This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/TZAOhR60gykboym66rzbFPgWpnw.roa File: TZAOhR60gykboym66rzbFPgWpnw.roa (raw, json) Hash identifier: PpNPr5BTfGRwjG8Az0HN4RTR1CmTf/nqqhlfwpOxI2A= Subject key identifier: 4D:90:0E:85:1E:B4:83:29:1B:A3:29:BA:EA:BC:DB:14:F8:16:A6:7C Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019B7BA41CFA382CCE000795EAB585E45136 Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/TZAOhR60gykboym66rzbFPgWpnw.roa Signing time: Thu 01 Jan 2026 22:18:31 +0000 ROA not before: Thu 01 Jan 2026 22:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 45.137.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:1c:fa:38:2c:ce:00:07:95:ea:b5:85:e4:51:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Jan 1 22:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d900e851eb483291ba329baeabcdb14f816a67c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a5:2f:c9:54:98:79:b2:94:59:64:6b:2b:28: be:02:43:a9:0e:eb:e9:b2:d4:77:c7:8a:e6:e0:aa: 84:5f:b5:9a:6e:0a:19:c4:45:ea:de:ff:a2:65:35: 69:23:c7:8e:5e:45:b5:92:a2:92:0c:e4:32:83:7a: 85:a2:a4:e7:2a:b8:b4:d0:1b:37:8c:83:1c:e2:48: 5f:45:3d:14:5b:99:1f:a9:ec:1c:0c:76:d6:3c:cc: 53:82:9f:19:fd:9d:b4:76:85:c7:2d:a9:b7:09:de: ef:49:24:8d:b4:df:9b:a0:df:1f:7c:e4:2f:fb:e3: 6e:69:18:7c:e2:fd:f6:29:ae:ea:93:99:aa:8c:03: 81:35:da:83:15:b2:09:9d:9f:eb:ee:b6:20:5c:45: d0:61:24:d6:5a:c9:65:cc:96:d4:0e:97:4a:f3:76: d0:e7:46:19:4f:59:8b:14:4f:ad:5d:b4:b1:25:76: 35:58:45:70:bb:2e:8f:62:5e:85:63:b0:e6:61:f2: d8:5e:75:b2:25:3d:0f:0b:02:81:bb:72:ad:0c:86: 05:f4:fd:67:bf:23:3a:0f:cf:6d:b7:53:b6:fd:6f: bf:20:80:da:d4:6f:ab:ba:92:cd:4e:13:4b:3c:07: 87:0b:b0:36:f9:7d:be:bc:b9:e1:71:e5:09:e7:f5: ef:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:90:0E:85:1E:B4:83:29:1B:A3:29:BA:EA:BC:DB:14:F8:16:A6:7C X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/TZAOhR60gykboym66rzbFPgWpnw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.137.106.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:f8:f3:bf:63:93:30:85:78:74:78:f1:7f:63:46:fa:e0:2b: 75:a8:d9:48:50:15:9f:19:f6:07:09:47:f6:e4:25:ab:5c:f5: d7:79:f4:15:da:50:91:ae:ec:c4:4b:6a:9b:80:d4:6f:2d:a6: 17:f4:99:fe:22:e7:77:cb:f5:ce:7f:8a:5a:6e:62:e0:08:02: 6d:95:ac:38:58:3b:14:bb:b1:bb:34:ea:5d:d1:5e:ec:71:a0: 17:4b:63:aa:61:88:e5:e7:f2:05:57:82:b9:36:89:e0:15:7c: 75:25:19:99:f9:b2:22:9c:ee:1b:80:ea:cd:0c:d4:74:50:2f: 35:5b:19:3b:1b:a8:64:87:7e:cb:b9:1e:10:19:35:1a:89:48: 83:54:e8:44:c7:c9:fa:5f:9b:c7:09:31:46:c5:2f:64:5f:93: e2:1a:50:19:a0:7c:b3:82:a1:62:9d:7c:d7:85:f3:3d:32:10: 27:08:2c:41:96:b8:aa:ab:f1:b5:8b:ec:18:ca:3c:4d:b1:01: b9:11:d9:9b:2f:81:09:bc:da:a6:9a:e1:63:13:bc:41:a5:12: 4f:33:ca:28:01:42:d3:c6:06:70:ed:55:fe:70:d9:6f:cb:2a: de:83:e3:44:35:37:33:b0:45:5f:bf:74:67:00:e8:d5:e6:37: b3:c1:b7:46 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pBz6OCzOAAeV6rWF5FE2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjYwMTAxMjIxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDkwMGU4NTFlYjQ4MzI5MWJhMzI5YmFlYWJjZGIxNGY4MTZhNjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKUvyVSYebKUWWRrKyi+AkOpDuvp stR3x4rm4KqEX7WabgoZxEXq3v+iZTVpI8eOXkW1kqKSDOQyg3qFoqTnKri00Bs3 jIMc4khfRT0UW5kfqewcDHbWPMxTgp8Z/Z20doXHLam3Cd7vSSSNtN+boN8ffOQv ++NuaRh84v32Ka7qk5mqjAOBNdqDFbIJnZ/r7rYgXEXQYSTWWsllzJbUDpdK83bQ 50YZT1mLFE+tXbSxJXY1WEVwuy6PYl6FY7DmYfLYXnWyJT0PCwKBu3KtDIYF9P1n vyM6D89tt1O2/W+/IIDa1G+rupLNThNLPAeHC7A2+X2+vLnhceUJ5/XviQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE2QDoUetIMpG6Mpuuq82xT4FqZ8MB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvVFpBT2hSNjBneWtib3ltNjZyemJGUGdXcG53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYlqMA0G CSqGSIb3DQEBCwUAA4IBAQA++PO/Y5MwhXh0ePF/Y0b64Ct1qNlIUBWfGfYHCUf2 5CWrXPXXefQV2lCRruzES2qbgNRvLaYX9Jn+Iud3y/XOf4pabmLgCAJtlaw4WDsU u7G7NOpd0V7scaAXS2OqYYjl5/IFV4K5NongFXx1JRmZ+bIinO4bgOrNDNR0UC81 Wxk7G6hkh37LuR4QGTUaiUiDVOhEx8n6X5vHCTFGxS9kX5PiGlAZoHyzgqFinXzX hfM9MhAnCCxBlriqq/G1i+wYyjxNsQG5EdmbL4EJvNqmmuFjE7xBpRJPM8ooAULT xgZw7VX+cNlvyyreg+NENTczsEVfv3RnAOjV5jezwbdG -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:18 2026 by rpki-client