This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/TrY6aUvOznEWPgwFCDr7RM2O3ms.roa
File: TrY6aUvOznEWPgwFCDr7RM2O3ms.roa (raw, json)
Hash identifier: DDvKuMgIkfq65IcNVG0b6/9Oq5NsQ98eHZFJJ6S6qiM=
Subject key identifier: 4E:B6:3A:69:4B:CE:CE:71:16:3E:0C:05:08:3A:FB:44:CD:8E:DE:6B
Certificate issuer: /CN=7beca4012bf7b5056e2e0a161eb4618876c9112a
Certificate serial: 019B7BA3EE4BA1B0BA52277E78CB81751AD2
Authority key identifier: 7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/TrY6aUvOznEWPgwFCDr7RM2O3ms.roa
Signing time: Thu 01 Jan 2026 22:18:19 +0000
ROA not before: Thu 01 Jan 2026 22:18:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60672
IP address blocks: 82.192.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a3:ee:4b:a1:b0:ba:52:27:7e:78:cb:81:75:1a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7beca4012bf7b5056e2e0a161eb4618876c9112a
Validity
Not Before: Jan 1 22:18:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4eb63a694bcece71163e0c05083afb44cd8ede6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e2:96:59:6b:2c:45:a7:17:a1:17:07:ee:7c:
bd:09:9d:d2:e7:be:6e:1c:de:a3:b9:85:16:99:70:
cc:97:e5:e8:92:f0:1c:eb:72:84:8e:f4:ff:5a:cb:
5c:e5:de:0d:06:be:2e:66:02:e7:f4:ec:54:64:95:
de:82:05:dd:b1:25:0a:0b:6a:a4:37:a1:97:d7:ef:
fa:1c:00:ac:ff:d7:1b:cc:52:3b:70:be:82:6f:80:
54:13:4f:4a:21:61:c5:a0:c1:5b:ff:40:02:8a:82:
a4:89:ce:9b:bd:37:b4:28:80:87:b2:1b:3b:51:2d:
65:f7:52:a8:45:46:a4:8d:d8:5d:d3:99:8e:e2:dd:
ab:f4:41:43:4c:99:e4:ff:18:05:5d:bf:99:5c:e4:
14:f6:b3:0c:ef:be:16:56:71:6c:e1:2a:53:56:c7:
cb:b7:c9:50:53:d3:bd:dc:fc:21:24:6f:45:d5:c2:
b1:16:2d:56:74:e9:0f:f3:07:1e:c0:0a:8d:48:5f:
3a:d7:0c:97:43:d2:21:02:2d:75:cf:e3:5d:ce:1a:
5e:df:79:83:3d:26:91:ba:a6:1c:21:44:80:d1:2c:
4d:d7:83:8c:98:45:de:2f:93:d7:2f:ad:f1:54:14:
d6:30:e4:d1:1a:19:44:f6:51:2c:bd:80:99:d6:48:
e8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B6:3A:69:4B:CE:CE:71:16:3E:0C:05:08:3A:FB:44:CD:8E:DE:6B
X509v3 Authority Key Identifier:
keyid:7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/TrY6aUvOznEWPgwFCDr7RM2O3ms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.192.106.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:c8:d2:7b:af:f1:2c:72:ca:20:0b:81:8b:d5:0f:c9:a9:40:
9c:2c:98:b7:73:e2:f9:f8:3c:67:f2:a5:39:74:d5:eb:e1:bd:
cf:e5:00:36:26:b8:a9:ba:16:95:9a:4b:26:8c:2e:82:05:c0:
