This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/TOTHyZwBb_iYhRFIFcu0_EcnCBU.roa File: TOTHyZwBb_iYhRFIFcu0_EcnCBU.roa (raw, json) Hash identifier: IyBmvMwGXyKxvavxnC9QjTz8ueACKxET+moXjushzIA= Subject key identifier: 4C:E4:C7:C9:9C:01:6F:F8:98:85:11:48:15:CB:B4:FC:47:27:08:15 Certificate issuer: /CN=8fe613beebb7ef36992c0491ad13b26707057260 Certificate serial: 019B78A22706799C685482D73A792042EBF9 Authority key identifier: 8F:E6:13:BE:EB:B7:EF:36:99:2C:04:91:AD:13:B2:67:07:05:72:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-YTvuu37zaZLASRrROyZwcFcmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/TOTHyZwBb_iYhRFIFcu0_EcnCBU.roa Signing time: Thu 01 Jan 2026 08:17:31 +0000 ROA not before: Thu 01 Jan 2026 08:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201887 IP address blocks: 5.255.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.mft rsync://rpki.ripe.net/repository/DEFAULT/j-YTvuu37zaZLASRrROyZwcFcmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:27:06:79:9c:68:54:82:d7:3a:79:20:42:eb:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fe613beebb7ef36992c0491ad13b26707057260 Validity Not Before: Jan 1 08:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ce4c7c99c016ff89885114815cbb4fc47270815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e8:39:31:df:be:15:50:ff:5c:8e:db:11:0b: 18:f4:55:f5:67:cc:7a:5d:b2:2a:bf:d6:e7:47:4f: 85:09:4c:ec:0f:de:75:61:bc:98:7d:6d:3d:70:84: 62:15:36:66:b6:2b:20:76:21:25:a7:d9:bc:32:7b: 97:61:da:5c:64:f2:da:dd:17:9b:22:32:f1:de:4b: 0f:15:8d:90:a2:bc:45:29:0b:ff:58:65:b7:cc:5e: 2a:d9:35:b4:0a:c8:6f:f3:9a:7d:03:8a:1f:17:45: 14:5e:0b:44:71:75:95:73:b2:f3:b5:cc:54:88:91: 0d:17:61:74:62:d8:fb:1d:e5:15:6c:76:ff:34:bc: 58:85:5a:80:61:ba:47:83:44:d5:48:1d:0c:65:1c: 59:04:0e:a7:88:d0:de:09:97:64:34:74:cb:63:1e: 1d:89:35:41:48:a6:0a:bb:ea:90:94:41:5a:61:9d: f9:8f:0b:7c:98:19:65:a1:d0:4f:7c:33:18:be:7c: 73:b7:c1:86:4d:87:0c:3a:dc:37:b6:c7:76:16:90: 39:e2:f2:59:2e:41:64:78:f5:bf:32:29:f0:84:b1: 2d:b4:ac:cb:4b:0f:aa:65:30:ab:2f:1d:50:2b:35: 4d:ca:d5:52:72:2e:51:cf:fe:1c:67:7c:d8:e5:86: 53:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:E4:C7:C9:9C:01:6F:F8:98:85:11:48:15:CB:B4:FC:47:27:08:15 X509v3 Authority Key Identifier: keyid:8F:E6:13:BE:EB:B7:EF:36:99:2C:04:91:AD:13:B2:67:07:05:72:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-YTvuu37zaZLASRrROyZwcFcmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/TOTHyZwBb_iYhRFIFcu0_EcnCBU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.255.128.0/21 Signature