This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/TzEu4TUXWTRJMt1xMqgkMwtWHGA.roa File: TzEu4TUXWTRJMt1xMqgkMwtWHGA.roa (raw, json) Hash identifier: oquq0lPwT4SCvwM7OPbbQnh5Ud90RAojpAxJHfFhWkA= Subject key identifier: 4F:31:2E:E1:35:17:59:34:49:32:DD:71:32:A8:24:33:0B:56:1C:60 Certificate issuer: /CN=019969ac75abcd5968f189e0d45dbbdab2982bda Certificate serial: 019A59B8BFDA233B2BB9923334C3CCBA2620 Authority key identifier: 01:99:69:AC:75:AB:CD:59:68:F1:89:E0:D4:5D:BB:DA:B2:98:2B:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZlprHWrzVlo8Yng1F272rKYK9o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/TzEu4TUXWTRJMt1xMqgkMwtWHGA.roa Signing time: Thu 06 Nov 2025 15:11:11 +0000 ROA not before: Thu 06 Nov 2025 15:11:11 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:b88:8000::/33 maxlen: 33 2001:b89::/32 maxlen: 32 2001:b8a::/31 maxlen: 31 2001:b8c::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.mft rsync://rpki.ripe.net/repository/DEFAULT/AZlprHWrzVlo8Yng1F272rKYK9o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:59:b8:bf:da:23:3b:2b:b9:92:33:34:c3:cc:ba:26:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=019969ac75abcd5968f189e0d45dbbdab2982bda Validity Not Before: Nov 6 15:11:11 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4f312ee1351759344932dd7132a824330b561c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:72:cc:cd:14:e9:15:af:cc:72:94:85:2b:34: fa:a7:13:83:b7:91:86:d9:a5:62:50:44:29:27:d9: 2e:b9:77:28:70:50:5f:e8:3e:2b:2d:bb:2a:c6:cb: 89:0d:51:ab:33:8f:cc:b1:20:5c:e4:84:c5:f3:3a: a8:44:44:19:99:38:22:e6:fa:e9:3a:a5:36:80:31: 8d:76:a2:f0:b0:6c:eb:0c:da:fc:9c:cd:a1:1c:8a: 18:28:42:24:2c:c8:db:ba:a1:99:bd:98:99:43:e7: 2f:02:e3:3f:da:75:8d:1b:12:90:8e:1b:8b:ae:e5: d3:e5:36:21:f1:98:96:86:6c:79:61:7f:e0:46:17: a3:62:68:d0:2e:b4:a9:3c:55:96:90:cd:7c:62:79: 29:b3:a0:eb:98:b1:10:a4:47:b4:6c:08:ae:88:09: b6:02:20:ed:f0:67:39:b2:9c:aa:6a:36:0b:8f:e0: 6f:eb:19:75:1c:31:06:5e:70:6b:c7:5f:5e:bd:db: 3c:ac:11:77:06:7c:47:a5:bd:dc:54:a0:ea:ac:66: 26:55:37:87:52:a0:6d:3d:95:62:40:6e:17:34:9e: fc:df:26:e0:c0:5d:2e:ee:d9:a6:c0:c5:21:83:3c: c6:0a:96:5b:74:df:cf:21:3b:d6:a6:e5:28:37:6b: 76:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:31:2E:E1:35:17:59:34:49:32:DD:71:32:A8:24:33:0B:56:1C:60 X509v3 Authority Key Identifier: keyid:01:99:69:AC:75:AB:CD:59:68:F1:89:E0:D4:5D:BB:DA:B2:98:2B:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZlprHWrzVlo8Yng1F272rKYK9o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/TzEu4TUXWTRJMt1xMqgkMwtWHGA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:b88:8000::-2001:b8f:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 