This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/ToHiPhrCtrnjYoSZHMfMzvQKww0.roa File: ToHiPhrCtrnjYoSZHMfMzvQKww0.roa (raw, json) Hash identifier: tlf0dWkM8ozQrqBdjX39H8GbcCny8TCUT6Pf05X9Ges= Subject key identifier: 4E:81:E2:3E:1A:C2:B6:B9:E3:62:84:99:1C:C7:CC:CE:F4:0A:C3:0D Certificate issuer: /CN=0d8cbee51990f1e05a9d1dc0c2f2f3a8a3470c13 Certificate serial: 019B7F13787ACF97C16507066843E8E7DA53 Authority key identifier: 0D:8C:BE:E5:19:90:F1:E0:5A:9D:1D:C0:C2:F2:F3:A8:A3:47:0C:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/ToHiPhrCtrnjYoSZHMfMzvQKww0.roa Signing time: Fri 02 Jan 2026 14:19:01 +0000 ROA not before: Fri 02 Jan 2026 14:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60664 IP address blocks: 92.43.50.0/23 maxlen: 23 185.97.176.0/24 maxlen: 24 185.97.177.0/24 maxlen: 24 185.97.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.crl rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:78:7a:cf:97:c1:65:07:06:68:43:e8:e7:da:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d8cbee51990f1e05a9d1dc0c2f2f3a8a3470c13 Validity Not Before: Jan 2 14:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e81e23e1ac2b6b9e36284991cc7cccef40ac30d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d2:15:61:ed:38:58:d1:96:5c:e9:90:76:8f: 35:15:29:87:3b:b1:a6:2a:80:bf:f6:ca:85:c8:1e: 35:17:87:d1:7d:6d:9f:0f:20:cc:6d:52:39:2e:83: a7:cd:88:2e:08:99:88:35:a1:83:61:09:1d:84:6a: cf:4b:46:16:32:90:85:61:fb:6e:5e:49:ee:b2:17: ff:a3:8a:c6:3e:6c:d3:56:8e:2f:6a:10:cb:4b:88: dd:13:fa:43:d7:0b:9d:4e:16:b7:04:3f:e4:44:7d: 71:73:29:87:23:fe:c3:b8:e1:ac:c1:ad:56:ed:03: ed:c2:de:aa:19:20:f3:21:7f:de:25:05:a9:40:1f: 69:14:84:88:ac:f7:4d:a7:72:fd:8f:a3:8e:ef:dd: da:ba:fc:a7:52:40:77:ed:58:99:2c:e8:f4:19:1c: 33:6c:68:c8:8f:ce:34:98:b2:26:34:9b:e5:b8:1e: 96:95:7f:63:ce:c4:dd:78:21:10:90:8d:9e:d1:3f: c3:af:19:c6:64:26:c1:24:b2:c7:2d:d3:bf:45:52: 9e:13:4b:53:dc:da:2c:88:c4:50:b7:80:c6:3e:f6: d9:e6:08:9e:71:d6:f5:5e:4d:73:4f:70:0e:95:91: 39:ac:3b:8e:47:03:d5:ab:ed:dc:5a:21:f6:45:2f: 01:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:81:E2:3E:1A:C2:B6:B9:E3:62:84:99:1C:C7:CC:CE:F4:0A:C3:0D X509v3 Authority Key Identifier: keyid:0D:8C:BE:E5:19:90:F1:E0:5A:9D:1D:C0:C2:F2:F3:A8:A3:47:0C:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/ToHiPhrCtrnjYoSZHMfMzvQKww0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.43.50.0/23 185.97.176.0-185.97.178.255 Signature Algorithm: sha256WithRSAEncryption 77:be:a7:66:ad:71:e8:3f:58:c6:7f:e5:b5:ed:b5:a0:97:10: