This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/TRYASeew79G5zn73E_j8Aa7JY-4.roa File: TRYASeew79G5zn73E_j8Aa7JY-4.roa (raw, json) Hash identifier: A844v0atomupwaPDxBuN0WbPBoix8FPtluT4rtEa/Ek= Subject key identifier: 4D:16:00:49:E7:B0:EF:D1:B9:CE:7E:F7:13:F8:FC:01:AE:C9:63:EE Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Certificate serial: 019B77C774AE84C5199E3777A34B65126EE2 Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/TRYASeew79G5zn73E_j8Aa7JY-4.roa Signing time: Thu 01 Jan 2026 04:18:38 +0000 ROA not before: Thu 01 Jan 2026 04:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202736 IP address blocks: 212.116.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:74:ae:84:c5:19:9e:37:77:a3:4b:65:12:6e:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Validity Not Before: Jan 1 04:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d160049e7b0efd1b9ce7ef713f8fc01aec963ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e7:31:81:c1:ed:99:c8:81:9e:55:b7:21:74: 27:57:dd:88:35:1e:3e:94:3a:56:37:27:ee:97:85: c0:88:33:9f:69:f2:e8:f4:e2:2a:92:f4:6e:31:ae: 1c:88:66:a9:7f:74:c1:e3:58:a7:9d:e9:0d:65:11: 09:1e:75:63:35:8b:9d:f6:85:2c:58:b0:10:27:8b: 60:9b:71:86:27:1c:82:fb:07:74:1b:7a:f3:09:52: 5f:08:69:96:f5:5d:3c:5e:8c:61:24:25:eb:c5:27: 79:1e:83:16:9a:81:eb:04:1e:80:b8:98:e4:0e:4e: b1:05:2d:03:7e:1d:aa:4f:06:33:bf:85:f6:d2:73: df:47:38:08:ab:13:eb:00:f4:f5:9c:d6:c4:e0:8b: 05:1a:21:9d:d0:34:5e:9c:08:5a:7a:8e:26:8d:5f: 49:31:73:77:49:fe:4c:59:c4:27:36:31:3c:bf:fe: 5f:88:27:a7:62:b8:79:19:99:b0:22:56:02:fc:76: 2d:f6:46:48:73:02:ea:11:5b:78:41:0b:e5:74:17: f9:3f:ad:d0:dd:ce:b6:6d:1b:f9:27:4c:52:cc:af: 41:bf:bc:30:2c:26:1d:54:0a:35:b6:65:b0:84:2f: 8b:32:e0:86:cc:97:66:8e:72:f6:a3:d2:14:44:27: 55:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:16:00:49:E7:B0:EF:D1:B9:CE:7E:F7:13:F8:FC:01:AE:C9:63:EE X509v3 Authority Key Identifier: keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/TRYASeew79G5zn73E_j8Aa7JY-4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.116.227.0/24 Signature Algorithm: sha256WithRSAEncryption 33:14:c1:4c:ed:ae:03:fe:21:db:0c:33:51:84:09:ed:c0:a4: 24:c1:0f:26:9d:2b:94:e9:b8:b2:b2:40:7c:99:e3:8d:ac:41: 22:0b:02:de:85:cc:0f:a5:2d:89:fd:8b:7d:75:5f:60:da:cc: da:e4:93:3a:5b:32:45:d3:85:5b:ec:4f:63:8e:39:ac:81:0d: 21:60:28:97:6f:0e:80:ac:c3:3a:e4:73:cb:1a:40:62:75:da: 28:fd:f9:2d:b4:d0:a3:14:68:6e:49:86:4a:57:ad:b0:07:51: 38:6a:a3:3e:15:54:0a:ce:f5:43:66:4a:6a:ad:d2:29:5d:2d: b9:8d:9a:92:f8:66:c7:40:48:90:69:fb:c4:25:a9:39:5d:ed: 60:f8:02:48:02:0b:e2:8d:f5:ab:64:5b:64:9d:d7:29:61:ad: 27:a4:24:33:b0:b5:37:2c:1b:c8:99:47:61:2f:e7:ae:f8:e3: d8:c7:1b:4b:a4:54:0f:09:1e:29:78:4d:09:fa:47:5c:fa:65: fb:85:27:85:e4:d4:82:a6:2a:ac:20:81:c4:88:af:30:f7:eb: 81:14:4e:22:3f:c0:34:70:5f:8e:53:01:ac:16:30:75:e7:36: df:6b:8b:76:8e:7b:5c:4f:21:2c:2f:48:d8:d5:db:2a:ba:78: 3e:16:77:e6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3SuhMUZnjd3o0tlEm7iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMDk4ZTQ1ZWY0YmI1ZDE4ZGJjODZjNWExMzVmNTdlYmNi ZTAwNWQwHhcNMjYwMTAxMDQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDE2MDA0OWU3YjBlZmQxYjljZTdlZjcxM2Y4ZmMwMWFlYzk2M2VlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+cxgcHtmciBnlW3IXQnV92INR4+ lDpWNyful4XAiDOfafLo9OIqkvRuMa4ciGapf3TB41innekNZREJHnVjNYud9oUs WLAQJ4tgm3GGJxyC+wd0G3rzCVJfCGmW9V08XoxhJCXrxSd5HoMWmoHrBB6AuJjk Dk6xBS0Dfh2qTwYzv4X20nPfRzgIqxPrAPT1nNbE4IsFGiGd0DRenAhaeo4mjV9J MXN3Sf5MWcQnNjE8v/5fiCenYrh5GZmwIlYC/HYt9kZIcwLqEVt4QQvldBf5P63Q 3c62bRv5J0xSzK9Bv7wwLCYdVAo1tmWwhC+LMuCGzJdmjnL2o9IURCdV0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE0WAEnnsO/Ruc5+9xP4/AGuyWPuMB8GA1UdIwQY MBaAFDsJjkXvS7XRjbyGxaE19X68vgBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMt ZTEyYjE2NDIxNWI5LzEvVFJZQVNlZXc3OUc1em43M0VfajhBYTdKWS00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMtZTEyYjE2NDIxNWI5 LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1HTjMA0G CSqGSIb3DQEBCwUAA4IBAQAzFMFM7a4D/iHbDDNRhAntwKQkwQ8mnSuU6biyskB8 meONrEEiCwLehcwPpS2J/Yt9dV9g2sza5JM6WzJF04Vb7E9jjjmsgQ0hYCiXbw6A rMM65HPLGkBiddoo/fkttNCjFGhuSYZKV62wB1E4aqM+FVQKzvVDZkpqrdIpXS25 jZqS+GbHQEiQafvEJak5Xe1g+AJIAgvijfWrZFtkndcpYa0npCQzsLU3LBvImUdh L+eu+OPYxxtLpFQPCR4peE0J+kdc+mX7hSeF5NSCpiqsIIHEiK8w9+uBFE4iP8A0 cF+OUwGsFjB15zbfa4t2jntcTyEsL0jY1dsqung+Fnfm -----END CERTIFICATE-----Generated at Sun Jan 11 07:31:24 2026 by rpki-client