This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/TYyJPjHj1PrR8OjjE7slJj1W0XY.roa File: TYyJPjHj1PrR8OjjE7slJj1W0XY.roa (raw, json) Hash identifier: lIJshPuuw/WMOhTJIQo8FVW0mppaSoofYwIMOJY57y0= Subject key identifier: 4D:8C:89:3E:31:E3:D4:FA:D1:F0:E8:E3:13:BB:25:26:3D:56:D1:76 Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019B7E37CE2A59B8CD0803F9BF7ADB7B0E64 Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/TYyJPjHj1PrR8OjjE7slJj1W0XY.roa Signing time: Fri 02 Jan 2026 10:19:04 +0000 ROA not before: Fri 02 Jan 2026 10:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214434 IP address blocks: 155.2.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 00:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:ce:2a:59:b8:cd:08:03:f9:bf:7a:db:7b:0e:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Jan 2 10:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d8c893e31e3d4fad1f0e8e313bb25263d56d176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b6:6a:eb:69:44:6f:b8:a7:20:2b:d3:ba:24: fc:e4:4f:47:d7:28:18:c6:59:de:1f:02:f5:45:9f: 11:26:79:0d:d3:d8:c1:6a:f5:d3:7c:df:19:15:cc: 5a:8b:69:a4:12:4b:2c:73:5c:79:92:cf:9f:91:a6: 75:ae:3b:33:e1:f6:8b:65:24:09:69:7e:3c:24:9f: 37:80:c1:7b:54:f2:b0:cd:32:0e:4d:46:1a:36:6b: 03:d2:ac:42:8f:32:30:dd:a6:9b:6f:28:35:2b:70: c2:b2:d4:11:92:68:02:7c:be:a8:2a:fe:33:85:b7: f3:52:d5:92:38:21:c9:31:3b:04:9c:e6:a4:7f:58: 5b:d2:78:bb:b0:54:43:5b:94:c5:df:68:ae:26:da: da:6c:35:df:d6:89:8d:c1:a8:44:d2:cc:a4:03:40: 09:4e:b1:7a:17:53:5d:8c:5b:a1:18:62:bb:02:bc: e5:e9:b8:b1:7d:6a:45:d3:aa:88:71:41:96:a5:6b: ac:7a:4d:af:54:57:a8:45:4f:6a:c3:45:60:82:61: 71:40:ac:d0:be:92:ba:1f:49:4b:d2:bb:1f:29:df: bd:9d:99:01:cf:22:6c:75:46:cd:f0:86:75:97:cd: c7:3f:44:51:87:82:c4:15:86:a0:f6:ed:af:7d:2c: 5d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:8C:89:3E:31:E3:D4:FA:D1:F0:E8:E3:13:BB:25:26:3D:56:D1:76 X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/TYyJPjHj1PrR8OjjE7slJj1W0XY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.2.223.0/24 Signature Algorithm: sha256WithRSAEncryption 50:8f:df:0e:1d:6d:92:ec:3d:d4:85:3e:4b:da:53:d1:01:aa: 67:14:4e:74:fd:b8:21:5f:b9:c5:db:8a:5d:c4:96:de:f8:f5: 7e:8c:9e:a3:46:a9:21:69:f7:98:cd:4a:ef:16:5b:fe:c2:6c: a9:20:cc:08:e4:8f:0d:43:22:c0:ea:38:99:f5:b1:19:4f:5d: 99:91:a8:61:eb:c0:b1:3c:9f:30:ab:d3:ca:88:7f:b6:db:1c: f2:cf:99:44:42:f5:5c:4e:f3:b6:6e:80:47:16:fe:71:1c:ca: 6d:0b:27:2c:b0:e4:ee:b1:16:fd:a4:bb:f3:82:2f:cc:2a:04: 41:0a:59:87:d8:76:b6:c2:11:22:31:9e:5b:4c:56:08:ac:b8: ae:de:8b:b7:99:6e:e2:31:9f:0e:4d:46:e0:9c:ae:4f:05:a8: 05:ad:15:26:6d:45:f8:49:db:54:43:f1:b6:f8:eb:f7:c5:a1: 1b:33:53:a1:84:d5:7c:df:26:ef:84:8f:55:63:06:5b:60:2a: 3a:b7:5f:cc:bb:aa:81:f2:85:35:69:95:90:a4:c7:54:9f:5f: 44:0d:15:fe:41:3a:ad:1c:c0:62:4a:9a:35:8f:f5:4f:ad:b5: e0:15:04:18:53:73:bd:65:8d:f5:19:aa:dd:65:d0:99:f7:bf: 1d:07:ce:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N84qWbjNCAP5v3rbew5kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjYwMTAyMTAxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDhjODkzZTMxZTNkNGZhZDFmMGU4ZTMxM2JiMjUyNjNkNTZkMTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLZq62lEb7inICvTuiT85E9H1ygY xlneHwL1RZ8RJnkN09jBavXTfN8ZFcxai2mkEkssc1x5ks+fkaZ1rjsz4faLZSQJ aX48JJ83gMF7VPKwzTIOTUYaNmsD0qxCjzIw3aabbyg1K3DCstQRkmgCfL6oKv4z hbfzUtWSOCHJMTsEnOakf1hb0ni7sFRDW5TF32iuJtrabDXf1omNwahE0sykA0AJ TrF6F1NdjFuhGGK7Arzl6bixfWpF06qIcUGWpWusek2vVFeoRU9qw0VggmFxQKzQ vpK6H0lL0rsfKd+9nZkBzyJsdUbN8IZ1l83HP0RRh4LEFYag9u2vfSxdQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE2MiT4x49T60fDo4xO7JSY9VtF2MB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvVFl5SlBqSGoxUHJSOE9qakU3c2xKajFXMFhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmwLfMA0G CSqGSIb3DQEBCwUAA4IBAQBQj98OHW2S7D3UhT5L2lPRAapnFE50/bghX7nF24pd xJbe+PV+jJ6jRqkhafeYzUrvFlv+wmypIMwI5I8NQyLA6jiZ9bEZT12Zkahh68Cx PJ8wq9PKiH+22xzyz5lEQvVcTvO2boBHFv5xHMptCycssOTusRb9pLvzgi/MKgRB ClmH2Ha2whEiMZ5bTFYIrLiu3ou3mW7iMZ8OTUbgnK5PBagFrRUmbUX4SdtUQ/G2 +Ov3xaEbM1OhhNV83ybvhI9VYwZbYCo6t1/Mu6qB8oU1aZWQpMdUn19EDRX+QTqt HMBiSpo1j/VPrbXgFQQYU3O9ZY31GardZdCZ978dB84c -----END CERTIFICATE-----Generated at Fri Jan 23 04:39:20 2026 by rpki-client