This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/tOuyhld-AUyG32ylyMah8UxZ7mE.roa File: tOuyhld-AUyG32ylyMah8UxZ7mE.roa (raw, json) Hash identifier: YUhhR6mZGZf9IfQta0epFj+lmVDPTWRRkPjuKNf8QT8= Subject key identifier: B4:EB:B2:86:57:7E:01:4C:86:DF:6C:A5:C8:C6:A1:F1:4C:59:EE:61 Certificate issuer: /CN=2e2f6dd9799fa4ea084fd549d710c6896dfae291 Certificate serial: 019B7C7F84A86DCE4FE19B27B365B582DC95 Authority key identifier: 2E:2F:6D:D9:79:9F:A4:EA:08:4F:D5:49:D7:10:C6:89:6D:FA:E2:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/tOuyhld-AUyG32ylyMah8UxZ7mE.roa Signing time: Fri 02 Jan 2026 02:18:10 +0000 ROA not before: Fri 02 Jan 2026 02:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58212 IP address blocks: 91.238.123.0/24 maxlen: 24 193.46.81.0/24 maxlen: 24 194.9.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:84:a8:6d:ce:4f:e1:9b:27:b3:65:b5:82:dc:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e2f6dd9799fa4ea084fd549d710c6896dfae291 Validity Not Before: Jan 2 02:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4ebb286577e014c86df6ca5c8c6a1f14c59ee61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6e:54:4d:f4:8e:3f:b2:90:bb:82:e7:3c:eb: 5a:70:e0:d7:f0:2e:9c:55:ee:e4:54:bd:af:61:5a: cf:6c:3f:8b:c0:0f:d8:83:83:03:bf:dc:66:fd:d6: 71:5f:6b:73:bd:37:b1:09:19:ab:1d:46:14:d8:ca: 37:3c:6e:6e:8a:f3:3a:bf:5e:54:48:50:3c:02:32: a3:6b:c3:6a:67:fb:f1:21:96:80:ec:7b:2d:f6:b1: 79:be:3c:6c:34:90:37:66:96:c4:6d:a0:00:29:72: 66:e9:e4:71:68:9e:4f:aa:99:2e:bf:2a:b8:2f:29: f1:a3:26:7e:58:cc:a5:c4:e7:1c:ba:e8:68:87:e2: 6f:d3:2f:38:9e:7a:08:d6:bd:dd:3e:fd:e2:c5:82: 26:47:79:81:91:15:bc:ab:ba:50:51:d9:32:34:3b: 50:72:93:5f:d8:6d:b4:b8:de:94:b1:62:81:db:08: 99:47:31:4f:72:53:72:18:bd:c6:a2:7b:87:bd:c8: ca:06:31:60:cb:e3:8c:98:10:6f:0c:f5:97:88:88: ec:54:d5:dd:d2:3e:16:be:9b:a1:39:8c:b9:c6:fe: ec:f2:aa:04:ee:c8:bd:e5:3a:64:71:1b:ac:57:fa: f6:d4:7e:1d:2b:80:9c:3b:d1:83:ab:96:b7:ce:04: bb:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:EB:B2:86:57:7E:01:4C:86:DF:6C:A5:C8:C6:A1:F1:4C:59:EE:61 X509v3 Authority Key Identifier: keyid:2E:2F:6D:D9:79:9F:A4:EA:08:4F:D5:49:D7:10:C6:89:6D:FA:E2:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/tOuyhld-AUyG32ylyMah8UxZ7mE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.238.123.0/24 193.46.81.0/24 194.9.6.0/24 Signature Algorithm: sha256WithRSAEncryption 61:f8:b7:58:93:bd:11:fe:a0:9d:32:a6:42:81:f4:68:cf:2f: