This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tnrRCBOLktyVXFMOXJCdAC9mmJY.roa File: tnrRCBOLktyVXFMOXJCdAC9mmJY.roa (raw, json) Hash identifier: 2rrR6LjZS00paFRPpF9PELJgbT3SFbIIHIXbHkFRk3M= Subject key identifier: B6:7A:D1:08:13:8B:92:DC:95:5C:53:0E:5C:90:9D:00:2F:66:98:96 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A33A61ACF32C36B8304E0614C0C57A Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tnrRCBOLktyVXFMOXJCdAC9mmJY.roa Signing time: Thu 01 Jan 2026 08:18:41 +0000 ROA not before: Thu 01 Jan 2026 08:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210106 IP address blocks: 45.144.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:3a:61:ac:f3:2c:36:b8:30:4e:06:14:c0:c5:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b67ad108138b92dc955c530e5c909d002f669896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:20:88:5a:34:66:3b:05:cb:ad:92:de:48:2e: 88:e2:95:ae:28:cd:6e:8f:b6:f0:67:a5:07:10:57: 9b:27:ed:40:4d:9b:cf:1c:df:5f:91:f0:b8:ec:8d: eb:f0:e9:45:f3:e8:73:d3:b4:d4:71:a0:57:2d:aa: 48:8b:ff:4b:17:57:ff:bd:bf:ec:a4:6f:6d:40:f7: d1:0c:39:a8:b0:bb:9f:6d:f2:3e:1b:5e:56:a5:8f: 03:73:a3:41:38:6c:a9:c6:f0:52:fe:c8:66:22:96: c4:56:60:9b:6e:a1:ca:35:89:26:1e:53:e6:e3:86: 25:55:07:a3:9e:60:12:e6:12:1c:db:19:ab:37:cb: c8:4f:12:9a:a9:71:ca:cb:a8:87:8f:7d:62:b8:bc: c9:85:c9:ac:32:3b:98:73:04:6e:51:dd:2d:ad:53: bf:97:25:75:d7:69:63:56:06:8a:68:bd:00:fb:1f: 8e:bc:39:f7:88:e6:7e:a4:9e:e3:35:d5:0c:ef:66: c7:d6:4c:07:3c:c2:c3:e5:e7:12:1d:22:5b:35:a4: bd:19:d1:a0:0e:4b:ed:28:b4:d3:1c:f6:6b:65:be: d6:7d:5f:82:98:a2:e5:0d:35:bf:65:75:e0:be:1d: 0d:3f:ee:53:71:fb:8a:db:f6:a9:2d:fd:0c:a6:7a: d4:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:7A:D1:08:13:8B:92:DC:95:5C:53:0E:5C:90:9D:00:2F:66:98:96 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tnrRCBOLktyVXFMOXJCdAC9mmJY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.144.155.0/24 Signature Algorithm: sha256WithRSAEncryption 26:40:f7:18:5f:51:2c:c3:2e:c8:6b:3b:bc:5d:49:2a:69:74: 59:bd:84:f5:da:bf:c1:33:e4:eb:e9:6d:6b:e6:87:75:04:b6: 3b:d7:f5:88:65:27:b5:60:3d:0a:21:50:dd:f9:b2:bc:37:ab: b6:34:ea:0d:19:c2:c3:32:94:07:54:a3:e9:73:29:b7:ca:73: 7b:af:d8:6e:05:f9:a0:e4:71:ba:df:70:d8:85:4b:87:9b:c1: 64:bc:f9:92:1c:db:7e:13:e1:8c:ad:a7:d4:e8:7e:6e:e3:da: 3d:2e:9d:d9:1b:ec:70:eb:a6:dc:e1:0f:82:c8:08:6c:9e:20: cf:aa:0f:f3:f0:18:59:e6:1c:03:9a:3e:91:5f:2a:7f:21:17: a5:79:9c:7b:82:8b:cf:58:d6:11:0d:46:11:c4:5c:0b:04:f5: 7b:b8:32:07:0b:ee:a2:fa:db:fd:d6:3c:a6:9c:9c:97:ed:00: 8a:e8:c0:3c:cb:79:a7:97:9c:01:dd:0f:82:c3:7b:3c:23:a4: b0:40:e5:a2:47:8b:40:d4:01:c4:0d:4a:ba:e3:a5:44:ae:9e: ca:dc:0c:5c:f9:42:b4:ce:6c:d1:fc:d4:df:80:3c:e5:96:4c: 79:7b:11:dc:47:af:3e:7c:d3:1f:c1:12:a9:b7:d4:75:36:b3: ff:13:92:8e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ozphrPMsNrgwTgYUwMV6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjdhZDEwODEzOGI5MmRjOTU1YzUzMGU1YzkwOWQwMDJmNjY5ODk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSCIWjRmOwXLrZLeSC6I4pWuKM1u j7bwZ6UHEFebJ+1ATZvPHN9fkfC47I3r8OlF8+hz07TUcaBXLapIi/9LF1f/vb/s pG9tQPfRDDmosLufbfI+G15WpY8Dc6NBOGypxvBS/shmIpbEVmCbbqHKNYkmHlPm 44YlVQejnmAS5hIc2xmrN8vITxKaqXHKy6iHj31iuLzJhcmsMjuYcwRuUd0trVO/ lyV112ljVgaKaL0A+x+OvDn3iOZ+pJ7jNdUM72bH1kwHPMLD5ecSHSJbNaS9GdGg DkvtKLTTHPZrZb7WfV+CmKLlDTW/ZXXgvh0NP+5TcfuK2/apLf0MpnrUQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLZ60QgTi5LclVxTDlyQnQAvZpiWMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvdG5yUkNCT0xrdHlWWEZNT1hKQ2RBQzltbUpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZCbMA0G CSqGSIb3DQEBCwUAA4IBAQAmQPcYX1Eswy7Iazu8XUkqaXRZvYT12r/BM+Tr6W1r 5od1BLY71/WIZSe1YD0KIVDd+bK8N6u2NOoNGcLDMpQHVKPpcym3ynN7r9huBfmg 5HG633DYhUuHm8FkvPmSHNt+E+GMrafU6H5u49o9Lp3ZG+xw66bc4Q+CyAhsniDP qg/z8BhZ5hwDmj6RXyp/IReleZx7govPWNYRDUYRxFwLBPV7uDIHC+6i+tv91jym nJyX7QCK6MA8y3mnl5wB3Q+Cw3s8I6SwQOWiR4tA1AHEDUq646VErp7K3Axc+UK0 zmzR/NTfgDzllkx5exHcR68+fNMfwRKpt9R1NrP/E5KO -----END CERTIFICATE-----Generated at Fri Jan 2 12:04:28 2026 by rpki-client