This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/TlYPjord0mp0MJMcUmmnTdWvQzw.roa File: TlYPjord0mp0MJMcUmmnTdWvQzw.roa (raw, json) Hash identifier: WSh/TfZU/1YiXMl/Tu5MDHumZx0oLhr8lAdqVF0L/6E= Subject key identifier: 4E:56:0F:8E:8A:DD:D2:6A:74:30:93:1C:52:69:A7:4D:D5:AF:43:3C Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Certificate serial: 019B78A2CE16A13E139BF077E4C705C7356E Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/TlYPjord0mp0MJMcUmmnTdWvQzw.roa Signing time: Thu 01 Jan 2026 08:18:14 +0000 ROA not before: Thu 01 Jan 2026 08:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206505 IP address blocks: 109.72.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 08:19:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:ce:16:a1:3e:13:9b:f0:77:e4:c7:05:c7:35:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Validity Not Before: Jan 1 08:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e560f8e8addd26a7430931c5269a74dd5af433c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:2b:21:57:15:71:71:59:40:b0:a7:29:95:b0: b6:77:91:86:b6:34:86:ed:d9:f8:d0:f6:ac:ef:08: f5:e0:8d:5f:0c:3e:19:77:c2:e8:ab:65:94:5e:d9: 55:26:b0:b5:e8:6a:11:6f:eb:21:f4:76:d6:ff:52: 94:5d:4a:b0:02:a7:6e:7d:67:f6:41:cc:86:da:83: 47:d8:95:23:e1:bf:00:a8:ae:4a:d4:28:ab:64:bd: 03:5d:05:45:8a:9b:25:d1:4f:82:60:24:1f:75:6c: 02:a0:25:f0:1d:9b:33:fa:d3:6c:8d:43:46:1e:02: 0b:4a:f9:1d:bb:97:09:b0:fd:7b:fa:b4:98:e2:8f: 88:75:0c:5b:dc:33:9b:77:ee:fd:76:3a:69:dd:82: ce:50:6f:72:99:5f:ed:b2:60:1a:02:5f:42:d2:91: 72:43:8d:0d:e7:63:e5:39:c0:1a:3b:33:cf:33:67: f6:74:12:98:fe:2a:90:17:2a:5e:1c:3b:87:37:bd: 5a:08:ae:b9:d9:55:ca:a7:40:16:4d:7c:b9:4f:18: 05:bb:4c:5e:21:2c:39:7d:ec:c0:b3:4d:ae:b0:17: d2:86:21:8f:7f:ac:13:c8:48:36:80:70:05:20:f0: 14:01:94:76:e3:5c:10:25:ef:de:67:be:fd:b0:38: 9d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:56:0F:8E:8A:DD:D2:6A:74:30:93:1C:52:69:A7:4D:D5:AF:43:3C X509v3 Authority Key Identifier: keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/TlYPjord0mp0MJMcUmmnTdWvQzw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.72.124.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:d3:75:5d:fe:b4:04:3f:3d:d5:98:d1:fb:0c:4c:28:11:d7: 6c:d4:87:e9:0b:dc:25:34:dc:33:89:c1:94:ff:62:c6:df:d5: a8:4e:ab:1a:82:fd:28:1c:c2:88:f4:7b:bb:d5:ba:ff:c0:e4: 2a:97:88:a5:23:51:22:7e:e3:13:ef:dd:d3:29:c6:28:53:83: 5f:e7:65:4e:20:dd:26:57:51:c5:f3:51:96:01:75:e8:a8:c0: 9a:a8:9f:72:5f:a8:8a:14:f3:56:c1:8b:31:a3:2f:c1:2f:0a: 0e:26:9b:13:b2:3d:27:bc:87:a2:03:aa:22:f7:da:4b:0c:4f: c2:27:52:17:46:9b:c4:3d:9c:70:41:f0:2d:c1:aa:64:c2:63: 53:72:31:91:5b:b6:c9:3f:83:c9:f4:b4:6e:bd:2c:1e:bb:86: d8:03:f3:99:c6:df:f3:62:f6:19:24:69:c4:24:5f:44:e1:50: 95:b3:a5:02:ca:9d:aa:df:9e:b1:f6:a3:1c:86:21:e7:76:46: df:72:85:4c:6e:c3:02:b7:b1:48:51:99:36:67:80:d4:66:f4: 8a:93:73:15:8b:a0:7e:7d:ae:e6:49:12:ee:56:83:58:06:b2: 55:83:5a:68:9f:0e:a6:12:ba:c9:4f:2a:97:83:37:d4:ac:57: 88:4c:a7:ec -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4os4WoT4Tm/B35McFxzVuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk OGRhYmUwHhcNMjYwMTAxMDgxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTU2MGY4ZThhZGRkMjZhNzQzMDkzMWM1MjY5YTc0ZGQ1YWY0MzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SshVxVxcVlAsKcplbC2d5GGtjSG 7dn40Pas7wj14I1fDD4Zd8Loq2WUXtlVJrC16GoRb+sh9HbW/1KUXUqwAqdufWf2 QcyG2oNH2JUj4b8AqK5K1CirZL0DXQVFipsl0U+CYCQfdWwCoCXwHZsz+tNsjUNG HgILSvkdu5cJsP17+rSY4o+IdQxb3DObd+79djpp3YLOUG9ymV/tsmAaAl9C0pFy Q40N52PlOcAaOzPPM2f2dBKY/iqQFypeHDuHN71aCK652VXKp0AWTXy5TxgFu0xe ISw5fezAs02usBfShiGPf6wTyEg2gHAFIPAUAZR241wQJe/eZ779sDiduQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE5WD46K3dJqdDCTHFJpp03Vr0M8MB8GA1UdIwQY MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt ODJhZDE0NTU1ZWFhLzEvVGxZUGpvcmQwbXAwTUpNY1VtbW5UZFd2UXp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbUh8MA0G CSqGSIb3DQEBCwUAA4IBAQCe03Vd/rQEPz3VmNH7DEwoEdds1IfpC9wlNNwzicGU /2LG39WoTqsagv0oHMKI9Hu71br/wOQql4ilI1EifuMT793TKcYoU4Nf52VOIN0m V1HF81GWAXXoqMCaqJ9yX6iKFPNWwYsxoy/BLwoOJpsTsj0nvIeiA6oi99pLDE/C J1IXRpvEPZxwQfAtwapkwmNTcjGRW7bJP4PJ9LRuvSweu4bYA/OZxt/zYvYZJGnE JF9E4VCVs6UCyp2q356x9qMchiHndkbfcoVMbsMCt7FIUZk2Z4DUZvSKk3MVi6B+ fa7mSRLuVoNYBrJVg1ponw6mErrJTyqXgzfUrFeITKfs -----END CERTIFICATE-----Generated at Thu Jan 1 13:13:56 2026 by rpki-client