This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/tYudPSYbftTU4j3hgTGLKXhO4P4.roa File: tYudPSYbftTU4j3hgTGLKXhO4P4.roa (raw, json) Hash identifier: Wb5twGJdbpT/Rb1UlbeVOOTStMG3K3OQ+0w1qq8xOmA= Subject key identifier: B5:8B:9D:3D:26:1B:7E:D4:D4:E2:3D:E1:81:31:8B:29:78:4E:E0:FE Certificate issuer: /CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018 Certificate serial: 019B77C6F4593D653F286D944647511CD871 Authority key identifier: 4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/tYudPSYbftTU4j3hgTGLKXhO4P4.roa Signing time: Thu 01 Jan 2026 04:18:05 +0000 ROA not before: Thu 01 Jan 2026 04:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9123 IP address blocks: 85.234.101.0/24 maxlen: 24 85.234.110.0/24 maxlen: 24 185.154.192.0/24 maxlen: 24 185.154.193.0/24 maxlen: 24 185.154.194.0/24 maxlen: 24 185.154.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.crl rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 01:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:f4:59:3d:65:3f:28:6d:94:46:47:51:1c:d8:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018 Validity Not Before: Jan 1 04:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b58b9d3d261b7ed4d4e23de181318b29784ee0fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ae:f2:3e:fb:b1:e2:e4:cb:2d:51:bc:6f:28: ba:32:ee:ac:27:93:a6:8d:a3:b3:c9:5c:2f:7f:c7: cb:10:75:05:7c:d3:e5:8c:fe:f8:cf:63:9b:d9:06: 0d:60:b3:3e:51:ef:b9:75:c9:4b:d0:93:3f:07:36: 4b:ec:43:66:ba:ae:a1:94:c8:e8:f5:4b:aa:f6:17: 73:7b:4c:4e:65:14:ec:dc:58:9c:27:ac:e3:f2:e1: a8:5e:23:77:24:b8:4a:31:62:a3:cd:60:6e:e1:33: 44:3c:55:d0:50:48:bf:20:79:37:f6:ee:82:f4:ae: 43:e6:8c:33:ab:3c:49:4b:1d:dc:29:71:54:b6:e0: a9:c2:f1:dd:5d:89:66:d9:3a:4f:27:0b:2b:75:75: 11:9a:7f:d8:32:92:15:49:6a:7e:12:0a:39:f6:96: 1b:0c:9c:2d:b6:61:8f:0a:7f:be:0c:c8:56:24:5d: e0:74:57:65:24:c5:e2:e8:7a:81:a4:d2:86:77:f4: a6:ab:0c:cd:0a:a5:21:cc:b4:7e:31:12:0e:53:f4: 26:a3:d2:a9:ce:0f:40:f7:b1:31:32:c0:eb:a2:ca: 72:3f:d7:aa:4d:c4:82:35:23:cf:6a:a4:4a:b2:76: 45:27:6a:cf:96:51:f8:1e:36:74:85:d4:e4:21:e9: 63:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:8B:9D:3D:26:1B:7E:D4:D4:E2:3D:E1:81:31:8B:29:78:4E:E0:FE X509v3 Authority Key Identifier: keyid:4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/tYudPSYbftTU4j3hgTGLKXhO4P4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.234.101.0/24 85.234.110.0/24 185.154.192.0/22 Signature Algorithm: sha256WithRSAEncryption 52:f7:c7:a7:c4:42:33:c5:f7:14:6d:4e:53:83:8e:0c:8f:2c: