This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/tPnRw3top4XnUY_nTcwvwdpUiGQ.roa File: tPnRw3top4XnUY_nTcwvwdpUiGQ.roa (raw, json) Hash identifier: M0xYz4wzzLwebgXureqeaj7zhKGgbdLeOlyBhuFnNKo= Subject key identifier: B4:F9:D1:C3:7B:68:A7:85:E7:51:8F:E7:4D:CC:2F:C1:DA:54:88:64 Certificate issuer: /CN=c4eb34dda2f8094968494892063351ee0f10e91a Certificate serial: 019B7C7EF4D50C1FBE77063D05DC02E953DA Authority key identifier: C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/tPnRw3top4XnUY_nTcwvwdpUiGQ.roa Signing time: Fri 02 Jan 2026 02:17:33 +0000 ROA not before: Fri 02 Jan 2026 02:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210015 IP address blocks: 45.80.248.0/23 maxlen: 23 193.151.160.0/23 maxlen: 23 193.151.162.0/24 maxlen: 24 2a0d:e7c7:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 05:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7e:f4:d5:0c:1f:be:77:06:3d:05:dc:02:e9:53:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4eb34dda2f8094968494892063351ee0f10e91a Validity Not Before: Jan 2 02:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4f9d1c37b68a785e7518fe74dcc2fc1da548864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:14:ef:ab:3b:f1:1e:b6:2f:d7:b8:bf:3f:1d: 17:79:be:bd:f3:e0:d4:0f:a1:59:b8:6a:61:f3:47: b8:47:71:81:b6:27:87:1b:c5:22:e4:42:ca:c6:0b: 77:12:a4:bd:22:4c:eb:ab:84:04:2e:e2:d0:c7:c5: 00:56:02:61:0b:fa:e4:b3:32:66:cc:b3:c8:33:ae: 4b:f2:04:40:ca:dc:86:ad:c3:58:5e:1a:c2:3d:e7: 38:65:a6:8e:d4:49:63:e6:d2:b6:03:bd:ee:e6:0f: 29:26:ec:e1:44:26:f0:96:55:bd:a1:c6:f1:96:f0: 24:58:1a:08:b2:ee:ce:59:34:0a:76:c5:bd:ab:b6: f7:b3:7f:f2:58:e0:6f:0b:63:f5:2a:8b:ba:f3:92: de:73:e9:ab:3a:ca:ca:e2:97:13:62:db:62:66:6e: 4b:77:ea:29:1e:1d:7c:b3:99:42:63:5c:36:0d:96: 34:4a:4e:80:d7:01:a6:12:2b:dd:d9:f3:4f:fd:be: ae:64:bc:a2:9f:a2:46:d5:54:2f:d7:7e:95:62:3b: 13:d2:16:41:03:2f:d1:eb:06:84:41:28:ed:be:f5: d9:e2:d8:0c:14:25:f0:04:7a:92:e1:be:76:cf:18: a3:cd:94:30:87:df:10:02:ba:e8:92:10:0f:c2:be: ef:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:F9:D1:C3:7B:68:A7:85:E7:51:8F:E7:4D:CC:2F:C1:DA:54:88:64 X509v3 Authority Key Identifier: keyid:C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/tPnRw3top4XnUY_nTcwvwdpUiGQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.80.248.0/23 193.151.160.0-193.151.162.255 IPv6: 2a0d:e7c7:ffff::/48 Signature Algorithm: sha256WithRSAEncryption ca:a9:4d:d7:ab:83:bb:74:c2:7e:79:1b:ae:ce:1f:21:4b:c4: 