This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/TzFMlyGi4zFmCDU2h2qG4O6pMds.roa File: TzFMlyGi4zFmCDU2h2qG4O6pMds.roa (raw, json) Hash identifier: TJpZbRVZ7iaxJCXPVUNPAifcE/xvT1lmZtmQUt0op4c= Subject key identifier: 4F:31:4C:97:21:A2:E3:31:66:08:35:36:87:6A:86:E0:EE:A9:31:DB Certificate issuer: /CN=54143bee7a7ccf47802f55eae557ba5fcf9f795e Certificate serial: 019B7C80A690B549D609E699EB9ED17A79BD Authority key identifier: 54:14:3B:EE:7A:7C:CF:47:80:2F:55:EA:E5:57:BA:5F:CF:9F:79:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBQ77np8z0eAL1Xq5Ve6X8-feV4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/TzFMlyGi4zFmCDU2h2qG4O6pMds.roa Signing time: Fri 02 Jan 2026 02:19:24 +0000 ROA not before: Fri 02 Jan 2026 02:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212076 IP address blocks: 185.231.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft rsync://rpki.ripe.net/repository/DEFAULT/VBQ77np8z0eAL1Xq5Ve6X8-feV4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:a6:90:b5:49:d6:09:e6:99:eb:9e:d1:7a:79:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54143bee7a7ccf47802f55eae557ba5fcf9f795e Validity Not Before: Jan 2 02:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f314c9721a2e33166083536876a86e0eea931db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a5:84:84:de:c7:36:ac:70:bb:32:a0:a0:d4: d9:f4:32:f5:ec:34:fc:45:92:55:0b:8f:e3:1b:62: 33:61:06:12:37:6d:c5:10:99:d0:72:44:91:56:c4: 66:67:99:e7:b3:14:4d:ca:08:b2:4d:2c:96:94:9f: 89:2b:a4:d0:ff:72:e6:c6:9e:c0:86:08:e9:50:5c: 05:db:9b:fb:76:4e:95:00:72:df:62:50:b0:34:c2: 0f:a9:73:e6:5f:a7:33:1d:5d:6e:22:ce:73:ea:2c: f5:46:a1:f6:45:14:d1:4f:a9:5e:55:cc:1d:91:a6: 77:5c:25:54:fd:23:e4:ad:ce:83:84:0c:0b:c9:d7: 08:d7:2e:1f:71:e7:ea:11:c5:86:7e:8c:30:b6:2e: eb:95:52:c5:09:59:c0:f2:44:74:17:34:a7:1d:63: 84:63:16:54:96:03:e2:de:78:85:47:dc:70:87:80: 0c:02:e5:b2:6b:29:2a:04:9f:63:2e:7f:48:45:43: 93:3d:e0:eb:d2:f8:51:cd:fa:3f:38:8f:17:70:74: 54:27:ae:6f:1f:50:6e:13:19:c6:76:3b:7b:9d:22: e5:99:9c:b5:3d:19:6d:2b:60:a1:dc:f0:31:e1:c5: 42:a6:71:e2:94:dd:e7:73:58:8d:bc:27:e8:6c:71: 10:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:31:4C:97:21:A2:E3:31:66:08:35:36:87:6A:86:E0:EE:A9:31:DB X509v3 Authority Key Identifier: keyid:54:14:3B:EE:7A:7C:CF:47:80:2F:55:EA:E5:57:BA:5F:CF:9F:79:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBQ77np8z0eAL1Xq5Ve6X8-feV4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/TzFMlyGi4zFmCDU2h2qG4O6pMds.