This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/TZh64TmvaKsp1nLDwD5bDTCsncc.roa File: TZh64TmvaKsp1nLDwD5bDTCsncc.roa (raw, json) Hash identifier: t2LSGeAJldgTSjRXXcU+JQGIvxhK+dYSWzZ0bNfHRlE= Subject key identifier: 4D:98:7A:E1:39:AF:68:AB:29:D6:72:C3:C0:3E:5B:0D:30:AC:9D:C7 Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F143F36245689931DBC259C81153432 Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/TZh64TmvaKsp1nLDwD5bDTCsncc.roa Signing time: Fri 02 Jan 2026 14:19:51 +0000 ROA not before: Fri 02 Jan 2026 14:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2895 IP address blocks: 147.45.0.0/19 maxlen: 19 147.45.32.0/23 maxlen: 23 147.45.194.0/23 maxlen: 23 193.233.0.0/22 maxlen: 22 193.233.4.0/24 maxlen: 24 193.233.10.0/23 maxlen: 23 2001:640::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:3f:36:24:56:89:93:1d:bc:25:9c:81:15:34:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d987ae139af68ab29d672c3c03e5b0d30ac9dc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bb:7b:c5:0e:98:cf:33:ff:f8:d1:0e:26:09: 97:81:98:ad:ad:35:db:77:8e:ee:83:88:16:7b:24: 23:be:3e:ef:5b:d0:c6:e8:bf:02:95:cc:1c:3a:76: e1:94:32:87:3a:a5:bf:0e:08:77:5d:10:0b:c6:09: be:a9:b5:fc:28:df:34:cf:a9:46:7c:ee:96:c9:7b: bc:5e:1d:7c:2c:68:17:a1:49:a7:53:73:9a:bf:9a: 76:e5:30:23:4b:66:82:b1:77:40:a3:06:dc:93:4f: 0a:4a:9d:df:10:8a:ab:12:db:cf:7f:fe:05:60:a5: 31:c9:cc:8a:99:76:46:bd:89:16:b1:fa:bf:e1:33: 9f:53:2d:bb:c2:19:61:87:1a:61:7a:af:13:01:cb: ee:bb:1c:e9:3e:24:3f:89:18:44:3b:ef:bb:48:91: f7:52:59:1a:04:30:7b:51:e4:e5:05:b9:d1:f9:7b: 0a:ae:37:57:75:ff:7e:08:e5:90:51:96:02:b6:49: c8:30:ca:f8:95:29:53:66:dc:a0:a3:24:9f:3d:a0: d7:dc:3e:05:98:fc:72:65:3f:03:b4:03:0c:1f:ca: e1:64:94:02:1c:56:7d:51:4b:ca:1b:4a:00:82:9b: 98:ab:46:55:ce:4f:52:07:cd:bc:57:41:e0:7c:8f: b7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:98:7A:E1:39:AF:68:AB:29:D6:72:C3:C0:3E:5B:0D:30:AC:9D:C7 X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/TZh64TmvaKsp1nLDwD5bDTCsncc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.45.0.0-147.45.33.255 147.45.194.0/23 193.233.0.0-193.233.4.255 193.233.10.0/23 IPv6: 2001:640::/32 Signature Algorithm: sha256WithRSAEncryption 53:89:28:c9:a9:39:2f:21:9f:be:80:3c:c7:3b:31:16:15:9f: 59:78:34:22:ad:5b:5b:f2:94:5b:15:be:a8:5f:97:df:8e:ea: 17:76:d8:0a:a4:56:1f:85:3f:be:4e:c7:41:8d:f0:15:0d:99: 59:82:50:7c:2a:f3:43:69:89:99:4e:8d:ae:79:13:67:3e:e6: 8a:43:a7:d2:27:d3:ca:9c:5c:00:8a:5e:38:f5:1f:65:2a:77: d5:1c:cc:cd:f1:cc:58:14:a2:25:99:11:eb:51:61:73:6b:4f: a0:75:de:10:26:24:45:13:bd:84:4a:24:c8:85:26:0b:65:83: 41:6a:be:c3:ad:15:08:22:e8:49:4c:9c:bd:5c:41:47:3a:4f: df:4e:f7:b1:50:32:51:4c:64:10:2d:a6:e5:19:7e:f0:d5:b0: f6:86:65:92:64:5f:90:e8:71:35:b6:28:b5:f5:59:6a:f2:fb: 1e:c5:b5:33:b7:bf:6e:f4:08:20:45:96:1b:35:a8:db:22:e3: 4f:df:8a:12:68:20:c6:0f:ee:c8:9d:3a:6e:c7:be:31:02:ff: 21:ba:ef:f3:fc:01:93:a9:68:8d:c3:0f:cd:b9:ef:73:55:4a: be:93:e8:16:3a:49:bc:38:a5:22:10:10:b0:e7:c6:28:30:00: 41:fa:83:4d -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZt/FD82JFaJkx28JZyBFTQyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDk4N2FlMTM5YWY2OGFiMjlkNjcyYzNjMDNlNWIwZDMwYWM5ZGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbt7xQ6YzzP/+NEOJgmXgZitrTXb d47ug4gWeyQjvj7vW9DG6L8ClcwcOnbhlDKHOqW/Dgh3XRALxgm+qbX8KN80z6lG fO6WyXu8Xh18LGgXoUmnU3Oav5p25TAjS2aCsXdAowbck08KSp3fEIqrEtvPf/4F YKUxycyKmXZGvYkWsfq/4TOfUy27whlhhxpheq8TAcvuuxzpPiQ/iRhEO++7SJH3 UlkaBDB7UeTlBbnR+XsKrjdXdf9+COWQUZYCtknIMMr4lSlTZtygoySfPaDX3D4F mPxyZT8DtAMMH8rhZJQCHFZ9UUvKG0oAgpuYq0ZVzk9SB828V0HgfI+3lwIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFE2YeuE5r2irKdZyw8A+Ww0wrJ3HMB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvVFpoNjRUbXZhS3NwMW5MRHdENWJEVENzbmNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAsBAIAATAmMAsDAwCTLQME AZMtIAMEAZMtwjALAwMAwekDBADB6QQDBAHB6QowDQQCAAIwBwMFACABBkAwDQYJ KoZIhvcNAQELBQADggEBAFOJKMmpOS8hn76APMc7MRYVn1l4NCKtW1vylFsVvqhf l9+O6hd22AqkVh+FP75Ox0GN8BUNmVmCUHwq80NpiZlOja55E2c+5opDp9In08qc XACKXjj1H2Uqd9UczM3xzFgUoiWZEetRYXNrT6B13hAmJEUTvYRKJMiFJgtlg0Fq vsOtFQgi6ElMnL1cQUc6T99O97FQMlFMZBAtpuUZfvDVsPaGZZJkX5DocTW2KLX1 WWry+x7FtTO3v270CCBFlhs1qNsi40/fihJoIMYP7sidOm7HvjEC/yG67/P8AZOp aI3DD82573NVSr6T6BY6Sbw4pSIQELDnxigwAEH6g00= -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:53 2026 by rpki-client