This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/TYlVyK1mupI5BbnYV6h9BGz-eN4.roa File: TYlVyK1mupI5BbnYV6h9BGz-eN4.roa (raw, json) Hash identifier: 1Gn6czCCNjw2lLXnCiXlrAlIyQhFY/XCiTcjvokSAII= Subject key identifier: 4D:89:55:C8:AD:66:BA:92:39:05:B9:D8:57:A8:7D:04:6C:FE:78:DE Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Certificate serial: 019B77C767BBA72DA60458D248C157E183A4 Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/TYlVyK1mupI5BbnYV6h9BGz-eN4.roa Signing time: Thu 01 Jan 2026 04:18:35 +0000 ROA not before: Thu 01 Jan 2026 04:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34552 IP address blocks: 78.109.112.0/20 maxlen: 20 78.109.122.0/24 maxlen: 24 80.75.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:67:bb:a7:2d:a6:04:58:d2:48:c1:57:e1:83:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Validity Not Before: Jan 1 04:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d8955c8ad66ba923905b9d857a87d046cfe78de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ce:b2:52:50:4f:75:fa:93:0f:c9:31:1a:fc: 7f:30:2f:c9:9d:bd:12:8f:02:8b:17:37:ee:61:72: 2d:9a:ed:c7:f5:91:32:5c:3e:3b:88:83:2c:65:5f: 3e:ab:70:62:46:25:71:59:68:57:aa:6e:7c:2e:0b: 08:ce:18:67:9f:93:ee:8f:ea:2c:3a:ae:b2:72:a6: 37:0b:5b:b6:69:4d:e9:06:9b:e0:67:54:80:01:9c: 99:52:1e:85:57:cd:01:e1:63:5a:d1:45:20:29:8a: d4:e8:35:fd:45:a9:81:d0:23:2b:0c:a4:6e:00:7c: 7c:1d:52:f9:9b:38:81:0a:80:ca:5a:44:bb:ed:a3: ee:63:af:1d:80:76:e3:a9:74:5f:13:73:1b:29:61: 77:d8:22:85:ca:c5:da:fa:30:d9:ee:61:f4:f2:94: e8:e1:ae:db:5f:37:da:2d:cb:b6:d0:c1:ff:7e:8b: ea:ff:c0:8f:5a:dc:77:7d:6d:b0:68:f0:7e:47:d6: c3:d4:45:35:41:13:72:a0:31:51:a0:13:95:b7:2c: 92:61:2a:41:de:ef:ed:8e:2d:c1:88:6b:ca:94:fd: d1:d1:c1:7e:0f:c7:ef:a7:05:13:2a:df:91:7f:a4: bb:ff:bd:27:d1:16:55:f4:ac:ed:1e:cb:c5:97:e8: 87:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:89:55:C8:AD:66:BA:92:39:05:B9:D8:57:A8:7D:04:6C:FE:78:DE X509v3 Authority Key Identifier: keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/TYlVyK1mupI5BbnYV6h9BGz-eN4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.109.112.0/20 80.75.80.0/20 Signature Algorithm: sha256WithRSAEncryption 5c:86:22:14:89:e8:1d:e1:69:ce:02:02:be:e5:03:6d:54:4d: fb:cf:2c:9e:e0:bc:46:04:d5:92:5d:3d:90:94:c2:79:2e:da: 52:0c:d3:22:5a:40:84:07:a9:84:0a:a1:48:6b:09:fb:ba:81: 8d:69:0e:1b:01:da:1f:46:e0:18:7d:aa:e4:24:de:92:29:12: 64:13:1c:32:5c:9c:b1:84:20:e1:c8:d6:4e:6d:e3:b8:db:30: ab:df:de:42:d7:e5:31:2c:79:c6:10:90:71:d1:4c:2f:e1:a4: 43:8f:d7:97:f0:32:9c:f6:ad:f2:49:20:53:ef:15:69:bd:1f: 7c:fb:a3:6b:b9:5c:de:74:88:09:1f:85:3a:be:19:87:43:84: 5a:59:25:56:9c:60:5f:7a:4b:22:cf:3a:28:40:9d:c0:d5:a8: 67:a7:c9:b8:16:b2:f7:75:88:7a:fc:bd:da:a6:a1:fd:ad:eb: 72:c5:70:fd:0f:15:eb:34:9f:c3:60:56:50:e8:23:4f:7e:0e: b3:ae:ec:75:70:23:e5:23:65:36:88:6d:03:8a:49:52:59:82: 36:da:39:ee:cb:f7:ce:95:fa:33:83:a1:77:c1:eb:3f:2b:4a: 03:f5:b9:bf:7d:f0:7e:d8:35:1d:a0:a2:ff:35:c8:5f:44:61: f6:37:5c:9a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3x2e7py2mBFjSSMFX4YOkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx Nzg1YzAwHhcNMjYwMTAxMDQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDg5NTVjOGFkNjZiYTkyMzkwNWI5ZDg1N2E4N2QwNDZjZmU3OGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA286yUlBPdfqTD8kxGvx/MC/Jnb0S jwKLFzfuYXItmu3H9ZEyXD47iIMsZV8+q3BiRiVxWWhXqm58LgsIzhhnn5Puj+os Oq6ycqY3C1u2aU3pBpvgZ1SAAZyZUh6FV80B4WNa0UUgKYrU6DX9RamB0CMrDKRu AHx8HVL5mziBCoDKWkS77aPuY68dgHbjqXRfE3MbKWF32CKFysXa+jDZ7mH08pTo 4a7bXzfaLcu20MH/fovq/8CPWtx3fW2waPB+R9bD1EU1QRNyoDFRoBOVtyySYSpB 3u/tji3BiGvKlP3R0cF+D8fvpwUTKt+Rf6S7/70n0RZV9KztHsvFl+iHYwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFE2JVcitZrqSOQW52FeofQRs/njeMB8GA1UdIwQY MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct ODllNTZjODBkMWQwLzEvVFlsVnlLMW11cEk1QmJuWVY2aDlCR3otZU40LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQETm1wAwQE UEtQMA0GCSqGSIb3DQEBCwUAA4IBAQBchiIUiegd4WnOAgK+5QNtVE37zyye4LxG BNWSXT2QlMJ5LtpSDNMiWkCEB6mECqFIawn7uoGNaQ4bAdofRuAYfarkJN6SKRJk ExwyXJyxhCDhyNZObeO42zCr395C1+UxLHnGEJBx0Uwv4aRDj9eX8DKc9q3ySSBT 7xVpvR98+6NruVzedIgJH4U6vhmHQ4RaWSVWnGBfeksizzooQJ3A1ahnp8m4FrL3 dYh6/L3apqH9retyxXD9DxXrNJ/DYFZQ6CNPfg6zrux1cCPlI2U2iG0DiklSWYI2 2jnuy/fOlfozg6F3wes/K0oD9bm/ffB+2DUdoKL/NchfRGH2N1ya -----END CERTIFICATE-----Generated at Sun Jan 25 22:41:46 2026 by rpki-client