This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/tioYizxyP66tEefM4AhsVF9KChI.roa File: tioYizxyP66tEefM4AhsVF9KChI.roa (raw, json) Hash identifier: +gtRE9w9eh+fWd+J81NJaCnjA6lGZEARhkWEH5vl8og= Subject key identifier: B6:2A:18:8B:3C:72:3F:AE:AD:11:E7:CC:E0:08:6C:54:5F:4A:0A:12 Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4 Certificate serial: 019B77C6B9308919AE543E806B0CED3DDF27 Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/tioYizxyP66tEefM4AhsVF9KChI.roa Signing time: Thu 01 Jan 2026 04:17:50 +0000 ROA not before: Thu 01 Jan 2026 04:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213780 IP address blocks: 95.182.102.0/24 maxlen: 24 95.182.103.0/24 maxlen: 24 109.248.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:b9:30:89:19:ae:54:3e:80:6b:0c:ed:3d:df:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4 Validity Not Before: Jan 1 04:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b62a188b3c723faead11e7cce0086c545f4a0a12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cd:14:bb:46:b7:90:9f:01:e0:17:ca:87:6b: 3e:b7:d9:9c:b0:cd:72:3a:ca:6e:33:5e:ad:60:1c: b2:4e:64:c1:4a:bc:08:10:47:98:96:c7:98:bf:b0: 80:e6:aa:e5:62:f5:6f:f8:a5:25:a6:23:e3:e0:89: 49:4b:8d:41:7c:1d:b4:6b:36:3f:fa:3a:f7:8a:81: be:90:4f:ba:04:08:9d:d7:e3:38:eb:89:9b:1c:2f: 3b:20:a2:7e:51:c9:45:1f:b4:6f:8f:ac:d0:df:49: 86:77:b4:93:d1:3f:e6:42:c8:72:03:f6:1a:4c:27: c3:a0:f2:3e:23:55:54:12:f0:35:ba:13:d8:c9:7d: f4:3f:b5:4b:86:22:bd:2b:a3:17:08:ce:db:f1:ef: cb:31:b1:c6:04:52:d2:ea:c5:11:11:25:ad:4e:b6: 96:f9:ca:17:18:6f:99:dd:63:74:18:f4:65:e8:67: 47:8d:8c:5c:3a:4e:73:3f:77:d9:53:39:6e:34:4e: 10:72:bc:73:ed:26:4a:7c:7f:79:ca:8c:dd:7e:07: 1b:7a:9b:04:77:9e:e4:14:3f:d2:20:72:0b:2f:a3: b6:e7:a5:da:c1:1b:a2:a5:dd:6b:5f:f0:c4:f0:67: 20:b0:85:3a:08:2c:d7:93:63:41:86:8d:80:42:c2: 0e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:2A:18:8B:3C:72:3F:AE:AD:11:E7:CC:E0:08:6C:54:5F:4A:0A:12 X509v3 Authority Key Identifier: keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/tioYizxyP66tEefM4AhsVF9KChI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.182.102.0/23 109.248.4.0/24 Signature Algorithm: sha256WithRSAEncryption 95:4f:01:e9:a1:c9:fd:34:99:a1:49:e1:1e:75:f4:83:4b:c3: 8f:47:89:e0:35:57:0a:10:03:2c:b0:4a:4e:db:53:c1:08:f0: 03:8a:d9:55:59:d0:85:1b:0b:95:8c:91:b4:fa:50:88:90:f2: 12:bc:0d:ac:31:b7:71:52:6b:49:d3:07:08:99:f4:57:c2:35: 06:44:f4:6c:fd:70:e3:33:c6:26:a3:bc:eb:3c:0d:c7:26:c5: 41:ea:9d:dd:0a:06:d7:12:d6:c4:44:f1:66:e3:2d:d1:c2:cf: ae:eb:e4:9d:0c:79:fe:5a:d2:95:4b:88:54:2f:3d:e6:9c:8f: 29:6f:ab:d8:06:0e:33:07:c3:24:55:b7:d8:5a:e4:18:98:4f: a1:85:5e:af:ec:14:06:c1:89:df:61:a0:5b:61:a2:2c:87:c7: 44:21:ab:f2:25:58:1d:f9:16:91:39:c0:b5:e7:0c:7e:e8:c8: a3:d3:a8:9f:e8:41:6d:21:8c:e6:ff:cf:fa:67:4b:8f:0b:0c: 49:7f:18:72:ff:d9:20:e9:3a:da:d5:5d:17:c8:08:a6:b2:d9: 49:20:10:1a:da:8b:32:1a:e3:12:6c:60:65:cd:61:3a:b9:0e: 03:c4:91:20:07:34:7b:f4:50:7a:6c:a2:77:84:eb:46:71:c1: ed:f3:dd:b3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xrkwiRmuVD6AawztPd8nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0 MjAzYjQwHhcNMjYwMTAxMDQxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjJhMTg4YjNjNzIzZmFlYWQxMWU3Y2NlMDA4NmM1NDVmNGEwYTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAys0Uu0a3kJ8B4BfKh2s+t9mcsM1y OspuM16tYByyTmTBSrwIEEeYlseYv7CA5qrlYvVv+KUlpiPj4IlJS41BfB20azY/ +jr3ioG+kE+6BAid1+M464mbHC87IKJ+UclFH7Rvj6zQ30mGd7ST0T/mQshyA/Ya TCfDoPI+I1VUEvA1uhPYyX30P7VLhiK9K6MXCM7b8e/LMbHGBFLS6sURESWtTraW +coXGG+Z3WN0GPRl6GdHjYxcOk5zP3fZUzluNE4Qcrxz7SZKfH95yozdfgcbepsE d57kFD/SIHILL6O256XawRuipd1rX/DE8GcgsIU6CCzXk2NBho2AQsIOxQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLYqGIs8cj+urRHnzOAIbFRfSgoSMB8GA1UdIwQY MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt MTY2OTljOTZkZDVlLzEvdGlvWWl6eHlQNjZ0RWVmTTRBaHNWRjlLQ2hJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBX7ZmAwQA bfgEMA0GCSqGSIb3DQEBCwUAA4IBAQCVTwHpocn9NJmhSeEedfSDS8OPR4ngNVcK EAMssEpO21PBCPADitlVWdCFGwuVjJG0+lCIkPISvA2sMbdxUmtJ0wcImfRXwjUG RPRs/XDjM8Ymo7zrPA3HJsVB6p3dCgbXEtbERPFm4y3Rws+u6+SdDHn+WtKVS4hU Lz3mnI8pb6vYBg4zB8MkVbfYWuQYmE+hhV6v7BQGwYnfYaBbYaIsh8dEIavyJVgd +RaROcC15wx+6Mij06if6EFtIYzm/8/6Z0uPCwxJfxhy/9kg6Tra1V0XyAimstlJ IBAa2osyGuMSbGBlzWE6uQ4DxJEgBzR79FB6bKJ3hOtGccHt892z -----END CERTIFICATE-----Generated at Sun Jan 25 22:41:40 2026 by rpki-client