This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/TmtlZhBR9Ovcl6IJQ4WPWT13yx0.roa File: TmtlZhBR9Ovcl6IJQ4WPWT13yx0.roa (raw, json) Hash identifier: sZjXDmusj/EZKsD0MsGwCOHFRPz3nm2yQT/8pNTj2Qw= Subject key identifier: 4E:6B:65:66:10:51:F4:EB:DC:97:A2:09:43:85:8F:59:3D:77:CB:1D Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e Certificate serial: 019B7C1315D9E9681E68E4691A783352E386 Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/TmtlZhBR9Ovcl6IJQ4WPWT13yx0.roa Signing time: Fri 02 Jan 2026 00:19:44 +0000 ROA not before: Fri 02 Jan 2026 00:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9304 IP address blocks: 85.8.182.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:15:d9:e9:68:1e:68:e4:69:1a:78:33:52:e3:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c089423af1be03027196d1f81df22992978cda6e Validity Not Before: Jan 2 00:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e6b65661051f4ebdc97a20943858f593d77cb1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6e:43:05:3b:cb:00:42:78:4c:94:f3:84:f6: 9a:d4:68:07:9b:1c:15:fd:7c:6b:71:25:b1:b5:a4: 96:a2:05:72:6d:35:e6:02:b8:b8:cf:71:19:c2:04: 3a:05:f4:80:00:0d:74:2c:d3:ca:ae:cc:e2:af:1f: 2e:35:37:28:04:24:6a:48:2d:1a:ea:02:c7:4f:52: 26:96:5f:db:1e:b9:13:8e:47:cb:5f:0b:1e:0f:6b: 01:c1:dc:b7:9d:b3:4d:4f:4e:51:4e:aa:b0:28:f7: f8:2d:62:32:a6:0c:34:2c:fd:ba:85:dc:44:06:0c: 65:3b:2b:ab:4e:3c:2e:4c:31:2c:0a:dd:f6:ed:3d: 14:2f:93:be:0e:a5:14:5d:42:91:db:d3:1b:c2:c6: 2b:4d:8c:1b:9e:09:05:44:74:53:cb:39:26:d9:22: b1:54:b1:59:f5:5b:97:62:c4:e3:96:bc:56:f2:77: d3:ff:d6:a5:9a:7b:91:6c:e1:39:07:a6:ac:d0:b7: a4:a6:df:b9:cd:1b:80:dc:d2:a6:c2:65:2e:86:7b: 12:0b:54:37:df:bd:40:72:3e:6b:bc:f3:39:c5:1e: 38:09:7a:be:54:73:12:31:37:8a:f6:a7:1b:7f:ea: 7e:35:1b:d1:5d:f0:b9:09:3c:c7:1f:14:eb:29:bc: 18:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:6B:65:66:10:51:F4:EB:DC:97:A2:09:43:85:8F:59:3D:77:CB:1D X509v3 Authority Key Identifier: keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/TmtlZhBR9Ovcl6IJQ4WPWT13yx0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.8.182.0/23 Signature Algorithm: sha256WithRSAEncryption 62:c3:db:8f:85:3b:78:8c:6d:88:0e:c8:c3:9e:0c:72:43:32: 1f:38:fb:d9:d0:85:3b:60:39:a8:dc:df:ad:13:cf:f5:10:f9: 98:5d:54:e1:6d:7f:8e:d0:28:2c:11:5c:53:a2:3c:90:f0:45: 4c:50:fa:4e:7c:a0:a3:9f:32:bf:f7:d4:4f:1e:44:21:c4:b8: da:6c:5e:d7:86:09:9e:48:2a:24:00:43:80:ee:95:87:8e:da: fb:9d:56:8e:7a:38:df:20:0f:4c:67:e6:fc:a3:ea:dd:f4:78: b6:b1:23:38:8d:7b:81:78:5f:9d:34:85:ee:f0:25:63:69:78: 66:01:8d:1e:02:54:51:83:40:74:18:b0:8e:8b:e8:46:98:5d: c9:c5:c3:3c:a6:78:5f:d0:b0:53:c2:1d:7c:6f:51:1d:91:c1: a1:a7:0b:04:66:c1:ed:da:44:df:9c:a8:ca:8e:43:d0:12:34: 20:f4:6e:5a:dd:c8:17:77:d3:29:cc:f7:e2:fe:65:89:19:ac: 96:bf:46:4b:18:b3:77:19:1e:e5:2c:89:5a:47:6d:13:2f:5f: 14:78:61:ec:69:0b:ba:cb:64:b1:16:ef:32:9e:8b:fb:47:96: d7:3f:76:e2:f7:f5:c6:bf:42:fb:2b:6e:4b:f3:3b:56:3d:f7: 30:10:86:e3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8ExXZ6WgeaORpGngzUuOGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwODk0MjNhZjFiZTAzMDI3MTk2ZDFmODFkZjIyOTkyOTc4 Y2RhNmUwHhcNMjYwMTAyMDAxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTZiNjU2NjEwNTFmNGViZGM5N2EyMDk0Mzg1OGY1OTNkNzdjYjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtG5DBTvLAEJ4TJTzhPaa1GgHmxwV /XxrcSWxtaSWogVybTXmAri4z3EZwgQ6BfSAAA10LNPKrszirx8uNTcoBCRqSC0a 6gLHT1Imll/bHrkTjkfLXwseD2sBwdy3nbNNT05RTqqwKPf4LWIypgw0LP26hdxE BgxlOyurTjwuTDEsCt327T0UL5O+DqUUXUKR29MbwsYrTYwbngkFRHRTyzkm2SKx VLFZ9VuXYsTjlrxW8nfT/9almnuRbOE5B6as0Lekpt+5zRuA3NKmwmUuhnsSC1Q3 371Acj5rvPM5xR44CXq+VHMSMTeK9qcbf+p+NRvRXfC5CTzHHxTrKbwYnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE5rZWYQUfTr3JeiCUOFj1k9d8sdMB8GA1UdIwQY MBaAFMCJQjrxvgMCcZbR+B3yKZKXjNpuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgt NjUzMzJiNDdmNWViLzEvVG10bFpoQlI5T3ZjbDZJSlE0V1BXVDEzeXgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgtNjUzMzJiNDdmNWVi LzEvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVQi2MA0G CSqGSIb3DQEBCwUAA4IBAQBiw9uPhTt4jG2IDsjDngxyQzIfOPvZ0IU7YDmo3N+t E8/1EPmYXVThbX+O0CgsEVxTojyQ8EVMUPpOfKCjnzK/99RPHkQhxLjabF7Xhgme SCokAEOA7pWHjtr7nVaOejjfIA9MZ+b8o+rd9Hi2sSM4jXuBeF+dNIXu8CVjaXhm AY0eAlRRg0B0GLCOi+hGmF3JxcM8pnhf0LBTwh18b1EdkcGhpwsEZsHt2kTfnKjK jkPQEjQg9G5a3cgXd9MpzPfi/mWJGayWv0ZLGLN3GR7lLIlaR20TL18UeGHsaQu6 y2SxFu8ynov7R5bXP3bi9/XGv0L7K25L8ztWPfcwEIbj -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:51 2026 by rpki-client