This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/TIYeUVbpvuyDC2t31dkXKX77tpM.roa File: TIYeUVbpvuyDC2t31dkXKX77tpM.roa (raw, json) Hash identifier: jq2yqV/pOREhu3bPBF+p4OSILcPoLvkCkURypiB0/n0= Subject key identifier: 4C:86:1E:51:56:E9:BE:EC:83:0B:6B:77:D5:D9:17:29:7E:FB:B6:93 Certificate issuer: /CN=d66738a8dadac2d0d3aeddb934f820066b9f5feb Certificate serial: 019B7BA4F080D431189EA3D79B0A7958DE6D Authority key identifier: D6:67:38:A8:DA:DA:C2:D0:D3:AE:DD:B9:34:F8:20:06:6B:9F:5F:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/TIYeUVbpvuyDC2t31dkXKX77tpM.roa Signing time: Thu 01 Jan 2026 22:19:25 +0000 ROA not before: Thu 01 Jan 2026 22:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203136 IP address blocks: 85.117.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.mft rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 15:31:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:f0:80:d4:31:18:9e:a3:d7:9b:0a:79:58:de:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d66738a8dadac2d0d3aeddb934f820066b9f5feb Validity Not Before: Jan 1 22:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c861e5156e9beec830b6b77d5d917297efbb693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ed:05:51:ec:3b:14:33:5f:00:a6:a5:0f:2a: c1:58:8a:bf:66:90:50:e3:5d:0b:07:1f:9d:e7:59: 9f:07:13:dc:4b:a1:4d:13:ea:b1:90:ec:57:fc:20: 2e:73:38:60:42:2a:9f:da:52:7e:28:b0:ed:c9:dd: 24:11:22:0d:b4:8a:f2:61:3d:c1:73:1e:2b:64:14: af:ca:e5:de:53:4b:12:2a:0b:39:76:68:ce:b8:bb: 49:68:73:01:64:d6:5d:c0:f9:83:2a:d3:c6:a4:a4: d2:f2:5f:66:26:f2:df:37:e7:a9:f6:6c:b1:29:d6: 70:db:6e:e8:81:88:ff:3b:64:97:05:aa:7f:16:ab: de:1f:3b:c5:de:6e:da:8a:bb:c4:ac:f1:62:45:fc: 78:5f:66:67:a0:0f:5b:93:3b:f8:bf:2b:b5:15:76: 86:69:fa:97:73:84:ba:16:58:e5:2a:0c:ca:77:30: aa:1a:07:0d:df:9c:ec:95:c8:ac:40:6a:b5:d6:be: d3:09:66:80:35:82:70:e8:0d:fc:03:86:83:34:ad: 9a:a1:0f:7a:8e:80:8e:58:f0:e6:10:5b:11:aa:bd: dd:24:b3:aa:ee:eb:a2:2b:9c:70:bb:53:e9:c4:c2: 05:18:30:85:b1:76:f0:12:e9:b5:f0:7f:58:7a:32: b6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:86:1E:51:56:E9:BE:EC:83:0B:6B:77:D5:D9:17:29:7E:FB:B6:93 X509v3 Authority Key Identifier: keyid:D6:67:38:A8:DA:DA:C2:D0:D3:AE:DD:B9:34:F8:20:06:6B:9F:5F:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/TIYeUVbpvuyDC2t31dkXKX77tpM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.117.53.0/24 Signature Algorithm: sha256WithRSAEncryption 32:33:4e:b3:b7:b7:6d:4b:94:1c:5f:b9:28:f8:8a:e1:32:5c: 