This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/TUYlFT-dUBjSF5MwO5c5SHo_-PA.roa File: TUYlFT-dUBjSF5MwO5c5SHo_-PA.roa (raw, json) Hash identifier: yDE5fT46PoSW/d5/n8et57tOUUfO/M0RS358RxhsJ3U= Subject key identifier: 4D:46:25:15:3F:9D:50:18:D2:17:93:30:3B:97:39:48:7A:3F:F8:F0 Certificate issuer: /CN=351f1c75a1dc864dfbf98743c506ee186924f643 Certificate serial: 019B7F857959504BFB3349FAE2D062EECA24 Authority key identifier: 35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/TUYlFT-dUBjSF5MwO5c5SHo_-PA.roa Signing time: Fri 02 Jan 2026 16:23:32 +0000 ROA not before: Fri 02 Jan 2026 16:23:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207065 IP address blocks: 185.242.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:79:59:50:4b:fb:33:49:fa:e2:d0:62:ee:ca:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351f1c75a1dc864dfbf98743c506ee186924f643 Validity Not Before: Jan 2 16:23:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d4625153f9d5018d21793303b9739487a3ff8f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:67:17:3d:ba:22:0b:1a:2f:b7:b8:c4:78:c6: 52:a5:dd:1f:28:78:3f:3a:13:70:30:98:a1:a3:cc: 97:65:5e:2c:ac:1a:f6:d8:7d:f5:62:fa:5c:33:07: e7:e7:3e:8e:5e:20:81:da:99:d0:8b:70:9a:89:2d: 27:8e:f9:ce:46:aa:ca:6b:4d:a9:f6:a5:58:8a:d1: 6e:69:fd:d5:33:b9:ba:87:24:78:72:50:0c:81:b2: e6:a3:ef:cd:39:e2:ee:b0:5a:f7:82:12:46:4c:1e: c3:d5:c2:29:ca:6b:ed:8a:74:01:ae:d0:67:13:63: d8:75:0c:86:3d:b2:f8:7e:4f:9e:31:f4:2d:f4:67: 61:0e:6c:52:5c:31:76:07:30:df:aa:09:2c:63:a7: b9:44:dc:f7:0c:68:b1:8c:16:2c:47:17:b3:92:78: 08:b3:83:24:b8:40:de:e7:97:6d:bc:cd:fc:6c:1b: b8:a4:23:f6:ad:73:39:5e:ff:30:26:ee:81:7f:cb: b6:74:55:2e:71:cd:89:c0:37:dd:03:f7:a4:65:9e: 67:d3:4f:ac:1a:85:ce:0b:0c:db:d6:7e:6a:6a:31: 70:9b:e5:3a:00:ff:a2:9c:d7:62:39:6c:bd:ad:36: 82:91:b3:bd:a0:b1:09:79:48:4c:5d:db:45:89:b1: 01:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:46:25:15:3F:9D:50:18:D2:17:93:30:3B:97:39:48:7A:3F:F8:F0 X509v3 Authority Key Identifier: keyid:35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/TUYlFT-dUBjSF5MwO5c5SHo_-PA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.242.148.0/24 Signature Algorithm: sha256WithRSAEncryption 17:4f:50:f4:61:08:01:81:a3:12:6f:e4:69:43:87:d7:3f:7c: 0d:67:72:a2:6f:c5:45:d2:29:e0:8c:fc:87:2a:0c:36:34:da: 8b:93:f9:32:43:74:75:81:53:21:0d:1d:8d:3a:bc:cf:eb:d4: 