This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Ty-vXaG6A3aRML6C9RA9hx4ggYQ.roa File: Ty-vXaG6A3aRML6C9RA9hx4ggYQ.roa (raw, json) Hash identifier: AVB1yUY6IGbBM4/KzBDA4yDdvZRxNXIzxwqs/lb/NCk= Subject key identifier: 4F:2F:AF:5D:A1:BA:03:76:91:30:BE:82:F5:10:3D:87:1E:20:81:84 Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7 Certificate serial: 019B7CEDDEB1DEEE40F0C2E554EC6778AD36 Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Ty-vXaG6A3aRML6C9RA9hx4ggYQ.roa Signing time: Fri 02 Jan 2026 04:18:42 +0000 ROA not before: Fri 02 Jan 2026 04:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50670 IP address blocks: 81.21.8.0/22 maxlen: 22 81.21.8.0/24 maxlen: 24 81.21.9.0/24 maxlen: 24 81.21.10.0/24 maxlen: 24 81.21.11.0/24 maxlen: 24 81.21.12.0/24 maxlen: 24 81.21.13.0/24 maxlen: 24 81.21.14.0/24 maxlen: 24 81.21.15.0/24 maxlen: 24 109.237.192.0/20 maxlen: 24 109.237.192.0/24 maxlen: 24 109.237.193.0/24 maxlen: 24 109.237.194.0/24 maxlen: 24 109.237.195.0/24 maxlen: 24 109.237.196.0/24 maxlen: 24 109.237.197.0/24 maxlen: 24 109.237.198.0/24 maxlen: 24 109.237.199.0/24 maxlen: 24 109.237.200.0/24 maxlen: 24 109.237.201.0/24 maxlen: 24 109.237.202.0/24 maxlen: 24 109.237.203.0/24 maxlen: 24 109.237.204.0/24 maxlen: 24 109.237.205.0/24 maxlen: 24 109.237.206.0/24 maxlen: 24 109.237.207.0/24 maxlen: 24 176.241.64.0/21 maxlen: 24 176.241.64.0/24 maxlen: 24 176.241.65.0/24 maxlen: 24 176.241.66.0/24 maxlen: 24 176.241.67.0/24 maxlen: 24 176.241.68.0/24 maxlen: 24 176.241.69.0/24 maxlen: 24 176.241.70.0/24 maxlen: 24 176.241.71.0/24 maxlen: 24 178.20.184.0/21 maxlen: 24 178.20.184.0/24 maxlen: 24 178.20.185.0/24 maxlen: 24 178.20.186.0/24 maxlen: 24 178.20.187.0/24 maxlen: 24 178.20.188.0/24 maxlen: 24 178.20.189.0/24 maxlen: 24 178.20.190.0/24 maxlen: 24 178.20.191.0/24 maxlen: 24 185.51.212.0/22 maxlen: 22 185.51.212.0/24 maxlen: 24 185.51.213.0/24 maxlen: 24 185.51.214.0/24 maxlen: 24 185.51.215.0/24 maxlen: 24 185.193.176.0/22 maxlen: 22 185.193.176.0/24 maxlen: 24 185.193.177.0/24 maxlen: 24 185.193.178.0/24 maxlen: 24 185.193.179.0/24 maxlen: 24 2a01:1d0::/29 maxlen: 29 2a01:1d0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:de:b1:de:ee:40:f0:c2:e5:54:ec:67:78:ad:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7 Validity Not Before: Jan 2 04:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f2faf5da1ba03769130be82f5103d871e208184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:35:26:90:8f:8d:d3:21:19:02:72:61:fd:5b: 32:8a:2c:be:8d:f5:b8:04:a5:3b:bf:a5:eb:32:ec: bf:0a:f8:d6:7d:57:71:1b:f0:cd:35:67:d5:c1:05: ed:54:21:41:4e:ef:40:6a:39:ff:68:ee:60:95:7c: ce:0b:d5:b7:b4:54:43:2e:ec:99:97:be:7b:94:e1: 4c:a5:4c:cb:f1:c4:c7:f7:c5:15:31:f9:35:89:08: ec:9d:58:0c:40:6b:8d:d4:dc:f1:ab:9c:95:26:9a: 33:dd:f1:2f:69:c2:fd:26:e2:6a:d5:1c:18:90:c5: bf:ee:77:58:3d:9e:6a:ec:c6:a6:b6:63:3d:db:0e: 5d:49:11:88:a2:7f:da:28:20:dd:07:a6:77:be:fa: f8:74:7f:af:46:31:29:3e:30:fc:a0:60:85:be:98: 