This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/TonW-R-Zm7EJ5G4DyPorHXUfsQY.roa File: TonW-R-Zm7EJ5G4DyPorHXUfsQY.roa (raw, json) Hash identifier: 4NWLdATC5TzLcy4vgySsRMRG+JcNTxLmpZ+bS7QNQno= Subject key identifier: 4E:89:D6:F9:1F:99:9B:B1:09:E4:6E:03:C8:FA:2B:1D:75:1F:B1:06 Certificate issuer: /CN=3dc23e8a8ec9396b1b54cffb271c55766d949199 Certificate serial: 019B7F8516EFE731045912F5E3D19B014514 Authority key identifier: 3D:C2:3E:8A:8E:C9:39:6B:1B:54:CF:FB:27:1C:55:76:6D:94:91:99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/TonW-R-Zm7EJ5G4DyPorHXUfsQY.roa Signing time: Fri 02 Jan 2026 16:23:07 +0000 ROA not before: Fri 02 Jan 2026 16:23:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206119 IP address blocks: 185.233.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:16:ef:e7:31:04:59:12:f5:e3:d1:9b:01:45:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3dc23e8a8ec9396b1b54cffb271c55766d949199 Validity Not Before: Jan 2 16:23:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e89d6f91f999bb109e46e03c8fa2b1d751fb106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1a:45:aa:d3:59:24:8c:b9:fd:a0:62:a7:d8: c2:c4:c5:b5:c0:b9:a4:f0:84:ce:85:59:e8:c2:b0: 1e:56:88:b4:04:00:23:8a:ed:cd:b0:ae:8e:9c:b5: b4:3d:67:3a:be:2f:de:f4:e5:29:56:47:79:21:0a: ba:6b:9a:cf:42:63:37:2b:a9:4e:a0:b2:38:78:53: 30:d3:de:ab:1b:37:51:c7:da:f5:51:eb:ae:11:8d: 72:23:3d:06:83:df:53:e7:f9:e8:98:c2:57:f6:b0: 49:1d:97:fa:1e:5d:21:1f:25:98:0e:99:00:b6:31: 77:b0:89:5e:63:d3:7d:04:db:72:7c:75:92:5a:9f: 3f:9d:87:b0:5b:1c:7f:df:a6:74:a0:45:46:69:d1: 8c:d4:30:8a:04:4a:86:1d:30:9f:8e:4b:b3:e6:91: 29:f9:8d:00:3b:5a:a4:7c:bf:57:02:eb:90:fe:4d: 9a:c7:60:c6:57:48:43:05:e2:ae:8c:5f:16:ac:af: 61:2b:b4:b9:08:f0:9d:5f:c2:56:5d:c3:a7:99:26: 42:2f:59:1d:71:ec:af:4b:26:92:4b:fa:98:f3:ff: 92:30:c0:b3:3e:60:ac:52:2b:63:97:f1:f1:45:1f: ce:f8:eb:45:8f:53:c3:52:b1:f4:40:fa:d2:de:70: 0a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:89:D6:F9:1F:99:9B:B1:09:E4:6E:03:C8:FA:2B:1D:75:1F:B1:06 X509v3 Authority Key Identifier: keyid:3D:C2:3E:8A:8E:C9:39:6B:1B:54:CF:FB:27:1C:55:76:6D:94:91:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/TonW-R-Zm7EJ5G4DyPorHXUfsQY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.233.64.0/24 Signature Algorithm: sha256WithRSAEncryption 59:19:03:fe:0c:64:40:1e:7f:93:a8:58:4c:3b:e5:97:29:92: de:9e:e9:45:7b:a5:b6:58:28:34:96:e1:5b:e2:37:8d:4f:85: 