN5792bntEeN/OldU0wgn1AiZ+SNjT8Z4pimQLUSfw 3MMCvV+495rr+Kfwm1kdpfnh6dwsJ4WaAQoRodG+7/U+Wd3Ona9mdgnJlZBNqShA 6++eT2Vf7bib34nVQP1MR4PylUA8WK5fBOyDbCsnTeU5/B0p9Nj01npz6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE7sruDw4o12pnKAZrx2lEd2YcdSMB8GA1UdIwQY MBaAFOIqk864K2dahLDXjnmuSnl8qYIxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGlxVHpyZ3JaMXFFc05lT2VhNUtlWHlwZ2pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yZTgyY2ItNGE2ZS00MDhmLWFmMjAt ODQzMTU0YTgwYjcyLzEvVHV5dTRQRGlqWGFtY29CbXZIYVVSM1poeDFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8yZTgyY2ItNGE2ZS00MDhmLWFmMjAtODQzMTU0YTgwYjcy LzEvNGlxVHpyZ3JaMXFFc05lT2VhNUtlWHlwZ2pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZ/MMA0G CSqGSIb3DQEBCwUAA4IBAQBW/HgNMWKI8CJbGQ3m+E5XlM+CS9wYVCQWmPM/qxFK an1P6b6kkQceNLlOfR6FIunWb4XQiXgVac0njaz0kZI/XyW77z4xQ/y93r/hSCn1 7q+R+oaXW6jZo1EsGQmz+flr7R+yAKOfntz223QUHuFbXtrPvWljamSQVE80tSPk jZmrgkT9p7nJXnhWqrKOHc0dQgQBrun+UNdanABT35UP0YHSW6jCgYg95fPpYszi KQcO0Q/AaigcA6T6VSIYZ5D+5So28cXBKyfPRTHjsRtGGOWCUFJ8nkT/cwtn/lS9 IyYMA8Azpjtly+gYJhzXJ/9JADi6z5U+vdHQt8U/OMRh -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:20 2026 by rpki-client