This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/TzNI_wZsvsGkAYswmO2F53Oor4g.roa File: TzNI_wZsvsGkAYswmO2F53Oor4g.roa (raw, json) Hash identifier: x8wC7qfBEvBIwJEAmjMHnUVf+UVUJewOmYDzHNwOSt4= Subject key identifier: 4F:33:48:FF:06:6C:BE:C1:A4:01:8B:30:98:ED:85:E7:73:A8:AF:88 Certificate issuer: /CN=374c2617a372e466e98d42532dd0bd8e5cdd993d Certificate serial: 019B306D7E274445EDCE281D00475A2642AB Authority key identifier: 37:4C:26:17:A3:72:E4:66:E9:8D:42:53:2D:D0:BD:8E:5C:DD:99:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/TzNI_wZsvsGkAYswmO2F53Oor4g.roa Signing time: Thu 18 Dec 2025 07:47:20 +0000 ROA not before: Thu 18 Dec 2025 07:47:20 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 201510 IP address blocks: 91.211.160.0/23 maxlen: 23 91.211.160.0/24 maxlen: 24 91.211.161.0/24 maxlen: 24 185.73.92.0/24 maxlen: 24 185.73.93.0/24 maxlen: 24 185.73.94.0/24 maxlen: 24 2a03:41e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.crl rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft rsync://rpki.ripe.net/repository/DEFAULT/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:6d:7e:27:44:45:ed:ce:28:1d:00:47:5a:26:42:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=374c2617a372e466e98d42532dd0bd8e5cdd993d Validity Not Before: Dec 18 07:47:20 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4f3348ff066cbec1a4018b3098ed85e773a8af88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a3:9d:32:2d:e5:ad:fd:09:e3:00:aa:1b:30: 1b:82:8b:60:f4:38:dd:06:e9:80:f3:66:a6:59:81: f6:15:4b:23:76:94:80:7a:96:6d:b4:fd:a8:df:c3: 69:d0:b0:5d:00:75:2b:06:74:1b:4d:c0:8c:ab:56: 08:e3:4a:0f:74:20:cb:21:33:aa:0d:09:da:39:ac: 12:20:f2:44:0b:11:75:66:46:70:d1:f3:3c:0e:bb: 02:da:b7:29:bf:4f:18:40:39:1f:6e:c2:dc:4f:d9: aa:1b:4e:28:1a:54:d3:cd:31:9c:a8:4f:fa:a0:f0: db:64:b9:99:12:10:8c:64:cb:14:4e:40:03:9c:15: bb:93:87:4b:b1:22:27:e2:2a:4d:6c:de:24:16:b0: 9e:61:5f:47:7c:68:8f:6b:55:bc:92:15:4b:ac:43: 46:20:66:ec:54:57:4f:bd:85:e0:94:1b:d4:c0:9e: 5c:18:1b:cb:1f:d1:06:43:13:e6:f4:63:86:d4:02: e5:25:b8:8d:1d:7a:45:0a:67:fe:09:58:e5:27:39: 10:26:dd:82:27:e8:fd:c8:50:5f:a2:47:75:64:e7: fe:21:cb:d7:13:78:d2:38:49:31:95:bf:e8:34:f2: c2:f4:9a:63:85:9a:f5:4e:48:2b:f5:98:73:7d:9f: 12:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:33:48:FF:06:6C:BE:C1:A4:01:8B:30:98:ED:85:E7:73:A8:AF:88 X509v3 Authority Key Identifier: keyid:37:4C:26:17:A3:72:E4:66:E9:8D:42:53:2D:D0:BD:8E:5C:DD:99:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/TzNI_wZsvsGkAYswmO2F53Oor4g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.211.160.0/23 185.73.92.0-185.73.94.255 