78:ce:11:26:7b:13:0b:75:d6:f3:b2:9b:4a:ba:93:61:2b:b0: 90:e8:de:4a:b6:63:f7:42:ef:6e:e5:08:1d:d4:f9:af:00:c9: c9:ed:6a:4a:81:7b:fb:11:72:0a:e0:77:39:35:38:16:36:b7: 91:41:d1:59:11:7c:23:0d:38:69:68:53:6c:b6:ca:7e:28:93: f0:b3:cc:66:d8:f1:5a:5c:03:dd:86:c6:fe:1e:f8:ee:2f:11: f0:97:1e:e8:96:6e:7c:93:2d:83:e6:47:0c:dc:85:fc:1a:73: 4f:ac:ea:be:eb:94:18:30:69:92:83:ca:d7:98:b4:f7:0e:11: d8:36:e5:fc:8c:38:39:70:f7:1e:58:d9:3c:97:ea:66:bf:a8: d0:2b:4d:09:59:ed:44:7f:53:f1:e1:8f:e3:f6:bc:c1:aa:43: 18:d1:e6:f3:ca:ae:53:fe:a2:a7:df:74:ff:10:01:f7:cf:80: 3d:79:63:71:ff:ed:94:fe:40:7d:13:64:19:29:3a:22:b2:6f: b3:a1:17:3a:42:5c:74:cb:a4:21:16:a4:04:e3:a2:2c:0d:32: ed:52:97:21:60:f2:85:50:8c:bd:66:e4:77:38:bd:f7:dd:84: 68:fe:c9:28 -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgISAZt8fvTVDB++dwY9BdwC6VPaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZWIzNGRkYTJmODA5NDk2ODQ5NDg5MjA2MzM1MWVlMGYx MGU5MWEwHhcNMjYwMTAyMDIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGY5ZDFjMzdiNjhhNzg1ZTc1MThmZTc0ZGNjMmZjMWRhNTQ4ODY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxTvqzvxHrYv17i/Px0Xeb698+DU D6FZuGph80e4R3GBtieHG8Ui5ELKxgt3EqS9Ikzrq4QELuLQx8UAVgJhC/rkszJm zLPIM65L8gRAytyGrcNYXhrCPec4ZaaO1Elj5tK2A73u5g8pJuzhRCbwllW9ocbx lvAkWBoIsu7OWTQKdsW9q7b3s3/yWOBvC2P1Kou685Lec+mrOsrK4pcTYttiZm5L d+opHh18s5lCY1w2DZY0Sk6A1wGmEivd2fNP/b6uZLyin6JG1VQv136VYjsT0hZB Ay/R6waEQSjtvvXZ4tgMFCXwBHqS4b52zxijzZQwh98QArrokhAPwr7vMQIDAQAB o4ICKDCCAiQwHQYDVR0OBBYEFLT50cN7aKeF51GP503ML8HaVIhkMB8GA1UdIwQY MBaAFMTrNN2i+AlJaElIkgYzUe4PEOkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveE9zMDNhTDRDVWxvU1VpU0JqTlI3ZzhRNlJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9iOTY1ODQtMWY3MS00OGJiLWEwMjEt YTM0N2I1NmYzYjlhLzEvdFBuUnczdG9wNFhuVVlfblRjd3Z3ZHBVaUdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9iOTY1ODQtMWY3MS00OGJiLWEwMjEtYTM0N2I1NmYzYjlh LzEveE9zMDNhTDRDVWxvU1VpU0JqTlI3ZzhRNlJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTAaBAIAATAUAwQBLVD4MAwD BAXBl6ADBADBl6IwDwQCAAIwCQMHACoN58f//zANBgkqhkiG9w0BAQsFAAOCAQEA yqlN16uDu3TCfnkbrs4fIUvEeM4RJnsTC3XW87KbSrqTYSuwkOjeSrZj90LvbuUI HdT5rwDJye1qSoF7+xFyCuB3OTU4Fja3kUHRWRF8Iw04aWhTbLbKfiiT8LPMZtjx WlwD3YbG/h747i8R8Jce6JZufJMtg+ZHDNyF/BpzT6zqvuuUGDBpkoPK15i09w4R 2Dbl/Iw4OXD3HljZPJfqZr+o0CtNCVntRH9T8eGP4/a8wapDGNHm88quU/6ip990 /xAB98+APXljcf/tlP5AfRNkGSk6IrJvs6EXOkJcdMukIRakBOOiLA0y7VKXIWDy hVCMvWbkdzi9992EaP7JKA== -----END CERTIFICATE-----Generated at Sun Jan 18 12:13:01 2026 by rpki-client