This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/TzXS_x8rKVrlwoD9v8BqI47TEeo.roa File: TzXS_x8rKVrlwoD9v8BqI47TEeo.roa (raw, json) Hash identifier: rfp9dhL99iZjM0D0pF2I+WlGwD2HUU0+KsiqjFKP2sQ= Subject key identifier: 4F:35:D2:FF:1F:2B:29:5A:E5:C2:80:FD:BF:C0:6A:23:8E:D3:11:EA Certificate issuer: /CN=edb04a943332768017266f4e5f56c006d98ebbb4 Certificate serial: 019B7D5CF2B8630281FEB1777D4330692979 Authority key identifier: ED:B0:4A:94:33:32:76:80:17:26:6F:4E:5F:56:C0:06:D9:8E:BB:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/TzXS_x8rKVrlwoD9v8BqI47TEeo.roa Signing time: Fri 02 Jan 2026 06:20:02 +0000 ROA not before: Fri 02 Jan 2026 06:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137922 IP address blocks: 2a03:b8c0:11::/48 maxlen: 48 2a03:b8c0:16::/48 maxlen: 48 2a03:b8c0:17::/48 maxlen: 48 2a03:b8c0:18::/48 maxlen: 48 2a03:b8c0:27::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 06:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:f2:b8:63:02:81:fe:b1:77:7d:43:30:69:29:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edb04a943332768017266f4e5f56c006d98ebbb4 Validity Not Before: Jan 2 06:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f35d2ff1f2b295ae5c280fdbfc06a238ed311ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:18:72:1f:01:f0:c8:3e:f9:dc:cb:25:8b:72: 5f:59:8d:92:16:13:82:c9:b3:37:aa:4d:45:a9:e8: 6e:2d:f3:ec:e8:3c:2b:d8:f2:b8:de:55:b6:d8:99: 69:92:91:12:1c:6e:3f:46:27:cc:50:cd:aa:68:2d: c1:50:84:31:c7:61:59:12:ce:90:72:d3:4e:26:58: 96:f6:88:44:ca:40:df:1a:a4:b5:4e:de:64:c7:56: b4:91:96:a5:1c:d2:d7:dc:b7:3c:39:c3:0e:3a:58: 16:59:c3:53:b2:e1:69:c8:e8:a5:eb:73:6b:14:cd: b0:bb:3b:1f:7c:68:e9:97:ba:91:c2:12:c8:cb:31: 12:69:0c:dd:39:e8:b4:2f:c2:5c:20:59:d4:1a:eb: 83:63:f1:f1:54:98:dc:85:cf:1e:6f:8c:e3:a8:c7: 3c:1a:07:12:10:42:01:d0:5d:ca:c1:b9:2a:98:ff: 8b:60:18:60:64:44:8c:4e:93:6e:13:b4:66:d8:84: 88:91:fe:4c:aa:9c:e9:c7:4b:3e:a1:8e:78:66:80: 78:56:0d:b0:18:39:99:b1:81:00:52:22:fa:66:15: 81:d5:c5:e9:a0:76:2d:ce:d2:14:1c:75:a3:97:58: 96:2a:9a:bc:44:c7:46:68:0f:78:7b:ae:6b:54:e3: b2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:35:D2:FF:1F:2B:29:5A:E5:C2:80:FD:BF:C0:6A:23:8E:D3:11:EA X509v3 Authority Key Identifier: keyid:ED:B0:4A:94:33:32:76:80:17:26:6F:4E:5F:56:C0:06:D9:8E:BB:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/TzXS_x8rKVrlwoD9v8BqI47TEeo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:b8c0:11::/48 2a03:b8c0:16::-2a03:b8c0:18:ffff:ffff:ffff:ffff:ffff 2a03:b8c0:27::/48 Signature Algorithm: sha256WithRSAEncryption 