This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/tzBpElROeFE4YvPvkrDo9wg__zs.roa File: tzBpElROeFE4YvPvkrDo9wg__zs.roa (raw, json) Hash identifier: FVFmdLOR8nbI+H9KWKyzfFrmi5eYKjA6nxxAmdPiAgk= Subject key identifier: B7:30:69:12:54:4E:78:51:38:62:F3:EF:92:B0:E8:F7:08:3F:FF:3B Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Certificate serial: 019B02FC9DEF9A39729D9FB75E7EDED4560A Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/tzBpElROeFE4YvPvkrDo9wg__zs.roa Signing time: Tue 09 Dec 2025 12:01:08 +0000 ROA not before: Tue 09 Dec 2025 12:01:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209372 IP address blocks: 5.104.72.0/24 maxlen: 24 5.104.74.0/24 maxlen: 24 31.40.194.0/24 maxlen: 24 45.130.184.0/24 maxlen: 24 45.130.185.0/24 maxlen: 24 45.130.186.0/24 maxlen: 24 45.130.187.0/24 maxlen: 24 45.140.4.0/24 maxlen: 24 45.140.6.0/24 maxlen: 24 45.140.7.0/24 maxlen: 24 45.154.120.0/22 maxlen: 24 77.83.20.0/22 maxlen: 24 77.83.48.0/23 maxlen: 24 77.83.48.0/24 maxlen: 24 77.83.49.0/24 maxlen: 24 84.252.64.0/22 maxlen: 24 86.62.53.0/24 maxlen: 24 86.62.54.0/24 maxlen: 24 88.218.80.0/24 maxlen: 24 88.218.81.0/24 maxlen: 24 88.218.82.0/23 maxlen: 24 88.218.239.0/24 maxlen: 24 91.132.126.0/24 maxlen: 24 91.132.127.0/24 maxlen: 24 91.245.238.0/24 maxlen: 24 91.245.239.0/24 maxlen: 24 93.177.92.0/24 maxlen: 24 93.177.93.0/24 maxlen: 24 95.214.83.0/24 maxlen: 24 95.214.92.0/24 maxlen: 24 95.214.93.0/24 maxlen: 24 95.214.95.0/24 maxlen: 24 95.214.244.0/22 maxlen: 24 176.118.188.0/24 maxlen: 24 176.118.189.0/24 maxlen: 24 176.118.191.0/24 maxlen: 24 185.155.100.0/24 maxlen: 24 185.177.76.0/24 maxlen: 24 185.177.77.0/24 maxlen: 24 193.31.124.0/23 maxlen: 24 193.47.36.0/22 maxlen: 24 193.160.68.0/24 maxlen: 24 193.160.72.0/24 maxlen: 24 193.160.74.0/24 maxlen: 24 193.160.75.0/24 maxlen: 24 194.28.157.0/24 maxlen: 24 194.53.188.0/22 maxlen: 24 194.124.41.0/24 maxlen: 24 212.69.135.0/24 maxlen: 24 213.109.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:02:fc:9d:ef:9a:39:72:9d:9f:b7:5e:7e:de:d4:56:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Validity Not Before: Dec 9 12:01:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b7306912544e78513862f3ef92b0e8f7083fff3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ea:f5:23:f7:98:85:37:da:42:ca:2c:d5:0b: a0:a2:9b:bd:67:de:e1:56:55:35:4d:7b:00:9f:cf: b1:05:b2:ce:dc:64:33:24:af:0a:da:c6:4b:59:3a: ac:04:9d:d8:74:3c:1f:22:ed:9c:18:60:27:74:cb: 28:52:49:2f:a8:45:84:52:4a:d0:90:33:5e:d1:dd: e9:3f:93:87:c8:57:79:a0:5d:14:6f:99:4c:4d:fe: a2:40:73:59:95:71:d8:c0:d2:95:c8:6b:ad:cd:d0: cc:68:bf:5d:1e:04:bf:93:bc:c6:47:27:cb:dc:23: 08:0a:8f:6f:2b:a8:67:5f:09:2a:0d:10:9b:71:eb: 10:bc:d0:d8:58:d4:b9:f3:41:87:5d:42:a1:ba:39: 32:a0:d6:85:7c:0e:81:ca:4c:25:a9:e7:cb:f6:60: d8:b5:f4:fd:87:26:00:44:8e:80:18:1f:0f:d2:28: c9:3c:57:45:e9:e2:3f:27:bf:e7:49:b4:c4:e5:72: d6:ce:fa:3a:db:1c:84:99:1d:58:69:e5:a2:7f:76: ce:03:2c:fc:f1:68:0a:de:b8:30:4a:dd:95:00:aa: 71:62:11:42:e6:6c:18:a7:f8:ff:b1:a3:de:cf:de: f1:b1:0b:2d:14:68:e3:b0:2c:80:7b:92:12:57:59: c9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:30:69:12:54:4E:78:51:38:62:F3:EF:92:B0:E8:F7:08:3F:FF:3B X509v3 Authority Key