This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/tvd-cxbaL2xZhP3VVCnDJmngDfM.roa File: tvd-cxbaL2xZhP3VVCnDJmngDfM.roa (raw, json) Hash identifier: c9pUOg1ZZG0Zof8PmoK86K1V5LuIswXiiUWdzmpJV3c= Subject key identifier: B6:F7:7E:73:16:DA:2F:6C:59:84:FD:D5:54:29:C3:26:69:E0:0D:F3 Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019ADAD4C70EA29A740B1F1202D840D57ACB Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/tvd-cxbaL2xZhP3VVCnDJmngDfM.roa Signing time: Mon 01 Dec 2025 16:52:48 +0000 ROA not before: Mon 01 Dec 2025 16:52:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211522 IP address blocks: 5.252.118.0/24 maxlen: 24 45.142.122.0/24 maxlen: 24 91.103.252.0/24 maxlen: 24 91.103.253.0/24 maxlen: 24 94.142.138.0/24 maxlen: 24 185.17.0.0/24 maxlen: 24 185.106.93.0/24 maxlen: 24 185.106.94.0/24 maxlen: 24 185.112.83.0/24 maxlen: 24 185.125.230.0/24 maxlen: 24 185.174.136.0/24 maxlen: 24 185.174.137.0/24 maxlen: 24 185.217.197.0/24 maxlen: 24 185.229.65.0/24 maxlen: 24 185.229.66.0/24 maxlen: 24 194.67.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:da:d4:c7:0e:a2:9a:74:0b:1f:12:02:d8:40:d5:7a:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Dec 1 16:52:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b6f77e7316da2f6c5984fdd55429c32669e00df3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ef:59:11:d0:ee:ca:e4:9c:9e:cf:54:e7:18: 90:1e:b2:8a:5d:e9:b8:6a:5a:1e:d8:38:17:66:60: 55:df:ff:fc:d5:c9:b8:ae:14:d1:1f:4b:37:31:42: 3e:7a:14:c7:2b:78:58:af:03:f3:35:74:ac:d8:2f: fd:0b:b2:7b:5e:7c:ed:db:0e:fb:a0:2a:45:89:95: f4:da:02:97:38:df:4a:94:03:5a:7f:79:65:0d:f6: 9d:88:31:d2:05:bf:a9:73:06:67:a1:b6:52:26:9a: 9b:a7:4d:97:8b:8f:2b:ef:04:4f:f9:3f:7d:06:cd: 4d:12:9d:d1:41:5b:18:7b:bc:aa:da:df:cc:5e:69: ee:b9:1a:13:50:3b:eb:f7:e7:06:a9:95:cf:c5:ef: a2:5a:a6:0d:80:cc:24:fb:cc:56:6d:64:13:f9:0a: bc:8f:d0:16:51:97:ed:2b:d4:0e:7c:52:f2:52:a0: 21:6f:46:97:0d:e6:06:c9:e1:68:00:3b:33:36:61: 0f:b7:ff:55:76:99:1c:0d:83:82:3d:63:fa:b1:6f: 0f:a9:2d:1e:bf:5f:af:7b:2a:c5:87:7d:58:ae:e9: 1d:4e:d9:d1:16:12:74:5e:4e:cb:e2:dc:aa:d7:0d: 65:ed:84:1e:2b:d2:f8:53:25:3b:de:e4:10:43:85: 96:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:F7:7E:73:16:DA:2F:6C:59:84:FD:D5:54:29:C3:26:69:E0:0D:F3 X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/tvd-cxbaL2xZhP3VVCnDJmngDfM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.252.118.0/24 45.142.122.0/24 91.103.252.0/23 94.142.138.0/24 