This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/TTYH0FgPVUCi7TDxCLPtISBge9U.roa File: TTYH0FgPVUCi7TDxCLPtISBge9U.roa (raw, json) Hash identifier: TUaK8nKuF4G0Sk8aPLzkm12KcCYMpggVQXj1I8D7TKQ= Subject key identifier: 4D:36:07:D0:58:0F:55:40:A2:ED:30:F1:08:B3:ED:21:20:60:7B:D5 Certificate issuer: /CN=310e2e9fb70668c796adce877b21e09a8a1ad029 Certificate serial: 019B797E39F27C6FE49510B9161A347DBA41 Authority key identifier: 31:0E:2E:9F:B7:06:68:C7:96:AD:CE:87:7B:21:E0:9A:8A:1A:D0:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MQ4un7cGaMeWrc6HeyHgmooa0Ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/TTYH0FgPVUCi7TDxCLPtISBge9U.roa Signing time: Thu 01 Jan 2026 12:17:53 +0000 ROA not before: Thu 01 Jan 2026 12:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197368 IP address blocks: 91.220.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/MQ4un7cGaMeWrc6HeyHgmooa0Ck.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/MQ4un7cGaMeWrc6HeyHgmooa0Ck.mft rsync://rpki.ripe.net/repository/DEFAULT/MQ4un7cGaMeWrc6HeyHgmooa0Ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:39:f2:7c:6f:e4:95:10:b9:16:1a:34:7d:ba:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=310e2e9fb70668c796adce877b21e09a8a1ad029 Validity Not Before: Jan 1 12:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d3607d0580f5540a2ed30f108b3ed2120607bd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f1:a1:f3:b4:46:e7:66:28:6b:12:b0:4f:8b: 63:d4:83:c4:2e:a7:83:62:a8:16:e1:80:e6:2d:1d: e5:ed:9b:43:7b:89:54:09:8d:41:f4:1c:fa:1c:71: 7f:e8:92:6c:2b:28:85:f9:b9:de:b2:73:93:5a:bc: 25:a0:ff:61:ec:c0:30:b7:a0:0d:6c:a4:a3:2c:67: 80:d4:89:dd:30:25:e1:1b:1c:b5:8b:54:80:85:0b: af:da:7e:8b:77:33:f3:2d:05:bd:8c:8f:cf:87:b1: c0:4f:6d:4b:18:7f:29:12:8b:07:63:b4:7a:09:74: ae:7b:dc:9c:36:e9:9c:b7:ff:06:0a:8b:0f:12:b1: c8:d7:da:54:8d:eb:0d:ab:67:54:77:23:0f:46:8a: be:47:77:e3:68:05:67:bd:81:b9:d2:4e:a6:5e:fe: dd:85:8b:ad:0e:ab:a5:ad:97:7c:7e:ef:6a:9c:ef: ce:52:ad:31:31:4b:40:7d:99:0f:6d:b1:49:6d:02: e5:14:a3:9c:30:22:b7:53:5e:63:e6:d9:9a:2e:41: 81:17:f4:1d:fe:40:62:be:55:13:7f:1f:9e:c3:39: 5d:f5:7e:7a:1b:2c:bb:15:55:41:10:22:1c:89:2e: 36:06:34:05:91:d4:dc:86:78:0d:f8:82:b6:19:aa: 00:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:36:07:D0:58:0F:55:40:A2:ED:30:F1:08:B3:ED:21:20:60:7B:D5 X509v3 Authority Key Identifier: keyid:31:0E:2E:9F:B7:06:68:C7:96:AD:CE:87:7B:21:E0:9A:8A:1A:D0:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MQ4un7cGaMeWrc6HeyHgmooa0Ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/TTYH0FgPVUCi7TDxCLPtISBge9U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/MQ4un7cGaMeWrc6HeyHgmooa0Ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.44.0/24 