This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/TgYSgtEo4dSznEstSh4wl1Lb_yg.roa File: TgYSgtEo4dSznEstSh4wl1Lb_yg.roa (raw, json) Hash identifier: nniijit4FyrPMtz8C+vav/OxG7xVfSAPSwIGynyNP+Q= Subject key identifier: 4E:06:12:82:D1:28:E1:D4:B3:9C:4B:2D:4A:1E:30:97:52:DB:FF:28 Certificate issuer: /CN=04268ae40737536a464c28493eaf503db9a18f20 Certificate serial: 019B79ED2BFBD1E90BAFF91B1F5BE48DE11B Authority key identifier: 04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/TgYSgtEo4dSznEstSh4wl1Lb_yg.roa Signing time: Thu 01 Jan 2026 14:19:05 +0000 ROA not before: Thu 01 Jan 2026 14:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.134.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 14:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:2b:fb:d1:e9:0b:af:f9:1b:1f:5b:e4:8d:e1:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04268ae40737536a464c28493eaf503db9a18f20 Validity Not Before: Jan 1 14:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e061282d128e1d4b39c4b2d4a1e309752dbff28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:07:61:bd:b1:3f:0c:51:27:82:9b:5e:d6:3f: bf:fa:ab:a8:d1:f0:4f:59:b2:f6:3d:4d:e8:7d:da: b1:f9:86:59:cf:63:4e:ce:74:f1:6e:8c:5d:e7:22: 2c:7a:90:0b:5a:77:f8:8b:23:ef:83:13:e8:ba:cf: b6:e7:d2:a4:8f:da:2a:ac:70:ba:fb:0c:ab:cf:d1: b3:ff:be:fb:97:d7:e6:d0:e8:f8:00:bd:dd:b9:4b: 66:d7:ea:ca:7e:03:58:0f:2c:ea:c7:c7:4c:db:5e: c6:3c:e9:9b:0a:a4:b5:6c:a5:4f:d3:c3:cb:1d:69: 33:11:00:cb:c9:b4:f6:8b:61:37:7c:fb:95:80:7a: 3f:f8:e7:51:ab:a7:12:94:d4:51:ff:21:e1:2a:da: 8f:a5:c8:79:09:8f:0d:40:ad:a0:d2:e5:4a:cd:e9: e0:57:d7:c9:54:ac:ed:70:a8:a9:56:21:77:3a:75: 09:62:ac:ff:fa:e8:80:1d:4c:9a:e4:b1:1a:09:15: 0c:0a:cf:ff:3d:e2:9a:84:a5:89:10:a7:ce:4f:74: 10:24:cf:92:99:50:0a:24:dd:3f:29:42:a1:c4:53: 49:f1:94:c2:3e:83:b1:ac:b2:2a:6e:da:53:b7:b1: b3:d6:d5:c6:b7:76:0c:43:cb:79:66:27:ee:a2:56: 0d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:06:12:82:D1:28:E1:D4:B3:9C:4B:2D:4A:1E:30:97:52:DB:FF:28 X509v3 Authority Key Identifier: keyid:04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/TgYSgtEo4dSznEstSh4wl1Lb_yg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.134.79.0/24 Signature Algorithm: sha256WithRSAEncryption bc:c0:71:bf:66:d2:eb:b8:d4:fb:ec:0c:05:4a:ab:bb:04:65: b5:49:1a:7c:ae:33:e0:ab:50:68:18:72:59:ab:60:10:35:89: ef:1f:54:b8:fe:49:b0:2f:ff:28:1d:87:0b:0a:8c:a8:31:37: b1:9d:43:9f:bb:79:08:d6:e8:54:78:06:b8:8e:51:e9:e5:d9: 99:9c:d5:b8:59:ef:d2:9b:91:32:81:f6:96:26:09:51:3a:aa: 0a:0b:81:f4:90:1a:60:ca:1e:dd:af:98:5e:e9:71:12:f7:2d: 0e:a5:9e:e2:18:5b:9b:58:4b:74:ab:f1:ec:91:9c:e5:39:06: 6f:14:6d:d0:45:4e:29:a1:f2:bd:7f:12:94:a3:d0:e4:67:77: 5e:17:1c:49:e3:13:a1:d5:79:a0:aa:40:fe:a2:bc:2e:4b:ed: fa:9c:df:e4:7b:55:ed:07:4b:f9:8f:32:c1:10:a0:11:dd:9c: 3f:a5:31:98:85:2d:65:5e:28:86:26:44:16:bf:48:1e:2e:95: d2:43:1d:45:1f:fb:b4:10:34:39:33:e3:62:4c:0a:3e:bf:1f: 99:0e:3b:d8:8b:fe:1d:23:fc:dd:c1:6a:db:f0:09:a9:72:b1: cf:81:50:4d:12:4f:45:4a:e8:bd:f8:4f:2c:38:47:6d:ab:f9: c8:d4:90:43 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Sv70ekLr/kbH1vkjeEbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0MjY4YWU0MDczNzUzNmE0NjRjMjg0OTNlYWY1MDNkYjlh MThmMjAwHhcNMjYwMTAxMTQxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTA2MTI4MmQxMjhlMWQ0YjM5YzRiMmQ0YTFlMzA5NzUyZGJmZjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAdhvbE/DFEngpte1j+/+quo0fBP WbL2PU3ofdqx+YZZz2NOznTxboxd5yIsepALWnf4iyPvgxPous+259Kkj9oqrHC6 +wyrz9Gz/777l9fm0Oj4AL3duUtm1+rKfgNYDyzqx8dM217GPOmbCqS1bKVP08PL HWkzEQDLybT2i2E3fPuVgHo/+OdRq6cSlNRR/yHhKtqPpch5CY8NQK2g0uVKzeng V9fJVKztcKipViF3OnUJYqz/+uiAHUya5LEaCRUMCs//PeKahKWJEKfOT3QQJM+S mVAKJN0/KUKhxFNJ8ZTCPoOxrLIqbtpTt7Gz1tXGt3YMQ8t5ZifuolYNkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE4GEoLRKOHUs5xLLUoeMJdS2/8oMB8GA1UdIwQY MBaAFAQmiuQHN1NqRkwoST6vUD25oY8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkNhSzVBYzNVMnBHVENoSlBxOVFQYm1oanlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83OTY4MjMtNmQ4MS00ZDkxLWI2NjQt ZTBhYmQ0ZDg0NTcxLzEvVGdZU2d0RW80ZFN6bkVzdFNoNHdsMUxiX3lnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy83OTY4MjMtNmQ4MS00ZDkxLWI2NjQtZTBhYmQ0ZDg0NTcx LzEvQkNhSzVBYzNVMnBHVENoSlBxOVFQYm1oanlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYZPMA0G CSqGSIb3DQEBCwUAA4IBAQC8wHG/ZtLruNT77AwFSqu7BGW1SRp8rjPgq1BoGHJZ q2AQNYnvH1S4/kmwL/8oHYcLCoyoMTexnUOfu3kI1uhUeAa4jlHp5dmZnNW4We/S m5EygfaWJglROqoKC4H0kBpgyh7dr5he6XES9y0OpZ7iGFubWEt0q/HskZzlOQZv FG3QRU4pofK9fxKUo9DkZ3deFxxJ4xOh1XmgqkD+orwuS+36nN/ke1XtB0v5jzLB EKAR3Zw/pTGYhS1lXiiGJkQWv0geLpXSQx1FH/u0EDQ5M+NiTAo+vx+ZDjvYi/4d I/zdwWrb8AmpcrHPgVBNEk9FSui9+E8sOEdtq/nI1JBD -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:38 2026 by rpki-client