This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/trnZsePT4aG-KTCZxjcSxSR1ufY.roa File: trnZsePT4aG-KTCZxjcSxSR1ufY.roa (raw, json) Hash identifier: /5+dzAAN+A0ooVs+3qzdB6EtpFGea8R5ILZY8ARUEc8= Subject key identifier: B6:B9:D9:B1:E3:D3:E1:A1:BE:29:30:99:C6:37:12:C5:24:75:B9:F6 Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954 Certificate serial: 019B7E392A3F267FC93BE7324AFDF3D52B1E Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/trnZsePT4aG-KTCZxjcSxSR1ufY.roa Signing time: Fri 02 Jan 2026 10:20:34 +0000 ROA not before: Fri 02 Jan 2026 10:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 394380 IP address blocks: 152.163.20.0/22 maxlen: 22 152.163.44.0/22 maxlen: 22 152.163.72.0/22 maxlen: 22 152.163.96.0/22 maxlen: 22 152.163.148.0/22 maxlen: 22 152.163.172.0/22 maxlen: 22 152.163.224.0/22 maxlen: 22 152.163.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:2a:3f:26:7f:c9:3b:e7:32:4a:fd:f3:d5:2b:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954 Validity Not Before: Jan 2 10:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b6b9d9b1e3d3e1a1be293099c63712c52475b9f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:f8:d5:f4:97:c5:19:a5:78:a6:24:a6:47:1f: e6:d7:32:96:7f:71:a9:d5:a8:f1:e5:a0:fb:06:5f: 3f:19:e6:7e:58:4c:c1:8c:74:9f:b4:17:cc:61:6b: a0:29:1d:8c:a6:a7:42:b3:d1:07:5b:e4:6c:a2:46: 2a:db:f5:16:4a:b7:4f:86:5e:87:ca:39:be:ec:36: 64:26:ec:67:bd:09:ec:a2:18:7e:e3:5d:d1:a8:43: 8a:42:b1:03:bb:59:7b:8b:67:21:2b:26:e0:f2:d0: aa:95:6f:f0:b7:1e:ab:f2:34:35:0c:b0:dd:1e:f6: 12:77:d5:8b:fb:9a:69:e5:6b:bb:09:7c:40:82:32: 4b:39:ae:bb:33:d5:fc:23:02:e8:39:76:77:fd:b2: 88:11:50:4e:79:f4:9b:e1:56:56:66:aa:28:ba:0d: dd:ec:c0:a8:85:37:9b:25:3f:c9:51:18:32:c2:d1: d1:3f:7c:05:2a:cf:a6:6a:7f:84:c6:3f:7b:ba:44: ae:ef:6f:f2:a0:48:8e:30:05:dc:4f:e2:9c:3a:7e: 57:dc:f5:31:1b:d6:ae:42:cf:2c:21:27:05:3d:82: 93:27:cd:bb:16:b1:52:f7:bf:a2:65:b0:82:b2:ed: 62:20:5d:8e:b9:90:07:4e:6f:02:07:df:c2:c0:29: 2f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B9:D9:B1:E3:D3:E1:A1:BE:29:30:99:C6:37:12:C5:24:75:B9:F6 X509v3 Authority Key Identifier: keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/trnZsePT4aG-KTCZxjcSxSR1ufY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.163.20.0/22 152.163.44.0/22 152.163.72.0/22 152.163.96.0/22 152.163.148.0/22 152.163.172.0/22 152.163.224.0/22 152.163.248.0/22 Signature Algorithm: