This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/tXb-ZOETTYTckpb9Qysc1kmvy6I.roa File: tXb-ZOETTYTckpb9Qysc1kmvy6I.roa (raw, json) Hash identifier: ecwsDlNutKSR5EQe4HHz/G8gZ+2PHPrWaHUQyPF5OHs= Subject key identifier: B5:76:FE:64:E1:13:4D:84:DC:92:96:FD:43:2B:1C:D6:49:AF:CB:A2 Certificate issuer: /CN=665e4d7ea8a3470c9703ee7551481c36f774febb Certificate serial: 019B7AC8CB376DC6B349506715F06A3A1BC0 Authority key identifier: 66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/tXb-ZOETTYTckpb9Qysc1kmvy6I.roa Signing time: Thu 01 Jan 2026 18:18:58 +0000 ROA not before: Thu 01 Jan 2026 18:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44486 IP address blocks: 45.82.120.0/22 maxlen: 22 2a0e:6a80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:cb:37:6d:c6:b3:49:50:67:15:f0:6a:3a:1b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=665e4d7ea8a3470c9703ee7551481c36f774febb Validity Not Before: Jan 1 18:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b576fe64e1134d84dc9296fd432b1cd649afcba2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8a:eb:91:3c:00:5a:8c:5a:8d:44:c9:b8:e8: 76:3e:77:63:40:c8:23:0e:2a:3d:a1:15:36:4a:db: 84:16:8a:67:5e:9a:e6:8e:41:c5:83:92:15:f6:48: 7c:81:38:60:86:12:e4:d0:8f:bf:01:9c:a4:92:09: e4:8c:48:4f:2b:c3:0c:bb:07:ee:ca:72:2f:37:dd: 4c:20:b8:dc:1a:f5:7b:87:72:f5:f9:bf:6e:d4:ed: 51:69:35:e0:c6:db:71:2f:45:1d:39:fc:63:78:4f: 9e:40:da:92:d5:8c:28:ac:f0:5c:57:ea:65:1c:ef: 2f:32:c0:19:77:2b:43:d5:57:78:9c:e7:b9:90:f8: ce:74:14:7d:0a:f1:4a:ea:82:f3:4d:b8:2d:35:1e: 7b:ac:58:78:ef:6f:b6:2e:65:19:f7:73:6c:7e:08: 80:86:ad:fd:01:f9:0c:26:4f:de:81:56:94:e2:a1: 7f:db:48:1a:29:66:a0:85:e7:50:68:6b:12:ae:38: 02:08:c0:d0:ca:6f:7d:1b:cf:d9:e1:d2:44:b7:04: 3a:bd:cb:ea:cb:65:2a:17:9d:c3:16:f0:9f:42:34: 7d:34:9d:1b:1f:a9:8b:45:52:ba:6b:dd:5f:2e:d2: 89:16:c2:33:f3:c6:17:4b:11:ce:eb:e8:35:4c:f5: a7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:76:FE:64:E1:13:4D:84:DC:92:96:FD:43:2B:1C:D6:49:AF:CB:A2 X509v3 Authority Key Identifier: keyid:66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/tXb-ZOETTYTckpb9Qysc1kmvy6I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.82.120.0/22 IPv6: 2a0e:6a80::/29 Signature Algorithm: sha256WithRSAEncryption 96:27:dd:94:3d:06:6f:83:61:a5:11:4e:85:35:bd:d3:68:d7: 16:2c:03:60:d3:44:95:ee:72:21:e4:7c:58:1a:00:83:24:bd: 75:e8:63:f2:87:ed:22:de:3b:c8:bd:80:07:16:ac:08:fc:97: 