This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/tjYT-uHNpnFgFGTdE6itSftZVqY.roa File: tjYT-uHNpnFgFGTdE6itSftZVqY.roa (raw, json) Hash identifier: KHqysYVsduT2z29K9pGLDzRY8wOYildZ8N84ngXiOeE= Subject key identifier: B6:36:13:FA:E1:CD:A6:71:60:14:64:DD:13:A8:AD:49:FB:59:56:A6 Certificate issuer: /CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522 Certificate serial: 019B7EA51243B73C4665A088DA9846EDD855 Authority key identifier: 09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/tjYT-uHNpnFgFGTdE6itSftZVqY.roa Signing time: Fri 02 Jan 2026 12:18:25 +0000 ROA not before: Fri 02 Jan 2026 12:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204139 IP address blocks: 185.110.0.0/23 maxlen: 23 185.110.2.0/24 maxlen: 24 185.110.3.0/24 maxlen: 24 185.116.174.0/24 maxlen: 24 185.122.124.0/23 maxlen: 23 185.122.126.0/23 maxlen: 23 185.122.128.0/23 maxlen: 23 185.123.240.0/23 maxlen: 23 185.123.242.0/23 maxlen: 23 185.123.248.0/22 maxlen: 22 185.123.252.0/22 maxlen: 22 185.127.44.0/23 maxlen: 23 185.127.46.0/23 maxlen: 23 185.128.134.0/23 maxlen: 23 185.128.176.0/23 maxlen: 23 185.128.178.0/23 maxlen: 23 185.129.20.0/23 maxlen: 23 185.129.22.0/23 maxlen: 23 185.132.8.0/23 maxlen: 23 185.132.10.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:12:43:b7:3c:46:65:a0:88:da:98:46:ed:d8:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522 Validity Not Before: Jan 2 12:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b63613fae1cda671601464dd13a8ad49fb5956a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a9:f5:33:27:4e:5b:7d:d2:b0:af:b8:2e:35: af:8d:42:64:80:12:01:49:b4:6d:87:a3:0e:7b:05: 83:16:82:1a:f5:18:d7:27:ab:b8:60:bc:aa:c9:ba: e2:1d:d9:44:ec:6e:37:4d:e4:f0:08:1e:59:49:48: 64:54:34:c2:82:9d:c7:f3:fa:74:cb:94:59:14:f4: 27:f7:91:ef:09:d3:00:98:4c:e4:74:69:af:3a:e3: 6f:93:a5:92:78:71:9b:78:97:9b:d7:e0:07:22:e9: e2:80:b3:c0:e7:b4:24:07:db:c1:e4:2b:47:b4:09: 95:50:56:a2:ef:42:af:ba:69:b5:e6:34:e7:aa:f0: 80:c2:f7:76:b7:7a:c0:a6:ba:88:11:e6:50:ad:fd: 20:b5:e8:8e:ab:e3:16:ce:72:9a:ad:df:80:cb:3c: 1e:71:1b:2f:ba:d7:55:bd:45:1e:c6:a6:25:da:b9: fc:97:42:27:af:f5:15:25:6b:bb:59:98:4a:97:8c: ba:da:42:d2:8e:5e:4e:e5:42:da:84:a4:a8:9c:43: 6e:db:cd:80:23:bd:cb:23:a1:0f:82:d8:84:dd:f8: 43:e7:bc:dc:5e:f8:98:8e:ab:6b:44:52:7f:02:ce: 04:af:06:2d:4a:b1:37:c5:5f:d8:65:da:30:0e:ba: af:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:36:13:FA:E1:CD:A6:71:60:14:64:DD:13:A8:AD:49:FB:59:56:A6 X509v3 Authority Key Identifier: keyid:09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/tjYT-uHNpnFgFGTdE6itSftZVqY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.110.0.0/22 185.116.174.0/24 185.122.124.0-185.122.129.255 185.123.240.0/22 185.123.248.0/21 