01:68:72:a5:ba:1c:43:3a:77:ed:51:23:d2:a0:a9:8c:57:ee: 78:41:17:c2:a9:99:ea:c8:96:48:38:25:a0:c3:21:94:86:35: ef:e4:74:18:e0:e7:b2:a7:9a:e8:24:36:90:90:46:fc:1b:c4: 4b:05:43:28:b2:b7:9a:e6:3c:b0:ff:ed:0a:c9:72:56:a7:87: e0:73:fd:61:db:1f:a3:61:2a:ad:0a:d4:eb:7d:be:e4:6f:f9: f9:dc:d2:4d:80:ad:41:61:b1:06:90:be:97:09:2f:0d:36:16: 08:8e:69:27:d3:0a:e6:bc:91:d3:d4:f8:e2:8a:d6:5f:b7:5d: 14:34:b8:9f:2b:64:ad:01:16:e8:04:37:fc:13:53:cb:f0:d9: 49:15:9e:eb:66:aa:14:4b:74:1c:b5:5f:7d:4c:64:76:89:e1: f8:e2:7f:29:4e:ed:2e:a6:12:cb:b9:84:3e:0c:54:1e:c1:2c: 78:24:da:18:17:49:44:59:97:c3:19:fd:86:96:a3:41:6d:03: 9d:30:7a:7b:51:b7:b3:f9:b0:e2:67:48:be:14:04:64:32:e3: 1f:12:46:08:c9:87:b1:bc:cf:ea:de:35:11:d1:1a:95:5e:40: 74:c2:3b:8b:6d:da:82:1f:68:bb:6d:68:64:23:48:f3:29:ce: e7:47:86:aa -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgISAZpZuL/aIzsruZIzNMPMuiYgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxOTk2OWFjNzVhYmNkNTk2OGYxODllMGQ0NWRiYmRhYjI5 ODJiZGEwHhcNMjUxMTA2MTUxMTExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjMxMmVlMTM1MTc1OTM0NDkzMmRkNzEzMmE4MjQzMzBiNTYxYzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HLMzRTpFa/McpSFKzT6pxODt5GG 2aViUEQpJ9kuuXcocFBf6D4rLbsqxsuJDVGrM4/MsSBc5ITF8zqoREQZmTgi5vrp OqU2gDGNdqLwsGzrDNr8nM2hHIoYKEIkLMjbuqGZvZiZQ+cvAuM/2nWNGxKQjhuL ruXT5TYh8ZiWhmx5YX/gRhejYmjQLrSpPFWWkM18Ynkps6DrmLEQpEe0bAiuiAm2 AiDt8Gc5spyqajYLj+Bv6xl1HDEGXnBrx19evds8rBF3BnxHpb3cVKDqrGYmVTeH UqBtPZViQG4XNJ783ybgwF0u7tmmwMUhgzzGCpZbdN/PITvWpuUoN2t2hwIDAQAB o4ICFDCCAhAwHQYDVR0OBBYEFE8xLuE1F1k0STLdcTKoJDMLVhxgMB8GA1UdIwQY MBaAFAGZaax1q81ZaPGJ4NRdu9qymCvaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVpscHJIV3J6VmxvOFluZzFGMjcycktZSzlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi82Y2IxNDUtZmU2YS00NWI3LTg4NWYt NjFkMWY3ZmIxMDQ0LzEvVHpFdTRUVVhXVFJKTXQxeE1xZ2tNd3RXSEdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi82Y2IxNDUtZmU2YS00NWI3LTg4NWYtNjFkMWY3ZmIxMDQ0 LzEvQVpscHJIV3J6VmxvOFluZzFGMjcycktZSzlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARMA8DBgcgAQuI gAMFBCABC4AwDQYJKoZIhvcNAQELBQADggEBAAFocqW6HEM6d+1RI9KgqYxX7nhB F8KpmerIlkg4JaDDIZSGNe/kdBjg57KnmugkNpCQRvwbxEsFQyiyt5rmPLD/7QrJ clanh+Bz/WHbH6NhKq0K1Ot9vuRv+fnc0k2ArUFhsQaQvpcJLw02FgiOaSfTCua8 kdPU+OKK1l+3XRQ0uJ8rZK0BFugEN/wTU8vw2UkVnutmqhRLdBy1X31MZHaJ4fji fylO7S6mEsu5hD4MVB7BLHgk2hgXSURZl8MZ/YaWo0FtA50wentRt7P5sOJnSL4U BGQy4x8SRgjJh7G8z+reNRHRGpVeQHTCO4tt2oIfaLttaGQjSPMpzudHhqo= -----END CERTIFICATE-----Generated at Sat Nov 22 21:37:01 2025 by rpki-client