41:f8:d5:ce:ab:d2:e1:7a:8f:7d:b3:03:5e:98:e1:18:65:9e: 33:37:4d:ca:db:c9:56:c9:98:f0:26:97:f0:b5:54:7b:4c:f0: 87:b1:98:59:e8:a9:62:ac:a9:71:1e:f5:e1:5d:60:9e:c6:1f: bf:5d:a6:f9:4b:88:2d:43:dc:b0:76:80:f1:f5:ef:c3:99:a4: 96:31:be:12:48:ed:f5:f7:67:ba:46:04:56:2d:ab:40:13:ed: f9:16:03:04:b3:43:2f:20:cd:16:52:dc:ff:00:3b:ea:a6:b4: 57:a3:ff:e4:96:d1:eb:a1:95:39:98:81:4f:22:b2:19:23:d2: a1:29:ff:cc:f2:02:5c:5b:76:c7:02:ac:49:03:c5:eb:43:c2: 48:ef:0a:5d:3e:0a:69:24:ac:ee:8b:eb:3a:43:15:d8:d2:49: 54:0f:91:3a:3c:f2:80:3c:f4:8c:ce:55:3e:37:49:2e:a2:99: 67:56:60:02:8e:30:b9:cb:b0:37:9f:1d:d8:48:34:f8:3e:20: 6a:cf:12:c0 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6yMs3bcazSVBnFfBqOhvAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NWU0ZDdlYThhMzQ3MGM5NzAzZWU3NTUxNDgxYzM2Zjc3 NGZlYmIwHhcNMjYwMTAxMTgxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTc2ZmU2NGUxMTM0ZDg0ZGM5Mjk2ZmQ0MzJiMWNkNjQ5YWZjYmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4rrkTwAWoxajUTJuOh2PndjQMgj Dio9oRU2StuEFopnXprmjkHFg5IV9kh8gThghhLk0I+/AZykkgnkjEhPK8MMuwfu ynIvN91MILjcGvV7h3L1+b9u1O1RaTXgxttxL0UdOfxjeE+eQNqS1YworPBcV+pl HO8vMsAZdytD1Vd4nOe5kPjOdBR9CvFK6oLzTbgtNR57rFh472+2LmUZ93NsfgiA hq39AfkMJk/egVaU4qF/20gaKWaghedQaGsSrjgCCMDQym99G8/Z4dJEtwQ6vcvq y2UqF53DFvCfQjR9NJ0bH6mLRVK6a91fLtKJFsIz88YXSxHO6+g1TPWnZwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLV2/mThE02E3JKW/UMrHNZJr8uiMB8GA1UdIwQY MBaAFGZeTX6oo0cMlwPudVFIHDb3dP67MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmw1TmZxaWpSd3lYQS01MVVVZ2NOdmQwX3JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xNGRkZDEtZGVhYy00MWZmLWJhNmIt MTYyZWQ2MjRlMjgyLzEvdFhiLVpPRVRUWVRja3BiOVF5c2Mxa212eTZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8xNGRkZDEtZGVhYy00MWZmLWJhNmItMTYyZWQ2MjRlMjgy LzEvWmw1TmZxaWpSd3lYQS01MVVVZ2NOdmQwX3JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLVJ4MA0E AgACMAcDBQMqDmqAMA0GCSqGSIb3DQEBCwUAA4IBAQCWJ92UPQZvg2GlEU6FNb3T aNcWLANg00SV7nIh5HxYGgCDJL116GPyh+0i3jvIvYAHFqwI/JdB+NXOq9Lheo99 swNemOEYZZ4zN03K28lWyZjwJpfwtVR7TPCHsZhZ6KlirKlxHvXhXWCexh+/Xab5 S4gtQ9ywdoDx9e/DmaSWMb4SSO3192e6RgRWLatAE+35FgMEs0MvIM0WUtz/ADvq prRXo//kltHroZU5mIFPIrIZI9KhKf/M8gJcW3bHAqxJA8XrQ8JI7wpdPgppJKzu i+s6QxXY0klUD5E6PPKAPPSMzlU+N0kuoplnVmACjjC5y7A3nx3YSDT4PiBqzxLA -----END CERTIFICATE-----Generated at Sun Jan 18 08:34:09 2026 by rpki-client