This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/yCZntdcD-FiyyzALoPRod_Tynro.roa File: yCZntdcD-FiyyzALoPRod_Tynro.roa (raw, json) Hash identifier: A7enThxiUzB12fnWIKjiXX2k7pCD4DTrx01Es4L2jQE= Subject key identifier: C8:26:67:B5:D7:03:F8:58:B2:CB:30:0B:A0:F4:68:77:F4:F2:9E:BA Certificate issuer: /CN=4b98127943e7175734964010c89ef821416a31b3 Certificate serial: 019B7AC87E54FFA9925145C2613F6436F69C Authority key identifier: 4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/yCZntdcD-FiyyzALoPRod_Tynro.roa Signing time: Thu 01 Jan 2026 18:18:38 +0000 ROA not before: Thu 01 Jan 2026 18:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6871 IP address blocks: 31.108.0.0/14 maxlen: 14 31.125.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:7e:54:ff:a9:92:51:45:c2:61:3f:64:36:f6:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b98127943e7175734964010c89ef821416a31b3 Validity Not Before: Jan 1 18:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c82667b5d703f858b2cb300ba0f46877f4f29eba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2b:fd:e9:0a:d6:35:5b:1f:12:67:13:00:96: 66:d1:7a:7c:9d:0b:b5:0d:76:7a:b2:35:03:66:98: 05:42:36:37:98:0c:19:7f:bc:31:fe:7c:02:aa:34: 59:de:4e:d2:42:cc:e6:5e:16:bd:1a:5c:a1:6c:c9: 04:08:ca:4b:4b:52:f3:b2:53:2c:37:46:cb:2c:e6: 8b:96:d2:a8:43:69:4d:0a:50:ba:cd:fb:39:70:1c: 1b:88:0f:44:9f:c1:01:29:4d:33:35:08:ab:82:2c: 22:18:c5:dd:ec:9c:b9:5c:dd:78:bc:ca:72:63:88: 5a:d9:2a:ef:39:82:ad:f8:36:2b:f4:11:01:fa:99: 51:49:58:15:c3:35:2d:b8:ca:60:c9:7a:24:1c:69: ca:d5:54:32:79:7e:c9:58:78:d9:ad:66:7a:f7:1a: 96:d0:6d:c4:cf:ee:b3:88:b9:c7:f9:a2:94:3c:d3: d6:4e:7c:98:f9:01:e6:4f:cb:e7:e5:b9:f3:16:14: fa:85:08:81:6e:a1:6c:6f:e3:fe:65:b9:73:33:3d: 24:b2:56:40:a7:ce:18:c1:46:d9:aa:a3:65:9d:a4: 97:3f:6f:63:44:a4:b6:5b:ce:f7:6c:62:e9:0b:d7: 21:8c:78:c6:10:0c:95:da:e0:4d:27:e0:8e:70:1b: 15:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:26:67:B5:D7:03:F8:58:B2:CB:30:0B:A0:F4:68:77:F4:F2:9E:BA X509v3 Authority Key Identifier: keyid:4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/yCZntdcD-FiyyzALoPRod_Tynro.