a8:e6:d2:5c:52:cc:df:03:6b:42:c9:bc:4b:b6:19:c4:5d:b9: a0:46:6c:67:18:0f:01:e5:eb:71:ea:78:ce:d7:f9:1c:c8:eb: e9:aa:7a:7e:4e:2c:53:b4:eb:cf:ef:16:57:63:34:4d:9f:cc: 4c:7e:5a:c2:cc:6f:2f:28:64:f3:77:75:67:1e:7e:c0:c7:01: 0f:2f:de:6e:fb:47:d6:cb:2a:96:aa:53:32:9f:8f:24:90:cd: bd:42:53:65:31:29:b8:eb:fa:77:8d:64:c8:1d:67:fd:36:a7: 8c:a2:33:d9:d3:ee:f5:e9:6c:97:52:4c:59:fa:b5:c4:c5:8e: c2:44:9b:37:25:1d:3e:56:d9:cb:ca:78:71:66:ea:84:5f:83: 47:7e:95:bd:99:5c:9b:50:ce:bc:86:9e:05:c7:92:b7:b7:65: f6:7a:b5:84:26:c2:ca:40:f6:9b:4a:29:b1:85:c5:4e:30:08: 2c:af:30:f7:16:ae:de:6b:e8:41:12:d9:2a:99:e0:0d:f8:e6: b6:a9:92:8a:85:d2:4f:d2:96:2f:a3:12:e4:4e:ee:94:47:00: 67:65:0a:8f:52:12:e0:70:bb:36:fd:55:d9:b1:8e:6d:04:c9: de:c0:22:2f -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8f4Sobc5P4Zsns2W1gtyVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMmY2ZGQ5Nzk5ZmE0ZWEwODRmZDU0OWQ3MTBjNjg5NmRm YWUyOTEwHhcNMjYwMTAyMDIxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGViYjI4NjU3N2UwMTRjODZkZjZjYTVjOGM2YTFmMTRjNTllZTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsW5UTfSOP7KQu4LnPOtacODX8C6c Ve7kVL2vYVrPbD+LwA/Yg4MDv9xm/dZxX2tzvTexCRmrHUYU2Mo3PG5uivM6v15U SFA8AjKja8NqZ/vxIZaA7Hst9rF5vjxsNJA3ZpbEbaAAKXJm6eRxaJ5Pqpkuvyq4 LynxoyZ+WMylxOccuuhoh+Jv0y84nnoI1r3dPv3ixYImR3mBkRW8q7pQUdkyNDtQ cpNf2G20uN6UsWKB2wiZRzFPclNyGL3GonuHvcjKBjFgy+OMmBBvDPWXiIjsVNXd 0j4WvpuhOYy5xv7s8qoE7si95TpkcRusV/r21H4dK4CcO9GDq5a3zgS7YQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLTrsoZXfgFMht9spcjGofFMWe5hMB8GA1UdIwQY MBaAFC4vbdl5n6TqCE/VSdcQxolt+uKRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGk5dDJYbWZwT29JVDlWSjF4REdpVzM2NHBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8xYTRjYzAtZGE5Mi00NTk2LWIxMjMt NTYxY2VkNWJiZjkyLzEvdE91eWhsZC1BVXlHMzJ5bHlNYWg4VXhaN21FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy8xYTRjYzAtZGE5Mi00NTk2LWIxMjMtNTYxY2VkNWJiZjky LzEvTGk5dDJYbWZwT29JVDlWSjF4REdpVzM2NHBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW+57AwQA wS5RAwQAwgkGMA0GCSqGSIb3DQEBCwUAA4IBAQBh+LdYk70R/qCdMqZCgfRozy+o 5tJcUszfA2tCybxLthnEXbmgRmxnGA8B5etx6njO1/kcyOvpqnp+TixTtOvP7xZX YzRNn8xMflrCzG8vKGTzd3VnHn7AxwEPL95u+0fWyyqWqlMyn48kkM29QlNlMSm4 6/p3jWTIHWf9NqeMojPZ0+716WyXUkxZ+rXExY7CRJs3JR0+VtnLynhxZuqEX4NH fpW9mVybUM68hp4Fx5K3t2X2erWEJsLKQPabSimxhcVOMAgsrzD3Fq7ea+hBEtkq meAN+Oa2qZKKhdJP0pYvoxLkTu6URwBnZQqPUhLgcLs2/VXZsY5tBMnewCIv -----END CERTIFICATE-----Generated at Mon Jan 19 17:33:05 2026 by rpki-client