185.127.44.0/22 185.128.134.0/23 185.128.176.0/22 185.129.20.0/22 185.132.8.0/22 Signature Algorithm: sha256WithRSAEncryption 61:c6:0a:cb:07:ab:d7:74:55:4b:04:7a:19:aa:f1:b9:81:22: 70:dd:10:12:d5:aa:3a:f7:d3:54:8a:c6:b9:53:d1:02:91:b3: e9:b8:b9:ac:ca:2b:4e:3b:b8:8b:72:0f:6e:8a:cd:32:e8:be: e7:78:fb:12:c0:96:09:74:29:e1:30:ee:1e:c5:e2:cb:53:3d: 9b:81:81:ea:15:57:06:3a:15:1f:e1:65:6b:08:6d:da:4c:1d: 85:ab:f0:dd:b0:71:25:54:22:af:88:a3:e3:b4:32:ef:ad:45: a9:80:86:7b:df:0c:b3:b5:58:36:3d:07:f9:53:2f:82:8e:30: 30:87:df:00:b9:ef:56:b1:4e:6e:f0:53:67:8b:42:2b:fa:56: 31:90:dd:c4:93:43:6c:27:ed:8e:88:30:ae:0a:61:a4:e6:86: b0:73:b8:2d:a7:2a:2a:f2:3c:8a:e2:82:86:9d:1a:4d:e6:00: 25:fa:28:3a:66:75:9f:c6:97:d9:75:c2:5a:5a:09:ff:7d:10: 6e:66:ff:b7:8a:fe:fc:36:e2:f2:b7:92:03:cf:9c:af:4b:93: c6:06:2f:59:da:fb:d5:5c:88:d1:e9:bc:ae:89:8d:17:9c:60: 91:74:0f:77:cc:ae:9b:4b:38:56:15:17:7a:94:3b:2d:ff:7f: d7:69:9c:2a -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgISAZt+pRJDtzxGZaCI2phG7dhVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZTJhZjA4Y2Y2ZTEyZTIzMDRmYjNiZGVjNjRjZmJjZWRh YTg1MjIwHhcNMjYwMTAyMTIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjM2MTNmYWUxY2RhNjcxNjAxNDY0ZGQxM2E4YWQ0OWZiNTk1NmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6n1MydOW33SsK+4LjWvjUJkgBIB SbRth6MOewWDFoIa9RjXJ6u4YLyqybriHdlE7G43TeTwCB5ZSUhkVDTCgp3H8/p0 y5RZFPQn95HvCdMAmEzkdGmvOuNvk6WSeHGbeJeb1+AHIunigLPA57QkB9vB5CtH tAmVUFai70Kvumm15jTnqvCAwvd2t3rAprqIEeZQrf0gteiOq+MWznKard+Ayzwe cRsvutdVvUUexqYl2rn8l0Inr/UVJWu7WZhKl4y62kLSjl5O5ULahKSonENu282A I73LI6EPgtiE3fhD57zcXviYjqtrRFJ/As4ErwYtSrE3xV/YZdowDrqv5wIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFLY2E/rhzaZxYBRk3ROorUn7WVamMB8GA1UdIwQY MBaAFAnirwjPbhLiME+zvexkz7ztqoUiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2VLdkNNOXVFdUl3VDdPOTdHVFB2TzJxaFNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8xOWQzY2QtNjYxMC00M2YwLTgzZWIt NzBhMWFmNTFkZmJlLzEvdGpZVC11SE5wbkZnRkdUZEU2aXRTZnRaVnFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8xOWQzY2QtNjYxMC00M2YwLTgzZWItNzBhMWFmNTFkZmJl LzEvQ2VLdkNNOXVFdUl3VDdPOTdHVFB2TzJxaFNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEAwQCuW4AAwQA uXSuMAwDBAK5enwDBAG5eoADBAK5e/ADBAO5e/gDBAK5fywDBAG5gIYDBAK5gLAD BAK5gRQDBAK5hAgwDQYJKoZIhvcNAQELBQADggEBAGHGCssHq9d0VUsEehmq8bmB InDdEBLVqjr301SKxrlT0QKRs+m4uazKK047uItyD26KzTLovud4+xLAlgl0KeEw 7h7F4stTPZuBgeoVVwY6FR/hZWsIbdpMHYWr8N2wcSVUIq+Io+O0Mu+tRamAhnvf DLO1WDY9B/lTL4KOMDCH3wC571axTm7wU2eLQiv6VjGQ3cSTQ2wn7Y6IMK4KYaTm hrBzuC2nKiryPIrigoadGk3mACX6KDpmdZ/Gl9l1wlpaCf99EG5m/7eK/vw24vK3 kgPPnK9Lk8YGL1na+9VciNHpvK6JjRecYJF0D3fMrptLOFYVF3qUOy3/f9dpnCo= -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:34 2026 by rpki-client