This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/TYLwa08WFOj6opT9KtoPFJ2dgvs.roa File: TYLwa08WFOj6opT9KtoPFJ2dgvs.roa (raw, json) Hash identifier: juyToRfL7FYCUARkpqsy2gY6lCDPJ0kPx5U0XqCELDc= Subject key identifier: 4D:82:F0:6B:4F:16:14:E8:FA:A2:94:FD:2A:DA:0F:14:9D:9D:82:FB Certificate issuer: /CN=f3751cf8c3a2d36c9744c96519899945ac607820 Certificate serial: 019B7F83D0557BE5416C7A5AF9DC07D43676 Authority key identifier: F3:75:1C:F8:C3:A2:D3:6C:97:44:C9:65:19:89:99:45:AC:60:78:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/83Uc-MOi02yXRMllGYmZRaxgeCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/TYLwa08WFOj6opT9KtoPFJ2dgvs.roa Signing time: Fri 02 Jan 2026 16:21:43 +0000 ROA not before: Fri 02 Jan 2026 16:21:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48956 IP address blocks: 37.46.13.0/24 maxlen: 24 37.46.14.0/24 maxlen: 24 37.46.15.0/24 maxlen: 24 45.90.0.0/23 maxlen: 23 91.207.52.0/23 maxlen: 23 91.230.42.0/23 maxlen: 23 91.246.104.0/21 maxlen: 21 195.88.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.crl rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.mft rsync://rpki.ripe.net/repository/DEFAULT/83Uc-MOi02yXRMllGYmZRaxgeCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:d0:55:7b:e5:41:6c:7a:5a:f9:dc:07:d4:36:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3751cf8c3a2d36c9744c96519899945ac607820 Validity Not Before: Jan 2 16:21:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d82f06b4f1614e8faa294fd2ada0f149d9d82fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:51:48:e5:40:e7:9b:1a:7f:29:01:5b:e8:5d: 8a:2a:06:26:38:93:a8:6f:e5:a7:4d:ed:b8:06:07: 89:c3:f6:fb:e5:a0:dc:74:f8:fc:23:4f:88:33:6f: cd:0c:39:8e:69:40:4a:2c:65:8b:f0:8e:4d:0a:87: f7:65:03:19:11:ab:73:42:f4:48:db:88:e7:dd:f2: 7d:da:25:06:39:fc:cd:f7:26:83:c5:9d:6e:64:b1: 4e:ff:9c:ea:32:4e:70:09:84:4f:2e:a9:e9:f7:9b: 14:d6:01:2e:4a:01:e0:70:cb:f6:ee:6f:81:bf:dc: 9e:2f:1b:0b:d0:ba:c3:bb:f1:c3:4f:ad:6b:49:55: 1b:6d:12:58:fc:ac:91:71:ae:9f:3a:32:35:15:36: ff:5c:fd:ff:f7:a2:2c:f9:d3:ec:6e:ca:b6:8c:06: b0:56:77:14:cf:05:23:1a:b6:78:9c:5b:ed:a8:be: 91:66:ad:51:83:57:76:f3:7d:1c:2d:02:0f:e1:53: 82:85:a2:2a:a1:d3:ca:52:51:dd:ca:45:09:1e:0a: 33:d0:69:04:4c:a1:ee:2a:43:8e:bd:d4:57:f4:b0: 24:8f:8c:54:85:59:af:f7:43:2b:b0:e3:1d:df:e1: d7:a7:0c:31:7a:09:89:93:0c:22:c2:38:38:6c:76: 19:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:82:F0:6B:4F:16:14:E8:FA:A2:94:FD:2A:DA:0F:14:9D:9D:82:FB X509v3 Authority Key Identifier: keyid:F3:75:1C:F8:C3:A2:D3:6C:97:44:C9:65:19:89:99:45:AC:60:78:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83Uc-MOi02yXRMllGYmZRaxgeCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/TYLwa08WFOj6opT9KtoPFJ2dgvs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.46.13.0-37.46.15.255 