ad:ea:f8:3a:e6:06:97:63:e1:89:f6:6b:c8:4b:07:1d:a9:23: 13:65:c1:ae:dd:15:00:f6:18:75:10:16:f0:a1:66:a3:9b:7d: 1c:ce:4b:6b:d4:04:ff:8f:44:1a:6f:c9:2f:f9:f2:eb:c8:53: 28:4c:d4:62:fd:c0:46:07:a7:47:81:69:c5:2c:36:69:cd:6d: 7b:fe:7b:5e:c4:cc:27:d9:f5:d7:0d:b8:35:bd:ea:c0:f9:42: ae:ac:bb:b6:67:89:d4:dd:0f:a6:72:6b:d2:ed:55:ed:2e:de: bc:f0:31:fe:17:5b:a9:d5:55:4a:17:95:a2:a4:2a:5d:4f:c8: b7:f5:2b:0b:fb:c2:1b:65:43:bc:d9:c0:01:7d:9b:49:41:cb: e3:27:be:8e:b1:27:99:0e:a5:8a:94:e3:94:9c:ce:34:bd:55: 3c:f6:8a:be:43:68:9b:9d:3e:26:6c:24:1a:27:77:d8:10:1c: cb:6d:d8:04:f5:2e:60:a5:93:ea:b5:31:9d:ae:88:9b:1b:68: 5a:36:b7:27:6e:88:34:e4:df:b7:7c:7d:3a:74:b2:92:8d:e0: 43:4d:7e:33:a3:f4:9c:11:e7:ee:ab:cc:4c:4d:95:0b:1e:2b: 75:32:e1:66 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt/E3h6z5fBZQcGaEPo59pTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkOGNiZWU1MTk5MGYxZTA1YTlkMWRjMGMyZjJmM2E4YTM0 NzBjMTMwHhcNMjYwMTAyMTQxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTgxZTIzZTFhYzJiNmI5ZTM2Mjg0OTkxY2M3Y2NjZWY0MGFjMzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndIVYe04WNGWXOmQdo81FSmHO7Gm KoC/9sqFyB41F4fRfW2fDyDMbVI5LoOnzYguCJmINaGDYQkdhGrPS0YWMpCFYftu Xknushf/o4rGPmzTVo4vahDLS4jdE/pD1wudTha3BD/kRH1xcymHI/7DuOGswa1W 7QPtwt6qGSDzIX/eJQWpQB9pFISIrPdNp3L9j6OO793auvynUkB37ViZLOj0GRwz bGjIj840mLImNJvluB6WlX9jzsTdeCEQkI2e0T/DrxnGZCbBJLLHLdO/RVKeE0tT 3NosiMRQt4DGPvbZ5giecdb1Xk1zT3AOlZE5rDuORwPVq+3cWiH2RS8BlQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFE6B4j4awra542KEmRzHzM70CsMNMB8GA1UdIwQY MBaAFA2MvuUZkPHgWp0dwMLy86ijRwwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFl5LTVSbVE4ZUJhblIzQXd2THpxS05IREJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83NjNkOGUtMjA4MS00Y2Y4LWI2NWIt MWIxZTc4Y2JiYjA5LzEvVG9IaVBockN0cm5qWW9TWkhNZk16dlFLd3cwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi83NjNkOGUtMjA4MS00Y2Y4LWI2NWItMWIxZTc4Y2JiYjA5 LzEvRFl5LTVSbVE4ZUJhblIzQXd2THpxS05IREJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBXCsyMAwD BAS5YbADBAC5YbIwDQYJKoZIhvcNAQELBQADggEBAHe+p2atceg/WMZ/5bXttaCX EK3q+DrmBpdj4Yn2a8hLBx2pIxNlwa7dFQD2GHUQFvChZqObfRzOS2vUBP+PRBpv yS/58uvIUyhM1GL9wEYHp0eBacUsNmnNbXv+e17EzCfZ9dcNuDW96sD5Qq6su7Zn idTdD6Zya9LtVe0u3rzwMf4XW6nVVUoXlaKkKl1PyLf1Kwv7whtlQ7zZwAF9m0lB y+Mnvo6xJ5kOpYqU45SczjS9VTz2ir5DaJudPiZsJBond9gQHMtt2AT1LmClk+q1 MZ2uiJsbaFo2tyduiDTk37d8fTp0spKN4ENNfjOj9JwR5+6rzExNlQseK3Uy4WY= -----END CERTIFICATE-----Generated at Mon Jan 19 17:47:28 2026 by rpki-client