Signature Algorithm: sha256WithRSAEncryption a8:59:a9:a2:fa:72:c1:b4:2c:84:a4:63:a4:fc:2a:07:05:39: 4c:fc:3f:4c:0a:73:58:f7:ca:bc:23:55:63:d1:fe:cb:a3:a4: 8c:f0:3d:6e:81:a6:f2:dc:eb:ed:b9:8d:e5:0f:72:d2:62:ca: 37:f6:de:45:f8:0f:28:d7:6c:67:48:8e:ac:fa:2f:7f:21:d8: e1:cb:a0:00:2c:36:94:e6:f4:8d:cd:dd:8f:a6:10:3c:59:9b: 3a:78:fc:31:ac:88:ac:29:05:07:db:b5:3c:39:98:cb:ae:45: fd:83:14:bf:13:c5:37:93:87:ef:32:70:96:7b:60:81:e2:8c: ab:8a:fa:c6:94:44:1e:f9:24:65:fa:cb:7b:34:57:4f:0d:94: b8:7b:15:18:af:7e:04:2a:3a:b3:13:98:f7:0d:33:9f:61:96: b7:5c:fc:e3:fa:33:b4:56:4f:9d:60:56:64:bf:7d:eb:60:f4: 2d:24:ec:9b:43:94:b4:cd:67:5a:b1:96:ad:69:00:88:9b:57: 9f:a4:bb:db:1a:74:ee:72:f2:70:a4:fd:4e:07:02:46:99:cf: 44:b9:26:ac:54:58:49:ae:2c:6b:d3:b7:93:d3:82:b8:32:83: 50:f0:25:ab:1f:9b:ef:ce:7b:36:a0:74:28:8d:80:f6:4f:ac: be:7b:01:b6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fjnyfG/klRC5Fho0fbpBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxMGUyZTlmYjcwNjY4Yzc5NmFkY2U4NzdiMjFlMDlhOGEx YWQwMjkwHhcNMjYwMTAxMTIxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDM2MDdkMDU4MGY1NTQwYTJlZDMwZjEwOGIzZWQyMTIwNjA3YmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPGh87RG52YoaxKwT4tj1IPELqeD YqgW4YDmLR3l7ZtDe4lUCY1B9Bz6HHF/6JJsKyiF+bnesnOTWrwloP9h7MAwt6AN bKSjLGeA1IndMCXhGxy1i1SAhQuv2n6LdzPzLQW9jI/Ph7HAT21LGH8pEosHY7R6 CXSue9ycNumct/8GCosPErHI19pUjesNq2dUdyMPRoq+R3fjaAVnvYG50k6mXv7d hYutDqulrZd8fu9qnO/OUq0xMUtAfZkPbbFJbQLlFKOcMCK3U15j5tmaLkGBF/Qd /kBivlUTfx+ewzld9X56Gyy7FVVBECIciS42BjQFkdTchngN+IK2GaoA7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE02B9BYD1VAou0w8Qiz7SEgYHvVMB8GA1UdIwQY MBaAFDEOLp+3BmjHlq3Oh3sh4JqKGtApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVE0dW43Y0dhTWVXcmM2SGV5SGdtb29hMENrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9kOWQ4MmQtMWNhNC00ODI0LWE5MmMt Y2E1NWVmYzc3NTJkLzEvVFRZSDBGZ1BWVUNpN1REeENMUHRJU0JnZTlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9kOWQ4MmQtMWNhNC00ODI0LWE5MmMtY2E1NWVmYzc3NTJk LzEvTVE0dW43Y0dhTWVXcmM2SGV5SGdtb29hMENrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9wsMA0G CSqGSIb3DQEBCwUAA4IBAQCoWami+nLBtCyEpGOk/CoHBTlM/D9MCnNY98q8I1Vj 0f7Lo6SM8D1ugaby3OvtuY3lD3LSYso39t5F+A8o12xnSI6s+i9/Idjhy6AALDaU 5vSNzd2PphA8WZs6ePwxrIisKQUH27U8OZjLrkX9gxS/E8U3k4fvMnCWe2CB4oyr ivrGlEQe+SRl+st7NFdPDZS4exUYr34EKjqzE5j3DTOfYZa3XPzj+jO0Vk+dYFZk v33rYPQtJOybQ5S0zWdasZataQCIm1efpLvbGnTucvJwpP1OBwJGmc9EuSasVFhJ rixr07eT04K4MoNQ8CWrH5vvzns2oHQojYD2T6y+ewG2 -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:45 2026 by rpki-client