This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6c59c0-ecd8-4727-b1de-315a79f59e18/1/TsNw6_rUlF3WyS0xB9lA_qFI5N0.roa File: TsNw6_rUlF3WyS0xB9lA_qFI5N0.roa (raw, json) Hash identifier: o/jK1+Sozn92VWRitjnWkL3+T8fEVmw/zg1uz6fdVJQ= Subject key identifier: 4E:C3:70:EB:FA:D4:94:5D:D6:C9:2D:31:07:D9:40:FE:A1:48:E4:DD Certificate issuer: /CN=2f70532664343cb3d2897023a127f60ba917a5dd Certificate serial: 019B79ECDE2BD254F607B4B4D911B1904307 Authority key identifier: 2F:70:53:26:64:34:3C:B3:D2:89:70:23:A1:27:F6:0B:A9:17:A5:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/6c59c0-ecd8-4727-b1de-315a79f59e18/1/TsNw6_rUlF3WyS0xB9lA_qFI5N0.roa Signing time: Thu 01 Jan 2026 14:18:45 +0000 ROA not before: Thu 01 Jan 2026 14:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25488 IP address blocks: 87.250.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/6c59c0-ecd8-4727-b1de-315a79f59e18/1/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.crl rsync://rpki.ripe.net/repository/DEFAULT/54/6c59c0-ecd8-4727-b1de-315a79f59e18/1/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.mft rsync://rpki.ripe.net/repository/DEFAULT/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:de:2b:d2:54:f6:07:b4:b4:d9:11:b1:90:43:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f70532664343cb3d2897023a127f60ba917a5dd Validity Not Before: Jan 1 14:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ec370ebfad4945dd6c92d3107d940fea148e4dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:33:04:72:4d:9d:4f:52:16:78:8c:a6:63:42: ec:88:a3:0d:2a:18:fa:e2:3f:25:f8:94:fe:a4:09: a6:c3:79:1d:2c:85:46:4b:8c:dd:90:d4:bd:8d:15: b8:c2:b5:51:db:d7:4c:7b:a5:a2:7c:c8:d0:d3:09: e3:31:ab:32:cc:f5:59:cb:0e:73:4e:30:89:60:81: 39:37:76:37:33:e1:d5:e2:fb:c9:47:03:f2:be:59: 08:b9:5b:b7:12:20:82:63:e9:89:58:b5:50:cf:e8: 94:ee:8e:03:9d:0f:29:39:cb:cf:a6:aa:38:4f:3f: b2:f2:7a:a0:4b:76:3d:e8:06:2d:bd:30:39:b2:a9: 0f:cd:a7:6c:f6:dc:71:f4:72:13:8e:a3:65:15:bb: d1:1c:43:20:a1:00:c7:dc:55:0a:65:e0:95:d9:6c: ea:d1:2b:30:ad:33:d1:35:58:4f:72:b3:24:e1:71: b6:6b:21:67:e1:97:56:f8:af:39:a5:d2:dd:35:77: 9a:96:cd:1b:ec:a3:75:20:d6:d5:5e:0c:9c:20:0a: 82:8a:36:1d:eb:5e:fb:7a:ef:6d:86:5e:a5:52:eb: c3:b7:98:0d:04:1b:94:09:03:a4:b2:4f:a1:a1:36: c0:b3:98:f9:96:fd:26:9e:5b:d8:e8:6a:fa:50:d2: 4b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:C3:70:EB:FA:D4:94:5D:D6:C9:2D:31:07:D9:40:FE:A1:48:E4:DD X509v3 Authority Key Identifier: keyid:2F:70:53:26:64:34:3C:B3:D2:89:70:23:A1:27:F6:0B:A9:17:A5:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c59c0-ecd8-4727-b1de-315a79f59e18/1/TsNw6_rUlF3WyS0xB9lA_qFI5N0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c59c0-ecd8-4727-b1de-315a79f59e18/1/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.250.64.0/19 