This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/tyHKIUvV69ssxQuI7oUmWbtnYHw.roa File: tyHKIUvV69ssxQuI7oUmWbtnYHw.roa (raw, json) Hash identifier: CLOcFAGaZSEM0X04FfZQoSLLsID95pZiokQO5yoWc1o= Subject key identifier: B7:21:CA:21:4B:D5:EB:DB:2C:C5:0B:88:EE:85:26:59:BB:67:60:7C Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C12DC62CC4837CA97BCC87CD9639C97 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/tyHKIUvV69ssxQuI7oUmWbtnYHw.roa Signing time: Fri 02 Jan 2026 00:19:29 +0000 ROA not before: Fri 02 Jan 2026 00:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59592 IP address blocks: 5.230.206.0/24 maxlen: 32 5.230.220.0/24 maxlen: 32 5.231.87.0/24 maxlen: 32 5.231.200.0/24 maxlen: 32 185.13.158.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:dc:62:cc:48:37:ca:97:bc:c8:7c:d9:63:9c:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b721ca214bd5ebdb2cc50b88ee852659bb67607c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:56:7a:1f:09:74:de:cf:e2:c7:d1:1d:1f:a1: 10:de:98:50:14:69:86:61:ae:7c:b2:ce:4b:be:67: b9:e2:0d:2f:f5:5a:a6:ed:3e:5a:1f:ee:a5:41:5b: 63:e8:2e:69:3a:9e:f2:d8:6f:ae:85:08:d3:a2:3c: bd:cd:3d:6e:95:34:a1:6c:1d:97:f4:ef:fc:69:64: f7:e2:16:a8:03:1c:b5:8a:75:03:38:f9:ba:7f:67: 1d:27:9f:de:e7:37:53:0d:dd:65:dc:46:3e:7d:47: a8:80:0b:67:1b:86:11:60:d5:b0:0f:fc:f4:fe:d5: 76:9e:cc:95:e2:4e:0b:f8:b2:3c:4e:be:2e:06:4d: 3e:55:3a:94:a4:d2:5c:21:5b:fb:ee:6e:d3:cd:27: d2:8a:2c:94:1e:5e:01:02:b5:be:1d:55:32:7a:95: fb:4e:9a:2b:58:dd:17:43:d6:53:6b:40:2f:f7:67: a2:3b:e2:c1:19:23:5c:de:ce:cc:b6:e4:77:3e:67: 25:12:04:e1:85:1c:f2:1a:19:e4:14:73:47:f9:50: ad:a7:a8:39:e9:df:42:b3:fd:8c:0f:e3:ed:1a:a0: 3b:30:87:72:9b:eb:d9:5e:32:30:62:00:b4:d1:a3: b7:0b:57:7e:79:df:a9:7a:11:10:5e:88:34:98:fe: 77:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:21:CA:21:4B:D5:EB:DB:2C:C5:0B:88:EE:85:26:59:BB:67:60:7C X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/tyHKIUvV69ssxQuI7oUmWbtnYHw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.230.206.0/24 5.230.220.0/24 5.231.87.0/24 5.231.200.0/24 185.13.158.0/24 Signature Algorithm: sha256WithRSAEncryption 15:51:fe:c7:fd:82:fb:88:bc:7a:4c:ea:97:8f:77:d5:c8:09: a4:8c:d0:3a:4c:c0:d7:f6:89:65:b6:19:a3:8a:aa:ff:8e:b8: db:43:a2:8a:99:78:8a:0e:85:76:95:af:03:9e:37:85:ca:87: 38:e9:39:ea:a7:60:4d:84:60:34:fb:cc:33:82:ed:ee:01:60: 3a:02:2b:79:e4:5b:6f:61:94:30:df:9b:30:b8:f7:0c:96:23: b2:bf:5f:f5:80:59:6a:3f:7c:15:67:44:1f:7d:7e:6d:e3:ba: 4b:b8:b9:d5:67:85:e5:84:75:45:fd:58:08:84:02:04:30:66: 1c:26:5f:15:d4:2e:b0:1e:0a:3c:1a:4c:ac:10:20:91:51:24: 0e:4e:d5:82:09:04:6d:07:20:42:ff:2c:19:80:41:31:5b:a2: ff:a4:6f:6a:b8:2f:2d:ed:f6:13:48:87:e6:c8:78:4d:83:d0: 1c:54:a6:5b:dc:25:85:05:7c:f4:c9:3c:bd:dc:0a:3e:91:4b: 37:15:a1:09:b6:b1:88:45:bd:38:be:d1:ec:66:3d:d0:a4:d3: 80:e1:2a:26:90:2a:2b:ae:37:6f:3f:6d:d9:ac:01:cf:1a:2c: af:23:c5:cc:a8:8b:77:b9:20:91:a6:88:24:5e:00:89:33:9d: ff:0d:d1:55 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt8EtxizEg3ype8yHzZY5yXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzIxY2EyMTRiZDVlYmRiMmNjNTBiODhlZTg1MjY1OWJiNjc2MDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslZ6Hwl03s/ix9EdH6EQ3phQFGmG Ya58ss5Lvme54g0v9Vqm7T5aH+6lQVtj6C5pOp7y2G+uhQjTojy9zT1ulTShbB2X 9O/8aWT34haoAxy1inUDOPm6f2cdJ5/e5zdTDd1l3EY+fUeogAtnG4YRYNWwD/z0 /tV2nsyV4k4L+LI8Tr4uBk0+VTqUpNJcIVv77m7TzSfSiiyUHl4BArW+HVUyepX7 TporWN0XQ9ZTa0Av92eiO+LBGSNc3s7MtuR3PmclEgThhRzyGhnkFHNH+VCtp6g5 6d9Cs/2MD+PtGqA7MIdym+vZXjIwYgC00aO3C1d+ed+pehEQXog0mP538QIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFLchyiFL1evbLMULiO6FJlm7Z2B8MB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvdHlIS0lVdlY2OXNzeFF1STdvVW1XYnRuWUh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQABebOAwQA BebcAwQABedXAwQABefIAwQAuQ2eMA0GCSqGSIb3DQEBCwUAA4IBAQAVUf7H/YL7 iLx6TOqXj3fVyAmkjNA6TMDX9ollthmjiqr/jrjbQ6KKmXiKDoV2la8DnjeFyoc4 6Tnqp2BNhGA0+8wzgu3uAWA6Ait55FtvYZQw35swuPcMliOyv1/1gFlqP3wVZ0Qf fX5t47pLuLnVZ4XlhHVF/VgIhAIEMGYcJl8V1C6wHgo8GkysECCRUSQOTtWCCQRt ByBC/ywZgEExW6L/pG9quC8t7fYTSIfmyHhNg9AcVKZb3CWFBXz0yTy93Ao+kUs3 FaEJtrGIRb04vtHsZj3QpNOA4SomkCorrjdvP23ZrAHPGiyvI8XMqIt3uSCRpogk XgCJM53/DdFV -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:17 2026 by rpki-client