54:50:76:06:97:08:d9:e9:f9:d3:e6:4d:e3:97:03:79:74:f2:
b8:28:0e:26:cb:69:da:86:c2:07:9a:b8:e7:eb:54:77:7e:ca:
cd:94:0f:1f:19:d0:7e:d7:1e:d6:10:19:07:f3:68:ed:46:b5:
9f:55:60:89:0c:5f:e5:07:c1:8c:ed:cb:7a:2d:dd:ca:68:d9:
46:d3:eb:c4:1e:e8:fd:f8:d9:16:02:a7:d8:d5:d4:06:f2:e3:
e3:63:ec:5c:59:b8:6b:c8:31:84:6e:d5:41:70:73:6f:67:03:
4f:f8:34:21:0c:50:0e:a6:c9:51:be:a5:1d:74:6b:94:11:9c:
be:15:62:a6:48:6d:77:9b:ba:e6:2e:ec:0c:5e:ac:d7:93:71:
e1:4c:1a:1c:a9:3d:f1:0a:f4:b0:c6:82:a0:6d:e6:08:40:e6:
dd:51:66:c3:7b:71:59:63:15:75:1b:84:3e:0f:ce:da:0b:b8:
a5:bd:8c:54:1d:65:40:db:3f:a8:1b:01:a9:4d:08:1f:f1:b7:
5e:2d:2c:2e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt7o+5LobC6Uid+eMuBdRrSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiZWNhNDAxMmJmN2I1MDU2ZTJlMGExNjFlYjQ2MTg4NzZj
OTExMmEwHhcNMjYwMTAxMjIxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZWI2M2E2OTRiY2VjZTcxMTYzZTBjMDUwODNhZmI0NGNkOGVkZTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+KWWWssRacXoRcH7ny9CZ3S575u
HN6juYUWmXDMl+XokvAc63KEjvT/Wstc5d4NBr4uZgLn9OxUZJXeggXdsSUKC2qk
N6GX1+/6HACs/9cbzFI7cL6Cb4BUE09KIWHFoMFb/0ACioKkic6bvTe0KICHshs7
US1l91KoRUakjdhd05mO4t2r9EFDTJnk/xgFXb+ZXOQU9rMM774WVnFs4SpTVsfL
t8lQU9O93PwhJG9F1cKxFi1WdOkP8wcewAqNSF861wyXQ9IhAi11z+Ndzhpe33mD
PSaRuqYcIUSA0SxN14OMmEXeL5PXL63xVBTWMOTRGhlE9lEsvYCZ1kjosQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE62OmlLzs5xFj4MBQg6+0TNjt5rMB8GA1UdIwQY
MBaAFHvspAEr97UFbi4KFh60YYh2yREqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZS15a0FTdjN0UVZ1TGdvV0hyUmhpSGJKRVNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS85NDg4ZDUtYThkMy00NGI1LTkyZGYt
NThjYWY0NzAxYmUzLzEvVHJZNmFVdk96bkVXUGd3RkNEcjdSTTJPM21zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS85NDg4ZDUtYThkMy00NGI1LTkyZGYtNThjYWY0NzAxYmUz
LzEvZS15a0FTdjN0UVZ1TGdvV0hyUmhpSGJKRVNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUsBqMA0G
CSqGSIb3DQEBCwUAA4IBAQDIyNJ7r/EscsogC4GL1Q/JqUCcLJi3c+L5+Dxn8qU5
dNXr4b3P5QA2JripuhaVmksmjC6CBcBUUHYGlwjZ6fnT5k3jlwN5dPK4KA4my2na
hsIHmrjn61R3fsrNlA8fGdB+1x7WEBkH82jtRrWfVWCJDF/lB8GM7ct6Ld3KaNlG
0+vEHuj9+NkWAqfY1dQG8uPjY+xcWbhryDGEbtVBcHNvZwNP+DQhDFAOpslRvqUd
dGuUEZy+FWKmSG13m7rmLuwMXqzXk3HhTBocqT3xCvSwxoKgbeYIQObdUWbDe3FZ
YxV1G4Q+D87aC7ilvYxUHWVA2z+oGwGpTQgf8bdeLSwu
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:04:50 2026 by rpki-client