This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/1aYS2JbbLwT9mgu0YtM6O3Vi_LY.roa File: 1aYS2JbbLwT9mgu0YtM6O3Vi_LY.roa (raw, json) Hash identifier: x1EiPgAx+RF6WvuwNGH5p6RU1UgQGwRFO+MejwXodn0= Subject key identifier: D5:A6:12:D8:96:DB:2F:04:FD:9A:0B:B4:62:D3:3A:3B:75:62:FC:B6 Certificate issuer: /CN=4cc0b7d345cfae5347d3ce98b4241b900e4a9ef3 Certificate serial: 019B7A5A80A9A6ED517DAC4C3019995BE273 Authority key identifier: 4C:C0:B7:D3:45:CF:AE:53:47:D3:CE:98:B4:24:1B:90:0E:4A:9E:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/1aYS2JbbLwT9mgu0YtM6O3Vi_LY.roa Signing time: Thu 01 Jan 2026 16:18:30 +0000 ROA not before: Thu 01 Jan 2026 16:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12703 IP address blocks: 185.94.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:80:a9:a6:ed:51:7d:ac:4c:30:19:99:5b:e2:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc0b7d345cfae5347d3ce98b4241b900e4a9ef3 Validity Not Before: Jan 1 16:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5a612d896db2f04fd9a0bb462d33a3b7562fcb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:95:f0:07:a1:27:a7:c4:f5:ac:36:2d:6f:9c: d1:33:ab:66:fb:7a:e4:ae:dc:cc:f7:c5:b5:e6:ca: d0:48:e5:5a:a1:83:7c:38:f4:39:64:5d:24:65:1b: 36:23:ea:a5:28:f8:28:01:c6:e0:2f:1f:1b:bc:40: 4f:07:f5:03:e5:2d:aa:4d:7b:d8:f2:cc:a0:8f:29: 6f:8b:09:68:7e:27:3a:e4:96:54:95:1c:a9:56:78: cc:b0:6d:bb:77:3f:e5:ca:48:50:a1:46:a9:d5:86: c7:19:49:08:f0:b3:8a:fc:af:f8:ff:f4:a5:bf:2b: 97:c6:a4:f5:75:8f:8c:8a:d8:13:22:50:b2:e2:6e: 67:00:90:f7:dd:2a:2a:1c:b8:8c:1d:f6:73:5c:60: 56:9e:42:a8:05:35:ec:90:d1:06:14:67:f8:2a:1a: 2b:53:b6:27:91:23:76:e0:26:4e:73:bd:4c:11:f7: c3:8e:00:7c:98:40:c2:a9:9a:96:e5:1d:e5:54:15: e2:47:2b:02:6c:2e:5b:81:44:5e:6b:3d:b8:c3:6b: db:b2:ef:9f:39:af:8f:68:b5:53:3c:51:a9:1d:8a: fa:8b:12:02:18:ea:58:f3:a6:8c:0c:17:4f:ef:63: 4c:b8:8f:70:64:da:3f:34:c9:97:a8:e6:ad:4b:15: 0e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A6:12:D8:96:DB:2F:04:FD:9A:0B:B4:62:D3:3A:3B:75:62:FC:B6 X509v3 Authority Key Identifier: keyid:4C:C0:B7:D3:45:CF:AE:53:47:D3:CE:98:B4:24:1B:90:0E:4A:9E:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/1aYS2JbbLwT9mgu0YtM6O3Vi_LY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.94.184.0/22 Signature Algorithm: sha256WithRSAEncryption 0d:2c:b1:da:5e:d2:50:10:a4:10:3a:21:21:65:52:4a:44:4b: 85:9c:d7:b1:9b:26:be:08:43:3d:01:c1:ac:89:2a:67:95:9a: 