This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/TYbMVOnA1vB-wjFD6xsvHrGkVuw.roa File: TYbMVOnA1vB-wjFD6xsvHrGkVuw.roa (raw, json) Hash identifier: gch7cDWOheOnpIwvXzaiQbw92kRVsDtErv7998avG0Y= Subject key identifier: 4D:86:CC:54:E9:C0:D6:F0:7E:C2:31:43:EB:1B:2F:1E:B1:A4:56:EC Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a Certificate serial: 019B7BA413C1EB95D9D4F3AF261E069D4D8E Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/TYbMVOnA1vB-wjFD6xsvHrGkVuw.roa Signing time: Thu 01 Jan 2026 22:18:29 +0000 ROA not before: Thu 01 Jan 2026 22:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15924 IP address blocks: 31.169.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:13:c1:eb:95:d9:d4:f3:af:26:1e:06:9d:4d:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a Validity Not Before: Jan 1 22:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d86cc54e9c0d6f07ec23143eb1b2f1eb1a456ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ee:29:53:63:0f:92:d1:78:ad:a4:44:e8:51: b2:64:3e:f8:56:95:e3:09:22:0c:0e:36:3d:98:3c: 7a:0e:16:71:66:ad:31:2d:6f:4d:25:3b:de:59:eb: 0c:44:b8:6f:f5:3a:2d:8d:77:b8:e8:7d:79:ce:57: 27:e1:a6:08:7c:07:22:10:8f:22:94:1e:6a:72:48: 6c:af:53:16:63:84:56:5c:e4:63:12:12:6d:db:c3: c0:a1:ab:98:cf:09:96:e8:b4:5c:56:e0:61:d6:1d: 2a:99:a5:32:af:31:12:89:ea:c7:64:f4:d4:11:39: eb:ba:1d:4b:ca:32:da:16:dd:c8:1f:4d:3f:89:fd: 0f:15:97:2b:63:31:99:33:be:af:23:1b:a4:87:4c: a6:2f:f2:f9:25:54:34:dc:06:37:96:e3:22:f4:a9: bc:66:d4:5c:14:15:21:f9:c0:6b:46:a4:39:4f:0d: ff:59:08:ff:38:91:4e:a9:50:6c:22:19:db:af:a8: ee:d9:16:d3:1f:0d:c9:8d:16:89:98:64:50:c4:bf: 3b:8e:f5:d5:fa:02:c6:a8:5b:f5:4a:1f:17:d9:4e: fd:8b:3c:aa:12:27:01:67:14:3a:25:87:80:63:8c: 6b:7d:af:1c:16:9f:40:a4:6b:0a:79:6d:22:67:09: 6b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:86:CC:54:E9:C0:D6:F0:7E:C2:31:43:EB:1B:2F:1E:B1:A4:56:EC X509v3 Authority Key Identifier: keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/TYbMVOnA1vB-wjFD6xsvHrGkVuw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.169.89.0/24 Signature Algorithm: sha256WithRSAEncryption 59:2d:af:10:6c:ca:02:7a:67:85:2c:11:71:72:56:4e:9b:a8: 53:e2:96:f5:5e:ed:57:6d:6b:35:8b:96:8e:25:c5:a5:03:e0: 57:c3:b3:f6:cf:98:a7:76:99:74:61:fa:db:89:1d:92:ec:74: 31:ee:e4:7e:85:08:83:cf:85:17:82:3a:70:e2:46:2d:cd:c1: 8c:8e:99:33:76:bc:be:64:f8:4a:14:cb:62:22:3d:fd:75:31: 61:6d:f7:0f:95:b4:c4:85:ad:f7:7b:a1:ae:df:cc:39:e0:25: 20:84:b8:45:0e:11:15:36:a5:26:0e:92:88:64:99:44:17:19: 04:35:fd:4a:40:0c:d2:ff:20:38:49:cc:f7:f7:25:8f:c0:ef: 23:74:fa:34:2e:59:bc:fc:f1:5d:11:d2:39:d2:de:07:59:c2: 6e:29:77:d4:9a:19:38:38:ef:c0:00:44:98:ac:cf:a3:8c:ca: 88:99:0c:1f:84:d3:57:9c:99:14:e8:4d:14:ad:4e:13:3f:35: 2e:8e:17:af:de:7d:6b:e7:ea:39:ba:9f:f8:ee:2b:57:0e:70: f4:64:61:0a:c1:ca:43:b1:ab:c3:96:c6:d4:9e:5f:18:36:bb: bd:93:1e:77:d9:2c:04:37:c2:dc:3f:ef:4c:59:f0:cc:4e:bc: 34:e9:75:2a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pBPB65XZ1POvJh4GnU2OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNjlkYTQ0YWUwNjdmYzFhOThhNWY2ZjA1ZjEyZTU0NWQw ZmM2MmEwHhcNMjYwMTAxMjIxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDg2Y2M1NGU5YzBkNmYwN2VjMjMxNDNlYjFiMmYxZWIxYTQ1NmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAju4pU2MPktF4raRE6FGyZD74VpXj CSIMDjY9mDx6DhZxZq0xLW9NJTveWesMRLhv9TotjXe46H15zlcn4aYIfAciEI8i lB5qckhsr1MWY4RWXORjEhJt28PAoauYzwmW6LRcVuBh1h0qmaUyrzESierHZPTU ETnruh1LyjLaFt3IH00/if0PFZcrYzGZM76vIxukh0ymL/L5JVQ03AY3luMi9Km8 ZtRcFBUh+cBrRqQ5Tw3/WQj/OJFOqVBsIhnbr6ju2RbTHw3JjRaJmGRQxL87jvXV +gLGqFv1Sh8X2U79izyqEicBZxQ6JYeAY4xrfa8cFp9ApGsKeW0iZwlr0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE2GzFTpwNbwfsIxQ+sbLx6xpFbsMB8GA1UdIwQY MBaAFG1p2kSuBn/BqYpfbwXxLlRdD8YqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUt MjYxNzBkYTRhMGIxLzEvVFliTVZPbkExdkItd2pGRDZ4c3ZIckdrVnV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUtMjYxNzBkYTRhMGIx LzEvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH6lZMA0G CSqGSIb3DQEBCwUAA4IBAQBZLa8QbMoCemeFLBFxclZOm6hT4pb1Xu1XbWs1i5aO JcWlA+BXw7P2z5indpl0YfrbiR2S7HQx7uR+hQiDz4UXgjpw4kYtzcGMjpkzdry+ ZPhKFMtiIj39dTFhbfcPlbTEha33e6Gu38w54CUghLhFDhEVNqUmDpKIZJlEFxkE Nf1KQAzS/yA4Scz39yWPwO8jdPo0Llm8/PFdEdI50t4HWcJuKXfUmhk4OO/AAESY rM+jjMqImQwfhNNXnJkU6E0UrU4TPzUujhev3n1r5+o5up/47itXDnD0ZGEKwcpD savDlsbUnl8YNru9kx532SwEN8LcP+9MWfDMTrw06XUq -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:08 2026 by rpki-client