This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/tzc__lKb8h4wwSuZ-hH8wXsLoc8.roa File: tzc__lKb8h4wwSuZ-hH8wXsLoc8.roa (raw, json) Hash identifier: /TIFVCryUKLe+qC5ophnFPWxCQdj7ytlyN2nr4rjE6Q= Subject key identifier: B7:37:3F:FE:52:9B:F2:1E:30:C1:2B:99:FA:11:FC:C1:7B:0B:A1:CF Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Certificate serial: 019B77C7798576E27D3EB6289ED74B974831 Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/tzc__lKb8h4wwSuZ-hH8wXsLoc8.roa Signing time: Thu 01 Jan 2026 04:18:40 +0000 ROA not before: Thu 01 Jan 2026 04:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206541 IP address blocks: 91.90.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:79:85:76:e2:7d:3e:b6:28:9e:d7:4b:97:48:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Validity Not Before: Jan 1 04:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7373ffe529bf21e30c12b99fa11fcc17b0ba1cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c9:21:90:41:cb:b8:43:d3:7b:3d:dc:ac:ee: 03:f8:43:9d:d5:a6:cb:06:3d:ef:74:1e:68:a2:05: 18:91:4f:72:0e:7c:c3:4a:8b:21:21:7c:b6:09:07: 8d:57:5e:62:e4:01:35:e2:c0:94:11:22:a0:fc:d0: 88:2b:8d:45:58:1f:44:b6:42:2c:2b:09:5f:da:f8: ef:dd:f6:0a:d7:29:d5:27:96:e2:a8:1d:67:c4:b9: 77:35:a4:2a:e3:8b:6b:24:a2:03:82:e1:70:be:9e: 36:db:85:93:9a:8c:86:a4:d1:b0:df:67:0a:4e:d1: 2a:44:22:fa:df:a0:44:aa:00:e0:40:7f:f6:32:72: ff:5f:ad:38:6e:69:7e:06:a0:d1:6b:00:16:df:6b: fa:b8:5a:de:35:60:4f:00:20:e4:12:2f:00:b9:90: 72:a8:7e:27:e5:90:01:9e:cb:8c:92:3b:8a:60:22: 6f:0b:1e:5c:6b:fa:d2:79:99:47:5d:c5:26:d6:88: 5a:a8:38:89:2e:c7:e3:2b:4e:a9:a8:73:89:01:29: bc:38:78:50:bf:a1:d3:2a:91:99:f7:77:18:44:73: dc:57:0c:1a:cf:56:d6:4a:36:91:b3:7e:1d:90:88: 1b:3f:2e:1d:16:3c:05:73:4f:61:f8:b0:70:06:43: a8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:37:3F:FE:52:9B:F2:1E:30:C1:2B:99:FA:11:FC:C1:7B:0B:A1:CF X509v3 Authority Key Identifier: keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/tzc__lKb8h4wwSuZ-hH8wXsLoc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.90.233.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:ff:2f:45:2f:27:79:74:cf:58:92:1d:d4:62:ba:11:ad:eb: a6:03:c7:6b:a9:17:e9:68:7d:a2:6f:32:92:08:eb:89:bb:5f: d5:06:cd:aa:86:af:e2:2a:ab:76:22:31:0c:8b:fc:ec:82:d7: 7b:c3:9f:00:70:7e:e7:d5:c9:f6:93:e4:28:1e:4c:c2:cd:17: 53:12:13:c5:64:6e:ee:b7:34:71:a1:95:c0:a1:68:27:14:91: fd:24:93:41:da:07:9f:cf:d1:46:ad:3a:e5:84:79:97:f7:0a: 3c:d2:09:05:b3:94:60:91:b1:49:06:2e:5d:fd:ca:b9:f2:09: 29:3c:50:21:1e:ee:f3:a0:6b:06:c6:82:2d:76:92:8d:b7:78: 2a:19:2f:8c:36:0a:4e:07:a2:e0:8f:e6:1c:f2:6a:44:66:55: 23:76:35:cb:aa:65:ad:9e:26:8c:07:6f:4c:5d:7c:45:fd:d3: 27:fc:db:79:c6:89:2f:7b:6e:bf:30:d4:fa:2e:5f:10:59:58: 97:c1:f6:a3:4c:22:37:ff:98:6f:40:e3:ca:91:8e:60:dc:12: 59:35:a6:d6:67:f4:7a:59:92:7c:a1:1d:0f:80:d5:a8:e1:0f: fa:77:a0:44:2a:59:f0:77:61:51:18:1a:4e:4b:4d:95:9e:e9: b9:6d:36:75 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3mFduJ9PrYontdLl0gxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4 ZjY2Y2MwHhcNMjYwMTAxMDQxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzM3M2ZmZTUyOWJmMjFlMzBjMTJiOTlmYTExZmNjMTdiMGJhMWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtckhkEHLuEPTez3crO4D+EOd1abL Bj3vdB5oogUYkU9yDnzDSoshIXy2CQeNV15i5AE14sCUESKg/NCIK41FWB9EtkIs Kwlf2vjv3fYK1ynVJ5biqB1nxLl3NaQq44trJKIDguFwvp4224WTmoyGpNGw32cK TtEqRCL636BEqgDgQH/2MnL/X604bml+BqDRawAW32v6uFreNWBPACDkEi8AuZBy qH4n5ZABnsuMkjuKYCJvCx5ca/rSeZlHXcUm1ohaqDiJLsfjK06pqHOJASm8OHhQ v6HTKpGZ93cYRHPcVwwaz1bWSjaRs34dkIgbPy4dFjwFc09h+LBwBkOolwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLc3P/5Sm/IeMMErmfoR/MF7C6HPMB8GA1UdIwQY MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt YTFiOTZiOWI3MGY4LzEvdHpjX19sS2I4aDR3d1N1Wi1oSDh3WHNMb2M4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4 LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW1rpMA0G CSqGSIb3DQEBCwUAA4IBAQAq/y9FLyd5dM9Ykh3UYroRreumA8drqRfpaH2ibzKS COuJu1/VBs2qhq/iKqt2IjEMi/zsgtd7w58AcH7n1cn2k+QoHkzCzRdTEhPFZG7u tzRxoZXAoWgnFJH9JJNB2gefz9FGrTrlhHmX9wo80gkFs5RgkbFJBi5d/cq58gkp PFAhHu7zoGsGxoItdpKNt3gqGS+MNgpOB6Lgj+Yc8mpEZlUjdjXLqmWtniaMB29M XXxF/dMn/Nt5xokve26/MNT6Ll8QWViXwfajTCI3/5hvQOPKkY5g3BJZNabWZ/R6 WZJ8oR0PgNWo4Q/6d6BEKlnwd2FRGBpOS02Vnum5bTZ1 -----END CERTIFICATE-----Generated at Sun Jan 25 13:31:50 2026 by rpki-client