This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/tYJC_RLkea-R9DGyiP5WpibL6t8.roa File: tYJC_RLkea-R9DGyiP5WpibL6t8.roa (raw, json) Hash identifier: 5v6gsOIATskbh1Ml478fq/pv1vDgXJirdgTuXOCN7Mc= Subject key identifier: B5:82:42:FD:12:E4:79:AF:91:F4:31:B2:88:FE:56:A6:26:CB:EA:DF Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6 Certificate serial: 019B78A31894FA4ADA37FF83C97156230A95 Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/tYJC_RLkea-R9DGyiP5WpibL6t8.roa Signing time: Thu 01 Jan 2026 08:18:33 +0000 ROA not before: Thu 01 Jan 2026 08:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 109.205.193.0/24 maxlen: 24 2a01:fb00::/32 maxlen: 34 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:18:94:fa:4a:da:37:ff:83:c9:71:56:23:0a:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6 Validity Not Before: Jan 1 08:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b58242fd12e479af91f431b288fe56a626cbeadf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:52:a9:6a:3e:7a:49:5f:08:dc:78:aa:b2:33: cd:ff:95:92:de:92:ef:f3:92:86:6a:6c:2f:e1:36: 67:aa:9c:3c:21:4f:4f:a7:4e:14:63:7e:b8:9c:af: eb:7e:6a:28:20:74:32:42:7f:9d:7e:7c:65:28:2f: b4:e3:0c:af:a4:36:78:57:42:46:85:ae:76:0a:95: b1:7d:d5:e6:b8:63:0b:51:5e:5a:44:7d:26:aa:5b: 36:e4:cc:ce:37:dc:89:51:54:4e:41:df:54:1d:a9: 74:75:06:7f:fc:29:e0:4e:a2:c7:c9:86:00:f7:ac: 94:f7:20:46:21:74:8c:e0:ca:83:0c:ab:5d:6e:3b: 60:a0:8d:1a:f3:c3:35:4b:c8:df:e0:47:3f:e5:95: 6a:e8:61:e6:77:0f:9a:a0:64:b4:63:e2:a9:33:61: 9c:e2:3a:7b:08:7c:42:37:5f:af:53:04:27:d5:cd: c0:dc:e8:76:46:04:11:81:44:7f:ff:fa:77:59:94: f3:fc:21:55:4b:54:c4:15:9f:8b:3c:67:b8:d0:be: 08:f0:15:52:59:fb:78:c1:d4:e9:ca:2b:9e:13:69: 45:aa:a7:2f:61:ea:42:16:73:1f:d0:11:10:a0:c6: 3b:25:1d:31:4b:98:fc:f0:b0:21:29:fb:d0:94:2b: 37:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:82:42:FD:12:E4:79:AF:91:F4:31:B2:88:FE:56:A6:26:CB:EA:DF X509v3 Authority Key Identifier: keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/tYJC_RLkea-R9DGyiP5WpibL6t8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.205.193.0/24 IPv6: 2a01:fb00::/32 Signature Algorithm: sha256WithRSAEncryption 2c:e8:68:d6:30:d9:51:cf:b3:8c:50:3f:57:5b:9b:03:61:af: 3d:5d:f5:8f:ba:da:46:c3:54:6d:15:e0:f0:7d:5f:8a:15:e5: ec:f3:eb:fe:aa:f4:89:50:43:c2:47:6d:c2:06:d7:60:57:92: 34:fc:df:93:5a:72:8b:ae:8e:e3:5d:d7:13:9f:10:e6:9a:4a: 61:d6:ec:6f:9a:2f:dd:44:69:a8:f9:c5:31:fa:cb:c5:d6:a3: 39:3a:f1:d9:09:88:00:cb:a8:ad:c5:e0:20:0b:8d:fa:2b:3d: 6c:40:21:80:dc:bb:2b:48:97:98:3d:4f:1f:32:13:db:05:65: 03:3b:2e:1e:3d:46:2b:83:79:f5:1c:6f:25:e9:4a:a1:50:42: ac:f4:74:1e:08:10:dc:c5:bf:60:fa:79:ed:7c:09:a3:69:f4: 37:0a:5c:cb:19:86:75:18:39:0c:9f:32:b9:9f:f1:2b:1b:c2: e5:24:dc:6e:98:87:cb:23:a4:84:85:74:48:a7:ed:8a:e0:2b: 55:1e:ad:7b:2b:27:01:7d:f3:bd:75:b8:b3:64:07:f4:63:ff: 69:36:84:8f:45:77:55:eb:4d:4f:26:1f:74:a2:2c:d9:c9:a2: 13:0d:b1:86:96:fb:6d:03:81:b6:33:6b:fe:da:8d:a7:89:8c: bd:0a:d0:dc -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4oxiU+kraN/+DyXFWIwqVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMjQ1ODFlNDM2ODgyNWQ1ZTEzZjRmMmEwZDZmZjhlNDg0 Yzk1ZTYwHhcNMjYwMTAxMDgxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTgyNDJmZDEyZTQ3OWFmOTFmNDMxYjI4OGZlNTZhNjI2Y2JlYWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1Kpaj56SV8I3HiqsjPN/5WS3pLv 85KGamwv4TZnqpw8IU9Pp04UY364nK/rfmooIHQyQn+dfnxlKC+04wyvpDZ4V0JG ha52CpWxfdXmuGMLUV5aRH0mqls25MzON9yJUVROQd9UHal0dQZ//CngTqLHyYYA 96yU9yBGIXSM4MqDDKtdbjtgoI0a88M1S8jf4Ec/5ZVq6GHmdw+aoGS0Y+KpM2Gc 4jp7CHxCN1+vUwQn1c3A3Oh2RgQRgUR///p3WZTz/CFVS1TEFZ+LPGe40L4I8BVS Wft4wdTpyiueE2lFqqcvYepCFnMf0BEQoMY7JR0xS5j88LAhKfvQlCs3lQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLWCQv0S5HmvkfQxsoj+VqYmy+rfMB8GA1UdIwQY MBaAFPMkWB5DaIJdXhP08qDW/45ITJXmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82YjkxYWItOTlkYi00NjQ4LWIxNTMt NmUyZDk3Y2ExNWZmLzEvdFlKQ19STGtlYS1SOURHeWlQNVdwaWJMNnQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS82YjkxYWItOTlkYi00NjQ4LWIxNTMtNmUyZDk3Y2ExNWZm LzEvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAbc3BMA0E AgACMAcDBQAqAfsAMA0GCSqGSIb3DQEBCwUAA4IBAQAs6GjWMNlRz7OMUD9XW5sD Ya89XfWPutpGw1RtFeDwfV+KFeXs8+v+qvSJUEPCR23CBtdgV5I0/N+TWnKLro7j XdcTnxDmmkph1uxvmi/dRGmo+cUx+svF1qM5OvHZCYgAy6itxeAgC436Kz1sQCGA 3LsrSJeYPU8fMhPbBWUDOy4ePUYrg3n1HG8l6UqhUEKs9HQeCBDcxb9g+nntfAmj afQ3ClzLGYZ1GDkMnzK5n/ErG8LlJNxumIfLI6SEhXRIp+2K4CtVHq17KycBffO9 dbizZAf0Y/9pNoSPRXdV601PJh90oizZyaITDbGGlvttA4G2M2v+2o2niYy9CtDc -----END CERTIFICATE-----Generated at Fri Jan 9 00:58:33 2026 by rpki-client