This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/Ts1zo9Z82k-9ve-8edbDB9i2RHs.roa File: Ts1zo9Z82k-9ve-8edbDB9i2RHs.roa (raw, json) Hash identifier: Jg/jOB8cB9GuZDvZAaZXrBbzDRGk3pxwKEfz4X5Tl/0= Subject key identifier: 4E:CD:73:A3:D6:7C:DA:4F:BD:BD:EF:BC:79:D6:C3:07:D8:B6:44:7B Certificate issuer: /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4 Certificate serial: 019B291AA1BF01EB22E3EBE65B6F29EE3759 Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/Ts1zo9Z82k-9ve-8edbDB9i2RHs.roa Signing time: Tue 16 Dec 2025 21:39:29 +0000 ROA not before: Tue 16 Dec 2025 21:39:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 45.159.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 06:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:1a:a1:bf:01:eb:22:e3:eb:e6:5b:6f:29:ee:37:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4 Validity Not Before: Dec 16 21:39:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4ecd73a3d67cda4fbdbdefbc79d6c307d8b6447b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:30:f8:1d:cc:db:3e:da:7c:20:c9:e4:2c:be: 72:44:25:00:15:e8:27:bc:e5:ef:45:1b:67:32:e8: 85:28:91:44:79:fd:6d:9b:cf:d7:2f:67:fc:ce:a1: 5e:05:7d:f6:5b:5f:23:48:95:f9:0a:0f:5e:a6:95: 58:c3:df:4e:44:60:54:16:79:cc:2b:39:af:95:4f: 77:f7:d4:fe:a0:8b:42:0c:2b:4a:6b:48:14:e2:27: ef:30:4e:78:30:a9:91:67:b3:89:6c:4a:4b:62:22: b2:f5:b2:41:ff:c8:d0:9f:3b:1d:cf:cb:2c:24:04: 3c:3b:0b:82:6a:54:41:e3:0c:d6:9c:c6:22:8e:d1: bc:c3:e7:d4:34:bc:c5:64:27:cf:ec:86:49:cc:d5: 30:6e:bf:6d:f6:d4:52:90:fc:0d:09:87:25:43:13: e6:ec:72:76:c9:30:33:e3:de:a8:06:0d:44:3a:d4: f7:12:e6:0c:a8:cf:bf:9f:98:99:4b:a2:94:fe:75: c2:89:e7:42:ae:b5:cd:80:4c:ab:8d:d4:5f:5e:f5: 36:93:47:96:52:5a:b9:44:c9:ad:e7:43:84:da:10: 08:f4:99:15:52:5b:9a:dd:1c:46:a2:5c:7d:73:fc: 3f:3a:da:8f:af:3c:fb:56:54:72:b3:aa:b0:9f:00: eb:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:CD:73:A3:D6:7C:DA:4F:BD:BD:EF:BC:79:D6:C3:07:D8:B6:44:7B X509v3 Authority Key Identifier: keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/Ts1zo9Z82k-9ve-8edbDB9i2RHs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.159.12.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:f1:27:51:a8:3b:1e:8a:f6:d7:40:78:cb:88:85:03:1e:7e: 56:13:f3:83:ad:0c:37:45:8d:ee:8d:d9:8f:68:13:c1:68:11: bd:fe:f8:8d:6f:eb:ad:28:49:3e:47:df:70:40:6c:e9:ac:c9: f8:aa:c8:55:4c:64:c7:e5:e6:b3:ec:b4:c7:5a:96:88:27:d4: 58:15:bd:ec:15:4b:9b:94:ce:95:1d:8d:bc:2a:62:33:8b:05: 16:5b:88:3d:36:9e:e8:7f:9f:1b:b4:02:e6:11:7d:8c:5a:9b: ac:1d:ac:38:e9:e7:a7:df:5f:87:b0:6c:5c:d2:26:a3:2b:0f: 49:4c:d5:18:9e:8d:e7:71:8f:05:25:7f:c7:c5:e6:df:01:60: dc:07:5b:78:d4:05:5a:10:10:3f:47:52:19:51:5c:57:d9:b6: da:32:3b:ac:63:c2:ea:d0:84:59:03:d1:fb:a6:ab:8c:63:91: e9:63:05:42:a5:98:1b:77:f1:ae:5c:7d:9c:cc:0c:cd:43:29: 25:aa:77:ad:08:e8:05:13:98:cb:98:74:4f:ae:77:be:a0:5c: 09:a9:fe:93:d6:31:4d:dd:db:3b:9d:34:0c:37:9f:49:de:da: d5:67:ad:e1:ce:32:9a:96:12:9e:44:12:8c:59:1f:31:1a:44: e0:eb:aa:78 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZspGqG/Aesi4+vmW28p7jdZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYzM1YmM5YjdmODU1MGJlM2U0NjdjNTRhOWQzYTY2ZTI0 NDNiZDQwHhcNMjUxMjE2MjEzOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZWNkNzNhM2Q2N2NkYTRmYmRiZGVmYmM3OWQ2YzMwN2Q4YjY0NDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTD4HczbPtp8IMnkLL5yRCUAFegn vOXvRRtnMuiFKJFEef1tm8/XL2f8zqFeBX32W18jSJX5Cg9eppVYw99ORGBUFnnM KzmvlU9399T+oItCDCtKa0gU4ifvME54MKmRZ7OJbEpLYiKy9bJB/8jQnzsdz8ss JAQ8OwuCalRB4wzWnMYijtG8w+fUNLzFZCfP7IZJzNUwbr9t9tRSkPwNCYclQxPm 7HJ2yTAz496oBg1EOtT3EuYMqM+/n5iZS6KU/nXCiedCrrXNgEyrjdRfXvU2k0eW Ulq5RMmt50OE2hAI9JkVUlua3RxGolx9c/w/OtqPrzz7VlRys6qwnwDr8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE7Nc6PWfNpPvb3vvHnWwwfYtkR7MB8GA1UdIwQY MBaAFNPDW8m3+FUL4+RnxUqdOmbiRDvUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDhOYnliZjRWUXZqNUdmRlNwMDZadUpFTzlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84YmE4YmItYzFjMC00ZDM1LTkwYTct Y2RhNWMzNzY2ZjAzLzEvVHMxem85Wjgyay05dmUtOGVkYkRCOWkyUkhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy84YmE4YmItYzFjMC00ZDM1LTkwYTctY2RhNWMzNzY2ZjAz LzEvMDhOYnliZjRWUXZqNUdmRlNwMDZadUpFTzlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ8MMA0G CSqGSIb3DQEBCwUAA4IBAQCP8SdRqDseivbXQHjLiIUDHn5WE/ODrQw3RY3ujdmP aBPBaBG9/viNb+utKEk+R99wQGzprMn4qshVTGTH5eaz7LTHWpaIJ9RYFb3sFUub lM6VHY28KmIziwUWW4g9Np7of58btALmEX2MWpusHaw46een31+HsGxc0iajKw9J TNUYno3ncY8FJX/HxebfAWDcB1t41AVaEBA/R1IZUVxX2bbaMjusY8Lq0IRZA9H7 pquMY5HpYwVCpZgbd/GuXH2czAzNQyklqnetCOgFE5jLmHRPrne+oFwJqf6T1jFN 3ds7nTQMN59J3trVZ63hzjKalhKeRBKMWR8xGkTg66p4 -----END CERTIFICATE-----Generated at Sat Dec 20 12:54:52 2025 by rpki-client