d4:ee:a9:c1:06:65:75:b0:57:05:73:d3:21:c2:d9:a6:d6:e3: 3c:96:ec:2c:2e:b8:a1:ac:26:45:bb:85:89:5c:7e:96:b3:0f: 37:62:82:4c:1f:3b:c5:fc:c2:28:4d:9f:ad:2b:53:7a:d5:9c: c5:1b:5d:76:79:21:2b:d9:b1:8a:8b:94:ae:aa:db:81:66:1c: cb:2b:09:d6:ad:fe:69:39:67:3f:f1:03:5c:62:83:72:a8:05: 95:b6:ce:e5:12:cf:47:b3:e5:66:0e:16:1e:1c:4d:85:b0:c9: 13:74:1c:08:d4:38:2e:2b:d5:be:ba:ac:2c:5a:a1:2a:46:c1: b1:97:e1:27:d7:1b:78:98:91:b8:17:f6:40:55:8c:9a:c8:7c: ed:2b:11:46:a2:54:06:fa:ec:27:1d:0c:80:3b:bf:4a:77:c0: 2c:98:f2:79:88:05:20:29:ed:3b:4f:7c:8f:3d:d2:11:c3:65: 9b:b3:68:a1:b7:45:7f:9d:92:09:73:10:2c:ba:f0:34:28:38: fc:0f:c2:f1:9a:c0:27:3c:7a:1b:e4:11:fa:a8:e4:8b:7b:b4: c4:f5:28:a7:47:cb:9a:a7:d0:d8:ba:16:e3:93:8c:86:a3:d8: c2:27:2f:a6 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3xvRZPWU/KG2URkdRHNhxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMmI4OWMzYzU3YTNlMjk2YWE0MDYxZTk2Mjg0MGJlN2Fl OGYwMTgwHhcNMjYwMTAxMDQxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNThiOWQzZDI2MWI3ZWQ0ZDRlMjNkZTE4MTMxOGIyOTc4NGVlMGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1K7yPvux4uTLLVG8byi6Mu6sJ5Om jaOzyVwvf8fLEHUFfNPljP74z2Ob2QYNYLM+Ue+5dclL0JM/BzZL7ENmuq6hlMjo 9Uuq9hdze0xOZRTs3FicJ6zj8uGoXiN3JLhKMWKjzWBu4TNEPFXQUEi/IHk39u6C 9K5D5owzqzxJSx3cKXFUtuCpwvHdXYlm2TpPJwsrdXURmn/YMpIVSWp+Ego59pYb DJwttmGPCn++DMhWJF3gdFdlJMXi6HqBpNKGd/SmqwzNCqUhzLR+MRIOU/Qmo9Kp zg9A97ExMsDrospyP9eqTcSCNSPPaqRKsnZFJ2rPllH4HjZ0hdTkIeljbQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLWLnT0mG37U1OI94YExiyl4TuD+MB8GA1UdIwQY MBaAFEwricPFej4paqQGHpYoQL566PAYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEN1Snc4VjZQaWxxcEFZZWxpaEF2bnJvOEJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni83MjE1NWEtZDEwOS00YzJkLWI5NzQt MTEyOGU1Y2U2YTViLzEvdFl1ZFBTWWJmdFRVNGozaGdUR0xLWGhPNFA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni83MjE1NWEtZDEwOS00YzJkLWI5NzQtMTEyOGU1Y2U2YTVi LzEvVEN1Snc4VjZQaWxxcEFZZWxpaEF2bnJvOEJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVeplAwQA VepuAwQCuZrAMA0GCSqGSIb3DQEBCwUAA4IBAQBS98enxEIzxfcUbU5Tg44MjyzU 7qnBBmV1sFcFc9Mhwtmm1uM8luwsLrihrCZFu4WJXH6Wsw83YoJMHzvF/MIoTZ+t K1N61ZzFG112eSEr2bGKi5SuqtuBZhzLKwnWrf5pOWc/8QNcYoNyqAWVts7lEs9H s+VmDhYeHE2FsMkTdBwI1DguK9W+uqwsWqEqRsGxl+En1xt4mJG4F/ZAVYyayHzt KxFGolQG+uwnHQyAO79Kd8AsmPJ5iAUgKe07T3yPPdIRw2Wbs2iht0V/nZIJcxAs uvA0KDj8D8LxmsAnPHob5BH6qOSLe7TE9SinR8uap9DYuhbjk4yGo9jCJy+m -----END CERTIFICATE-----Generated at Wed Jan 21 11:14:00 2026 by rpki-client