This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/TU59gk08YSz28zEnYoV3lFmpNXc.roa File: TU59gk08YSz28zEnYoV3lFmpNXc.roa (raw, json) Hash identifier: R3U0th+QPmJ7IoASOdFgiDyk/JfU8yZsUqFtfVkk8ps= Subject key identifier: 4D:4E:7D:82:4D:3C:61:2C:F6:F3:31:27:62:85:77:94:59:A9:35:77 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C136889A38CA058A693B9EEDA4D7C1A Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/TU59gk08YSz28zEnYoV3lFmpNXc.roa Signing time: Fri 02 Jan 2026 00:20:05 +0000 ROA not before: Fri 02 Jan 2026 00:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 26141 IP address blocks: 45.90.237.0/24 maxlen: 24 194.26.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:68:89:a3:8c:a0:58:a6:93:b9:ee:da:4d:7c:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d4e7d824d3c612cf6f331276285779459a93577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d6:1f:d1:b3:1f:dd:9a:37:ca:31:7d:fa:ec: 7a:d0:21:d0:f5:b2:a4:5d:65:ae:4d:ec:6d:9d:6c: f2:f2:28:f5:78:2f:ed:f3:a3:ad:47:d6:94:27:5b: 84:0f:40:e9:b5:fc:19:d2:dd:62:44:5a:80:20:52: 78:09:e7:04:29:21:f2:c5:64:f2:36:ff:8b:d3:de: c4:05:2a:d0:d1:28:3b:d4:5d:82:7b:dd:f6:10:e7: 20:69:8b:25:72:7e:14:e5:3e:b2:30:3f:cd:6b:d4: 4b:ea:a4:a8:ea:4a:b6:66:6c:f3:a7:e2:03:ba:2f: 1e:cc:0a:40:45:17:a1:ac:a2:74:e0:3e:c7:34:f8: 0d:93:da:57:00:34:4f:6e:81:32:d3:85:15:a4:a8: 11:c0:dc:8c:3b:6f:fc:23:bd:54:97:78:72:23:6b: d2:fa:c6:85:f9:d5:6b:7a:dd:db:f2:43:67:10:a9: 06:cc:42:6c:5c:1d:85:42:2d:5c:10:6f:57:18:dc: 19:5f:f2:39:2b:73:0e:f3:82:79:6a:a5:8e:da:41: 36:aa:0f:cd:1e:a9:69:99:8a:a6:22:25:e6:72:a7: 92:89:69:b0:68:76:90:72:4c:c6:78:bb:30:44:0e: 27:32:0d:a9:65:c6:eb:cf:40:dc:b9:fe:c8:31:97: 47:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:4E:7D:82:4D:3C:61:2C:F6:F3:31:27:62:85:77:94:59:A9:35:77 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/TU59gk08YSz28zEnYoV3lFmpNXc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.90.237.0/24 194.26.100.0/24 Signature Algorithm: sha256WithRSAEncryption 56:83:e3:de:33:cb:69:ef:68:2a:90:74:a7:b3:39:ef:7a:a5: ae:06:38:e5:b6:1b:54:6f:f5:ef:f8:c0:38:b3:43:91:41:cd: 3d:91:1c:a7:c0:ec:82:c9:74:20:47:30:2c:db:46:c4:00:64: 87:c7:0c:34:89:3f:27:5c:12:f3:91:f8:c9:3e:a8:e8:ed:3f: 38:6b:a6:dd:e5:6c:8d:d2:8d:85:a3:70:79:6c:c8:85:1d:b0: 06:f8:c2:eb:9b:ea:42:82:b6:0b:3b:fb:e7:19:e5:78:27:c4: 66:9d:af:ee:a8:3f:4c:0d:31:0e:1b:48:f2:5f:64:48:b2:1f: e7:89:f3:2c:c7:e6:74:08:6d:7f:23:e7:5d:6f:43:a9:4d:48: 15:ef:b4:73:c5:05:ca:08:d5:6f:69:52:cb:e8:d6:aa:dd:2d: 11:8e:7a:82:38:d5:20:cd:7b:8f:9b:4c:3f:2e:d8:6f:f0:8e: 01:52:39:89:46:6f:9e:ce:a4:9b:79:e2:71:f5:12:4e:bf:8b: 1f:16:58:6d:0f:40:c6:d4:c8:26:af:4c:bb:7b:00:5e:cf:94: af:97:ce:53:62:36:84:e4:37:f2:c9:17:d3:c7:b9:a0:d2:29: 6b:df:d0:22:4a:7e:0e:c4:9c:77:a5:df:fd:73:88:c0:7d:fb: 8b:62:7c:f0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8E2iJo4ygWKaTue7aTXwaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDRlN2Q4MjRkM2M2MTJjZjZmMzMxMjc2Mjg1Nzc5NDU5YTkzNTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9Yf0bMf3Zo3yjF9+ux60CHQ9bKk XWWuTextnWzy8ij1eC/t86OtR9aUJ1uED0DptfwZ0t1iRFqAIFJ4CecEKSHyxWTy Nv+L097EBSrQ0Sg71F2Ce932EOcgaYslcn4U5T6yMD/Na9RL6qSo6kq2Zmzzp+ID ui8ezApARRehrKJ04D7HNPgNk9pXADRPboEy04UVpKgRwNyMO2/8I71Ul3hyI2vS +saF+dVret3b8kNnEKkGzEJsXB2FQi1cEG9XGNwZX/I5K3MO84J5aqWO2kE2qg/N HqlpmYqmIiXmcqeSiWmwaHaQckzGeLswRA4nMg2pZcbrz0Dcuf7IMZdH2QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFE1OfYJNPGEs9vMxJ2KFd5RZqTV3MB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvVFU1OWdrMDhZU3oyOHpFbllvVjNsRm1wTlhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVrtAwQA whpkMA0GCSqGSIb3DQEBCwUAA4IBAQBWg+PeM8tp72gqkHSnsznveqWuBjjlthtU b/Xv+MA4s0ORQc09kRynwOyCyXQgRzAs20bEAGSHxww0iT8nXBLzkfjJPqjo7T84 a6bd5WyN0o2Fo3B5bMiFHbAG+MLrm+pCgrYLO/vnGeV4J8Rmna/uqD9MDTEOG0jy X2RIsh/nifMsx+Z0CG1/I+ddb0OpTUgV77RzxQXKCNVvaVLL6Naq3S0RjnqCONUg zXuPm0w/Lthv8I4BUjmJRm+ezqSbeeJx9RJOv4sfFlhtD0DG1Mgmr0y7ewBez5Sv l85TYjaE5DfyyRfTx7mg0ilr39AiSn4OxJx3pd/9c4jAffuLYnzw -----END CERTIFICATE-----Generated at Fri Jan 2 23:53:24 2026 by rpki-client