56:9f:5c:30:af:6d:fc:6b:2c:b4:73:08:3d:87:51:be:8a:fd: 27:04:ae:2e:a5:f2:9d:63:48:d1:8f:1c:49:bb:88:82:1a:c9: 6c:5f:a5:d0:b2:f8:53:21:7c:58:91:07:f3:6a:41:80:a4:a3: 05:20:16:da:2b:b8:20:47:b5:f0:a0:88:5d:2b:05:d7:79:ca: a3:57:79:e9:37:a6:74:42:fe:51:ea:79:e8:f2:04:0c:af:3d: e2:13:4f:04:a9:c0:5e:c9:4d:0d:ac:90:24:d2:b8:79:5f:1b: 3e:c7:ce:f0:db:0a:2e:5e:7f:cd:f7:7a:05:1d:27:8b:c3:a5: ae:5b:a5:53:47:10:3f:79:2a:1e:59:69:88:8a:0a:47:e7:9c: 11:06:7f:51:71:32:f4:89:82:49:ed:55:0b:9f:40:48:61:39: 7e:fb:54:0f:67:37:ea:2f:ce:bb:65:47:0f:44:2f:ab:40:03: 3a:68:44:64:f1:f7:db:9e:de:de:4b:6e:1b:19:9e:54:b5:85: 99:34:8b:57:2e:79:9d:49:a3:bf:41:fc:77:88:14:ff:56:02: 46:ee:f4:26 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hRbv5zEEWRL149GbAUUUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkYzIzZThhOGVjOTM5NmIxYjU0Y2ZmYjI3MWM1NTc2NmQ5 NDkxOTkwHhcNMjYwMTAyMTYyMzA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTg5ZDZmOTFmOTk5YmIxMDllNDZlMDNjOGZhMmIxZDc1MWZiMTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRpFqtNZJIy5/aBip9jCxMW1wLmk 8ITOhVnowrAeVoi0BAAjiu3NsK6OnLW0PWc6vi/e9OUpVkd5IQq6a5rPQmM3K6lO oLI4eFMw096rGzdRx9r1UeuuEY1yIz0Gg99T5/nomMJX9rBJHZf6Hl0hHyWYDpkA tjF3sIleY9N9BNtyfHWSWp8/nYewWxx/36Z0oEVGadGM1DCKBEqGHTCfjkuz5pEp +Y0AO1qkfL9XAuuQ/k2ax2DGV0hDBeKujF8WrK9hK7S5CPCdX8JWXcOnmSZCL1kd ceyvSyaSS/qY8/+SMMCzPmCsUitjl/HxRR/O+OtFj1PDUrH0QPrS3nAKKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE6J1vkfmZuxCeRuA8j6Kx11H7EGMB8GA1UdIwQY MBaAFD3CPoqOyTlrG1TP+yccVXZtlJGZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGNJLWlvN0pPV3NiVk1fN0p4eFZkbTJVa1prLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9kMWNmZDctOThkMy00M2I5LTk4MWUt YzBkZDQ3NzFjMmFhLzEvVG9uVy1SLVptN0VKNUc0RHlQb3JIWFVmc1FZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9kMWNmZDctOThkMy00M2I5LTk4MWUtYzBkZDQ3NzFjMmFh LzEvUGNJLWlvN0pPV3NiVk1fN0p4eFZkbTJVa1prLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuelAMA0G CSqGSIb3DQEBCwUAA4IBAQBZGQP+DGRAHn+TqFhMO+WXKZLenulFe6W2WCg0luFb 4jeNT4VWn1wwr238ayy0cwg9h1G+iv0nBK4upfKdY0jRjxxJu4iCGslsX6XQsvhT IXxYkQfzakGApKMFIBbaK7ggR7XwoIhdKwXXecqjV3npN6Z0Qv5R6nno8gQMrz3i E08EqcBeyU0NrJAk0rh5Xxs+x87w2wouXn/N93oFHSeLw6WuW6VTRxA/eSoeWWmI igpH55wRBn9RcTL0iYJJ7VULn0BIYTl++1QPZzfqL867ZUcPRC+rQAM6aERk8ffb nt7eS24bGZ5UtYWZNItXLnmdSaO/Qfx3iBT/VgJG7vQm -----END CERTIFICATE-----Generated at Wed Jan 21 22:02:00 2026 by rpki-client