This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/tVeuYd91sHEJZuUDNMrqrKk6uME.roa File: tVeuYd91sHEJZuUDNMrqrKk6uME.roa (raw, json) Hash identifier: hSzJOItctPBI6y6Se6D0Urxemw96jOFCv4Hf70uq1Qk= Subject key identifier: B5:57:AE:61:DF:75:B0:71:09:66:E5:03:34:CA:EA:AC:A9:3A:B8:C1 Certificate issuer: /CN=297ae7592ca52491dc166a30fe1477d712bd465d Certificate serial: 019B7C8062A1A998935B7E7503B71CA37F6B Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/tVeuYd91sHEJZuUDNMrqrKk6uME.roa Signing time: Fri 02 Jan 2026 02:19:07 +0000 ROA not before: Fri 02 Jan 2026 02:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216334 IP address blocks: 94.159.115.0/24 maxlen: 24 94.159.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:62:a1:a9:98:93:5b:7e:75:03:b7:1c:a3:7f:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d Validity Not Before: Jan 2 02:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b557ae61df75b0710966e50334caeaaca93ab8c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7d:27:21:60:a4:50:70:73:e6:aa:b5:1b:f8: 01:9e:61:31:f8:5e:e9:e2:ab:cb:d6:97:ab:70:b4: 13:20:28:64:9c:c8:e3:66:69:e1:5b:69:1d:19:4a: e9:5d:38:0a:5e:4a:98:dc:aa:d9:90:4f:f1:a9:97: 6f:30:bf:5c:04:05:03:d8:10:38:57:ad:67:f9:95: 15:b1:c7:ec:2b:db:71:f8:72:fd:7c:82:41:00:86: 17:53:06:8d:3f:96:a7:19:53:2e:c3:38:66:27:6c: 40:fe:25:d7:9d:51:6a:61:ac:00:79:30:19:bf:26: a4:f4:db:5c:07:aa:7f:f3:61:40:f1:25:01:6e:f5: 49:1f:2a:3a:94:f3:3b:1e:77:16:71:0b:a9:e6:1d: 81:95:ff:44:dd:3b:c8:c7:29:dc:2a:3f:de:d6:c1: 52:46:7d:5e:84:32:51:50:b2:f2:f4:d7:eb:8e:42: 94:06:dc:c3:0f:35:4d:81:14:60:e2:16:02:43:7a: 12:56:40:77:b4:3c:16:1a:12:58:5b:a2:3b:93:61: fb:68:6d:54:95:f9:bc:88:f7:ee:4b:a4:39:e5:5f: 99:2e:79:aa:d8:39:f7:1d:2d:0e:b8:73:61:e4:c6: ae:22:72:13:10:54:be:62:36:b8:f4:f2:41:19:bc: 6e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:57:AE:61:DF:75:B0:71:09:66:E5:03:34:CA:EA:AC:A9:3A:B8:C1 X509v3 Authority Key Identifier: keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/tVeuYd91sHEJZuUDNMrqrKk6uME.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.159.115.0-94.159.116.255 Signature Algorithm: sha256WithRSAEncryption 5d:35:4c:e8:af:89:6a:37:4f:85:3f:e8:fe:2a:c7:2f:e7:bc: 46:09:a8:5c:88:6b:25:88:dc:c3:88:e3:6f:97:03:6c:5b:69: b9:ac:ac:cb:b6:b8:f7:9c:f6:e0:06:e2:15:6b:47:5f:7c:76: eb:7f:90:5f:16:4f:90:28:03:8b:39:46:b0:0a:18:16:b2:91: ed:f0:5f:d3:74:92:5d:41:4b:6c:6c:35:da:cc:eb:00:73:4d: 02:31:db:4d:5f:98:98:40:19:2a:ca:30:f6:c2:2e:dc:ac:4a: 0e:11:0f:7b:ba:5f:ed:ab:2c:d1:75:1c:4d:65:ec:47:d1:5f: 3d:5c:34:7b:e4:ab:aa:0a:dd:50:0f:ca:b5:51:d4:29:23:8f: fb:e0:eb:dc:69:31:8c:aa:c1:49:43:38:a6:57:23:7d:a2:b6: cc:5f:a6:31:85:74:5c:42:75:6d:8a:4d:24:5e:85:d4:6d:09: a0:0d:bd:2f:93:c9:76:60:df:2c:13:c8:96:6e:c1:d6:c8:f1: d1:b3:f0:cd:dc:18:de:60:64:3a:0e:a9:2e:93:e7:ed:31:0b: 4c:e9:48:38:a4:cb:ac:38:19:7d:0b:d3:77:c8:4a:4a:40:03: d3:e0:24:91:a0:7e:d8:cb:70:28:49:7d:9b:36:d2:f0:2e:dc: 9a:db:92:71 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt8gGKhqZiTW351A7cco39rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2FlNzU5MmNhNTI0OTFkYzE2NmEzMGZlMTQ3N2Q3MTJi ZDQ2NWQwHhcNMjYwMTAyMDIxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTU3YWU2MWRmNzViMDcxMDk2NmU1MDMzNGNhZWFhY2E5M2FiOGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqX0nIWCkUHBz5qq1G/gBnmEx+F7p 4qvL1percLQTIChknMjjZmnhW2kdGUrpXTgKXkqY3KrZkE/xqZdvML9cBAUD2BA4 V61n+ZUVscfsK9tx+HL9fIJBAIYXUwaNP5anGVMuwzhmJ2xA/iXXnVFqYawAeTAZ vyak9NtcB6p/82FA8SUBbvVJHyo6lPM7HncWcQup5h2Blf9E3TvIxyncKj/e1sFS Rn1ehDJRULLy9NfrjkKUBtzDDzVNgRRg4hYCQ3oSVkB3tDwWGhJYW6I7k2H7aG1U lfm8iPfuS6Q55V+ZLnmq2Dn3HS0OuHNh5MauInITEFS+Yja49PJBGbxuvwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFLVXrmHfdbBxCWblAzTK6qypOrjBMB8GA1UdIwQY MBaAFCl651kspSSR3BZqMP4Ud9cSvUZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS80OGUxZTgtMzI4ZC00ZjgyLTkzOTgt MzkxMGE1OWExMTIxLzEvdFZldVlkOTFzSEVKWnVVRE5NcnFyS2s2dU1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS80OGUxZTgtMzI4ZC00ZjgyLTkzOTgtMzkxMGE1OWExMTIx LzEvS1hybldTeWxKSkhjRm1vd19oUjMxeEs5UmwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABen3MD BABen3QwDQYJKoZIhvcNAQELBQADggEBAF01TOiviWo3T4U/6P4qxy/nvEYJqFyI ayWI3MOI42+XA2xbabmsrMu2uPec9uAG4hVrR198dut/kF8WT5AoA4s5RrAKGBay ke3wX9N0kl1BS2xsNdrM6wBzTQIx201fmJhAGSrKMPbCLtysSg4RD3u6X+2rLNF1 HE1l7EfRXz1cNHvkq6oK3VAPyrVR1Ckjj/vg69xpMYyqwUlDOKZXI32itsxfpjGF dFxCdW2KTSRehdRtCaANvS+TyXZg3ywTyJZuwdbI8dGz8M3cGN5gZDoOqS6T5+0x C0zpSDiky6w4GX0L03fISkpAA9PgJJGgftjLcChJfZs20vAu3JrbknE= -----END CERTIFICATE-----Generated at Sun Jan 25 17:47:02 2026 by rpki-client