42:19:d3:89:df:2d:70:9d:17:e5:9a:da:d2:4a:18: 82:46:9d:6f:e6:b1:ca:d0:5e:e6:2a:63:04:fb:f0: ca:09:6c:5c:0c:cb:25:21:99:5f:7b:92:23:47:e6: 3c:62:f6:83:c2:bf:7a:8f:b8:45:7c:25:9a:ad:af: d0:7e:2a:fb:8d:1e:b5:dd:15:7c:41:11:c1:c0:48: ff:07:ea:5e:c5:3d:86:ed:4f:6b:72:0c:38:cd:1d: d9:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:2F:AF:5D:A1:BA:03:76:91:30:BE:82:F5:10:3D:87:1E:20:81:84 X509v3 Authority Key Identifier: keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Ty-vXaG6A3aRML6C9RA9hx4ggYQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.21.8.0/21 109.237.192.0/20 176.241.64.0/21 178.20.184.0/21 185.51.212.0/22 185.193.176.0/22 IPv6: 2a01:1d0::/29 Signature Algorithm: sha256WithRSAEncryption 99:d7:d1:0b:19:34:06:53:7c:15:5f:8c:b1:5b:7c:9f:22:51: 97:91:3c:f9:c6:89:38:fd:6d:52:a9:ec:0a:31:bc:32:84:e6: be:28:a6:2e:3a:68:ee:31:d8:1a:b8:68:aa:25:e9:19:d7:f4: 11:72:91:f3:21:d3:76:18:47:2e:84:4f:92:48:4a:b3:c5:16: b4:f9:7d:3b:6f:85:e7:d6:36:e1:71:02:0a:27:7f:fd:f0:ef: 44:88:53:24:04:92:3e:ed:fb:10:36:08:f8:f3:ff:42:8a:43: ec:a3:e5:d6:a3:cb:c6:37:47:33:b3:d3:25:90:b0:1a:54:4a: f5:04:ca:f2:ad:e6:cb:d6:54:b3:ab:4c:33:0e:4a:8f:51:0a: 97:a8:23:80:d6:ed:f5:ed:2c:0a:94:f1:b9:89:47:8a:0e:58: 4e:50:52:d1:7a:97:51:21:79:97:59:d1:aa:42:f8:1e:f1:ef: 3f:d6:17:b6:93:26:31:52:d6:ff:e7:92:d8:47:a8:e4:8f:35: bd:a8:c8:33:5a:7d:dc:45:3e:35:d6:5d:b2:5e:f2:fa:43:75: 18:86:cf:a5:05:ba:5d:65:93:fb:69:3f:6b:2b:6f:57:90:a6: bd:10:b7:46:ff:bd:84:01:6a:ff:88:b1:6a:9e:76:28:82:71: fb:f8:50:2f -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt87d6x3u5A8MLlVOxneK02MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl ZTQ2ZDcwHhcNMjYwMTAyMDQxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjJmYWY1ZGExYmEwMzc2OTEzMGJlODJmNTEwM2Q4NzFlMjA4MTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTUmkI+N0yEZAnJh/Vsyiiy+jfW4 BKU7v6XrMuy/CvjWfVdxG/DNNWfVwQXtVCFBTu9Aajn/aO5glXzOC9W3tFRDLuyZ l757lOFMpUzL8cTH98UVMfk1iQjsnVgMQGuN1Nzxq5yVJpoz3fEvacL9JuJq1RwY kMW/7ndYPZ5q7MamtmM92w5dSRGIon/aKCDdB6Z3vvr4dH+vRjEpPjD8oGCFvphC GdOJ3y1wnRflmtrSShiCRp1v5rHK0F7mKmME+/DKCWxcDMslIZlfe5IjR+Y8YvaD wr96j7hFfCWara/Qfir7jR613RV8QRHBwEj/B+pexT2G7U9rcgw4zR3Z6wIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFE8vr12hugN2kTC+gvUQPYceIIGEMB8GA1UdIwQY MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt NTYyNDRmNDMwZGNjLzEvVHktdlhhRzZBM2FSTUw2QzlSQTloeDRnZ1lRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQDURUIAwQE be3AAwQDsPFAAwQDshS4AwQCuTPUAwQCucGwMA0EAgACMAcDBQMqAQHQMA0GCSqG SIb3DQEBCwUAA4IBAQCZ19ELGTQGU3wVX4yxW3yfIlGXkTz5xok4/W1SqewKMbwy hOa+KKYuOmjuMdgauGiqJekZ1/QRcpHzIdN2GEcuhE+SSEqzxRa0+X07b4Xn1jbh cQIKJ3/98O9EiFMkBJI+7fsQNgj48/9CikPso+XWo8vGN0czs9MlkLAaVEr1BMry rebL1lSzq0wzDkqPUQqXqCOA1u317SwKlPG5iUeKDlhOUFLRepdRIXmXWdGqQvge 8e8/1he2kyYxUtb/55LYR6jkjzW9qMgzWn3cRT411l2yXvL6Q3UYhs+lBbpdZZP7 aT9rK29XkKa9ELdG/72EAWr/iLFqnnYognH7+FAv -----END CERTIFICATE-----Generated at Fri Jan 2 17:57:11 2026 by rpki-client