This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/Tn1byzDG3LC_-4W5cdtymqE-7H8.roa File: Tn1byzDG3LC_-4W5cdtymqE-7H8.roa (raw, json) Hash identifier: Lg0SZJ99rab4Y0en6j2xpoNxdMlIboyOteh0f0kPzyU= Subject key identifier: 4E:7D:5B:CB:30:C6:DC:B0:BF:FB:85:B9:71:DB:72:9A:A1:3E:EC:7F Certificate issuer: /CN=7bbd51272064b63b2c663c0296ba11db5ea238c0 Certificate serial: 019B7AC876F7415EF65DBD407CB5E97D88BC Authority key identifier: 7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/Tn1byzDG3LC_-4W5cdtymqE-7H8.roa Signing time: Thu 01 Jan 2026 18:18:36 +0000 ROA not before: Thu 01 Jan 2026 18:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50530 IP address blocks: 185.129.188.0/23 maxlen: 23 185.129.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:76:f7:41:5e:f6:5d:bd:40:7c:b5:e9:7d:88:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bbd51272064b63b2c663c0296ba11db5ea238c0 Validity Not Before: Jan 1 18:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e7d5bcb30c6dcb0bffb85b971db729aa13eec7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ef:f1:7e:1d:b4:b0:1c:d5:79:60:2b:a1:23: ee:f3:1a:9b:87:48:ca:96:82:13:e9:fc:33:bc:d7: 4e:1c:90:01:a4:d8:c1:4d:6c:64:78:13:0c:fe:72: 17:2b:8b:19:d8:61:7d:9d:9c:92:4b:e8:57:3a:c4: 0f:b2:b1:b5:f9:34:a2:16:2f:4f:ca:cf:0a:bf:bd: 96:01:08:ba:06:f7:98:12:69:bc:45:73:9d:c6:7e: bd:4b:e5:eb:99:c4:be:f4:2e:51:6d:c9:bc:c3:74: 06:6b:5e:b8:5a:c5:2f:64:33:5f:ff:43:3a:59:08: a5:11:67:18:fd:47:50:9d:fa:5f:78:f0:f7:dd:0f: a4:f6:59:27:05:01:66:3c:1d:33:24:46:8c:ce:13: c4:f0:e2:e1:ce:ba:51:64:ca:97:3c:b4:ab:77:2f: 3d:17:2d:5c:d6:5c:88:54:8a:b0:49:ac:cf:4a:43: 21:a9:7c:e3:45:96:62:3d:20:c8:89:fb:bb:55:a5: ce:5f:6a:90:7e:80:fc:87:83:3f:1a:ab:47:a2:b5: f2:47:49:dd:e8:a7:88:d9:89:20:f3:bb:19:2f:4d: 92:a5:ea:e0:af:5f:de:08:54:02:43:54:e1:81:3e: 15:3b:b4:42:3c:31:d0:bf:d4:7e:f0:c3:a7:38:50: 45:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:7D:5B:CB:30:C6:DC:B0:BF:FB:85:B9:71:DB:72:9A:A1:3E:EC:7F X509v3 Authority Key Identifier: keyid:7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/Tn1byzDG3LC_-4W5cdtymqE-7H8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.129.188.0/23 Signature Algorithm: sha256WithRSAEncryption 17:68:07:19:5d:23:8f:02:4a:de:76:9b:28:f4:61:54:e5:0c: e1:10:9a:e3:d8:2c:f7:09:0a:12:21:49:74:1a:15:0e:39:d0: ab:48:77:26:14:65:32:41:a8:dc:9f:ff:2d:e6:52:d8:04:a2: 