This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/ctypwi_YKCa3xqtYI5R6ti_6Q04.roa File: ctypwi_YKCa3xqtYI5R6ti_6Q04.roa (raw, json) Hash identifier: qrdXq0UfoxpWYAu0rvMx4Tk+4wVIHjFefJvMtTB1BXk= Subject key identifier: 72:DC:A9:C2:2F:D8:28:26:B7:C6:AB:58:23:94:7A:B6:2F:FA:43:4E Certificate issuer: /CN=7b8985faea08598c05cc30b82e282306af793316 Certificate serial: 019B7DCA1E6496D1D2B3D263FF5D576BEEEB Authority key identifier: 7B:89:85:FA:EA:08:59:8C:05:CC:30:B8:2E:28:23:06:AF:79:33:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/ctypwi_YKCa3xqtYI5R6ti_6Q04.roa Signing time: Fri 02 Jan 2026 08:19:16 +0000 ROA not before: Fri 02 Jan 2026 08:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203352 IP address blocks: 185.131.80.0/22 maxlen: 22 185.131.80.0/23 maxlen: 23 185.131.80.0/24 maxlen: 24 185.131.81.0/24 maxlen: 24 185.131.82.0/23 maxlen: 23 185.131.82.0/24 maxlen: 24 185.131.83.0/24 maxlen: 24 2a06:97c0::/29 maxlen: 29 2a06:97c0::/30 maxlen: 30 2a06:97c4::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.mft rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:1e:64:96:d1:d2:b3:d2:63:ff:5d:57:6b:ee:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b8985faea08598c05cc30b82e282306af793316 Validity Not Before: Jan 2 08:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72dca9c22fd82826b7c6ab5823947ab62ffa434e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:5f:3a:ce:12:08:ac:f2:bd:9a:9d:3a:23:b2: da:4b:ab:a5:9b:d1:7c:e7:0d:61:43:51:33:ef:7e: a0:f1:e0:6e:fc:63:68:67:38:af:84:96:1d:77:6c: 85:1f:04:86:04:c7:4a:51:ba:70:1a:6a:d5:0b:d6: 49:76:c0:3b:b4:84:cf:d9:14:7c:f5:3b:e0:27:37: ff:2e:cd:9c:12:1e:43:9d:95:70:36:6b:77:72:6f: c3:09:30:69:d9:77:be:48:9c:06:0a:3b:65:fd:d0: 6b:88:b6:ae:6e:9f:d8:80:6a:43:8b:94:cd:29:86: 82:81:10:60:b9:76:21:26:9f:74:a9:da:c4:aa:d1: 44:d9:39:d8:ff:99:36:b7:bd:c9:c3:c1:e4:6b:de: 92:bd:d8:46:8f:73:9d:04:5b:d0:9f:d1:14:17:b6: 81:d9:eb:e6:6f:27:a4:aa:e2:f6:78:99:4d:42:4c: 0e:f3:0f:6b:dd:1b:55:37:90:9c:a4:e3:71:02:4d: e2:56:bb:2e:7e:fb:ce:28:45:22:8f:94:c0:06:3e: 40:0f:14:49:0e:c0:b7:11:e9:f0:92:c9:ad:f1:eb: d5:bf:fc:06:d6:ec:b8:b6:92:33:b5:52:67:6d:0c: d9:9e:cf:ee:4d:0d:98:25:3e:0e:98:5d:7f:4e:2e: 47:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:DC:A9:C2:2F:D8:28:26:B7:C6:AB:58:23:94:7A:B6:2F:FA:43:4E X509v3 Authority Key Identifier: keyid:7B:89:85:FA:EA:08:59:8C:05:CC:30:B8:2E:28:23:06:AF:79:33:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/ctypwi_YKCa3xqtYI5R6ti_6Q04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.131.80.0/22 IPv6: 