This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/taNbwNau2XMQKfIJe9yRvRtEQBY.roa
File: taNbwNau2XMQKfIJe9yRvRtEQBY.roa (raw, json)
Hash identifier: vkYzoX5sZUla1YZ3xFWl02lzIlXI/hyjdmA2wlgSifs=
Subject key identifier: B5:A3:5B:C0:D6:AE:D9:73:10:29:F2:09:7B:DC:91:BD:1B:44:40:16
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019A969B89F8EFBC8BCB3F59797BB3E9B4B5
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/taNbwNau2XMQKfIJe9yRvRtEQBY.roa
Signing time: Tue 18 Nov 2025 10:56:07 +0000
ROA not before: Tue 18 Nov 2025 10:56:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200740
IP address blocks: 80.76.32.0/23 maxlen: 23
80.76.34.0/23 maxlen: 23
92.118.8.0/23 maxlen: 23
185.114.72.0/23 maxlen: 23
185.114.72.0/24 maxlen: 24
185.114.73.0/24 maxlen: 24
193.239.160.0/23 maxlen: 23
193.239.166.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Dec 2025 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:96:9b:89:f8:ef:bc:8b:cb:3f:59:79:7b:b3:e9:b4:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Nov 18 10:56:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5a35bc0d6aed9731029f2097bdc91bd1b444016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:93:e7:e1:a2:6f:eb:88:59:36:95:24:17:62:
d5:f3:d2:87:ae:c3:2a:7f:d0:30:ec:14:f4:ba:88:
c6:ac:7a:61:96:73:8d:ac:52:75:b6:18:13:40:1f:
41:ee:80:0a:6e:19:b2:09:9e:54:7f:60:28:73:e8:
46:ae:03:4f:54:93:93:31:07:bd:97:fc:3b:64:3c:
45:44:b0:95:f2:38:33:6e:a4:f7:ef:c4:7c:5d:72:
9d:b0:e6:ab:1a:f6:ac:22:d6:0d:f2:d4:f9:06:8c:
c7:2e:e6:a8:22:fa:4e:b7:de:7c:cf:5a:cf:4c:3e:
7b:ea:ed:ba:d2:cb:1f:1d:0a:52:48:44:cc:0b:74:
12:50:59:41:10:ce:a8:77:b1:57:9a:a8:bc:c7:97:
e9:0e:ac:07:1d:ae:f8:25:ce:9b:98:cc:72:37:83:
d4:5f:d1:f5:43:e0:2f:19:bb:e2:17:c1:d7:31:21:
2f:60:c0:85:ec:66:78:d9:32:e5:46:b3:d5:05:00:
d8:0f:c4:61:88:27:b3:9c:1c:f2:93:c7:b5:06:8e:
ff:8b:b8:17:b7:1a:c8:06:6b:50:96:4f:94:fc:73:
67:34:09:2a:6f:c6:be:2e:d1:c3:b7:34:dc:99:7f:
44:59:b3:c2:b7:37:b2:b0:47:80:54:24:d3:b4:0f:
cb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A3:5B:C0:D6:AE:D9:73:10:29:F2:09:7B:DC:91:BD:1B:44:40:16
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/taNbwNau2XMQKfIJe9yRvRtEQBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.32.0/22
92.118.8.0/23
185.114.72.0/23
193.239.160.0/23
193.239.166.0/23
Signature Algorithm: sha256WithRSAEncryption
04:bd:97:42:f1:33:7d:8e:34:a3:d3:c8:f4:e3:42:59:4f:0a:
3c:6b:0c:cc:40:5f:a3:b9:9d:10:c6:b2:d3:1f:17:5b:ef:6f:
c3:68:5a:e3:83:bb:49:58:ff:8d:97:b8:44:ff:db:1a:b3:bf:
e9:ee:39:3b:c2:e4:cd:5f:ed:04:5a:27:8b:57:60:60:56:ce:
aa:4b:0a:a9:2c:a9:a9:2c:53:e7:0d:e6:f0:87:4d:04:52:ba:
8b:0e:a4:41:26:79:16:94:1e:17:fa:22:0c:da:e0:f0:b1:a6:
a8:28:92:9b:e8:4a:9a:92:1f:54:97:1f:33:2e:9b:e1:91:76:
75:3c:02:35:fe:3d:53:e9:63:30:41:83:ac:1b:43:6b:31:b0:
72:ae:b2:73:a0:c9:a8:2c:40:cd:1c:b5:cd:2e:5a:d9:2a:71:
19:e8:72:30:3a:c7:4a:63:51:56:85:f9:94:b1:cc:19:de:32:
d3:2a:e3:35:bb:41:13:82:f3:97:9c:76:27:9a:2a:0d:d2:a4:
96:88:ae:f4:6d:80:ca:84:37:4a:e7:2d:2d:20:34:6b:04:65:
d0:21:65:e9:da:98:75:c3:1e:d1:55:99:f7:01:8e:e1:0e:e5:
68:0e:47:0a:34:6d:70:99:20:7f:9d:75:70:4d:3a:8a:1f:d5:
a9:bc:58:a9
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZqWm4n477yLyz9ZeXuz6bS1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjUxMTE4MTA1NjA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNWEzNWJjMGQ2YWVkOTczMTAyOWYyMDk3YmRjOTFiZDFiNDQ0MDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZPn4aJv64hZNpUkF2LV89KHrsMq
f9Aw7BT0uojGrHphlnONrFJ1thgTQB9B7oAKbhmyCZ5Uf2Aoc+hGrgNPVJOTMQe9
l/w7ZDxFRLCV8jgzbqT378R8XXKdsOarGvasItYN8tT5BozHLuaoIvpOt958z1rP
TD576u260ssfHQpSSETMC3QSUFlBEM6od7FXmqi8x5fpDqwHHa74Jc6bmMxyN4PU
X9H1Q+AvGbviF8HXMSEvYMCF7GZ42TLlRrPVBQDYD8RhiCeznBzyk8e1Bo7/i7gX
txrIBmtQlk+U/HNnNAkqb8a+LtHDtzTcmX9EWbPCtzeysEeAVCTTtA/LywIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFLWjW8DWrtlzECnyCXvckb0bREAWMB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvdGFOYndOYXUyWE1RS2ZJSmU5eVJ2UnRFUUJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCUEwgAwQB
XHYIAwQBuXJIAwQBwe+gAwQBwe+mMA0GCSqGSIb3DQEBCwUAA4IBAQAEvZdC8TN9
jjSj08j040JZTwo8awzMQF+juZ0QxrLTHxdb72/DaFrjg7tJWP+Nl7hE/9sas7/p
7jk7wuTNX+0EWieLV2BgVs6qSwqpLKmpLFPnDebwh00EUrqLDqRBJnkWlB4X+iIM
2uDwsaaoKJKb6Eqakh9Ulx8zLpvhkXZ1PAI1/j1T6WMwQYOsG0NrMbByrrJzoMmo
LEDNHLXNLlrZKnEZ6HIwOsdKY1FWhfmUscwZ3jLTKuM1u0ETgvOXnHYnmioN0qSW
iK70bYDKhDdK5y0tIDRrBGXQIWXp2ph1wx7RVZn3AY7hDuVoDkcKNG1wmSB/nXVw
TTqKH9WpvFip
-----END CERTIFICATE-----
Generated at Sun Dec 7 16:56:10 2025 by rpki-client