This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/Ty0AHGlJ9RoCTN7szHoodFNrVgY.roa File: Ty0AHGlJ9RoCTN7szHoodFNrVgY.roa (raw, json) Hash identifier: CDSZ7X9fhOdv3vxjKS4CoPN0JEb8cRxrZ3+xOxMLrhk= Subject key identifier: 4F:2D:00:1C:69:49:F5:1A:02:4C:DE:EC:CC:7A:28:74:53:6B:56:06 Certificate issuer: /CN=9e56980d489e9c53bc829f3e8d63d383f38d0de3 Certificate serial: 019B7EA71D12583974982DCFE0F886CF717F Authority key identifier: 9E:56:98:0D:48:9E:9C:53:BC:82:9F:3E:8D:63:D3:83:F3:8D:0D:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlaYDUienFO8gp8-jWPTg_ONDeM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/Ty0AHGlJ9RoCTN7szHoodFNrVgY.roa Signing time: Fri 02 Jan 2026 12:20:39 +0000 ROA not before: Fri 02 Jan 2026 12:20:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48394 IP address blocks: 94.247.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/nlaYDUienFO8gp8-jWPTg_ONDeM.crl rsync://rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/nlaYDUienFO8gp8-jWPTg_ONDeM.mft rsync://rpki.ripe.net/repository/DEFAULT/nlaYDUienFO8gp8-jWPTg_ONDeM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:1d:12:58:39:74:98:2d:cf:e0:f8:86:cf:71:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e56980d489e9c53bc829f3e8d63d383f38d0de3 Validity Not Before: Jan 2 12:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f2d001c6949f51a024cdeeccc7a2874536b5606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:04:69:76:74:04:ff:42:c2:33:5b:72:22:19: d3:14:85:80:4a:be:d2:ae:69:4d:8c:dd:d3:a2:bc: 17:2c:bc:e1:92:01:e9:dd:47:d4:f7:a4:19:bb:88: fb:6a:ce:39:a3:0d:12:8f:bf:f8:21:a1:66:21:f3: ef:1e:a6:93:01:ea:1f:5e:12:f9:32:2e:ad:db:d3: cc:8b:83:92:c8:2d:25:ed:fb:fa:87:5e:ee:01:66: 26:d9:d9:d7:84:67:a3:10:ed:3c:6a:b4:ec:48:63: 50:59:bc:1c:d4:ad:db:73:3b:4f:39:cc:46:ed:4f: 30:40:63:3f:64:3a:65:8e:38:1e:47:da:82:1a:69: e4:11:ea:d3:a9:79:62:ac:62:eb:39:dd:50:1d:f4: 00:9b:fa:ed:1d:50:44:4b:b7:c9:5b:00:4b:d7:b6: f6:5f:c9:2c:a8:43:ac:46:87:95:0e:5d:07:92:f2: 0d:bb:22:1a:0e:6c:61:2d:fd:ec:be:5a:95:28:ec: d7:18:05:3b:5d:77:eb:07:2c:5e:0a:fb:7e:ab:b8: 49:51:09:86:39:29:81:d5:55:c7:5e:27:af:40:8c: 5d:fe:94:fa:be:3d:2b:b0:c8:3e:54:6b:f0:7a:c7: ff:93:8b:5e:d8:50:9d:33:78:03:53:19:a7:96:b0: 2b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:2D:00:1C:69:49:F5:1A:02:4C:DE:EC:CC:7A:28:74:53:6B:56:06 X509v3 Authority Key Identifier: keyid:9E:56:98:0D:48:9E:9C:53:BC:82:9F:3E:8D:63:D3:83:F3:8D:0D:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlaYDUienFO8gp8-jWPTg_ONDeM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/Ty0AHGlJ9RoCTN7szHoodFNrVgY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/nlaYDUienFO8gp8-jWPTg_ONDeM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.247.8.0/21 