This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/TyZ-EN3ZikEP3O1aIGeCGjgK3LI.roa File: TyZ-EN3ZikEP3O1aIGeCGjgK3LI.roa (raw, json) Hash identifier: rGtYPfugPBoAr+vznSLu3abrcQ5ZUu7nfMCulcJMbYg= Subject key identifier: 4F:26:7E:10:DD:D9:8A:41:0F:DC:ED:5A:20:67:82:1A:38:0A:DC:B2 Certificate issuer: /CN=5f0226a704cf620eb2000f27e7a919ce730991be Certificate serial: 019B7B36C6401DA327E1902395EAF6D52AA0 Authority key identifier: 5F:02:26:A7:04:CF:62:0E:B2:00:0F:27:E7:A9:19:CE:73:09:91:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/TyZ-EN3ZikEP3O1aIGeCGjgK3LI.roa Signing time: Thu 01 Jan 2026 20:19:05 +0000 ROA not before: Thu 01 Jan 2026 20:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202602 IP address blocks: 213.170.133.0/24 maxlen: 24 2a0c:b847:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 23:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:c6:40:1d:a3:27:e1:90:23:95:ea:f6:d5:2a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f0226a704cf620eb2000f27e7a919ce730991be Validity Not Before: Jan 1 20:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f267e10ddd98a410fdced5a2067821a380adcb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fe:e3:34:0c:d1:21:fe:f1:84:0d:56:e8:ee: 34:cf:c5:61:6d:9d:c9:de:0e:58:93:71:a2:16:f9: 37:f5:fb:5c:70:4b:9d:96:0a:d1:32:07:28:82:6a: 9e:74:bd:b4:a9:f7:13:92:75:47:1f:1f:11:6f:ff: b3:8d:5f:bf:a4:23:26:cd:ef:0a:fb:1b:05:d8:ec: 7d:ce:83:d1:ca:bf:18:eb:52:29:6e:31:8a:f4:ef: f9:94:c5:ae:e2:d6:d3:e8:5b:19:6f:91:7c:f8:c1: 56:78:45:5e:8c:33:19:0f:76:68:af:db:ac:13:c3: 9a:fa:1b:c0:7b:f0:55:32:de:e9:f3:72:99:d1:aa: 48:fc:8c:d7:48:9f:c6:cb:87:f1:c2:da:76:a6:7b: ea:65:3a:12:1b:b6:41:46:b5:8e:31:28:90:08:88: 41:32:c6:db:83:c4:5f:a0:73:5a:8e:0a:63:78:bd: 06:53:7a:9d:3d:46:ac:66:38:38:30:d8:5a:05:79: 13:e7:d2:dd:81:d1:af:37:23:1c:0a:4d:60:89:b5: d3:f2:e0:e0:c4:ec:40:6d:2b:e0:cf:e5:ee:7b:f2: e0:a9:df:3f:3f:c0:66:d1:ff:6e:70:e3:5b:68:26: 4b:a8:c4:ec:39:d4:73:53:82:87:23:c3:79:be:df: ed:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:26:7E:10:DD:D9:8A:41:0F:DC:ED:5A:20:67:82:1A:38:0A:DC:B2 X509v3 Authority Key Identifier: keyid:5F:02:26:A7:04:CF:62:0E:B2:00:0F:27:E7:A9:19:CE:73:09:91:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/TyZ-EN3ZikEP3O1aIGeCGjgK3LI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.170.133.0/24 IPv6: 2a0c:b847:ffff::/48 Signature Algorithm: sha256WithRSAEncryption 73:e1:5b:a9:6b:9a:e7:13:df:14:11:30:81:c6:86:b9:62:de: