This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Tn5Hp1GDEFrdCcQf7Q8CFOLmibk.roa File: Tn5Hp1GDEFrdCcQf7Q8CFOLmibk.roa (raw, json) Hash identifier: qCzHBvv6elrdjenOZTUxrnwaoJIO/pg8wH+ITi7s9Pw= Subject key identifier: 4E:7E:47:A7:51:83:10:5A:DD:09:C4:1F:ED:0F:02:14:E2:E6:89:B9 Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019B7B35A559F6E5B5F4E1EDA419546542BB Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Tn5Hp1GDEFrdCcQf7Q8CFOLmibk.roa Signing time: Thu 01 Jan 2026 20:17:51 +0000 ROA not before: Thu 01 Jan 2026 20:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396073 IP address blocks: 85.121.241.0/24 maxlen: 24 85.121.242.0/24 maxlen: 24 85.121.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:a5:59:f6:e5:b5:f4:e1:ed:a4:19:54:65:42:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Jan 1 20:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e7e47a75183105add09c41fed0f0214e2e689b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:40:66:a2:d2:21:3c:79:ad:88:bd:69:ab:c9: 49:96:d5:c8:24:83:bc:eb:f4:81:a8:28:52:af:9f: 77:f2:4e:86:2b:58:29:80:cd:a6:7e:61:d3:52:3e: a8:35:14:46:cd:04:9a:01:3b:66:e5:0b:91:f0:e8: cc:80:1c:d3:43:a3:5f:90:e6:61:5d:18:7f:88:f4: 04:67:69:30:83:97:5f:a9:cf:18:b9:1b:71:b1:84: c0:59:a9:ad:e9:0b:75:43:15:7e:19:e9:cf:c9:46: 78:d7:28:18:e0:42:7a:5a:57:48:64:f1:22:ff:18: 42:32:ad:2c:bc:e5:a4:70:9f:0a:39:15:64:c5:f2: fc:ea:44:21:57:d2:2c:17:80:93:a1:8e:ab:81:77: 51:7a:ba:11:c3:1d:07:ef:3c:17:8e:ce:c3:57:17: 6f:6d:92:30:60:70:2a:d2:77:af:19:34:2a:cc:ae: 38:db:43:35:9e:76:d9:bf:7c:dd:12:1c:d9:5a:28: b9:9a:d6:b5:a8:d3:c3:3e:bb:47:5e:b3:40:fa:87: 9d:ef:1d:4f:37:bd:f1:56:57:37:9a:43:08:90:1b: fc:13:15:4a:66:90:85:e0:69:f3:97:7e:70:6d:4b: 58:13:ee:16:91:16:91:db:6d:6f:91:2a:15:f3:fb: 9c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:7E:47:A7:51:83:10:5A:DD:09:C4:1F:ED:0F:02:14:E2:E6:89:B9 X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Tn5Hp1GDEFrdCcQf7Q8CFOLmibk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.121.241.0-85.121.243.255 Signature Algorithm: sha256WithRSAEncryption a1:92:05:8d:ae:83:68:b0:d8:37:ef:0f:ce:6e:29:58:44:d4: 21:c2:b5:65:1b:c4:f3:2f:df:b2:00:4c:df:63:ac:37:2c:e9: 33:7a:e1:a5:a6:fa:53:fc:76:69:7f:a2:da:22:99:ec:60:0d: 23:94:bd:1c:df:c3:15:81:d2:a5:a1:f6:5a:da:a5:79:33:d3: a2:e0:7e:23:70:68:94:b4:5b:3d:df:ff:12:73:a5:a6:ed:24: 3d:f0:6c:6e:cb:b1:a7:dd:91:5c:63:53:d4:e1:db:d0:ad:ac: a1:c0:1c:50:1f:f5:20:cb:53:9b:d9:f1:ae:71:49:2f:8e:33: 99:2c:db:65:00:7c:06:17:ca:a0:f7:a5:ea:fd:fa:65:90:5d: 33:8e:b0:4b:cb:5d:0f:49:2c:5b:ba:ad:ff:b0:00:c0:24:53: 25:d5:67:34:84:b7:26:5b:4b:18:30:83:f0:2f:96:60:da:27: 7c:6d:60:56:71:9a:59:ef:fe:d8:7c:d3:4c:d2:5c:37:fd:ee: cb:8b:d8:a8:b9:2e:d2:7b:bf:c6:fa:d2:19:d4:4b:37:9d:47: ea:e7:28:54:85:98:80:48:24:03:5e:4d:2b:f0:1c:dd:58:64: 81:17:f1:d8:5a:dd:fe:5e:e4:bd:8e:c2:8e:56:1a:7f:f4:30: 73:34:ac:8d -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt7NaVZ9uW19OHtpBlUZUK7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjYwMTAxMjAxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTdlNDdhNzUxODMxMDVhZGQwOWM0MWZlZDBmMDIxNGUyZTY4OWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0BmotIhPHmtiL1pq8lJltXIJIO8 6/SBqChSr5938k6GK1gpgM2mfmHTUj6oNRRGzQSaATtm5QuR8OjMgBzTQ6NfkOZh XRh/iPQEZ2kwg5dfqc8YuRtxsYTAWamt6Qt1QxV+GenPyUZ41ygY4EJ6WldIZPEi /xhCMq0svOWkcJ8KORVkxfL86kQhV9IsF4CToY6rgXdReroRwx0H7zwXjs7DVxdv bZIwYHAq0nevGTQqzK4420M1nnbZv3zdEhzZWii5mta1qNPDPrtHXrNA+oed7x1P N73xVlc3mkMIkBv8ExVKZpCF4Gnzl35wbUtYE+4WkRaR221vkSoV8/ucwQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFE5+R6dRgxBa3QnEH+0PAhTi5om5MB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEvVG41SHAxR0RFRnJkQ2NRZjdROENGT0xtaWJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABVefED BAJVefAwDQYJKoZIhvcNAQELBQADggEBAKGSBY2ug2iw2DfvD85uKVhE1CHCtWUb xPMv37IATN9jrDcs6TN64aWm+lP8dml/otoimexgDSOUvRzfwxWB0qWh9lrapXkz 06LgfiNwaJS0Wz3f/xJzpabtJD3wbG7LsafdkVxjU9Th29CtrKHAHFAf9SDLU5vZ 8a5xSS+OM5ks22UAfAYXyqD3per9+mWQXTOOsEvLXQ9JLFu6rf+wAMAkUyXVZzSE tyZbSxgwg/AvlmDaJ3xtYFZxmlnv/th800zSXDf97suL2Ki5LtJ7v8b60hnUSzed R+rnKFSFmIBIJANeTSvwHN1YZIEX8dha3f5e5L2Owo5WGn/0MHM0rI0= -----END CERTIFICATE-----Generated at Tue Jan 20 00:10:53 2026 by rpki-client