1f:04:56:24:4a:75:bd:ac:f3:c1:8a:89:ee:d4:26:37:47:a8: e3:8c:18:0b:de:e1:78:2e:7d:2a:74:e3:1d:f1:69:84:5f:24: 74:9a:6d:97:ff:a7:24:d1:c7:55:f4:46:26:eb:0a:f5:47:9d: a4:a8:80:5f:78:17:87:b2:8a:46:5e:79:5f:fd:cf:50:22:dd: c3:cf:9c:81:62:95:d0:1b:ca:19:1c:ac:64:3a:fd:f5:d4:63: cb:0e:21:c6:41:c8:3f:e3:63:1b:c7:bc:7d:f9:6c:1a:3e:aa: 66:e4:50:97:20:32:fb:22:da:ff:b9:99:f8:79:a6:9d:4d:cf: fb:3b:7a:e8:53:c9:ca:53:40:11:ad:c2:99:33:bd:47:20:80: 22:d7:e6:cc:71:a6:73:e5:98:59:a0:6e:6d:72:ec:49:70:e3: 13:79:9c:90:6f:d4:3a:c7:65:93:fa:ac:fa:dc:1e:23:d5:a5: 02:de:76:d6:e4:4d:ac:7f:8d:b4:07:d8:71:d8:7c:d7:e7:45: ee:56:db:34:ca:f1:da:5f:36:74:46:1c:95:12:1d:6d:38:4b: 3a:e0:6f:3e:91:61:fd:43:98:20:07:67:b3:e9:7d:a8:a2:08: 9c:77:33:af:d7:14:50:43:d9:2e:72:e6:a8:90:fe:31:e3:a8: ca:3e:79:27 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt9XPK4YwKB/rF3fUMwaSl5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkYjA0YTk0MzMzMjc2ODAxNzI2NmY0ZTVmNTZjMDA2ZDk4 ZWJiYjQwHhcNMjYwMTAyMDYyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjM1ZDJmZjFmMmIyOTVhZTVjMjgwZmRiZmMwNmEyMzhlZDMxMWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxhyHwHwyD753Msli3JfWY2SFhOC ybM3qk1FqehuLfPs6Dwr2PK43lW22JlpkpESHG4/RifMUM2qaC3BUIQxx2FZEs6Q ctNOJliW9ohEykDfGqS1Tt5kx1a0kZalHNLX3Lc8OcMOOlgWWcNTsuFpyOil63Nr FM2wuzsffGjpl7qRwhLIyzESaQzdOei0L8JcIFnUGuuDY/HxVJjchc8eb4zjqMc8 GgcSEEIB0F3KwbkqmP+LYBhgZESMTpNuE7Rm2ISIkf5Mqpzpx0s+oY54ZoB4Vg2w GDmZsYEAUiL6ZhWB1cXpoHYtztIUHHWjl1iWKpq8RMdGaA94e65rVOOywQIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFE810v8fKyla5cKA/b/AaiOO0xHqMB8GA1UdIwQY MBaAFO2wSpQzMnaAFyZvTl9WwAbZjru0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2JCS2xETXlkb0FYSm05T1gxYkFCdG1PdTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81MGE0YzQtOTFkMS00MzExLWI2N2It ZTQ1ZmE2NGQ0ZDJkLzEvVHpYU194OHJLVnJsd29EOXY4QnFJNDdURWVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC81MGE0YzQtOTFkMS00MzExLWI2N2ItZTQ1ZmE2NGQ0ZDJk LzEvN2JCS2xETXlkb0FYSm05T1gxYkFCdG1PdTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmAwcAKgO4wAAR MBIDBwEqA7jAABYDBwAqA7jAABgDBwAqA7jAACcwDQYJKoZIhvcNAQELBQADggEB AB8EViRKdb2s88GKie7UJjdHqOOMGAve4XgufSp04x3xaYRfJHSabZf/pyTRx1X0 RibrCvVHnaSogF94F4eyikZeeV/9z1Ai3cPPnIFildAbyhkcrGQ6/fXUY8sOIcZB yD/jYxvHvH35bBo+qmbkUJcgMvsi2v+5mfh5pp1Nz/s7euhTycpTQBGtwpkzvUcg gCLX5sxxpnPlmFmgbm1y7Elw4xN5nJBv1DrHZZP6rPrcHiPVpQLedtbkTax/jbQH 2HHYfNfnRe5W2zTK8dpfNnRGHJUSHW04Szrgbz6RYf1DmCAHZ7PpfaiiCJx3M6/X FFBD2S5y5qiQ/jHjqMo+eSc= -----END CERTIFICATE-----Generated at Tue Jan 20 14:51:17 2026 by rpki-client