This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/TNteXfpLnFPIyzeTl7EjsNtmv5k.roa File: TNteXfpLnFPIyzeTl7EjsNtmv5k.roa (raw, json) Hash identifier: UbIodLuN+491e86JIaxo1Lb8oH9rQ25TZeyreDYmwhw= Subject key identifier: 4C:DB:5E:5D:FA:4B:9C:53:C8:CB:37:93:97:B1:23:B0:DB:66:BF:99 Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10 Certificate serial: 019B128254ECE965CBCA8EF56C159BAB8F12 Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/TNteXfpLnFPIyzeTl7EjsNtmv5k.roa Signing time: Fri 12 Dec 2025 12:21:29 +0000 ROA not before: Fri 12 Dec 2025 12:21:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 5065 IP address blocks: 2.58.168.0/24 maxlen: 24 2.58.169.0/24 maxlen: 24 77.242.150.0/24 maxlen: 24 77.242.156.0/24 maxlen: 24 77.242.158.0/24 maxlen: 24 83.137.159.0/24 maxlen: 24 88.151.57.0/24 maxlen: 24 88.151.58.0/24 maxlen: 24 88.209.217.0/24 maxlen: 24 92.52.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 11:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:82:54:ec:e9:65:cb:ca:8e:f5:6c:15:9b:ab:8f:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10 Validity Not Before: Dec 12 12:21:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4cdb5e5dfa4b9c53c8cb379397b123b0db66bf99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8c:fa:2a:af:f8:51:5c:29:72:c7:00:aa:75: 64:8b:96:0d:71:86:01:e2:a4:ba:9e:e0:c7:ff:52: 46:1f:53:42:28:cc:3d:e1:73:f2:33:87:1f:57:13: 51:85:a0:da:06:e8:4b:95:8a:26:17:ef:b0:26:a0: 7c:28:c2:3b:c7:20:69:c1:20:20:9d:a2:a7:34:8b: 12:63:d6:56:aa:ac:ef:4f:9f:82:57:3c:1a:18:f0: 9f:5d:4c:52:ed:5d:94:a4:a2:80:f7:4f:25:be:80: 8c:8b:4f:20:14:4a:05:3c:67:3f:bf:26:9f:ce:50: 15:a0:9d:79:63:7a:fc:f6:e2:c4:8e:24:72:b6:9e: 64:6c:e6:cb:87:e9:55:43:9e:fc:23:76:c7:a9:4c: 68:d0:1f:42:0c:8d:e3:40:4a:89:f7:e4:b2:a3:e8: 29:57:86:79:7c:22:c0:cb:a0:a1:0d:1f:5f:18:0f: 01:ab:ca:f9:35:ad:9c:8d:cf:ff:f0:28:52:07:2b: d5:71:23:6e:a7:ce:75:1c:ef:a8:ca:ef:8f:ff:6a: 8a:09:34:eb:e4:71:67:44:77:36:9d:4d:22:c5:71: 78:33:4a:25:2c:f5:94:f1:37:2d:0e:a5:ab:ab:e2: e5:94:35:e7:d0:d2:79:86:98:af:dd:15:55:ba:50: 34:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:DB:5E:5D:FA:4B:9C:53:C8:CB:37:93:97:B1:23:B0:DB:66:BF:99 X509v3 Authority Key Identifier: keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/TNteXfpLnFPIyzeTl7EjsNtmv5k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.168.0/23 77.242.150.0/24 77.242.156.0/24 77.242.158.0/24 83.137.159.0/24 88.151.57.0-88.151.58.255 88.209.217.0/24 92.52.214.