33:1c:f7:e8:31:91:57:93:70:98:1a:a2:16:60:ca:7e:d4:b0: 31:9e:2e:45:0c:78:78:2c:2c:a3:08:20:eb:a3:9b:2f:96:7e: 1f:8c:04:da:23:c5:e7:3b:5f:e1:a4:10:c1:d9:17:9d:74:31: 94:49:79:4b:d4:30:35:8f:3d:f4:bb:56:2b:02:7e:4f:ae:6e: b8:11:df:e7:d3:7c:a0:e0:70:db:33:da:0e:a3:41:ae:ad:f4: 65:68:f1:ba:a0:4d:ab:8b:f1:8e:23:a4:1c:9d:dc:ef:c8:13: 34:ca:81:b1:17:9a:c4:00:36:9a:7e:cc:f9:ca:09:2c:fe:69: b1:53:27:aa:e5:c2:8d:46:ca:bc:ae:39:c0:91:2b:85:63:02: 5a:8f:27:d5:97:84:8a:92:4e:8b:2b:df:eb:6f:41:64:d3:62: 88:76:05:f4:ef:cd:64:38:ef:fa:0d:35:e9:3c:39:34:b1:10: 17:89:5a:e0:67:1e:27:bf:61:7f:f8:4b:af:3e:b4:e2:28:30: 71:cf:1a:9e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hXlZUEv7M0n64tBi7sokMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWYxYzc1YTFkYzg2NGRmYmY5ODc0M2M1MDZlZTE4Njky NGY2NDMwHhcNMjYwMTAyMTYyMzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDQ2MjUxNTNmOWQ1MDE4ZDIxNzkzMzAzYjk3Mzk0ODdhM2ZmOGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2cXPboiCxovt7jEeMZSpd0fKHg/ OhNwMJiho8yXZV4srBr22H31YvpcMwfn5z6OXiCB2pnQi3CaiS0njvnORqrKa02p 9qVYitFuaf3VM7m6hyR4clAMgbLmo+/NOeLusFr3ghJGTB7D1cIpymvtinQBrtBn E2PYdQyGPbL4fk+eMfQt9GdhDmxSXDF2BzDfqgksY6e5RNz3DGixjBYsRxezkngI s4MkuEDe55dtvM38bBu4pCP2rXM5Xv8wJu6Bf8u2dFUucc2JwDfdA/ekZZ5n00+s GoXOCwzb1n5qajFwm+U6AP+inNdiOWy9rTaCkbO9oLEJeUhMXdtFibEBtwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE1GJRU/nVAY0heTMDuXOUh6P/jwMB8GA1UdIwQY MBaAFDUfHHWh3IZN+/mHQ8UG7hhpJPZDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlI4Y2RhSGNoazM3LVlkRHhRYnVHR2trOWtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8yOWE2Y2QtM2FjNi00NzQ5LThjZmUt ZGNlYWEyYWUwYTc0LzEvVFVZbEZULWRVQmpTRjVNd081YzVTSG9fLVBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS8yOWE2Y2QtM2FjNi00NzQ5LThjZmUtZGNlYWEyYWUwYTc0 LzEvTlI4Y2RhSGNoazM3LVlkRHhRYnVHR2trOWtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufKUMA0G CSqGSIb3DQEBCwUAA4IBAQAXT1D0YQgBgaMSb+RpQ4fXP3wNZ3Kib8VF0ingjPyH Kgw2NNqLk/kyQ3R1gVMhDR2NOrzP69QzHPfoMZFXk3CYGqIWYMp+1LAxni5FDHh4 LCyjCCDro5svln4fjATaI8XnO1/hpBDB2ReddDGUSXlL1DA1jz30u1YrAn5Prm64 Ed/n03yg4HDbM9oOo0GurfRlaPG6oE2ri/GOI6QcndzvyBM0yoGxF5rEADaafsz5 ygks/mmxUyeq5cKNRsq8rjnAkSuFYwJajyfVl4SKkk6LK9/rb0Fk02KIdgX0781k OO/6DTXpPDk0sRAXiVrgZx4nv2F/+EuvPrTiKDBxzxqe -----END CERTIFICATE-----Generated at Mon Feb 9 18:37:53 2026 by rpki-client