This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/tgWsqvBvUxCgi8aYF_1r6Pf95x8.roa File: tgWsqvBvUxCgi8aYF_1r6Pf95x8.roa (raw, json) Hash identifier: iAsKbhwAIaMriFFQqjvhhA1IMlhgJ5DoMkToHGforLU= Subject key identifier: B6:05:AC:AA:F0:6F:53:10:A0:8B:C6:98:17:FD:6B:E8:F7:FD:E7:1F Certificate issuer: /CN=4166c06ff49e0534809e234005baa5cca7e146a8 Certificate serial: 019B23A1DEF3CF20F6A586D6B2773645DA7A Authority key identifier: 41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/tgWsqvBvUxCgi8aYF_1r6Pf95x8.roa Signing time: Mon 15 Dec 2025 20:09:29 +0000 ROA not before: Mon 15 Dec 2025 20:09:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207281 IP address blocks: 91.217.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 05:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:a1:de:f3:cf:20:f6:a5:86:d6:b2:77:36:45:da:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4166c06ff49e0534809e234005baa5cca7e146a8 Validity Not Before: Dec 15 20:09:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b605acaaf06f5310a08bc69817fd6be8f7fde71f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:26:4f:62:84:26:41:8c:08:a8:f0:b2:a8:d7: 5d:b4:66:1e:8b:88:68:af:58:f0:71:01:5c:ff:3f: f5:0f:94:62:a7:1b:ef:f3:3f:cd:68:94:96:85:5f: e8:e4:54:85:af:50:30:1d:a2:0b:a8:9f:90:2f:8e: be:4a:55:94:04:2a:43:69:24:b1:f2:5d:7b:06:63: ea:d8:86:a0:d0:a6:86:20:95:0f:5c:bc:3f:fa:aa: 2b:30:44:f7:46:d8:2e:b3:71:36:53:62:c7:6f:15: bd:22:17:4f:36:78:3f:de:46:19:b1:f3:8f:b2:e9: 8d:6c:6c:07:5a:72:a8:0c:f3:63:3a:34:92:a5:b5: c9:23:2a:ce:f1:d8:89:4e:ab:49:6a:94:66:de:d9: 0b:97:34:1e:b7:7a:54:8a:5c:39:a5:3d:5a:25:b1: 6c:ff:38:93:c9:b0:0c:e6:bd:94:46:c9:3f:0f:cc: f4:02:4f:0a:d6:40:52:be:45:2d:f9:21:94:fa:14: bb:7f:a1:9e:6b:99:af:6e:e3:4e:b4:41:0e:4c:54: 00:9a:0a:fd:dd:8d:c7:79:29:45:62:e9:68:e3:49: 76:a0:c8:7b:97:c3:4f:9d:8c:70:12:44:85:50:7a: bd:c0:9f:40:31:8a:8e:59:79:11:2d:78:93:b8:a9: a1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:05:AC:AA:F0:6F:53:10:A0:8B:C6:98:17:FD:6B:E8:F7:FD:E7:1F X509v3 Authority Key Identifier: keyid:41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/tgWsqvBvUxCgi8aYF_1r6Pf95x8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.133.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:1b:9a:8a:44:ae:0d:26:4e:b4:1e:6b:49:a8:30:9a:94:9f: 55:bc:d5:21:40:e2:fa:6f:97:04:87:72:ef:2d:d2:ee:e0:c7: de:36:28:c0:b4:3b:b8:69:4f:ab:28:e2:2c:22:a4:b3:07:7e: b1:45:d1:2f:6f:34:52:00:16:87:19:c5:6b:cb:2a:ed:6a:53: 10:7e:5d:86:81:49:a2:8d:e3:e0:8f:17:df:43:c2:8f:7c:8d: 39:23:86:1a:18:60:ca:37:66:43:4e:b6:90:c3:ef:34:b7:ea: dd:32:b8:d4:e6:ad:8f:47:89:a9:4b:e5:77:0f:05:e8:27:2f: f8:0b:df:75:ca:44:91:36:53:e6:ff:7a:07:f9:93:94:d1:b5: 18:a1:92:44:ca:68:30:74:22:d9:00:0f:39:34:e4:ec:a8:23: d6:e4:59:66:15:fb:c5:04:c2:ad:24:d0:a3:74:4a:65:19:2a: ce:8f:6c:95:9e:8a:e5:7d:ef:59:f9:81:fa:c5:e5:31:b2:b0: 89:7b:6d:23:16:82:ac:bc:12:fc:d2:cc:63:6b:a6:67:b8:26: 5a:a2:8d:ba:0f:79:9a:58:62:d7:92:20:cc:7f:f8:ba:73:8d: fa:93:d9:92:33:89:0b:c8:71:c4:9b:c2:1d:38:ab:40:79:ea: 94:11:60:3e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsjod7zzyD2pYbWsnc2Rdp6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNjZjMDZmZjQ5ZTA1MzQ4MDllMjM0MDA1YmFhNWNjYTdl MTQ2YTgwHhcNMjUxMjE1MjAwOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjA1YWNhYWYwNmY1MzEwYTA4YmM2OTgxN2ZkNmJlOGY3ZmRlNzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniZPYoQmQYwIqPCyqNddtGYei4ho r1jwcQFc/z/1D5Ripxvv8z/NaJSWhV/o5FSFr1AwHaILqJ+QL46+SlWUBCpDaSSx 8l17BmPq2Iag0KaGIJUPXLw/+qorMET3Rtgus3E2U2LHbxW9IhdPNng/3kYZsfOP sumNbGwHWnKoDPNjOjSSpbXJIyrO8diJTqtJapRm3tkLlzQet3pUilw5pT1aJbFs /ziTybAM5r2URsk/D8z0Ak8K1kBSvkUt+SGU+hS7f6Gea5mvbuNOtEEOTFQAmgr9 3Y3HeSlFYulo40l2oMh7l8NPnYxwEkSFUHq9wJ9AMYqOWXkRLXiTuKmh5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLYFrKrwb1MQoIvGmBf9a+j3/ecfMB8GA1UdIwQY MBaAFEFmwG/0ngU0gJ4jQAW6pcyn4UaoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVdiQWJfU2VCVFNBbmlOQUJicWx6S2ZoUnFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC83MGQyZDQtMzU0YS00YTg5LTkzMWUt ODgyNmU4NzdkMTQzLzEvdGdXc3F2QnZVeENnaThhWUZfMXI2UGY5NXg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC83MGQyZDQtMzU0YS00YTg5LTkzMWUtODgyNmU4NzdkMTQz LzEvUVdiQWJfU2VCVFNBbmlOQUJicWx6S2ZoUnFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9mFMA0G CSqGSIb3DQEBCwUAA4IBAQCeG5qKRK4NJk60HmtJqDCalJ9VvNUhQOL6b5cEh3Lv LdLu4MfeNijAtDu4aU+rKOIsIqSzB36xRdEvbzRSABaHGcVryyrtalMQfl2GgUmi jePgjxffQ8KPfI05I4YaGGDKN2ZDTraQw+80t+rdMrjU5q2PR4mpS+V3DwXoJy/4 C991ykSRNlPm/3oH+ZOU0bUYoZJEymgwdCLZAA85NOTsqCPW5FlmFfvFBMKtJNCj dEplGSrOj2yVnorlfe9Z+YH6xeUxsrCJe20jFoKsvBL80sxja6ZnuCZaoo26D3ma WGLXkiDMf/i6c436k9mSM4kLyHHEm8IdOKtAeeqUEWA+ -----END CERTIFICATE-----Generated at Tue Dec 16 11:32:45 2025 by rpki-client