sha256WithRSAEncryption 06:92:da:99:36:3f:f0:62:fe:20:bb:43:bd:a4:c3:a0:01:5f: f8:ee:c9:e3:2c:9f:a9:01:ae:7c:63:99:2e:d2:f8:5b:35:7f: 21:69:ed:b6:6f:a9:a3:6c:9a:48:81:3c:6d:f8:82:5d:2e:5e: 64:8e:49:8c:db:ff:76:87:29:5a:62:39:0f:34:e4:70:c7:be: cd:41:3c:a3:c8:b7:33:5a:1b:44:ad:a5:dd:5e:82:51:57:1e: 10:0e:29:a5:32:12:81:3c:d6:aa:ae:72:86:8c:61:e0:5c:97: 1a:a1:96:97:f7:72:92:4b:87:a3:8f:86:55:14:0d:f7:42:5a: f0:6b:12:78:1d:ee:69:88:cb:5d:23:b6:2f:9d:74:4a:c6:c6: cc:88:6d:f6:15:1c:3a:20:7a:dd:9a:6e:b8:2c:82:ad:5e:9b: 88:1a:55:7a:58:61:85:93:e8:c1:f0:5b:f3:37:0b:3b:1f:66: 1c:94:ed:2b:bc:b1:ef:ff:f4:2d:00:5c:44:b3:3c:0b:73:5b: 1d:ea:22:2e:81:fb:d8:a0:a4:f3:e7:a4:1f:ee:aa:db:c5:8b: 33:49:17:54:60:40:a0:2e:05:b0:51:45:b9:3a:af:9b:9d:f9: e2:82:ea:35:d3:dc:c9:6d:ce:01:43:b9:89:a7:63:e8:4e:ba: 6c:bb:a5:2f -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt+OSo/Jn/JO+cySv3z1SseMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMDIxYjI1MjIyMjk5N2JmZTMzYjdlNGIzMTVhYzhkNWUw Njc5NTQwHhcNMjYwMTAyMTAyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNmI5ZDliMWUzZDNlMWExYmUyOTMwOTljNjM3MTJjNTI0NzViOWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6vjV9JfFGaV4piSmRx/m1zKWf3Gp 1ajx5aD7Bl8/GeZ+WEzBjHSftBfMYWugKR2MpqdCs9EHW+RsokYq2/UWSrdPhl6H yjm+7DZkJuxnvQnsohh+413RqEOKQrEDu1l7i2chKybg8tCqlW/wtx6r8jQ1DLDd HvYSd9WL+5pp5Wu7CXxAgjJLOa67M9X8IwLoOXZ3/bKIEVBOefSb4VZWZqooug3d 7MCohTebJT/JURgywtHRP3wFKs+man+Exj97ukSu72/yoEiOMAXcT+KcOn5X3PUx G9auQs8sIScFPYKTJ827FrFS97+iZbCCsu1iIF2OuZAHTm8CB9/CwCkvJQIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFLa52bHj0+GhvikwmcY3EsUkdbn2MB8GA1UdIwQY MBaAFCECGyUiIpl7/jO35LMVrI1eBnlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMt NmVhYzYyZTYwZGY3LzEvdHJuWnNlUFQ0YUctS1RDWnhqY1N4U1IxdWZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMtNmVhYzYyZTYwZGY3 LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQCmKMUAwQC mKMsAwQCmKNIAwQCmKNgAwQCmKOUAwQCmKOsAwQCmKPgAwQCmKP4MA0GCSqGSIb3 DQEBCwUAA4IBAQAGktqZNj/wYv4gu0O9pMOgAV/47snjLJ+pAa58Y5ku0vhbNX8h ae22b6mjbJpIgTxt+IJdLl5kjkmM2/92hylaYjkPNORwx77NQTyjyLczWhtEraXd XoJRVx4QDimlMhKBPNaqrnKGjGHgXJcaoZaX93KSS4ejj4ZVFA33QlrwaxJ4He5p iMtdI7YvnXRKxsbMiG32FRw6IHrdmm64LIKtXpuIGlV6WGGFk+jB8FvzNws7H2Yc lO0rvLHv//QtAFxEszwLc1sd6iIugfvYoKTz56Qf7qrbxYszSRdUYECgLgWwUUW5 Oq+bnfniguo109zJbc4BQ7mJp2PoTrpsu6Uv -----END CERTIFICATE-----Generated at Sun Jan 25 03:16:14 2026 by rpki-client