This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/tmzaGFlroy_1NqYkHp7mzrsXTLw.roa File: tmzaGFlroy_1NqYkHp7mzrsXTLw.roa (raw, json) Hash identifier: KHXFD8wG4tOX5o9eUHM14RmExFg0+YY9MfOrc+p7C24= Subject key identifier: B6:6C:DA:18:59:6B:A3:2F:F5:36:A6:24:1E:9E:E6:CE:BB:17:4C:BC Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Certificate serial: 019B7E38B4F0AC3A6757E839C471788073F7 Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/tmzaGFlroy_1NqYkHp7mzrsXTLw.roa Signing time: Fri 02 Jan 2026 10:20:04 +0000 ROA not before: Fri 02 Jan 2026 10:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 134450 IP address blocks: 45.94.138.0/23 maxlen: 23 45.94.138.0/24 maxlen: 24 45.94.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:b4:f0:ac:3a:67:57:e8:39:c4:71:78:80:73:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Validity Not Before: Jan 2 10:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b66cda18596ba32ff536a6241e9ee6cebb174cbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f0:d3:d8:62:64:7e:98:6f:ff:f1:ea:d0:fc: c5:6e:8c:ec:d8:16:f0:ad:b9:8e:ec:88:0f:b2:c9: 4c:35:af:8f:2b:cb:78:ed:04:16:93:ab:ff:f8:50: 79:9b:5f:3f:6c:44:4b:33:45:ae:e6:96:82:a8:3e: df:95:3e:0f:ef:9d:54:0e:d4:65:e3:ee:fc:1e:55: 82:28:1f:24:03:1b:34:a5:3e:cc:75:bc:f5:96:54: 1b:3e:6b:85:bb:6d:c8:62:8f:88:58:a0:27:58:52: 7a:0c:65:a8:9b:71:f1:31:7c:99:7e:9c:0b:6f:18: 7e:eb:e8:06:27:89:12:95:c3:1a:33:de:0e:a1:14: b8:14:64:bb:a7:b3:c1:17:99:4a:dd:ac:a9:b8:f3: 50:8a:50:28:9b:7f:68:6d:2f:28:b3:2b:1d:43:6c: e8:e8:6a:6f:65:54:d1:ca:e9:4e:e0:85:8f:4f:9b: c2:ce:40:90:4f:9a:96:84:f0:f5:ff:8c:29:8a:be: 7d:31:da:d4:d0:22:42:42:7d:6c:75:73:cc:8c:57: 2e:13:58:e8:06:bb:f8:ea:46:f6:c9:4b:c6:5c:98: e7:d6:d9:b4:bb:3f:0d:ff:67:a0:a7:18:ef:6b:92: 96:09:dd:e4:58:7c:4b:7e:17:cf:ef:31:fc:76:a3: b3:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:6C:DA:18:59:6B:A3:2F:F5:36:A6:24:1E:9E:E6:CE:BB:17:4C:BC X509v3 Authority Key Identifier: keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/tmzaGFlroy_1NqYkHp7mzrsXTLw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.94.138.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:63:f1:e1:04:f8:4b:80:a1:2a:5c:70:1e:15:26:b4:46:cc: c7:7b:28:37:0b:07:7a:0f:99:ff:a2:be:7b:06:1d:78:64:82: 34:c9:78:2b:c9:a8:da:a6:cc:9b:76:d4:f6:6c:db:42:2d:59: 7a:6f:7e:78:86:e0:46:44:2c:72:99:b4:ed:28:b8:80:69:8e: 1b:bc:2c:53:37:ea:d2:23:e5:91:ef:55:31:c5:f8:88:e6:b8: d7:36:38:d8:9a:d3:fa:23:89:61:7d:f5:60:2f:65:bd:21:41: d9:92:99:b2:0e:f8:bf:91:4f:ec:2b:9d:57:30:95:a5:3f:f3: f4:ba:6a:f9:4a:af:68:6f:bf:af:60:c2:2f:9e:7c:74:c7:94: d6:fe:d5:16:19:35:86:e2:05:85:1c:6d:27:8d:b3:b6:02:4c: f6:92:89:e6:5c:5f:f8:b9:ab:fc:e8:dd:87:9f:59:5d:e1:2b: 24:66:f8:ab:20:26:bf:c8:42:b9:83:ea:ab:4a:d0:db:e3:94: 85:9d:b5:48:a3:04:9d:2c:0b:8b:c2:92:9a:e5:8d:33:8b:36: ca:3e:68:42:79:e3:50:75:0b:e0:33:55:81:df:b8:b4:37:49: ac:93:74:27:23:54:bb:38:d0:5f:76:29:15:ed:c0:f1:d2:80: 5d:d7:be:28 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OLTwrDpnV+g5xHF4gHP3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYjI1Y2U1NTBlNGQ5YmRhMDViZDVkNDVjOGI2YmEzNzQz MGJiYmEwHhcNMjYwMTAyMTAyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjZjZGExODU5NmJhMzJmZjUzNmE2MjQxZTllZTZjZWJiMTc0Y2JjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvDT2GJkfphv//Hq0PzFbozs2Bbw rbmO7IgPsslMNa+PK8t47QQWk6v/+FB5m18/bERLM0Wu5paCqD7flT4P751UDtRl 4+78HlWCKB8kAxs0pT7Mdbz1llQbPmuFu23IYo+IWKAnWFJ6DGWom3HxMXyZfpwL bxh+6+gGJ4kSlcMaM94OoRS4FGS7p7PBF5lK3aypuPNQilAom39obS8osysdQ2zo 6GpvZVTRyulO4IWPT5vCzkCQT5qWhPD1/4wpir59MdrU0CJCQn1sdXPMjFcuE1jo Brv46kb2yUvGXJjn1tm0uz8N/2egpxjva5KWCd3kWHxLfhfP7zH8dqOzBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLZs2hhZa6Mv9TamJB6e5s67F0y8MB8GA1UdIwQY MBaAFJyyXOVQ5Nm9oFvV1FyLa6N0MLu6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYt YmU0NWYwZDJhYmJiLzEvdG16YUdGbHJveV8xTnFZa0hwN216cnNYVEx3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYtYmU0NWYwZDJhYmJi LzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLV6KMA0G CSqGSIb3DQEBCwUAA4IBAQBKY/HhBPhLgKEqXHAeFSa0RszHeyg3Cwd6D5n/or57 Bh14ZII0yXgryajapsybdtT2bNtCLVl6b354huBGRCxymbTtKLiAaY4bvCxTN+rS I+WR71UxxfiI5rjXNjjYmtP6I4lhffVgL2W9IUHZkpmyDvi/kU/sK51XMJWlP/P0 umr5Sq9ob7+vYMIvnnx0x5TW/tUWGTWG4gWFHG0njbO2Akz2konmXF/4uav86N2H n1ld4SskZvirICa/yEK5g+qrStDb45SFnbVIowSdLAuLwpKa5Y0zizbKPmhCeeNQ dQvgM1WB37i0N0msk3QnI1S7ONBfdikV7cDx0oBd174o -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:40 2026 by rpki-client