2a06:97c0::/29 Signature Algorithm: sha256WithRSAEncryption 2e:fc:6b:0d:8d:0e:81:be:84:f1:59:7b:1b:49:e6:f7:6a:29: 66:e8:11:60:d8:12:1a:92:3a:2f:01:43:f1:da:a6:22:57:f8: b4:a1:fd:78:1f:b7:66:d8:b3:4c:a0:11:9a:23:15:ff:75:ba: d5:00:7e:24:e8:c0:c9:33:72:f6:83:30:75:b2:b4:f0:e6:a5: c7:a9:c1:38:46:cb:b6:79:9f:50:a4:f8:83:ff:5e:95:13:b4: d6:bf:32:d6:f0:94:c2:17:cb:da:88:07:61:54:c6:ab:91:cb: 1d:f3:a3:98:1a:4f:7d:fa:f7:df:25:11:73:cc:93:52:db:0f: b7:f4:6f:9c:fc:5a:f6:c7:61:fe:00:32:92:2b:35:ac:69:a0: 50:b9:28:ed:93:79:a2:63:35:84:8c:78:f2:c1:fc:05:22:5c: a0:d1:2b:0c:0e:da:d2:90:17:63:7c:9d:a4:95:09:13:b3:c6: 86:15:11:8b:22:c0:41:61:76:a4:54:85:aa:16:43:51:4f:74: 89:c1:fa:79:0d:66:c8:19:bd:68:b4:d5:32:fc:9d:bc:bc:53: cf:62:17:5b:97:b4:86:90:8e:b3:7f:b5:c7:97:17:60:e5:5b: 7a:70:94:54:c7:6e:0f:39:65:f5:d7:17:ec:9b:88:5d:42:bc: 70:17:12:44 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9yh5kltHSs9Jj/11Xa+7rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiODk4NWZhZWEwODU5OGMwNWNjMzBiODJlMjgyMzA2YWY3 OTMzMTYwHhcNMjYwMTAyMDgxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MmRjYTljMjJmZDgyODI2YjdjNmFiNTgyMzk0N2FiNjJmZmE0MzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1186zhIIrPK9mp06I7LaS6ulm9F8 5w1hQ1Ez736g8eBu/GNoZzivhJYdd2yFHwSGBMdKUbpwGmrVC9ZJdsA7tITP2RR8 9TvgJzf/Ls2cEh5DnZVwNmt3cm/DCTBp2Xe+SJwGCjtl/dBriLaubp/YgGpDi5TN KYaCgRBguXYhJp90qdrEqtFE2TnY/5k2t73Jw8Hka96SvdhGj3OdBFvQn9EUF7aB 2evmbyekquL2eJlNQkwO8w9r3RtVN5CcpONxAk3iVrsufvvOKEUij5TABj5ADxRJ DsC3Eenwksmt8evVv/wG1uy4tpIztVJnbQzZns/uTQ2YJT4OmF1/Ti5H1QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHLcqcIv2Cgmt8arWCOUerYv+kNOMB8GA1UdIwQY MBaAFHuJhfrqCFmMBcwwuC4oIwaveTMWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTRtRi11b0lXWXdGekRDNExpZ2pCcTk1TXhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9lNTliYTEtM2Q1Yi00Mjk5LWE4NTIt MzdjODZlMzU1MjY3LzEvY3R5cHdpX1lLQ2EzeHF0WUk1UjZ0aV82UTA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9lNTliYTEtM2Q1Yi00Mjk5LWE4NTItMzdjODZlMzU1MjY3 LzEvZTRtRi11b0lXWXdGekRDNExpZ2pCcTk1TXhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuYNQMA0E AgACMAcDBQMqBpfAMA0GCSqGSIb3DQEBCwUAA4IBAQAu/GsNjQ6BvoTxWXsbSeb3 ailm6BFg2BIakjovAUPx2qYiV/i0of14H7dm2LNMoBGaIxX/dbrVAH4k6MDJM3L2 gzB1srTw5qXHqcE4Rsu2eZ9QpPiD/16VE7TWvzLW8JTCF8vaiAdhVMarkcsd86OY Gk99+vffJRFzzJNS2w+39G+c/Fr2x2H+ADKSKzWsaaBQuSjtk3miYzWEjHjywfwF Ilyg0SsMDtrSkBdjfJ2klQkTs8aGFRGLIsBBYXakVIWqFkNRT3SJwfp5DWbIGb1o tNUy/J28vFPPYhdbl7SGkI6zf7XHlxdg5Vt6cJRUx24POWX11xfsm4hdQrxwFxJE -----END CERTIFICATE-----Generated at Tue Feb 10 07:11:56 2026 by rpki-client