78:74:50:0d:1c:e1:21:11:80:fa:4d:c0:a9:4f:9b:85:19:da: 28:8a:9b:f5:03:ef:c4:74:82:c0:ed:a9:97:42:db:09:3c:fd: 6b:f6:8a:15:f8:54:b3:53:fd:d5:83:db:c8:3c:ba:f1:e8:c1: 5f:36:73:68:d7:fd:0f:f3:6e:ae:b9:61:32:38:bb:94:d1:30: a9:36:b9:91:c8:e2:a9:1e:63:bb:4d:32:80:5c:b7:bc:51:2e: ee:ea:53:8a:14:05:bc:a7:1d:54:47:1e:65:ec:52:bb:44:4d: 95:1c:91:34:00:39:ee:b3:17:90:53:7f:af:33:c2:96:d1:60: a7:e4:1b:1a:7f:68:fe:02:f5:ab:b9:b1:17:09:91:a5:b5:d0: a5:c7:39:be:41:be:6b:c0:da:64:a8:2d:58:6d:c5:48:17:38: be:e4:3d:c2:6e:87:ed:80:1a:0b:1d:23:70:d1:cd:7d:55:fa: a8:5e:ac:47:f2:aa:33:d3:4d:ae:14:fd:50:c5:8f:d7:4c:19: b1:62:da:3f:d5:b7:04:0b:ec:5b:b3:a6:f2:f4:a7:57:28:65: 54:7e:d8:75:58:2f:ce:39:4e:6d:b5:ac:94:b6:85:ee:97:97: 5e:07:82:32 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pPCA1DEYnqPXmwp5WN5tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NjczOGE4ZGFkYWMyZDBkM2FlZGRiOTM0ZjgyMDA2NmI5 ZjVmZWIwHhcNMjYwMTAxMjIxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Yzg2MWU1MTU2ZTliZWVjODMwYjZiNzdkNWQ5MTcyOTdlZmJiNjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwO0FUew7FDNfAKalDyrBWIq/ZpBQ 410LBx+d51mfBxPcS6FNE+qxkOxX/CAuczhgQiqf2lJ+KLDtyd0kESINtIryYT3B cx4rZBSvyuXeU0sSKgs5dmjOuLtJaHMBZNZdwPmDKtPGpKTS8l9mJvLfN+ep9myx KdZw227ogYj/O2SXBap/FqveHzvF3m7airvErPFiRfx4X2ZnoA9bkzv4vyu1FXaG afqXc4S6FljlKgzKdzCqGgcN35zslcisQGq11r7TCWaANYJw6A38A4aDNK2aoQ96 joCOWPDmEFsRqr3dJLOq7uuiK5xwu1PpxMIFGDCFsXbwEum18H9YejK22QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEyGHlFW6b7sgwtrd9XZFyl++7aTMB8GA1UdIwQY MBaAFNZnOKja2sLQ067duTT4IAZrn1/rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW1jNHFOcmF3dERUcnQyNU5QZ2dCbXVmWC1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jNTc3MjctOTM5Ni00YmY4LWIyNWQt NmExZTBlYzcxZGE4LzEvVElZZVVWYnB2dXlEQzJ0MzFka1hLWDc3dHBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9jNTc3MjctOTM5Ni00YmY4LWIyNWQtNmExZTBlYzcxZGE4 LzEvMW1jNHFOcmF3dERUcnQyNU5QZ2dCbXVmWC1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVXU1MA0G CSqGSIb3DQEBCwUAA4IBAQAyM06zt7dtS5QcX7ko+IrhMlx4dFANHOEhEYD6TcCp T5uFGdooipv1A+/EdILA7amXQtsJPP1r9ooV+FSzU/3Vg9vIPLrx6MFfNnNo1/0P 826uuWEyOLuU0TCpNrmRyOKpHmO7TTKAXLe8US7u6lOKFAW8px1URx5l7FK7RE2V HJE0ADnusxeQU3+vM8KW0WCn5Bsaf2j+AvWrubEXCZGltdClxzm+Qb5rwNpkqC1Y bcVIFzi+5D3CboftgBoLHSNw0c19VfqoXqxH8qoz002uFP1QxY/XTBmxYto/1bcE C+xbs6by9KdXKGVUfth1WC/OOU5ttayUtoXul5deB4Iy -----END CERTIFICATE-----Generated at Thu Jan 15 21:31:57 2026 by rpki-client