2b:ad:98:c1:32:cd:57:f1:02:f2:43:2c:7c:8a:be:d1:26:c0: a5:c3:ca:c1:ae:e8:e9:97:88:4d:fe:45:fd:02:fe:93:95:31: b7:2b:07:c8:8a:b3:d4:8c:56:20:61:39:e4:98:ae:7d:d8:88: 47:48:58:1d:aa:88:bb:a2:3e:a5:1d:46:62:05:31:ec:8e:f1: 42:0d:e5:6a:c1:5a:5a:3a:d5:df:67:5c:74:de:1b:48:ed:18: 32:c5:65:e1:c2:45:83:f2:7e:ca:64:7c:ba:c6:5c:77:2b:73: 50:43:ba:ac:2f:5a:69:6a:9c:80:81:ea:c8:71:87:88:67:3a: 8d:e1:dc:35:45:44:84:0e:57:d4:25:93:cb:da:77:e6:35:26: 01:ff:7e:ab:31:94:55:f9:16:b7:06:a8:7a:a4:f8:c6:df:8e: 10:2c:c5:0d:86:ea:bb:28:76:62:ab:f6:a0:3e:70:ff:41:c1: d5:41:90:f7:97:b5:fb:ee:c0:3a:db:79:30:94:37:6a:f9:f3: 08:5a:99:98:9a:e4:40:8c:0e:71:3e:c9:21:f6:d3:f9:9f:26: cd:75:a3:ca -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WoCppu1RfaxMMBmZW+JzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYzBiN2QzNDVjZmFlNTM0N2QzY2U5OGI0MjQxYjkwMGU0 YTllZjMwHhcNMjYwMTAxMTYxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWE2MTJkODk2ZGIyZjA0ZmQ5YTBiYjQ2MmQzM2EzYjc1NjJmY2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5XwB6Enp8T1rDYtb5zRM6tm+3rk rtzM98W15srQSOVaoYN8OPQ5ZF0kZRs2I+qlKPgoAcbgLx8bvEBPB/UD5S2qTXvY 8sygjylviwlofic65JZUlRypVnjMsG27dz/lykhQoUap1YbHGUkI8LOK/K/4//Sl vyuXxqT1dY+MitgTIlCy4m5nAJD33SoqHLiMHfZzXGBWnkKoBTXskNEGFGf4Khor U7YnkSN24CZOc71MEffDjgB8mEDCqZqW5R3lVBXiRysCbC5bgUReaz24w2vbsu+f Oa+PaLVTPFGpHYr6ixICGOpY86aMDBdP72NMuI9wZNo/NMmXqOatSxUOiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNWmEtiW2y8E/ZoLtGLTOjt1Yvy2MB8GA1UdIwQY MBaAFEzAt9NFz65TR9POmLQkG5AOSp7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE1DMzAwWFBybE5IMDg2WXRDUWJrQTVLbnZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xNmQzNzAtZjYzMi00Y2ExLThiOTYt MWJlMzI1ZjdhMmUzLzEvMWFZUzJKYmJMd1Q5bWd1MFl0TTZPM1ZpX0xZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS8xNmQzNzAtZjYzMi00Y2ExLThiOTYtMWJlMzI1ZjdhMmUz LzEvVE1DMzAwWFBybE5IMDg2WXRDUWJrQTVLbnZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuV64MA0G CSqGSIb3DQEBCwUAA4IBAQANLLHaXtJQEKQQOiEhZVJKREuFnNexmya+CEM9AcGs iSpnlZorrZjBMs1X8QLyQyx8ir7RJsClw8rBrujpl4hN/kX9Av6TlTG3KwfIirPU jFYgYTnkmK592IhHSFgdqoi7oj6lHUZiBTHsjvFCDeVqwVpaOtXfZ1x03htI7Rgy xWXhwkWD8n7KZHy6xlx3K3NQQ7qsL1ppapyAgerIcYeIZzqN4dw1RUSEDlfUJZPL 2nfmNSYB/36rMZRV+Ra3Bqh6pPjG344QLMUNhuq7KHZiq/agPnD/QcHVQZD3l7X7 7sA623kwlDdq+fMIWpmYmuRAjA5xPskh9tP5nybNdaPK -----END CERTIFICATE-----Generated at Mon Jan 26 05:34:29 2026 by rpki-client