This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/tlx6UpOoq5wIkkHSDHlDHN8yD9s.roa File: tlx6UpOoq5wIkkHSDHlDHN8yD9s.roa (raw, json) Hash identifier: DYR2vs3njtO7WFHLZwlCEbfnPKeM4V9npKOY4B3vwCU= Subject key identifier: B6:5C:7A:52:93:A8:AB:9C:08:92:41:D2:0C:79:43:1C:DF:32:0F:DB Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Certificate serial: 019B7F15ED0D3852F62A03DCECA705DCBC1C Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/tlx6UpOoq5wIkkHSDHlDHN8yD9s.roa Signing time: Fri 02 Jan 2026 14:21:41 +0000 ROA not before: Fri 02 Jan 2026 14:21:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205733 IP address blocks: 45.94.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ed:0d:38:52:f6:2a:03:dc:ec:a7:05:dc:bc:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Validity Not Before: Jan 2 14:21:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b65c7a5293a8ab9c089241d20c79431cdf320fdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9b:1b:36:c6:e4:41:fa:1b:17:cc:a5:bc:5d: 3e:a5:cb:c6:65:3a:0e:4b:0f:42:01:46:33:7e:38: bd:08:27:1a:f3:c3:f3:1b:d0:f7:22:5d:ad:4f:5e: 8a:a3:a4:45:48:38:64:94:e4:f7:f9:64:a3:a5:fe: 8b:5d:5d:9a:6c:79:85:fc:7b:0f:9a:00:07:e6:2f: f4:bf:cc:94:1f:dd:f6:cd:e9:da:c3:c8:00:c5:14: 31:2d:e7:ec:0e:fd:24:7e:04:1e:2b:48:5e:3d:6c: cf:13:51:3c:26:6e:41:f8:78:79:fc:ee:51:0f:26: 58:cb:d6:cd:60:83:e1:b2:ee:48:ee:d1:f7:1e:da: fb:91:73:d0:ca:c1:df:e4:bf:ad:2a:92:47:e9:ff: b7:72:79:f4:22:f5:c3:25:1a:e1:03:2c:5b:9b:62: 99:a3:f1:9d:75:0a:86:5d:17:fc:b3:04:a4:2c:d7: 1a:59:5a:f5:06:65:48:d4:41:e0:fe:75:c6:9f:33: 43:5c:a8:56:9f:c0:81:23:36:20:96:27:94:ff:80: 05:37:0e:5b:70:31:c6:96:c0:32:ae:44:df:28:02: 85:18:87:93:38:8e:7b:e2:f3:51:c8:21:5b:34:90: 52:a7:d3:c8:6a:b5:06:50:5b:bd:b8:24:bf:70:0b: 39:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:5C:7A:52:93:A8:AB:9C:08:92:41:D2:0C:79:43:1C:DF:32:0F:DB X509v3 Authority Key Identifier: keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/tlx6UpOoq5wIkkHSDHlDHN8yD9s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.94.171.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:bc:6a:fc:51:06:4b:a9:2d:3e:f8:18:b6:c8:67:83:cb:a2: be:f5:91:6e:4a:a9:91:0c:55:e4:7f:0c:93:65:3f:7a:d3:c6: c9:0a:fc:fd:fe:7f:d5:cc:ef:29:09:6e:c1:cc:4e:d0:f9:7f: 6f:47:4f:a2:51:81:66:14:0e:6b:c1:7d:2f:eb:a9:13:8c:58: b7:c7:d2:0f:ae:f1:14:d3:3c:6c:38:3a:1a:97:9c:90:6f:d7: 66:2e:ce:5d:60:78:e1:c3:a0:91:2b:fb:a3:68:d4:26:de:c5: 08:14:bf:e4:4c:a2:e5:54:a7:30:dc:17:18:8c:15:29:a6:d1: d0:51:e8:76:26:d0:a5:be:f1:60:41:3d:b9:57:3d:bb:91:94: bb:8e:dd:71:f2:78:c9:62:77:e5:61:43:c5:5b:de:0b:2d:a2: e4:31:3d:00:9d:3d:bf:55:f8:f4:95:0a:f8:9c:e5:3d:af:72: 9f:dd:59:cb:ca:d5:df:02:bf:e9:b2:e4:92:b2:d0:6e:50:20: 44:46:21:55:a9:2b:ca:68:99:2d:20:66:d7:b0:7c:19:67:42: bf:1f:5e:de:a1:f8:b6:93:29:5a:4c:ed:f2:a4:71:62:13:71: 16:21:4c:03:d1:25:f2:50:89:51:72:3c:2f:df:d9:09:d9:70: ef:b2:d4:29 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/Fe0NOFL2KgPc7KcF3LwcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy YTI4YTEwHhcNMjYwMTAyMTQyMTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjVjN2E1MjkzYThhYjljMDg5MjQxZDIwYzc5NDMxY2RmMzIwZmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpsbNsbkQfobF8ylvF0+pcvGZToO Sw9CAUYzfji9CCca88PzG9D3Il2tT16Ko6RFSDhklOT3+WSjpf6LXV2abHmF/HsP mgAH5i/0v8yUH932zenaw8gAxRQxLefsDv0kfgQeK0hePWzPE1E8Jm5B+Hh5/O5R DyZYy9bNYIPhsu5I7tH3Htr7kXPQysHf5L+tKpJH6f+3cnn0IvXDJRrhAyxbm2KZ o/GddQqGXRf8swSkLNcaWVr1BmVI1EHg/nXGnzNDXKhWn8CBIzYglieU/4AFNw5b cDHGlsAyrkTfKAKFGIeTOI574vNRyCFbNJBSp9PIarUGUFu9uCS/cAs5fwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLZcelKTqKucCJJB0gx5QxzfMg/bMB8GA1UdIwQY MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt ZWVmMzUxMWY2YzYwLzEvdGx4NlVwT29xNXdJa2tIU0RIbERITjh5RDlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALV6rMA0G CSqGSIb3DQEBCwUAA4IBAQCOvGr8UQZLqS0++Bi2yGeDy6K+9ZFuSqmRDFXkfwyT ZT9608bJCvz9/n/VzO8pCW7BzE7Q+X9vR0+iUYFmFA5rwX0v66kTjFi3x9IPrvEU 0zxsODoal5yQb9dmLs5dYHjhw6CRK/ujaNQm3sUIFL/kTKLlVKcw3BcYjBUpptHQ Ueh2JtClvvFgQT25Vz27kZS7jt1x8njJYnflYUPFW94LLaLkMT0AnT2/Vfj0lQr4 nOU9r3Kf3VnLytXfAr/psuSSstBuUCBERiFVqSvKaJktIGbXsHwZZ0K/H17eofi2 kylaTO3ypHFiE3EWIUwD0SXyUIlRcjwv39kJ2XDvstQp -----END CERTIFICATE-----Generated at Tue Jan 6 20:52:36 2026 by rpki-client