This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/tz3awoZeBMuIdw8HRL7O9-b0MUY.roa File: tz3awoZeBMuIdw8HRL7O9-b0MUY.roa (raw, json) Hash identifier: a14NZqfBHqVj9Mn2LuS27VMbtbzXHlfv3zf5CSLerJI= Subject key identifier: B7:3D:DA:C2:86:5E:04:CB:88:77:0F:07:44:BE:CE:F7:E6:F4:31:46 Certificate issuer: /CN=ebb5256fe3e07302ab7327b747b8df38245c4edf Certificate serial: 019B7758E24558D4771BC46508B5E067A095 Authority key identifier: EB:B5:25:6F:E3:E0:73:02:AB:73:27:B7:47:B8:DF:38:24:5C:4E:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/tz3awoZeBMuIdw8HRL7O9-b0MUY.roa Signing time: Thu 01 Jan 2026 02:17:52 +0000 ROA not before: Thu 01 Jan 2026 02:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 719 IP address blocks: 91.235.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:e2:45:58:d4:77:1b:c4:65:08:b5:e0:67:a0:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebb5256fe3e07302ab7327b747b8df38245c4edf Validity Not Before: Jan 1 02:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b73ddac2865e04cb88770f0744becef7e6f43146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c2:92:82:ee:ae:bd:20:51:f2:64:3f:50:d5: dd:5c:5f:99:01:3a:16:8b:d8:e8:7d:24:88:72:57: a2:6a:41:34:b7:b9:bd:63:10:c8:3b:7d:e9:38:05: c1:89:9a:a0:d9:41:5c:a2:36:ea:ba:a1:1c:d7:e3: 4b:93:a2:3f:78:98:51:a9:1f:bf:e6:80:ee:ce:ad: de:10:e6:b6:d6:ac:36:22:2e:16:3f:51:20:7c:76: 7c:9a:1e:5c:88:8b:07:fd:ad:68:7b:a7:99:e4:59: 8f:70:10:dc:da:2c:b9:c0:f5:ee:4d:0c:be:79:d4: bb:5a:5b:7a:a5:e1:0e:bc:4d:1b:95:30:98:fb:da: f2:65:58:48:d6:b5:8c:49:29:b3:f4:5b:36:62:78: c3:9f:ba:86:1e:48:21:7f:39:c0:b6:80:d4:8d:e4: bb:bc:ce:ab:15:c9:56:37:9b:7e:c5:f9:f5:da:30: 34:93:d6:51:bd:52:b0:85:8e:a1:36:9d:9b:2b:fb: c9:7e:97:20:db:31:fd:04:92:e8:6a:19:94:15:91: be:dd:18:19:7b:bd:a6:dd:e6:60:c7:7d:0e:89:77: 9f:60:b8:fe:75:f7:b0:c3:10:24:36:cd:18:f8:4f: 95:f2:76:1c:b3:50:3d:02:a8:33:e5:6c:91:65:39: 8f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:3D:DA:C2:86:5E:04:CB:88:77:0F:07:44:BE:CE:F7:E6:F4:31:46 X509v3 Authority Key Identifier: keyid:EB:B5:25:6F:E3:E0:73:02:AB:73:27:B7:47:B8:DF:38:24:5C:4E:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/tz3awoZeBMuIdw8HRL7O9-b0MUY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.235.215.