a9:18:74:36:85:5d:8b:70:8e:1b:46:11:be:6b:b2:08:71:2a: 46:2f:6c:84:13:35:e2:90:8a:a1:bb:e0:1b:15:9f:67:20:9e: b3:fb:0a:3f:73:ca:84:e2:6d:84:8c:e1:82:42:85:e5:b8:ec: af:c8:08:04:1e:9a:c7:20:30:2e:63:b1:e3:27:85:18:12:9b: 9f:12:05:ec:c8:d2:9d:31:95:b2:8e:9e:29:04:7a:b1:1b:e7: 34:64:20:bd:3a:05:42:12:e9:cd:04:a7:a9:0e:86:34:f0:37: 56:b1:d1:f0:2c:d9:88:25:dd:5c:6b:48:5f:4e:b0:c8:d2:4e: 27:0a:42:d8:c0:e3:79:5a:91:f5:50:fe:a3:76:48:35:7f:c1: 38:8c:cf:13:ef:b7:93:c0:15:c3:9e:a3:9f:79:b8:ca:1a:44: 0f:07:4a:fd:68:7a:b1:23:c9:06:5e:94:68:eb:7c:61:c3:0f: ab:a6:b4:d4:b1:e4:aa:ee:94:d1:e3:f3:98:49:61:2b:77:75: 82:50:09:ce:47:2d:fe:6f:d8:a2:30:25:2c:8f:08:b8:a4:16: 30:91:03:e5:55:e8:d3:9c:d5:8f:b1:9f:88:b3:0e:3c:fc:0c: 60:2f:10:12 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt7NsZAHaMn4ZAjler21SqgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMDIyNmE3MDRjZjYyMGViMjAwMGYyN2U3YTkxOWNlNzMw OTkxYmUwHhcNMjYwMTAxMjAxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjI2N2UxMGRkZDk4YTQxMGZkY2VkNWEyMDY3ODIxYTM4MGFkY2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtv7jNAzRIf7xhA1W6O40z8VhbZ3J 3g5Yk3GiFvk39ftccEudlgrRMgcogmqedL20qfcTknVHHx8Rb/+zjV+/pCMmze8K +xsF2Ox9zoPRyr8Y61IpbjGK9O/5lMWu4tbT6FsZb5F8+MFWeEVejDMZD3Zor9us E8Oa+hvAe/BVMt7p83KZ0apI/IzXSJ/Gy4fxwtp2pnvqZToSG7ZBRrWOMSiQCIhB Msbbg8RfoHNajgpjeL0GU3qdPUasZjg4MNhaBXkT59LdgdGvNyMcCk1gibXT8uDg xOxAbSvgz+Xue/Lgqd8/P8Bm0f9ucONbaCZLqMTsOdRzU4KHI8N5vt/tNQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFE8mfhDd2YpBD9ztWiBngho4CtyyMB8GA1UdIwQY MBaAFF8CJqcEz2IOsgAPJ+epGc5zCZG+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHdJbXB3VFBZZzZ5QUE4bjU2a1p6bk1Ka2I0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC82M2VmYjgtYmYyNC00OGMyLThjNTAt NzVkOWNlNWI4ZDljLzEvVHlaLUVOM1ppa0VQM08xYUlHZUNHamdLM0xJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC82M2VmYjgtYmYyNC00OGMyLThjNTAtNzVkOWNlNWI4ZDlj LzEvWHdJbXB3VFBZZzZ5QUE4bjU2a1p6bk1Ka2I0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQA1aqFMA8E AgACMAkDBwAqDLhH//8wDQYJKoZIhvcNAQELBQADggEBAHPhW6lrmucT3xQRMIHG hrli3qkYdDaFXYtwjhtGEb5rsghxKkYvbIQTNeKQiqG74BsVn2cgnrP7Cj9zyoTi bYSM4YJCheW47K/ICAQemscgMC5jseMnhRgSm58SBezI0p0xlbKOnikEerEb5zRk IL06BUIS6c0Ep6kOhjTwN1ax0fAs2Ygl3VxrSF9OsMjSTicKQtjA43lakfVQ/qN2 SDV/wTiMzxPvt5PAFcOeo595uMoaRA8HSv1oerEjyQZelGjrfGHDD6umtNSx5Kru lNHj85hJYSt3dYJQCc5HLf5v2KIwJSyPCLikFjCRA+VV6NOc1Y+xn4izDjz8DGAv EBI= -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:35 2026 by rpki-client