33:75:c3:0b:a1:30:e1:51:ad:4e:a4:8a:37:c1:ba:7a:0a:06: c5:4c:bd:9c:99:da:50:17:a2:c0:ce:59:4a:79:8c:0a:b3:4c: c5:1e:ed:84:f1:05:74:16:48:d0:0d:00:87:8f:4a:9e:c7:7d: 39:1a:98:fd:78:4c:6e:9a:a7:ae:1a:1a:d6:01:fe:bf:5c:f0: a2:5d:b3:a8:41:ff:3b:fe:48:84:47:e7:f9:54:b1:ec:42:fd: 61:bd:39:ef:89:05:90:ce:e0:d2:91:af:b6:34:73:98:cf:0e: 51:7f:fb:e2:61:49:b3:e1:0b:7b:d4:e1:58:b5:5d:9a:96:c1: 4a:43:a2:2c:47:dc:ef:8d:35:7c:d1:18:c6:87:c5:8b:4b:cf: c9:8f:0a:04:41:a3:19:90:6d:5a:2b:bb:d4:4f:f8:dc:cb:cc: 51:e3:84:13:40:59:11:b4:ff:36:d3:02:30:87:bf:6f:e2:7b: 78:c4:79:f8:e1:c8:26:b2:ff:00:61:a2:50:34:44:24:20:b9: 44:6c:6d:4b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yHb3QV72Xb1AfLXpfYi8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiYmQ1MTI3MjA2NGI2M2IyYzY2M2MwMjk2YmExMWRiNWVh MjM4YzAwHhcNMjYwMTAxMTgxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTdkNWJjYjMwYzZkY2IwYmZmYjg1Yjk3MWRiNzI5YWExM2VlYzdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArO/xfh20sBzVeWAroSPu8xqbh0jK loIT6fwzvNdOHJABpNjBTWxkeBMM/nIXK4sZ2GF9nZySS+hXOsQPsrG1+TSiFi9P ys8Kv72WAQi6BveYEmm8RXOdxn69S+XrmcS+9C5Rbcm8w3QGa164WsUvZDNf/0M6 WQilEWcY/UdQnfpfePD33Q+k9lknBQFmPB0zJEaMzhPE8OLhzrpRZMqXPLSrdy89 Fy1c1lyIVIqwSazPSkMhqXzjRZZiPSDIifu7VaXOX2qQfoD8h4M/GqtHorXyR0nd 6KeI2Ykg87sZL02Spergr1/eCFQCQ1ThgT4VO7RCPDHQv9R+8MOnOFBFXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE59W8swxtywv/uFuXHbcpqhPux/MB8GA1UdIwQY MBaAFHu9UScgZLY7LGY8Apa6EdteojjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTcxUkp5Qmt0anNzWmp3Q2xyb1IyMTZpT01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iODJhMDYtYWIwZC00YWRmLThhODUt OTdjOWFhYjgyOGYyLzEvVG4xYnl6REczTENfLTRXNWNkdHltcUUtN0g4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9iODJhMDYtYWIwZC00YWRmLThhODUtOTdjOWFhYjgyOGYy LzEvZTcxUkp5Qmt0anNzWmp3Q2xyb1IyMTZpT01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuYG8MA0G CSqGSIb3DQEBCwUAA4IBAQAXaAcZXSOPAkredpso9GFU5QzhEJrj2Cz3CQoSIUl0 GhUOOdCrSHcmFGUyQajcn/8t5lLYBKIzdcMLoTDhUa1OpIo3wbp6CgbFTL2cmdpQ F6LAzllKeYwKs0zFHu2E8QV0FkjQDQCHj0qex305Gpj9eExumqeuGhrWAf6/XPCi XbOoQf87/kiER+f5VLHsQv1hvTnviQWQzuDSka+2NHOYzw5Rf/viYUmz4Qt71OFY tV2alsFKQ6IsR9zvjTV80RjGh8WLS8/JjwoEQaMZkG1aK7vUT/jcy8xR44QTQFkR tP820wIwh79v4nt4xHn44cgmsv8AYaJQNEQkILlEbG1L -----END CERTIFICATE-----Generated at Mon Jan 26 04:39:35 2026 by rpki-client