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.108.0.0/14 31.125.0.0/16 Signature Algorithm: sha256WithRSAEncryption 25:0f:3c:4b:35:af:f6:ab:64:48:72:d6:f0:7e:6e:ff:0d:7b: 47:f1:3b:9b:ba:de:06:e2:ec:57:47:f1:28:0e:55:48:6e:e7: 5a:9a:d9:e0:e9:6c:8f:6c:45:53:28:1a:a3:55:60:f3:1d:47: 3a:0a:86:c6:36:4a:eb:26:4d:0a:19:79:b7:13:e8:6c:f1:bc: 29:d3:ea:d7:e3:84:e4:d1:9a:91:4e:af:05:b7:39:6c:19:7b: ce:26:e8:f3:8a:ee:9f:04:3f:8e:72:63:bf:ed:6c:44:d0:04: e0:90:8d:d0:0e:f9:d0:f9:01:cb:8c:9c:d2:7a:b0:f9:89:64: ad:1f:03:9b:e7:a5:a0:c5:0c:44:13:53:cc:97:88:06:33:50: 30:eb:c5:c4:7f:41:ce:c4:62:7b:f1:23:52:31:da:cd:1d:14: 5f:a9:13:a2:39:18:59:a1:a8:e7:ea:69:92:1c:2c:3c:f2:ae: 7c:8d:65:d7:06:72:93:ed:c3:03:1b:c6:f5:03:c5:eb:66:ac: 9a:48:80:e4:98:68:8b:6d:11:0e:ef:32:72:21:02:4b:de:68: 73:4a:17:cb:b7:d4:f9:bd:58:25:8c:ca:ee:22:eb:7d:cd:6e: ca:40:d7:14:38:22:1e:cf:6f:72:c6:54:ae:41:cf:a6:94:5f: 9f:e0:61:e8 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZt6yH5U/6mSUUXCYT9kNvacMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiOTgxMjc5NDNlNzE3NTczNDk2NDAxMGM4OWVmODIxNDE2 YTMxYjMwHhcNMjYwMTAxMTgxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODI2NjdiNWQ3MDNmODU4YjJjYjMwMGJhMGY0Njg3N2Y0ZjI5ZWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyv96QrWNVsfEmcTAJZm0Xp8nQu1 DXZ6sjUDZpgFQjY3mAwZf7wx/nwCqjRZ3k7SQszmXha9GlyhbMkECMpLS1LzslMs N0bLLOaLltKoQ2lNClC6zfs5cBwbiA9En8EBKU0zNQirgiwiGMXd7Jy5XN14vMpy Y4ha2SrvOYKt+DYr9BEB+plRSVgVwzUtuMpgyXokHGnK1VQyeX7JWHjZrWZ69xqW 0G3Ez+6ziLnH+aKUPNPWTnyY+QHmT8vn5bnzFhT6hQiBbqFsb+P+ZblzMz0kslZA p84YwUbZqqNlnaSXP29jRKS2W873bGLpC9chjHjGEAyV2uBNJ+COcBsV2QIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFMgmZ7XXA/hYssswC6D0aHf08p66MB8GA1UdIwQY MBaAFEuYEnlD5xdXNJZAEMie+CFBajGzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzVnU2VVUG5GMWMwbGtBUXlKNzRJVUZxTWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mMjBkZjMtMjc1My00MzUzLWE2Njgt NjIxNzkyZjdlNTZhLzEveUNabnRkY0QtRml5eXpBTG9QUm9kX1R5bnJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9mMjBkZjMtMjc1My00MzUzLWE2NjgtNjIxNzkyZjdlNTZh LzEvUzVnU2VVUG5GMWMwbGtBUXlKNzRJVUZxTWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMCH2wDAwAf fTANBgkqhkiG9w0BAQsFAAOCAQEAJQ88SzWv9qtkSHLW8H5u/w17R/E7m7reBuLs V0fxKA5VSG7nWprZ4Olsj2xFUygao1Vg8x1HOgqGxjZK6yZNChl5txPobPG8KdPq 1+OE5NGakU6vBbc5bBl7zibo84runwQ/jnJjv+1sRNAE4JCN0A750PkBy4yc0nqw +YlkrR8Dm+eloMUMRBNTzJeIBjNQMOvFxH9BzsRie/EjUjHazR0UX6kTojkYWaGo 5+ppkhwsPPKufI1l1wZyk+3DAxvG9QPF62asmkiA5Jhoi20RDu8yciECS95oc0oX y7fU+b1YJYzK7iLrfc1uykDXFDgiHs9vcsZUrkHPppRfn+Bh6A== -----END CERTIFICATE-----Generated at Sun Jan 25 19:17:32 2026 by rpki-client