This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/TjYcJALyGbmW-x31ry7QsUvdQtQ.roa File: TjYcJALyGbmW-x31ry7QsUvdQtQ.roa (raw, json) Hash identifier: knhLPKVdJjwTBCuKiy0BNSL8TQGPgiu2tFYYWRO2204= Subject key identifier: 4E:36:1C:24:02:F2:19:B9:96:FB:1D:F5:AF:2E:D0:B1:4B:DD:42:D4 Certificate issuer: /CN=6f3030a4b67f95c2fed902d56657faa2494b5129 Certificate serial: 019B78A3329E299D257F739123D0812A3D27 Authority key identifier: 6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/TjYcJALyGbmW-x31ry7QsUvdQtQ.roa Signing time: Thu 01 Jan 2026 08:18:39 +0000 ROA not before: Thu 01 Jan 2026 08:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43754 IP address blocks: 84.47.232.0/21 maxlen: 21 84.47.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:32:9e:29:9d:25:7f:73:91:23:d0:81:2a:3d:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f3030a4b67f95c2fed902d56657faa2494b5129 Validity Not Before: Jan 1 08:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e361c2402f219b996fb1df5af2ed0b14bdd42d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:22:e0:3f:d1:6c:58:f1:86:6f:63:62:c5:14: f9:64:0d:7b:97:ac:94:41:64:67:9c:8c:93:3f:3e: fb:7c:4d:0c:1b:39:b9:e8:cf:55:5e:e6:69:9b:c6: ad:54:d1:5d:2e:9b:9a:b9:57:c5:fe:43:8b:be:32: 59:24:9e:9e:13:5c:33:01:33:51:f7:a5:f0:12:ce: fd:07:99:74:5d:8f:26:4d:3c:7b:0b:fa:ab:ca:d5: af:06:39:e9:9f:27:e4:5c:b0:ba:bc:41:8d:5e:f3: d5:56:49:e2:95:35:bc:be:89:0f:e3:a0:1e:ba:06: b5:e9:5a:fe:1c:76:98:e0:a5:59:4a:6d:d4:3b:b2: ad:1a:90:73:9d:e9:40:3c:49:c1:aa:c5:14:b1:40: cb:77:88:ba:a8:ba:e2:87:15:c7:d3:66:f4:59:3e: 37:9f:0c:09:85:cb:0c:c0:e7:6c:c7:4c:e4:57:13: 4f:0b:a2:ca:08:66:b6:49:ef:14:f0:69:90:63:43: 25:54:65:78:2f:da:1c:9d:3f:e3:1f:ee:09:78:1c: 90:7b:b4:7d:07:d6:c0:57:d9:e2:23:06:1a:38:b5: 80:f6:c3:ea:3f:23:f3:c3:ed:73:ff:f4:3d:17:75: 19:c1:8c:aa:6a:24:8f:a3:dd:fe:2e:1e:a4:76:80: f5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:36:1C:24:02:F2:19:B9:96:FB:1D:F5:AF:2E:D0:B1:4B:DD:42:D4 X509v3 Authority Key Identifier: keyid:6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/TjYcJALyGbmW-x31ry7QsUvdQtQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.47.232.0/21 Signature Algorithm: sha256WithRSAEncryption c1:7f:06:f2:21:43:3e:ea:75:f4:f8:35:2e:59:37:69:f5:8e: 0e:0e:39:c9:c0:98:86:49:c3:a8:2e:be:e8:5c:e0:af:03:fe: f3:93:b7:bc:f6:62:1b:a7:4a:6c:23:4f:bb:ef:5e:ff:62:e1: f5:d9:53:f8:6f:be:7d:33:32:6a:27:13:31:1a:7c:0b:df:b6: 56:1d:81:d9:a9:6c:ce:1e:28:e0:46:d4:c9:7a:67:0b:e3:cf: b2:ce:67:d2:82:db:1a:d0:d4:18:cc:d1:e8:33:34:92:64:da: d6:e2:8c:04:d7:53:ab:e3:60:9d:95:d4:f0:4e:19:68:d3:bb: bb:b6:82:3b:97:7f:ce:74:28:c3:97:ac:59:5f:de:47:ba:a3: de:cc:79:01:f8:3d:7f:dd:80:d4:7b:60:ce:bc:c1:51:c4:0b: b2:11:9b:33:4c:7f:ec:3e:95:9c:90:af:ed:0c:66:50:e0:86: 62:c1:40:af:15:29:df:43:95:10:c0:10:f5:43:7c:f5:58:53: 16:10:fd:52:5d:cc:66:eb:bb:83:9c:f8:ca:08:43:0e:bb:05: 02:df:04:e0:79:a7:5c:e5:11:28:dd:bc:09:b4:c6:4a:8f:54: d7:b9:7d:7b:dd:eb:41:3e:6e:4c:04:33:df:44:77:5a:46:33: de:cd:fd:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ozKeKZ0lf3ORI9CBKj0nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMzAzMGE0YjY3Zjk1YzJmZWQ5MDJkNTY2NTdmYWEyNDk0 YjUxMjkwHhcNMjYwMTAxMDgxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTM2MWMyNDAyZjIxOWI5OTZmYjFkZjVhZjJlZDBiMTRiZGQ0MmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriLgP9FsWPGGb2NixRT5ZA17l6yU QWRnnIyTPz77fE0MGzm56M9VXuZpm8atVNFdLpuauVfF/kOLvjJZJJ6eE1wzATNR 96XwEs79B5l0XY8mTTx7C/qrytWvBjnpnyfkXLC6vEGNXvPVVknilTW8vokP46Ae uga16Vr+HHaY4KVZSm3UO7KtGpBznelAPEnBqsUUsUDLd4i6qLrihxXH02b0WT43 nwwJhcsMwOdsx0zkVxNPC6LKCGa2Se8U8GmQY0MlVGV4L9ocnT/jH+4JeByQe7R9 B9bAV9niIwYaOLWA9sPqPyPzw+1z//Q9F3UZwYyqaiSPo93+Lh6kdoD1bwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE42HCQC8hm5lvsd9a8u0LFL3ULUMB8GA1UdIwQY MBaAFG8wMKS2f5XC/tkC1WZX+qJJS1EpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYt YmYzYjIxYTI3MGYyLzEvVGpZY0pBTHlHYm1XLXgzMXJ5N1FzVXZkUXRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYtYmYzYjIxYTI3MGYy LzEvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDVC/oMA0G CSqGSIb3DQEBCwUAA4IBAQDBfwbyIUM+6nX0+DUuWTdp9Y4ODjnJwJiGScOoLr7o XOCvA/7zk7e89mIbp0psI0+7717/YuH12VP4b759MzJqJxMxGnwL37ZWHYHZqWzO HijgRtTJemcL48+yzmfSgtsa0NQYzNHoMzSSZNrW4owE11Or42CdldTwThlo07u7 toI7l3/OdCjDl6xZX95HuqPezHkB+D1/3YDUe2DOvMFRxAuyEZszTH/sPpWckK/t DGZQ4IZiwUCvFSnfQ5UQwBD1Q3z1WFMWEP1SXcxm67uDnPjKCEMOuwUC3wTgeadc 5REo3bwJtMZKj1TXuX173etBPm5MBDPfRHdaRjPezf3i -----END CERTIFICATE-----Generated at Mon Jan 26 22:59:25 2026 by rpki-client