Algorithm: sha256WithRSAEncryption 27:91:be:1f:95:33:c0:25:08:e3:2b:b0:b2:19:86:dd:f6:f3: 5c:8d:8d:9f:a5:7a:54:01:aa:ab:e5:26:e0:e5:47:f8:bb:b9: 74:ff:2f:29:11:9d:7a:ee:c9:7e:99:1b:d5:c1:e8:d6:be:d6: 6c:b0:89:64:5e:8b:55:3c:39:56:48:e5:de:1c:c7:f5:c2:c4: ad:cf:d0:49:96:a6:d7:6a:a2:2a:c0:c0:72:6d:01:2c:89:22: 90:a8:d4:44:7b:2d:88:f4:3f:96:e0:e4:0e:a5:8a:27:7c:dd: 11:d7:7f:fc:2a:13:5d:fb:cc:c8:5d:9c:6b:73:f3:f4:fe:3c: bd:e4:a5:63:60:57:a7:84:15:05:b2:0d:03:bd:7c:d5:d6:ce: a8:ef:de:30:00:46:64:fa:d3:ae:0e:2e:21:1a:20:d8:ab:fa: dd:57:26:72:8c:e0:4b:c6:84:a4:c0:68:57:f2:87:dc:af:47: 60:c6:c6:5b:3d:a1:5c:99:9d:04:ba:83:0f:f4:3b:94:dd:98: 4a:5f:c6:10:06:4c:ea:18:32:be:4a:d4:69:d2:ce:d7:02:f3: 90:f4:de:e6:6c:09:89:1b:a2:e7:fb:b6:10:59:25:dd:56:fc: 71:66:f2:46:03:80:c3:f5:89:72:b2:9f:35:fc:eb:5e:dc:ac: 05:a5:35:b1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oicGeZxoVILXOnkgQuv5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmZTYxM2JlZWJiN2VmMzY5OTJjMDQ5MWFkMTNiMjY3MDcw NTcyNjAwHhcNMjYwMTAxMDgxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Y2U0YzdjOTljMDE2ZmY4OTg4NTExNDgxNWNiYjRmYzQ3MjcwODE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+g5Md++FVD/XI7bEQsY9FX1Z8x6 XbIqv9bnR0+FCUzsD951YbyYfW09cIRiFTZmtisgdiElp9m8MnuXYdpcZPLa3Reb IjLx3ksPFY2QorxFKQv/WGW3zF4q2TW0Cshv85p9A4ofF0UUXgtEcXWVc7LztcxU iJENF2F0Ytj7HeUVbHb/NLxYhVqAYbpHg0TVSB0MZRxZBA6niNDeCZdkNHTLYx4d iTVBSKYKu+qQlEFaYZ35jwt8mBllodBPfDMYvnxzt8GGTYcMOtw3tsd2FpA54vJZ LkFkePW/MinwhLEttKzLSw+qZTCrLx1QKzVNytVSci5Rz/4cZ3zY5YZTDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEzkx8mcAW/4mIURSBXLtPxHJwgVMB8GA1UdIwQY MBaAFI/mE77rt+82mSwEka0TsmcHBXJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvai1ZVHZ1dTM3emFaTEFTUnJST3lad2NGY21BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi83YWY5OWQtZGE4NS00MWE1LWFhNGYt ZmE2NjU0YTJhNmZlLzEvVE9USHlad0JiX2lZaFJGSUZjdTBfRWNuQ0JVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi83YWY5OWQtZGE4NS00MWE1LWFhNGYtZmE2NjU0YTJhNmZl LzEvai1ZVHZ1dTM3emFaTEFTUnJST3lad2NGY21BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDBf+AMA0G CSqGSIb3DQEBCwUAA4IBAQAnkb4flTPAJQjjK7CyGYbd9vNcjY2fpXpUAaqr5Sbg 5Uf4u7l0/y8pEZ167sl+mRvVwejWvtZssIlkXotVPDlWSOXeHMf1wsStz9BJlqbX aqIqwMBybQEsiSKQqNREey2I9D+W4OQOpYonfN0R13/8KhNd+8zIXZxrc/P0/jy9 5KVjYFenhBUFsg0DvXzV1s6o794wAEZk+tOuDi4hGiDYq/rdVyZyjOBLxoSkwGhX 8ofcr0dgxsZbPaFcmZ0EuoMP9DuU3ZhKX8YQBkzqGDK+StRp0s7XAvOQ9N7mbAmJ G6Ln+7YQWSXdVvxxZvJGA4DD9Ylysp81/Ote3KwFpTWx -----END CERTIFICATE-----Generated at Tue Feb 10 01:02:05 2026 by rpki-client