This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/TyIvWJWJsGn-cmWLMY8yJjh35bQ.roa File: TyIvWJWJsGn-cmWLMY8yJjh35bQ.roa (raw, json) Hash identifier: rDe9QJo2TIV/FhL9Y1J8I6tZNLLojVuwKygmKDE9YC8= Subject key identifier: 4F:22:2F:58:95:89:B0:69:FE:72:65:8B:31:8F:32:26:38:77:E5:B4 Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f Certificate serial: 019BC3851B4046DE525A5EE330558CD466D1 Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/TyIvWJWJsGn-cmWLMY8yJjh35bQ.roa Signing time: Thu 15 Jan 2026 21:17:18 +0000 ROA not before: Thu 15 Jan 2026 21:17:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 93.127.156.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c3:85:1b:40:46:de:52:5a:5e:e3:30:55:8c:d4:66:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f Validity Not Before: Jan 15 21:17:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f222f589589b069fe72658b318f32263877e5b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a4:93:0d:2c:17:84:e0:94:94:f5:bf:92:ca: b2:f0:9a:3e:55:ec:8a:f5:6b:5f:46:a5:8f:b5:22: 81:34:ee:1a:41:f7:8b:1a:71:96:91:a0:75:41:d7: 1e:fd:be:92:f0:b6:a6:b9:fc:62:f5:40:5c:54:61: db:43:ff:c6:26:6f:35:9f:7d:aa:f6:59:a5:40:43: f2:b9:86:69:71:46:b7:19:be:87:58:85:19:6a:97: 29:5f:f4:ab:1d:c6:22:5e:52:55:63:51:63:32:1b: e8:b6:5f:cf:1f:d0:e9:60:27:84:85:a2:48:fd:46: a0:9d:5a:17:dc:55:51:78:b6:8f:7f:df:84:cf:3d: b1:0c:b8:28:e2:2f:ec:8a:8d:24:ac:6b:ef:da:5a: c8:ea:77:12:05:01:67:6b:6c:81:e9:30:cb:ad:55: cf:63:e2:10:d8:3f:65:cc:7a:ca:30:09:e8:64:e5: 85:cd:35:c8:f0:bc:8b:35:00:28:a9:8e:4c:a7:f0: 16:db:23:32:88:67:b1:ee:d6:3d:a9:8b:18:22:86: 27:94:40:a7:66:36:ed:bf:5d:4d:92:ee:2b:58:ba: b5:25:de:9a:31:97:14:ce:3d:ad:8f:72:df:65:ab: d6:65:07:c4:6e:12:c7:c3:90:7a:3c:a2:04:d8:93: f2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:22:2F:58:95:89:B0:69:FE:72:65:8B:31:8F:32:26:38:77:E5:B4 X509v3 Authority Key Identifier: keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/TyIvWJWJsGn-cmWLMY8yJjh35bQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.127.156.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:66:dc:ae:2a:b7:f8:26:42:5a:bf:bc:1a:46:77:cd:58:c4: 10:a5:92:39:d9:2c:c7:8d:e3:f1:c0:31:a9:b0:20:36:31:1e: e9:45:bc:ae:1b:e2:49:25:f3:1f:81:2a:8c:6d:70:eb:3a:b7: e6:c0:82:68:7a:aa:7d:f8:38:12:27:16:4b:8a:3a:99:2d:2b: 8f:87:dd:96:ce:15:82:65:15:f7:83:24:7d:e4:de:bf:ed:2d: 43:11:65:84:ae:03:69:4f:4f:fa:c2:1d:f7:93:71:fa:21:13: eb:40:29:e9:c1:2d:d0:96:76:d6:c1:75:f3:e6:bc:03:6f:47: 9a:7f:c0:a1:5d:11:aa:26:ce:13:f1:6c:42:44:d9:98:8b:83: ba:14:ae:e2:a5:06:7f:2f:c0:8c:bb:b3:25:06:bd:88:64:61: 27:8a:4e:c0:29:a3:de:71:19:e5:a8:c6:6f:78:93:10:ef:6a: f0:62:4d:4d:a2:f0:bd:15:43:05:4d:af:6e:c7:0c:1a:a5:ee: 14:6f:42:9f:9d:91:b7:c8:c0:c7:aa:6d:c9:91:6b:db:1b:36: 78:60:8b:be:ab:11:ff:c4:51:73:46:f4:a7:f7:91:f3:47:b5: 77:b6:14:1c:9a:65:9a:48:05:52:96:90:0a:cd:aa:9a:3b:9e: 63:4c:f3:8f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvDhRtARt5SWl7jMFWM1GbRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNzhiYzNiZDM1MGVlZGM0ZjM3N2MyMjQ1NTZiMjUwZGE2 ZGRlNmYwHhcNMjYwMTE1MjExNzE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjIyMmY1ODk1ODliMDY5ZmU3MjY1OGIzMThmMzIyNjM4NzdlNWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqSTDSwXhOCUlPW/ksqy8Jo+VeyK 9WtfRqWPtSKBNO4aQfeLGnGWkaB1Qdce/b6S8Lamufxi9UBcVGHbQ//GJm81n32q 9lmlQEPyuYZpcUa3Gb6HWIUZapcpX/SrHcYiXlJVY1FjMhvotl/PH9DpYCeEhaJI /UagnVoX3FVReLaPf9+Ezz2xDLgo4i/sio0krGvv2lrI6ncSBQFna2yB6TDLrVXP Y+IQ2D9lzHrKMAnoZOWFzTXI8LyLNQAoqY5Mp/AW2yMyiGex7tY9qYsYIoYnlECn Zjbtv11Nku4rWLq1Jd6aMZcUzj2tj3LfZavWZQfEbhLHw5B6PKIE2JPyBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE8iL1iVibBp/nJlizGPMiY4d+W0MB8GA1UdIwQY MBaAFMN4vDvTUO7cTzd8IkVWslDabd5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYt NDQxNDU1OGZkY2JiLzEvVHlJdldKV0pzR24tY21XTE1ZOHlKamgzNWJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYtNDQxNDU1OGZkY2Ji LzEvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXX+cMA0G CSqGSIb3DQEBCwUAA4IBAQAqZtyuKrf4JkJav7waRnfNWMQQpZI52SzHjePxwDGp sCA2MR7pRbyuG+JJJfMfgSqMbXDrOrfmwIJoeqp9+DgSJxZLijqZLSuPh92WzhWC ZRX3gyR95N6/7S1DEWWErgNpT0/6wh33k3H6IRPrQCnpwS3QlnbWwXXz5rwDb0ea f8ChXRGqJs4T8WxCRNmYi4O6FK7ipQZ/L8CMu7MlBr2IZGEnik7AKaPecRnlqMZv eJMQ72rwYk1NovC9FUMFTa9uxwwape4Ub0KfnZG3yMDHqm3JkWvbGzZ4YIu+qxH/ xFFzRvSn95HzR7V3thQcmmWaSAVSlpAKzaqaO55jTPOP -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:48 2026 by rpki-client