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:d5:dc:80:64:80:d3:ec:e1:78:a1:d0:d4:06:28:1f:f0:51: 24:7f:06:06:b8:88:09:0d:81:1e:82:d0:fe:4d:69:29:e2:68: ea:0c:00:81:f5:7e:5a:b8:7c:53:b8:43:51:dd:ec:69:bc:bf: 1b:59:9f:78:d4:01:4d:43:7a:b7:fd:2b:5a:94:e3:24:16:1c: 01:1f:6f:3b:5e:fb:34:85:b9:cc:a2:88:5f:3d:fa:d3:93:e9: 56:bc:ab:51:7d:5b:93:a3:0e:71:99:95:4d:dc:89:b3:61:28: 1d:c2:ca:bc:b1:a6:7a:2f:99:57:ef:ef:9f:c5:31:0b:1e:67: b9:50:4b:be:a5:aa:fb:79:93:9e:a0:5c:8d:7f:2d:64:d0:2e: eb:c0:87:5e:3f:7b:7a:de:f4:04:4c:02:01:b6:3b:78:4e:7d: 13:22:c1:6f:ff:c7:ca:0e:e5:65:f3:a6:13:8e:c7:53:e9:b4: e0:a6:3a:6c:07:47:8d:8e:48:04:bb:71:3d:92:0b:4b:81:40: 88:e1:d4:46:d1:e7:6d:c1:66:e0:8d:13:18:52:9b:31:a6:85: c4:d2:e9:82:58:42:e1:ff:e2:5c:4d:6a:91:83:61:43:27:fc: aa:d8:5c:0d:d6:85:a1:ab:9a:b0:a1:c7:39:8c:dd:f0:1b:b8: 1d:c8:7d:df -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgISAZsSglTs6WXLyo71bBWbq48SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx MWRhMTAwHhcNMjUxMjEyMTIyMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Y2RiNWU1ZGZhNGI5YzUzYzhjYjM3OTM5N2IxMjNiMGRiNjZiZjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Yz6Kq/4UVwpcscAqnVki5YNcYYB 4qS6nuDH/1JGH1NCKMw94XPyM4cfVxNRhaDaBuhLlYomF++wJqB8KMI7xyBpwSAg naKnNIsSY9ZWqqzvT5+CVzwaGPCfXUxS7V2UpKKA908lvoCMi08gFEoFPGc/vyaf zlAVoJ15Y3r89uLEjiRytp5kbObLh+lVQ578I3bHqUxo0B9CDI3jQEqJ9+Syo+gp V4Z5fCLAy6ChDR9fGA8Bq8r5Na2cjc//8ChSByvVcSNup851HO+oyu+P/2qKCTTr 5HFnRHc2nU0ixXF4M0olLPWU8TctDqWrq+LllDXn0NJ5hpiv3RVVulA0+wIDAQAB o4ICOzCCAjcwHQYDVR0OBBYEFEzbXl36S5xTyMs3k5exI7DbZr+ZMB8GA1UdIwQY MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt N2U0ZDZmNmY2ZTY2LzEvVE50ZVhmcExuRlBJeXplVGw3RWpzTnRtdjVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2 LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQBAjqoAwQA TfKWAwQATfKcAwQATfKeAwQAU4mfMAwDBABYlzkDBABYlzoDBABY0dkDBABcNNYw DQYJKoZIhvcNAQELBQADggEBAFrV3IBkgNPs4Xih0NQGKB/wUSR/Bga4iAkNgR6C 0P5NaSniaOoMAIH1flq4fFO4Q1Hd7Gm8vxtZn3jUAU1Derf9K1qU4yQWHAEfbzte +zSFucyiiF89+tOT6Va8q1F9W5OjDnGZlU3cibNhKB3CyryxpnovmVfv75/FMQse Z7lQS76lqvt5k56gXI1/LWTQLuvAh14/e3re9ARMAgG2O3hOfRMiwW//x8oO5WXz phOOx1PptOCmOmwHR42OSAS7cT2SC0uBQIjh1EbR523BZuCNExhSmzGmhcTS6YJY QuH/4lxNapGDYUMn/KrYXA3WhaGrmrChxzmM3fAbuB3Ifd8= -----END CERTIFICATE-----Generated at Fri Dec 19 18:43:48 2025 by rpki-client