Identifier: keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/tzBpElROeFE4YvPvkrDo9wg__zs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.104.72.0/24 5.104.74.0/24 31.40.194.0/24 45.130.184.0/22 45.140.4.0/24 45.140.6.0/23 45.154.120.0/22 77.83.20.0/22 77.83.48.0/23 84.252.64.0/22 86.62.53.0-86.62.54.255 88.218.80.0/22 88.218.239.0/24 91.132.126.0/23 91.245.238.0/23 93.177.92.0/23 95.214.83.0/24 95.214.92.0/23 95.214.95.0/24 95.214.244.0/22 176.118.188.0/23 176.118.191.0/24 185.155.100.0/24 185.177.76.0/23 193.31.124.0/23 193.47.36.0/22 193.160.68.0/24 193.160.72.0/24 193.160.74.0/23 194.28.157.0/24 194.53.188.0/22 194.124.41.0/24 212.69.135.0/24 213.109.188.0/22 Signature Algorithm: sha256WithRSAEncryption 97:80:b7:10:3c:a3:f8:0d:ba:8d:59:c1:86:dd:be:91:1d:d2: 5d:cf:cc:f6:f2:2e:91:05:35:65:b3:bb:2c:8f:db:dc:6f:46: 1c:e9:7b:19:38:37:fc:18:1e:d4:ef:1e:92:f7:49:ef:16:c3: 01:71:41:2a:39:73:f7:00:69:74:c6:9a:24:6e:b6:cf:c8:32: 95:08:6e:1f:4b:2f:d1:09:c5:be:40:48:5d:3e:ba:bc:1d:8f: 2d:92:65:3b:aa:59:de:87:2d:dd:0a:8f:d9:c9:8a:36:6c:b3: af:45:c8:7e:97:1d:2d:39:9f:86:cb:6f:12:77:5c:61:a5:91: 70:21:8b:3b:24:09:ae:f4:c8:b0:a2:aa:c2:51:55:56:33:dc: 87:c8:23:53:84:a3:91:0f:68:69:85:55:96:69:c6:02:1d:85: 00:3a:b0:79:60:5b:9a:aa:c2:8a:0f:ec:f9:5f:cb:eb:07:c3: 17:cf:dd:a1:08:90:01:0f:19:8b:9a:96:6c:d4:7a:81:d7:ff: 51:62:d1:43:18:84:2e:cc:8f:bf:1f:ea:7a:32:fb:f4:7c:1d: 3f:e3:0c:25:f1:e0:ca:dd:1e:21:d7:ed:2e:bd:08:f1:b3:ec: ac:3c:c6:5c:30:e8:ca:62:1f:e9:f8:00:a0:c6:3d:94:bc:97: ee:c8:65:d0 -----BEGIN CERTIFICATE----- MIIF0DCCBLigAwIBAgISAZsC/J3vmjlynZ+3Xn7e1FYKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2 OWExZmQwHhcNMjUxMjA5MTIwMTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzMwNjkxMjU0NGU3ODUxMzg2MmYzZWY5MmIwZThmNzA4M2ZmZjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAour1I/eYhTfaQsos1Qugopu9Z97h VlU1TXsAn8+xBbLO3GQzJK8K2sZLWTqsBJ3YdDwfIu2cGGAndMsoUkkvqEWEUkrQ kDNe0d3pP5OHyFd5oF0Ub5lMTf6iQHNZlXHYwNKVyGutzdDMaL9dHgS/k7zGRyfL 3CMICo9vK6hnXwkqDRCbcesQvNDYWNS580GHXUKhujkyoNaFfA6BykwlqefL9mDY tfT9hyYARI6AGB8P0ijJPFdF6eI/J7/nSbTE5XLWzvo62xyEmR1YaeWif3bOAyz8 8WgK3rgwSt2VAKpxYhFC5mwYp/j/saPez97xsQstFGjjsCyAe5ISV1nJFwIDAQAB o4IC3DCCAtgwHQYDVR0OBBYEFLcwaRJUTnhROGLz75Kw6PcIP/87MB8GA1UdIwQY MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et OTk0ODA2ZjA4MWYwLzEvdHpCcEVsUk9lRkU0WXZQdmtyRG85d2dfX3pzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHxBggrBgEFBQcBBwEB/wSB4TCB3jCB2wQCAAEwgdQDBAAF aEgDBAAFaEoDBAAfKMIDBAItgrgDBAAtjAQDBAEtjAYDBAItmngDBAJNUxQDBAFN UzADBAJU/EAwDAMEAFY+NQMEAFY+NgMEAljaUAMEAFja7wMEAVuEfgMEAVv17gME AV2xXAMEAF/WUwMEAV/WXAMEAF/WXwMEAl/W9AMEAbB2vAMEALB2vwMEALmbZAME AbmxTAMEAcEffAMEAsEvJAMEAMGgRAMEAMGgSAMEAcGgSgMEAMIcnQMEAsI1vAME AMJ8KQMEANRFhwMEAtVtvDANBgkqhkiG9w0BAQsFAAOCAQEAl4C3EDyj+A26jVnB ht2+kR3SXc/M9vIukQU1ZbO7LI/b3G9GHOl7GTg3/Bge1O8ekvdJ7xbDAXFBKjlz 9wBpdMaaJG62z8gylQhuH0sv0QnFvkBIXT66vB2PLZJlO6pZ3oct3QqP2cmKNmyz r0XIfpcdLTmfhstvEndcYaWRcCGLOyQJrvTIsKKqwlFVVjPch8gjU4SjkQ9oaYVV lmnGAh2FADqweWBbmqrCig/s+V/L6wfDF8/doQiQAQ8Zi5qWbNR6gdf/UWLRQxiE LsyPvx/qejL79HwdP+MMJfHgyt0eIdftLr0I8bPsrDzGXDDoymIf6fgAoMY9lLyX 7shl0A== -----END CERTIFICATE-----Generated at Fri Dec 19 22:34:24 2025 by rpki-client