45.90.0.0/23 91.207.52.0/23 91.230.42.0/23 91.246.104.0/21 195.88.114.0/23 Signature Algorithm: sha256WithRSAEncryption cc:5e:2d:42:01:63:5c:79:9b:84:77:b6:f6:c7:f6:ce:de:50: c7:c0:d8:ac:3c:76:30:c5:96:2b:83:f3:6d:61:40:89:07:0f: 41:45:a4:c5:64:4a:cb:c9:e2:d2:c6:07:9e:37:88:2d:bf:cc: 99:ed:1b:e1:42:53:e4:93:8f:4e:5b:9b:6b:15:ab:b4:d1:c3: 42:82:96:04:96:e2:8d:7e:8a:33:b5:3e:b7:04:78:68:d2:70: ad:5e:ad:a5:3a:6d:8d:ab:d2:bf:7f:4b:ef:54:7b:4a:40:53: 8c:df:85:47:db:6b:60:ca:92:fc:9f:b1:47:94:87:61:2c:10: 0b:78:c5:b3:d1:b7:f9:1f:1f:d3:5b:a9:62:50:7d:2d:47:fe: a1:11:55:67:61:68:73:6d:d5:e2:ea:c9:8f:b9:0e:83:37:51: 2f:bd:58:3e:9f:3f:65:cd:95:97:3e:54:1d:9f:2f:76:d7:5a: 1a:2e:ee:04:62:b0:e8:26:5a:80:27:ca:4c:aa:4a:f9:b3:6a: d3:be:9e:8a:71:da:19:f7:35:10:a4:22:85:75:91:da:bb:b6: 89:72:e4:10:a6:ce:79:be:7f:9f:ad:65:2c:6d:bf:c2:7a:fb: 6e:b3:4d:55:fe:9c:47:e3:cd:52:cf:fe:74:80:31:f4:85:67: 99:9a:ee:44 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt/g9BVe+VBbHpa+dwH1DZ2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzNzUxY2Y4YzNhMmQzNmM5NzQ0Yzk2NTE5ODk5OTQ1YWM2 MDc4MjAwHhcNMjYwMTAyMTYyMTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDgyZjA2YjRmMTYxNGU4ZmFhMjk0ZmQyYWRhMGYxNDlkOWQ4MmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1FI5UDnmxp/KQFb6F2KKgYmOJOo b+WnTe24BgeJw/b75aDcdPj8I0+IM2/NDDmOaUBKLGWL8I5NCof3ZQMZEatzQvRI 24jn3fJ92iUGOfzN9yaDxZ1uZLFO/5zqMk5wCYRPLqnp95sU1gEuSgHgcMv27m+B v9yeLxsL0LrDu/HDT61rSVUbbRJY/KyRca6fOjI1FTb/XP3/96Is+dPsbsq2jAaw VncUzwUjGrZ4nFvtqL6RZq1Rg1d2830cLQIP4VOChaIqodPKUlHdykUJHgoz0GkE TKHuKkOOvdRX9LAkj4xUhVmv90MrsOMd3+HXpwwxegmJkwwiwjg4bHYZnwIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFE2C8GtPFhTo+qKU/SraDxSdnYL7MB8GA1UdIwQY MBaAFPN1HPjDotNsl0TJZRmJmUWsYHggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODNVYy1NT2kwMnlYUk1sbEdZbVpSYXhnZUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8wOGY5YjQtMTE1Yy00NDg4LWI1Njct NWNmN2MwNjIxMDY1LzEvVFlMd2EwOFdGT2o2b3BUOUt0b1BGSjJkZ3ZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi8wOGY5YjQtMTE1Yy00NDg4LWI1NjctNWNmN2MwNjIxMDY1 LzEvODNVYy1NT2kwMnlYUk1sbEdZbVpSYXhnZUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsMAwDBAAlLg0D BAQlLgADBAEtWgADBAFbzzQDBAFb5ioDBANb9mgDBAHDWHIwDQYJKoZIhvcNAQEL BQADggEBAMxeLUIBY1x5m4R3tvbH9s7eUMfA2Kw8djDFliuD821hQIkHD0FFpMVk SsvJ4tLGB543iC2/zJntG+FCU+STj05bm2sVq7TRw0KClgSW4o1+ijO1PrcEeGjS cK1eraU6bY2r0r9/S+9Ue0pAU4zfhUfba2DKkvyfsUeUh2EsEAt4xbPRt/kfH9Nb qWJQfS1H/qERVWdhaHNt1eLqyY+5DoM3US+9WD6fP2XNlZc+VB2fL3bXWhou7gRi sOgmWoAnykyqSvmzatO+nopx2hn3NRCkIoV1kdq7toly5BCmznm+f5+tZSxtv8J6 +26zTVX+nEfjzVLP/nSAMfSFZ5ma7kQ= -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:31 2026 by rpki-client