Signature Algorithm: sha256WithRSAEncryption 4a:21:94:28:cf:d0:0b:6b:5d:33:d4:ac:b1:34:b4:46:d0:9f: 2e:a7:04:3e:4a:6f:44:38:ea:97:09:41:ce:dd:bf:a9:ca:a9: 99:d2:6f:6e:da:33:93:29:38:6a:4b:7c:08:62:bc:2f:74:71: 1c:71:4f:41:95:e6:31:8a:ad:4d:08:21:da:26:2c:72:97:bd: fa:d4:5c:d7:27:67:f9:b6:2f:04:f8:ff:e9:0d:db:47:c1:8e: 18:4b:ce:eb:b3:c7:14:3e:b0:d6:0e:82:dc:68:73:4f:6d:36: a3:b1:de:30:84:2b:2f:fc:3f:94:31:26:ac:96:d6:d4:f7:3f: 65:67:4e:85:d7:82:3c:fe:fe:5e:0f:8f:2e:80:d0:84:0b:c3: 9d:5b:c6:70:f6:f8:04:52:15:3f:95:4e:d4:a3:bd:76:97:af: 08:ed:db:2a:5b:98:2c:95:0c:c7:df:4a:85:15:39:25:9d:ac: 25:ee:7d:5e:cd:f9:66:96:f0:17:a3:e5:7c:59:e7:f6:29:48: bd:67:b1:cb:8d:b1:00:1b:07:39:e5:f2:dd:57:52:0f:a3:02: 18:fd:14:ea:f5:05:f9:82:1a:34:83:0b:82:9d:86:5b:54:7d: 63:7e:20:4c:de:ce:93:43:ed:7c:67:29:bc:06:9e:d0:85:47: bb:e7:c0:4d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57N4r0lT2B7S02RGxkEMHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNzA1MzI2NjQzNDNjYjNkMjg5NzAyM2ExMjdmNjBiYTkx N2E1ZGQwHhcNMjYwMTAxMTQxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZWMzNzBlYmZhZDQ5NDVkZDZjOTJkMzEwN2Q5NDBmZWExNDhlNGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+TMEck2dT1IWeIymY0LsiKMNKhj6 4j8l+JT+pAmmw3kdLIVGS4zdkNS9jRW4wrVR29dMe6WifMjQ0wnjMasyzPVZyw5z TjCJYIE5N3Y3M+HV4vvJRwPyvlkIuVu3EiCCY+mJWLVQz+iU7o4DnQ8pOcvPpqo4 Tz+y8nqgS3Y96AYtvTA5sqkPzads9txx9HITjqNlFbvRHEMgoQDH3FUKZeCV2Wzq 0SswrTPRNVhPcrMk4XG2ayFn4ZdW+K85pdLdNXeals0b7KN1INbVXgycIAqCijYd 6177eu9thl6lUuvDt5gNBBuUCQOksk+hoTbAs5j5lv0mnlvY6Gr6UNJLRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE7DcOv61JRd1sktMQfZQP6hSOTdMB8GA1UdIwQY MBaAFC9wUyZkNDyz0olwI6En9gupF6XdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDNCVEptUTBQTFBTaVhBam9TZjJDNmtYcGQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC82YzU5YzAtZWNkOC00NzI3LWIxZGUt MzE1YTc5ZjU5ZTE4LzEvVHNOdzZfclVsRjNXeVMweEI5bEFfcUZJNU4wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC82YzU5YzAtZWNkOC00NzI3LWIxZGUtMzE1YTc5ZjU5ZTE4 LzEvTDNCVEptUTBQTFBTaVhBam9TZjJDNmtYcGQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFV/pAMA0G CSqGSIb3DQEBCwUAA4IBAQBKIZQoz9ALa10z1KyxNLRG0J8upwQ+Sm9EOOqXCUHO 3b+pyqmZ0m9u2jOTKThqS3wIYrwvdHEccU9BleYxiq1NCCHaJixyl7361FzXJ2f5 ti8E+P/pDdtHwY4YS87rs8cUPrDWDoLcaHNPbTajsd4whCsv/D+UMSasltbU9z9l Z06F14I8/v5eD48ugNCEC8OdW8Zw9vgEUhU/lU7Uo712l68I7dsqW5gslQzH30qF FTklnawl7n1ezflmlvAXo+V8Wef2KUi9Z7HLjbEAGwc55fLdV1IPowIY/RTq9QX5 gho0gwuCnYZbVH1jfiBM3s6TQ+18Zym8Bp7QhUe758BN -----END CERTIFICATE-----Generated at Mon Jan 5 12:16:40 2026 by rpki-client