This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/TXL9ZGjJr4Xp2BT3lCQp_uQ97Ag.roa File: TXL9ZGjJr4Xp2BT3lCQp_uQ97Ag.roa (raw, json) Hash identifier: vDMx+DeOJ9cPM2U3pDsiyYMRnc47+KGoDzak+Sqz+JI= Subject key identifier: 4D:72:FD:64:68:C9:AF:85:E9:D8:14:F7:94:24:29:FE:E4:3D:EC:08 Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019AC6BD570FF04AB604086E524DB23184A3 Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/TXL9ZGjJr4Xp2BT3lCQp_uQ97Ag.roa Signing time: Thu 27 Nov 2025 19:14:48 +0000 ROA not before: Thu 27 Nov 2025 19:14:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211659 IP address blocks: 45.84.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 05:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c6:bd:57:0f:f0:4a:b6:04:08:6e:52:4d:b2:31:84:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Nov 27 19:14:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4d72fd6468c9af85e9d814f7942429fee43dec08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:34:fe:d5:a1:34:36:45:11:fd:ef:64:97:f6: 8c:38:16:42:7c:a2:9e:71:5d:3b:68:14:00:c9:35: c5:d6:d0:7f:45:de:db:4a:dc:46:db:bd:e1:ba:79: 44:48:f7:f7:ad:bc:8b:32:70:65:91:e6:50:80:2b: fe:ba:5e:af:1f:8a:20:a5:ef:5b:15:84:be:af:21: 78:08:af:aa:8c:83:83:72:6f:10:6f:9a:f6:ac:6f: 68:9a:fa:be:ef:d2:21:97:dd:fb:87:57:e0:4e:26: f4:9e:67:c5:f1:dc:a1:9e:c0:e9:dd:4d:04:8b:97: 05:81:fd:c0:7e:83:8a:f0:c3:3c:e3:d0:0d:5f:a9: e3:af:22:f4:b0:02:79:06:53:4c:9c:cf:40:bd:91: 65:ba:a9:35:ae:37:0f:4e:6e:d3:a4:ac:07:00:51: 64:c6:87:ce:36:3c:5d:25:00:6f:3a:be:bd:47:f6: 76:7e:20:be:cc:a7:f2:b8:64:89:ca:6b:27:cd:69: d9:12:f0:ca:4c:b0:8f:a2:16:35:bd:25:c7:22:f0: f2:c6:80:d3:3f:bb:45:5b:cd:6a:17:34:5c:8f:a1: 99:ad:9b:dc:71:20:1c:74:9b:78:03:96:32:18:ce: 50:f8:b9:95:7a:ec:69:a9:e1:fd:8d:91:fb:62:92: 61:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:72:FD:64:68:C9:AF:85:E9:D8:14:F7:94:24:29:FE:E4:3D:EC:08 X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/TXL9ZGjJr4Xp2BT3lCQp_uQ97Ag.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.84.178.0/24 Signature Algorithm: sha256WithRSAEncryption 66:80:25:a9:19:c3:18:2b:c8:53:46:c0:7c:d5:23:2a:c5:68: 79:21:1d:37:22:2b:bc:f1:4d:fb:97:05:f4:94:78:17:f0:a6: c7:e2:17:54:f4:62:14:09:27:0e:cd:76:cb:db:f6:ff:72:28: 78:21:6c:a2:a1:5c:b9:ca:4e:5a:5a:e3:65:44:31:9c:e8:53: 93:3c:78:68:87:51:c2:9b:2c:a6:b0:5b:dd:86:ed:2f:ce:1a: 2e:2c:44:17:35:a6:35:31:66:be:74:7b:42:77:18:92:08:7c: af:db:4a:e4:86:95:bc:b9:91:ef:a7:61:a7:11:53:7b:a6:81: 73:62:3c:2d:1c:5d:ac:86:aa:1f:e8:f6:b6:03:f7:22:f5:8e: a3:01:e4:93:8f:4d:28:6c:8d:06:78:01:18:70:e4:0b:66:9b: ab:3d:52:0b:eb:99:c2:18:83:f8:2e:25:a2:fa:3b:ea:a1:b7: 14:e3:4a:79:76:dc:a1:5b:50:a9:d8:3a:53:72:39:5c:2d:4f: 9f:d4:07:9a:f2:16:96:6d:8a:e6:59:6a:9a:ee:e0:22:4c:8d: b7:dd:09:37:ef:63:0e:d1:b0:71:19:a6:36:bc:34:13:4a:68: eb:0f:04:ff:55:1d:3f:21:1c:4a:d2:f4:e4:26:b8:73:95:e5: 61:87:b0:a9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrGvVcP8Eq2BAhuUk2yMYSjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjUxMTI3MTkxNDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDcyZmQ2NDY4YzlhZjg1ZTlkODE0Zjc5NDI0MjlmZWU0M2RlYzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zT+1aE0NkUR/e9kl/aMOBZCfKKe cV07aBQAyTXF1tB/Rd7bStxG273hunlESPf3rbyLMnBlkeZQgCv+ul6vH4ogpe9b FYS+ryF4CK+qjIODcm8Qb5r2rG9omvq+79Ihl937h1fgTib0nmfF8dyhnsDp3U0E i5cFgf3AfoOK8MM849ANX6njryL0sAJ5BlNMnM9AvZFluqk1rjcPTm7TpKwHAFFk xofONjxdJQBvOr69R/Z2fiC+zKfyuGSJymsnzWnZEvDKTLCPohY1vSXHIvDyxoDT P7tFW81qFzRcj6GZrZvccSAcdJt4A5YyGM5Q+LmVeuxpqeH9jZH7YpJhPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE1y/WRoya+F6dgU95QkKf7kPewIMB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvVFhMOVpHakpyNFhwMkJUM2xDUXBfdVE5N0FnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVSyMA0G CSqGSIb3DQEBCwUAA4IBAQBmgCWpGcMYK8hTRsB81SMqxWh5IR03Iiu88U37lwX0 lHgX8KbH4hdU9GIUCScOzXbL2/b/cih4IWyioVy5yk5aWuNlRDGc6FOTPHhoh1HC myymsFvdhu0vzhouLEQXNaY1MWa+dHtCdxiSCHyv20rkhpW8uZHvp2GnEVN7poFz YjwtHF2shqof6Pa2A/ci9Y6jAeSTj00obI0GeAEYcOQLZpurPVIL65nCGIP4LiWi +jvqobcU40p5dtyhW1Cp2DpTcjlcLU+f1Aea8haWbYrmWWqa7uAiTI233Qk372MO 0bBxGaY2vDQTSmjrDwT/VR0/IRxK0vTkJrhzleVhh7Cp -----END CERTIFICATE-----Generated at Thu Dec 4 11:38:08 2025 by rpki-client