185.17.0.0/24 185.106.93.0-185.106.94.255 185.112.83.0/24 185.125.230.0/24 185.174.136.0/23 185.217.197.0/24 185.229.65.0-185.229.66.255 194.67.201.0/24 Signature Algorithm: sha256WithRSAEncryption 07:76:c7:0e:f5:fd:f0:3c:6c:ba:a1:b1:a1:1a:3c:73:ca:fe: 63:7a:34:af:5b:5e:a5:87:71:79:53:31:32:84:fa:fb:4d:99: 4c:2b:bc:c5:3c:4d:b2:cc:83:59:cb:57:93:e3:b4:31:16:e5: a3:cf:e8:b5:8a:a0:19:1f:27:b1:95:dc:59:0f:6a:86:32:0b: 16:b8:da:6d:9f:c0:1f:c9:ba:19:59:69:9e:76:60:6b:cf:cf: 6f:3c:57:d6:70:42:0a:2d:5e:32:fd:b6:fc:d1:39:f1:e0:5a: db:fb:26:4a:01:97:52:0c:87:3e:50:9d:52:7e:c4:7c:72:e6: 8a:e1:60:b1:b9:6e:e2:43:57:33:5f:da:5d:50:49:51:55:19: 65:dd:3a:f2:41:fc:57:14:18:7d:aa:ab:b1:b0:95:70:d3:cb: a5:99:24:ca:90:9b:96:3b:b7:63:8a:59:65:ff:6e:37:e3:60: 40:8e:18:2a:64:f7:11:f4:f9:46:6a:e8:14:02:b7:1c:25:a5: f1:81:e0:e4:ca:01:26:d1:07:d3:9b:c5:ac:db:69:35:07:54: 73:de:a2:54:9a:17:8e:b1:dd:57:cd:57:9b:1e:db:b3:82:bd: a6:4a:00:10:4a:b1:6f:7f:32:19:34:e8:0b:34:68:32:74:7a: cd:a9:43:1f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgISAZra1McOopp0Cx8SAthA1XrLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjUxMjAxMTY1MjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNmY3N2U3MzE2ZGEyZjZjNTk4NGZkZDU1NDI5YzMyNjY5ZTAwZGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApe9ZEdDuyuScns9U5xiQHrKKXem4 aloe2DgXZmBV3//81cm4rhTRH0s3MUI+ehTHK3hYrwPzNXSs2C/9C7J7Xnzt2w77 oCpFiZX02gKXON9KlANaf3llDfadiDHSBb+pcwZnobZSJpqbp02Xi48r7wRP+T99 Bs1NEp3RQVsYe7yq2t/MXmnuuRoTUDvr9+cGqZXPxe+iWqYNgMwk+8xWbWQT+Qq8 j9AWUZftK9QOfFLyUqAhb0aXDeYGyeFoADszNmEPt/9VdpkcDYOCPWP6sW8PqS0e v1+veyrFh31YrukdTtnRFhJ0Xk7L4tyq1w1l7YQeK9L4UyU73uQQQ4WWywIDAQAB o4ICWzCCAlcwHQYDVR0OBBYEFLb3fnMW2i9sWYT91VQpwyZp4A3zMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvdHZkLWN4YmFMMnhaaFAzVlZDbkRKbW5nRGZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHEGCCsGAQUFBwEHAQH/BGIwYDBeBAIAATBYAwQABfx2AwQA LY56AwQBW2f8AwQAXo6KAwQAuREAMAwDBAC5al0DBAC5al4DBAC5cFMDBAC5feYD BAG5rogDBAC52cUwDAMEALnlQQMEALnlQgMEAMJDyTANBgkqhkiG9w0BAQsFAAOC AQEAB3bHDvX98DxsuqGxoRo8c8r+Y3o0r1tepYdxeVMxMoT6+02ZTCu8xTxNssyD WctXk+O0MRblo8/otYqgGR8nsZXcWQ9qhjILFrjabZ/AH8m6GVlpnnZga8/PbzxX 1nBCCi1eMv22/NE58eBa2/smSgGXUgyHPlCdUn7EfHLmiuFgsblu4kNXM1/aXVBJ UVUZZd068kH8VxQYfaqrsbCVcNPLpZkkypCblju3Y4pZZf9uN+NgQI4YKmT3EfT5 RmroFAK3HCWl8YHg5MoBJtEH05vFrNtpNQdUc96iVJoXjrHdV81Xmx7bs4K9pkoA EEqxb38yGTToCzRoMnR6zalDHw== -----END CERTIFICATE-----Generated at Fri Dec 5 21:27:02 2025 by rpki-client