IPv6: 2a03:41e0::/32 Signature Algorithm: sha256WithRSAEncryption 06:4f:fc:91:ef:d4:33:4c:81:77:f7:92:6a:c0:bc:86:bf:99: 49:b3:79:a5:b3:dc:e4:7f:cc:5d:56:ce:b2:32:75:ff:cb:1b: 15:20:87:72:f6:9d:ca:86:1b:79:65:a2:6d:c6:c9:35:ed:30: 20:6b:6f:ed:7c:2d:e4:66:cd:17:96:86:62:c2:37:1d:b6:df: 9a:83:99:1b:56:cd:5e:79:06:0e:7a:9f:14:2f:6e:d4:7f:f6: 70:af:b0:55:19:b3:a4:9e:20:51:f4:97:9a:7e:3b:d4:f1:61: e4:1d:18:b5:65:c3:fc:be:20:c7:00:a5:b1:9e:db:a8:40:6e: db:4c:10:28:7d:91:66:0c:27:35:bb:93:b0:2c:2f:f8:42:ad: 0d:46:f6:6e:3d:b9:b0:a4:44:79:16:f8:9a:c3:93:e5:30:d5: 18:8a:75:73:10:55:1a:aa:b8:9b:00:8a:7d:f1:75:7d:6f:61: 1d:b6:c2:d4:9d:33:67:14:10:f3:40:db:b4:5d:21:31:75:97: 23:e3:60:94:5b:5d:20:16:c7:f3:ef:ba:a0:22:61:9e:11:de: 82:de:fb:66:a4:c4:9f:18:f5:77:63:69:06:ad:17:0a:ff:56: 1a:87:39:fa:ed:ac:4d:29:1d:5d:1c:61:74:00:97:d6:58:c6: 02:76:fc:5a -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZswbX4nREXtzigdAEdaJkKrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NGMyNjE3YTM3MmU0NjZlOThkNDI1MzJkZDBiZDhlNWNk ZDk5M2QwHhcNMjUxMjE4MDc0NzIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjMzNDhmZjA2NmNiZWMxYTQwMThiMzA5OGVkODVlNzczYThhZjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aOdMi3lrf0J4wCqGzAbgotg9Djd BumA82amWYH2FUsjdpSAepZttP2o38Np0LBdAHUrBnQbTcCMq1YI40oPdCDLITOq DQnaOawSIPJECxF1ZkZw0fM8DrsC2rcpv08YQDkfbsLcT9mqG04oGlTTzTGcqE/6 oPDbZLmZEhCMZMsUTkADnBW7k4dLsSIn4ipNbN4kFrCeYV9HfGiPa1W8khVLrENG IGbsVFdPvYXglBvUwJ5cGBvLH9EGQxPm9GOG1ALlJbiNHXpFCmf+CVjlJzkQJt2C J+j9yFBfokd1ZOf+IcvXE3jSOEkxlb/oNPLC9JpjhZr1Tkgr9ZhzfZ8SlQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFE8zSP8GbL7BpAGLMJjthedzqK+IMB8GA1UdIwQY MBaAFDdMJhejcuRm6Y1CUy3QvY5c3Zk9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjB3bUY2Tnk1R2JwalVKVExkQzlqbHpkbVQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8zODExMjUtMDI0OC00ZWJjLWE3NGQt YjhkYWQ2ZTVjM2JmLzEvVHpOSV93WnN2c0drQVlzd21PMkY1M09vcjRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8zODExMjUtMDI0OC00ZWJjLWE3NGQtYjhkYWQ2ZTVjM2Jm LzEvTjB3bUY2Tnk1R2JwalVKVExkQzlqbHpkbVQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUAwQBW9OgMAwD BAK5SVwDBAC5SV4wDQQCAAIwBwMFACoDQeAwDQYJKoZIhvcNAQELBQADggEBAAZP /JHv1DNMgXf3kmrAvIa/mUmzeaWz3OR/zF1WzrIydf/LGxUgh3L2ncqGG3llom3G yTXtMCBrb+18LeRmzReWhmLCNx2235qDmRtWzV55Bg56nxQvbtR/9nCvsFUZs6Se IFH0l5p+O9TxYeQdGLVlw/y+IMcApbGe26hAbttMECh9kWYMJzW7k7AsL/hCrQ1G 9m49ubCkRHkW+JrDk+Uw1RiKdXMQVRqquJsAin3xdX1vYR22wtSdM2cUEPNA27Rd ITF1lyPjYJRbXSAWx/PvuqAiYZ4R3oLe+2akxJ8Y9XdjaQatFwr/VhqHOfrtrE0p HV0cYXQAl9ZYxgJ2/Fo= -----END CERTIFICATE-----Generated at Sun Dec 21 04:18:39 2025 by rpki-client