Signature Algorithm: sha256WithRSAEncryption 1f:b6:ac:2c:79:5a:9c:04:b5:68:40:1a:7d:49:9a:79:90:00: 7c:10:56:28:9c:34:31:d7:a8:d5:91:9d:27:07:df:e9:bc:48: 73:9a:7f:80:b9:b8:7b:53:81:94:06:cf:f3:f2:0b:9c:62:fa: 46:b2:6c:aa:7b:32:37:65:4e:3b:54:b3:fb:93:41:fb:d3:8d: 63:7f:f4:6b:79:13:1a:6c:19:2e:45:3a:9b:bb:3d:5f:9c:43: 54:c9:20:60:40:58:24:94:db:dc:8f:12:ca:56:56:34:7f:7e: 71:6f:4b:d9:d6:73:20:7f:ba:bf:b1:e9:d4:34:01:61:f5:bb: 5c:eb:00:9f:3c:97:d3:9f:70:78:61:12:2b:f1:9a:f9:2a:a2: 86:b3:c7:ed:54:4d:f4:b9:7f:7f:64:ce:7f:9d:58:59:18:d6: d1:c9:bf:60:68:28:9c:fc:84:d7:a0:0e:3d:79:21:45:c9:61: bf:00:33:6f:72:9a:e9:5a:34:e8:93:51:1b:b6:5a:19:f3:83: af:b8:12:16:1b:f1:ef:b7:99:2e:41:5b:d9:f7:24:f3:b9:7e: 41:51:d2:1d:aa:c2:f3:cb:c1:9c:56:24:4d:b2:d2:0e:51:d0: c0:62:4f:09:f2:08:8c:cc:da:fb:ce:e8:41:e9:18:29:72:ba: b5:5b:88:28 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+px0SWDl0mC3P4PiGz3F/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNTY5ODBkNDg5ZTljNTNiYzgyOWYzZThkNjNkMzgzZjM4 ZDBkZTMwHhcNMjYwMTAyMTIyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjJkMDAxYzY5NDlmNTFhMDI0Y2RlZWNjYzdhMjg3NDUzNmI1NjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQRpdnQE/0LCM1tyIhnTFIWASr7S rmlNjN3TorwXLLzhkgHp3UfU96QZu4j7as45ow0Sj7/4IaFmIfPvHqaTAeofXhL5 Mi6t29PMi4OSyC0l7fv6h17uAWYm2dnXhGejEO08arTsSGNQWbwc1K3bcztPOcxG 7U8wQGM/ZDpljjgeR9qCGmnkEerTqXlirGLrOd1QHfQAm/rtHVBES7fJWwBL17b2 X8ksqEOsRoeVDl0HkvINuyIaDmxhLf3svlqVKOzXGAU7XXfrByxeCvt+q7hJUQmG OSmB1VXHXievQIxd/pT6vj0rsMg+VGvwesf/k4te2FCdM3gDUxmnlrArBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE8tABxpSfUaAkze7Mx6KHRTa1YGMB8GA1UdIwQY MBaAFJ5WmA1InpxTvIKfPo1j04PzjQ3jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmxhWURVaWVuRk84Z3A4LWpXUFRnX09ORGVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9hMzAzNjAtMDMyOS00Y2YxLWEzN2Yt ZGI3NDk4ZGFkZTBjLzEvVHkwQUhHbEo5Um9DVE43c3pIb29kRk5yVmdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9hMzAzNjAtMDMyOS00Y2YxLWEzN2YtZGI3NDk4ZGFkZTBj LzEvbmxhWURVaWVuRk84Z3A4LWpXUFRnX09ORGVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXvcIMA0G CSqGSIb3DQEBCwUAA4IBAQAftqwseVqcBLVoQBp9SZp5kAB8EFYonDQx16jVkZ0n B9/pvEhzmn+Aubh7U4GUBs/z8gucYvpGsmyqezI3ZU47VLP7k0H7041jf/RreRMa bBkuRTqbuz1fnENUySBgQFgklNvcjxLKVlY0f35xb0vZ1nMgf7q/senUNAFh9btc 6wCfPJfTn3B4YRIr8Zr5KqKGs8ftVE30uX9/ZM5/nVhZGNbRyb9gaCic/ITXoA49 eSFFyWG/ADNvcprpWjTok1EbtloZ84OvuBIWG/Hvt5kuQVvZ9yTzuX5BUdIdqsLz y8GcViRNstIOUdDAYk8J8giMzNr7zuhB6Rgpcrq1W4go -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:37 2026 by rpki-client