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.231.65.0/24 Signature Algorithm: sha256WithRSAEncryption 24:66:c2:71:5b:04:1b:99:28:eb:b9:1f:e2:aa:fd:ec:ac:b6: e2:c4:bb:01:23:04:2e:e4:19:3f:5b:27:87:8e:2d:70:7a:db: 82:31:07:28:8e:b1:d3:6a:6a:14:cb:df:d2:e0:b7:5c:2a:45: 63:ff:bd:11:95:af:14:8f:bf:00:b3:b0:f8:51:72:78:e4:8b: aa:24:95:ad:04:b0:48:8f:7f:7c:f7:88:2c:0b:f0:6a:3f:75: 20:c8:9e:a0:63:e9:f1:40:a0:d2:d8:ba:22:b8:60:70:e9:8d: 13:b2:9c:bd:e2:2e:b4:bd:4f:4b:a7:3a:00:86:04:b8:01:28: 50:74:ac:c0:88:f0:24:c7:fb:37:d0:66:a0:f8:9f:1c:3b:77: a2:a1:78:3c:4c:0f:7f:d4:f8:84:5f:3f:c3:01:f6:fb:a3:00: 56:c1:90:e5:6b:74:4c:60:73:b1:d7:f7:99:dd:b0:a4:36:f5: 6f:c5:50:4a:37:c5:4e:e8:b4:2b:c5:d1:0d:2c:25:ae:42:b8: e5:1e:8d:16:ea:37:fb:46:c0:e1:01:22:8b:96:46:82:51:95: 96:f9:97:21:ad:d3:a2:a6:b5:89:de:71:81:be:ec:36:b7:02: b6:b8:2c:79:94:4b:45:0b:f2:01:dd:e8:15:06:95:a7:b8:91: 13:9f:d8:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gKaQtUnWCeaZ657Renm9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MTQzYmVlN2E3Y2NmNDc4MDJmNTVlYWU1NTdiYTVmY2Y5 Zjc5NWUwHhcNMjYwMTAyMDIxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjMxNGM5NzIxYTJlMzMxNjYwODM1MzY4NzZhODZlMGVlYTkzMWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4KWEhN7HNqxwuzKgoNTZ9DL17DT8 RZJVC4/jG2IzYQYSN23FEJnQckSRVsRmZ5nnsxRNygiyTSyWlJ+JK6TQ/3Lmxp7A hgjpUFwF25v7dk6VAHLfYlCwNMIPqXPmX6czHV1uIs5z6iz1RqH2RRTRT6leVcwd kaZ3XCVU/SPkrc6DhAwLydcI1y4fcefqEcWGfowwti7rlVLFCVnA8kR0FzSnHWOE YxZUlgPi3niFR9xwh4AMAuWyaykqBJ9jLn9IRUOTPeDr0vhRzfo/OI8XcHRUJ65v H1BuExnGdjt7nSLlmZy1PRltK2Ch3PAx4cVCpnHilN3nc1iNvCfobHEQQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE8xTJchouMxZgg1NodqhuDuqTHbMB8GA1UdIwQY MBaAFFQUO+56fM9HgC9V6uVXul/Pn3leMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkJRNzducDh6MGVBTDFYcTVWZTZYOC1mZVY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC82NWUyMTgtZDc1MS00MTc2LTgxYWEt Yjc1YjVmMzdkYjA5LzEvVHpGTWx5R2k0ekZtQ0RVMmgycUc0TzZwTWRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC82NWUyMTgtZDc1MS00MTc2LTgxYWEtYjc1YjVmMzdkYjA5 LzEvVkJRNzducDh6MGVBTDFYcTVWZTZYOC1mZVY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuedBMA0G CSqGSIb3DQEBCwUAA4IBAQAkZsJxWwQbmSjruR/iqv3srLbixLsBIwQu5Bk/WyeH ji1wetuCMQcojrHTamoUy9/S4LdcKkVj/70Rla8Uj78As7D4UXJ45IuqJJWtBLBI j39894gsC/BqP3UgyJ6gY+nxQKDS2LoiuGBw6Y0Tspy94i60vU9LpzoAhgS4AShQ dKzAiPAkx/s30Gag+J8cO3eioXg8TA9/1PiEXz/DAfb7owBWwZDla3RMYHOx1/eZ 3bCkNvVvxVBKN8VO6LQrxdENLCWuQrjlHo0W6jf7RsDhASKLlkaCUZWW+ZchrdOi prWJ3nGBvuw2twK2uCx5lEtFC/IB3egVBpWnuJETn9jX -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:23 2026 by rpki-client