This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/TZDLERfxYaKtKt2GBXehaKVy4Ec.roa File: TZDLERfxYaKtKt2GBXehaKVy4Ec.roa (raw, json) Hash identifier: 50fDbvClH6Tb7A/dAIt3e1Vnkit6R984Lg1Z5nVxn/0= Subject key identifier: 4D:90:CB:11:17:F1:61:A2:AD:2A:DD:86:05:77:A1:68:A5:72:E0:47 Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Certificate serial: 019B7F83B92B69C70E410E99C69C11752873 Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/TZDLERfxYaKtKt2GBXehaKVy4Ec.roa Signing time: Fri 02 Jan 2026 16:21:37 +0000 ROA not before: Fri 02 Jan 2026 16:21:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208356 IP address blocks: 188.72.88.0/24 maxlen: 24 188.72.90.0/24 maxlen: 24 188.72.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:b9:2b:69:c7:0e:41:0e:99:c6:9c:11:75:28:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Validity Not Before: Jan 2 16:21:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d90cb1117f161a2ad2add860577a168a572e047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:70:5a:db:74:f9:c6:92:d0:7c:39:c5:f2:b0: 01:cb:4a:2b:e9:9e:62:0c:50:3f:46:d7:5a:9e:52: 83:42:d0:8a:54:25:8b:d0:60:d8:df:cd:2e:f1:7c: 6b:76:5f:27:8d:a5:a3:01:fb:2c:0a:2c:66:03:b9: cb:8b:b3:0e:fe:ee:a6:bf:d0:27:3e:c0:ad:cd:0f: ad:7a:eb:04:4f:b3:e1:5a:58:6c:12:eb:f6:8c:9b: ac:e7:8d:eb:8f:0d:3c:6a:36:e6:eb:cb:d7:f5:9e: 1d:3a:85:95:3f:72:f2:05:e9:34:09:2e:21:11:95: 7b:59:5c:9f:59:34:f0:e8:67:f2:79:fb:45:f9:d5: f7:83:a3:ef:95:4b:6b:d9:c7:89:27:4a:f8:c1:e0: d0:d9:79:05:dc:73:ed:70:4e:26:88:9c:27:2f:0b: 31:35:6b:dd:33:f3:b6:7c:54:1b:91:cc:0f:73:16: 5a:aa:2d:4a:d0:0c:d1:73:08:fb:97:c4:b3:9b:34: 98:42:cb:0f:b8:c1:ff:a1:0a:07:ad:a8:e1:6a:00: 73:fe:67:ec:c8:de:5b:6f:e5:42:91:e5:68:07:1d: 98:17:a6:f5:46:1c:1c:ff:cf:42:bb:3a:fa:e3:b2: c4:c2:09:50:d4:ff:01:3e:a3:de:dd:76:35:41:e6: 6c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:90:CB:11:17:F1:61:A2:AD:2A:DD:86:05:77:A1:68:A5:72:E0:47 X509v3 Authority Key Identifier: keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/TZDLERfxYaKtKt2GBXehaKVy4Ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.72.88.0/24 188.72.90.0/23 Signature Algorithm: sha256WithRSAEncryption 69:c2:f9:31:5f:ab:d8:29:97:5c:e8:fd:58:0e:c7:ae:f1:4f: c8:e1:c9:88:0d:64:bc:97:da:72:00:ee:fe:8b:45:6b:db:c1: 99:af:f8:c4:93:0d:b3:76:43:be:2f:de:ba:08:30:15:36:78: 9a:76:f0:0b:cf:a4:e5:ce:d7:4c:ea:f2:16:1c:ef:aa:99:17: 24:88:bf:77:24:86:f3:5c:b7:4a:7b:a9:02:f6:b9:fe:67:75: 1b:65:21:d1:ed:cf:33:68:87:16:b8:82:19:a9:fb:bc:e5:90: 6d:3e:72:35:ca:50:f7:84:76:3c:62:04:0f:2c:82:10:aa:9b: a3:0e:c8:12:b0:d7:4a:d3:f4:59:0b:7e:3b:b4:1e:74:29:0c: 6e:a6:cb:91:66:d4:8a:07:ae:c7:e2:2c:58:59:6c:81:98:f5: c0:3b:9d:8b:6e:80:1f:b2:be:b7:66:03:d4:f9:4a:22:e5:2a: f2:3d:d3:ee:bb:2b:78:3a:3c:d6:30:48:bc:a1:d5:7c:23:d5: 17:8d:d1:14:24:ea:fb:6e:75:2a:04:d2:82:5a:08:98:a3:01: 1b:dd:12:64:0f:13:cb:84:04:24:64:bc:d9:0f:f0:fe:ed:bc: de:91:eb:75:05:20:7d:f9:a7:30:3d:f0:11:80:90:0a:92:19: 73:39:fb:4a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/g7kraccOQQ6ZxpwRdShzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0 NzA2N2UwHhcNMjYwMTAyMTYyMTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDkwY2IxMTE3ZjE2MWEyYWQyYWRkODYwNTc3YTE2OGE1NzJlMDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnBa23T5xpLQfDnF8rABy0or6Z5i DFA/RtdanlKDQtCKVCWL0GDY380u8Xxrdl8njaWjAfssCixmA7nLi7MO/u6mv9An PsCtzQ+teusET7PhWlhsEuv2jJus543rjw08ajbm68vX9Z4dOoWVP3LyBek0CS4h EZV7WVyfWTTw6GfyeftF+dX3g6PvlUtr2ceJJ0r4weDQ2XkF3HPtcE4miJwnLwsx NWvdM/O2fFQbkcwPcxZaqi1K0AzRcwj7l8SzmzSYQssPuMH/oQoHrajhagBz/mfs yN5bb+VCkeVoBx2YF6b1Rhwc/89Cuzr647LEwglQ1P8BPqPe3XY1QeZsgwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFE2QyxEX8WGirSrdhgV3oWilcuBHMB8GA1UdIwQY MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt OGM5NTgxZDk2ZDhmLzEvVFpETEVSZnhZYUt0S3QyR0JYZWhhS1Z5NEVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAvEhYAwQB vEhaMA0GCSqGSIb3DQEBCwUAA4IBAQBpwvkxX6vYKZdc6P1YDseu8U/I4cmIDWS8 l9pyAO7+i0Vr28GZr/jEkw2zdkO+L966CDAVNniadvALz6TlztdM6vIWHO+qmRck iL93JIbzXLdKe6kC9rn+Z3UbZSHR7c8zaIcWuIIZqfu85ZBtPnI1ylD3hHY8YgQP LIIQqpujDsgSsNdK0/RZC347tB50KQxupsuRZtSKB67H4ixYWWyBmPXAO52LboAf sr63ZgPU+Uoi5SryPdPuuyt4OjzWMEi8odV8I9UXjdEUJOr7bnUqBNKCWgiYowEb 3RJkDxPLhAQkZLzZD/D+7bzeket1BSB9+acwPfARgJAKkhlzOftK -----END CERTIFICATE-----Generated at Mon Jan 26 04:51:38 2026 by rpki-client