This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/TNzni80qN2E_U8aN4Epu4i5necU.roa File: TNzni80qN2E_U8aN4Epu4i5necU.roa (raw, json) Hash identifier: o4lt/UA2rR4ET3Er2f6mD0trScPvomZAjhmOC025HTU= Subject key identifier: 4C:DC:E7:8B:CD:2A:37:61:3F:53:C6:8D:E0:4A:6E:E2:2E:67:79:C5 Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Certificate serial: 019B7AC79103603B30E5008AF29AA0D6A26F Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/TNzni80qN2E_U8aN4Epu4i5necU.roa Signing time: Thu 01 Jan 2026 18:17:37 +0000 ROA not before: Thu 01 Jan 2026 18:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48031 IP address blocks: 45.146.170.0/24 maxlen: 24 45.149.133.0/24 maxlen: 24 193.142.253.0/24 maxlen: 24 194.169.86.0/24 maxlen: 24 195.245.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:91:03:60:3b:30:e5:00:8a:f2:9a:a0:d6:a2:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Validity Not Before: Jan 1 18:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4cdce78bcd2a37613f53c68de04a6ee22e6779c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:52:5f:d9:65:80:98:4d:b0:1b:4c:c8:10:8b: 03:5b:3d:7d:7a:3d:92:66:45:82:8e:e8:68:b3:e2: 9a:58:0f:f4:72:80:fc:1d:e3:8c:74:30:db:7b:59: 3c:4f:c0:df:e7:b7:7a:1b:5d:71:8d:be:4a:07:61: 70:ee:a0:7d:4d:73:cc:4b:39:83:0d:f9:6a:8f:35: cf:a7:ac:f8:82:22:5c:85:06:8e:5a:5c:05:5d:0f: 5c:75:5b:c7:a8:31:6b:ba:19:26:e2:49:b4:89:9e: ac:36:35:79:84:0b:ca:27:bd:35:ec:c2:ef:93:97: f9:8c:67:61:06:03:28:2c:41:af:f0:e7:b2:a2:73: 81:79:1f:e2:f4:95:47:5d:d3:27:a0:2f:86:90:1b: a7:8d:ef:07:98:fd:bc:11:7b:4e:70:02:fa:a2:8c: eb:a0:d9:4e:74:8c:e7:ff:51:5f:ab:da:17:ce:13: 1a:24:7d:94:a9:cb:9e:4f:1e:ee:07:30:c2:ee:9e: 24:43:2d:30:c3:d5:2b:a1:ec:fe:fa:04:5c:01:06: 4e:04:4d:04:7a:79:6f:c0:ae:f3:8d:0a:85:15:49: 9a:cf:42:29:0e:dc:9e:37:51:53:19:67:0f:7d:9d: f3:5e:3b:3f:61:eb:b5:7f:80:2d:6c:94:d7:fc:61: ab:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:DC:E7:8B:CD:2A:37:61:3F:53:C6:8D:E0:4A:6E:E2:2E:67:79:C5 X509v3 Authority Key Identifier: keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/TNzni80qN2E_U8aN4Epu4i5necU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.146.170.0/24 45.149.133.0/24 193.142.253.0/24 194.169.86.0/24 195.245.102.0/24 Signature Algorithm: sha256WithRSAEncryption 45:1d:7a:8f:7c:ce:74:32:8d:d4:94:6d:2a:19:a6:f4:4e:e5: 53:af:71:55:75:4d:b2:7c:d4:fd:8b:ed:4b:d9:7b:22:07:95: 2e:d6:75:27:21:5f:f1:c7:b7:c7:65:fe:86:06:81:8d:dc:96: b2:7d:7e:6b:4c:65:db:53:31:06:c3:ef:de:9a:e2:97:a2:0d: 1d:60:c0:e9:bb:50:b7:05:d8:a8:0e:48:0a:f6:ff:70:0b:87: 56:1c:02:50:4b:ed:7c:9f:5b:fd:d5:23:c1:4e:14:7f:4a:1b: 34:c1:c6:9e:d5:30:40:80:c6:36:2a:b1:ca:c0:c5:12:8d:ad: fe:5e:d1:52:9f:a7:83:33:f0:d2:38:85:0a:9d:29:65:87:88: a2:a7:3b:f2:ac:f3:a6:b0:c5:c3:8e:30:cb:f7:0c:5a:50:ae: b6:7b:45:38:a5:04:d7:fd:af:2b:e3:d5:71:5c:34:a5:0f:59: c4:b6:3c:33:b6:3c:42:4c:7d:7a:b9:8f:65:a9:5e:31:6c:68: 6b:b3:1c:4e:b5:8f:67:7f:89:5b:64:e7:e8:6c:fe:b9:26:16: c5:6b:33:d8:ba:0e:c9:18:17:d0:db:fa:97:f6:f4:e6:b2:67: 53:bb:ac:e0:88:fc:40:a7:36:8a:74:22:a9:5e:66:7f:d2:e6: a0:04:5d:5c -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt6x5EDYDsw5QCK8pqg1qJvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0 ODBiOWMwHhcNMjYwMTAxMTgxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Y2RjZTc4YmNkMmEzNzYxM2Y1M2M2OGRlMDRhNmVlMjJlNjc3OWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslJf2WWAmE2wG0zIEIsDWz19ej2S ZkWCjuhos+KaWA/0coD8HeOMdDDbe1k8T8Df57d6G11xjb5KB2Fw7qB9TXPMSzmD DflqjzXPp6z4giJchQaOWlwFXQ9cdVvHqDFruhkm4km0iZ6sNjV5hAvKJ7017MLv k5f5jGdhBgMoLEGv8OeyonOBeR/i9JVHXdMnoC+GkBunje8HmP28EXtOcAL6oozr oNlOdIzn/1Ffq9oXzhMaJH2UqcueTx7uBzDC7p4kQy0ww9Uroez++gRcAQZOBE0E enlvwK7zjQqFFUmaz0IpDtyeN1FTGWcPfZ3zXjs/Yeu1f4AtbJTX/GGr5QIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFEzc54vNKjdhP1PGjeBKbuIuZ3nFMB8GA1UdIwQY MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt NTczNzAxYzg0ODMzLzEvVE56bmk4MHFOMkVfVThhTjRFcHU0aTVuZWNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALZKqAwQA LZWFAwQAwY79AwQAwqlWAwQAw/VmMA0GCSqGSIb3DQEBCwUAA4IBAQBFHXqPfM50 Mo3UlG0qGab0TuVTr3FVdU2yfNT9i+1L2XsiB5Uu1nUnIV/xx7fHZf6GBoGN3Jay fX5rTGXbUzEGw+/emuKXog0dYMDpu1C3BdioDkgK9v9wC4dWHAJQS+18n1v91SPB ThR/Shs0wcae1TBAgMY2KrHKwMUSja3+XtFSn6eDM/DSOIUKnSllh4iipzvyrPOm sMXDjjDL9wxaUK62e0U4pQTX/a8r49VxXDSlD1nEtjwztjxCTH16uY9lqV4xbGhr sxxOtY9nf4lbZOfobP65JhbFazPYug7JGBfQ2/qX9vTmsmdTu6zgiPxApzaKdCKp XmZ/0uagBF1c -----END CERTIFICATE-----Generated at Mon Jan 19 20:37:25 2026 by rpki-client