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:00:40:81:b0:02:5f:20:4a:1e:ba:4c:c8:f4:06:19:cc:12: 1a:79:50:20:c0:7e:d2:04:f3:9d:b7:b1:0f:9e:e7:ce:8b:ee: b9:54:bb:4a:2d:5c:12:f2:1c:05:a0:bc:44:55:0c:a5:9d:fa: e6:1b:a3:54:d8:19:c0:6f:3e:e9:75:e6:11:a2:63:92:ff:98: 72:8e:92:04:a4:0a:a8:47:b4:78:99:4c:fe:82:53:e3:f8:89: a2:83:f3:36:bb:89:b1:a6:b5:f6:6e:e2:fb:3f:e5:8c:e7:f8: 80:09:04:00:f1:2e:53:d9:98:dc:3c:8a:52:17:77:75:aa:72: dd:ff:c8:d1:64:bc:4a:cc:e6:3e:ee:45:e6:d3:d5:47:49:7f: fc:64:f2:75:b7:4e:1e:f7:b5:b0:60:66:fc:ae:be:87:03:64: 20:ab:fb:bf:48:a2:14:8b:21:38:f4:09:e7:be:1b:ec:8f:71: 5e:89:61:a3:93:06:44:68:79:8c:2e:41:a9:9b:2b:ac:19:5b: 01:11:81:77:66:71:38:00:e2:83:c5:e1:ed:41:6e:1d:60:dd: 65:15:ec:e6:5f:9d:fb:a1:ed:70:2b:7b:8e:3e:10:ad:dd:b7: 20:b0:e1:20:fa:ad:12:94:d9:05:23:2a:f2:c8:bf:e1:c5:16: e6:40:c0:74 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WOJFWNR3G8RlCLXgZ6CVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViYjUyNTZmZTNlMDczMDJhYjczMjdiNzQ3YjhkZjM4MjQ1 YzRlZGYwHhcNMjYwMTAxMDIxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzNkZGFjMjg2NWUwNGNiODg3NzBmMDc0NGJlY2VmN2U2ZjQzMTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssKSgu6uvSBR8mQ/UNXdXF+ZAToW i9jofSSIcleiakE0t7m9YxDIO33pOAXBiZqg2UFcojbquqEc1+NLk6I/eJhRqR+/ 5oDuzq3eEOa21qw2Ii4WP1EgfHZ8mh5ciIsH/a1oe6eZ5FmPcBDc2iy5wPXuTQy+ edS7Wlt6peEOvE0blTCY+9ryZVhI1rWMSSmz9Fs2YnjDn7qGHkghfznAtoDUjeS7 vM6rFclWN5t+xfn12jA0k9ZRvVKwhY6hNp2bK/vJfpcg2zH9BJLoahmUFZG+3RgZ e72m3eZgx30OiXefYLj+dfewwxAkNs0Y+E+V8nYcs1A9Aqgz5WyRZTmPjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLc92sKGXgTLiHcPB0S+zvfm9DFGMB8GA1UdIwQY MBaAFOu1JW/j4HMCq3Mnt0e43zgkXE7fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjdVbGItUGdjd0tyY3llM1I3amZPQ1JjVHQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS80MGIyYTktYjJjNy00MjIzLTg4NDgt MGQyZTQyMDU2ODZmLzEvdHozYXdvWmVCTXVJZHc4SFJMN085LWIwTVVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS80MGIyYTktYjJjNy00MjIzLTg4NDgtMGQyZTQyMDU2ODZm LzEvNjdVbGItUGdjd0tyY3llM1I3amZPQ1JjVHQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+vXMA0G CSqGSIb3DQEBCwUAA4IBAQAsAECBsAJfIEoeukzI9AYZzBIaeVAgwH7SBPOdt7EP nufOi+65VLtKLVwS8hwFoLxEVQylnfrmG6NU2BnAbz7pdeYRomOS/5hyjpIEpAqo R7R4mUz+glPj+Imig/M2u4mxprX2buL7P+WM5/iACQQA8S5T2ZjcPIpSF3d1qnLd /8jRZLxKzOY+7kXm09VHSX/8ZPJ1t04e97WwYGb8rr6HA2Qgq/u/SKIUiyE49Ann vhvsj3FeiWGjkwZEaHmMLkGpmyusGVsBEYF3ZnE4AOKDxeHtQW4dYN1lFezmX537 oe1wK3uOPhCt3bcgsOEg+q0SlNkFIyryyL/hxRbmQMB0 -----END CERTIFICATE-----Generated at Mon Jan 26 14:14:06 2026 by rpki-client