This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/TZ3EX94aeIvbYrHLFnZcngLNJuM.roa File: TZ3EX94aeIvbYrHLFnZcngLNJuM.roa (raw, json) Hash identifier: XoVwLxtJjAhNsj4XPe4q/aPOvED09EZGMovZSogez7c= Subject key identifier: 4D:9D:C4:5F:DE:1A:78:8B:DB:62:B1:CB:16:76:5C:9E:02:CD:26:E3 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F85027B5C442D327648E39EC53B03B1 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/TZ3EX94aeIvbYrHLFnZcngLNJuM.roa Signing time: Fri 02 Jan 2026 16:23:01 +0000 ROA not before: Fri 02 Jan 2026 16:23:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208087 IP address blocks: 146.120.158.0/23 maxlen: 24 146.120.196.0/23 maxlen: 24 146.120.246.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:02:7b:5c:44:2d:32:76:48:e3:9e:c5:3b:03:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:23:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d9dc45fde1a788bdb62b1cb16765c9e02cd26e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e7:cc:fe:76:55:0e:a1:29:88:33:1e:12:96: 16:8f:6f:80:1a:8d:0f:31:64:6d:49:9a:e6:6c:5e: d0:43:d3:1f:de:af:13:e6:bc:02:5c:92:f6:fd:9f: 9d:91:ec:3a:64:1b:7b:0e:04:69:bc:64:08:c0:31: 78:2a:9a:4d:4b:4c:6d:dc:df:bd:18:ef:05:5a:d6: dd:c0:f6:6f:72:e3:e7:2b:cc:03:c6:9d:a1:b5:26: 29:8e:97:61:6e:fd:1c:a4:ee:8b:9c:5b:1b:d4:4c: 49:58:cd:07:78:52:91:4c:ef:8b:4b:bc:da:0c:84: 25:22:80:25:df:49:44:e5:b1:11:39:47:cc:96:53: b6:ec:0c:85:4d:e8:7c:56:e2:d5:c6:ee:1a:32:c0: fd:67:53:00:4f:a7:b1:7e:51:69:44:e2:d4:c7:86: a5:6e:69:70:01:54:13:cd:17:15:ae:90:cc:27:9d: be:63:28:be:5f:52:5b:1d:89:b4:fb:d0:59:9f:4e: 7f:00:97:73:a6:19:22:30:5d:7f:27:4f:b3:b2:e0: 16:6d:af:ee:0f:30:b4:09:a1:e0:a9:af:64:20:82: e4:c0:9d:e3:3a:28:64:f3:fa:4b:67:b4:64:5b:ac: d2:2d:72:69:ee:bd:0e:56:cb:9f:d8:5f:ce:58:fa: 66:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:9D:C4:5F:DE:1A:78:8B:DB:62:B1:CB:16:76:5C:9E:02:CD:26:E3 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/TZ3EX94aeIvbYrHLFnZcngLNJuM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.120.158.0/23 146.120.196.0/23 146.120.246.0/23 Signature Algorithm: sha256WithRSAEncryption 79:b3:ca:33:4c:5f:90:52:fd:77:ef:d5:32:3c:86:df:23:c1: 2b:d5:13:a4:db:31:77:50:de:fd:e1:ef:0e:3d:48:e3:46:32: bd:b5:a1:6d:d7:ff:be:2c:c2:51:73:80:95:5d:b3:a5:d7:ca: 2c:4c:63:5c:94:9c:9f:ac:7e:8d:a9:f7:44:c5:90:21:7c:23: b3:b9:84:1c:13:92:76:91:47:5b:bc:21:21:4d:cc:ec:22:04: d0:1a:4c:61:c6:51:a5:31:29:d7:f3:c9:97:65:91:20:82:e8: 58:e0:4f:24:c1:01:7a:32:39:d6:10:f7:be:ca:cf:63:78:21: 10:4b:91:32:c0:54:51:03:cb:56:44:9a:8a:e8:5f:a8:f8:65: 2e:35:db:98:2a:64:e8:95:37:68:8c:b4:96:d5:a2:4f:5e:a4: 6c:c7:20:45:91:ba:45:66:11:b3:c3:28:04:51:3c:4b:ff:5d: 2d:d2:32:15:ce:9d:de:c3:b4:b9:ea:f6:d1:77:b8:e0:89:aa: f9:e6:a8:88:40:f2:6a:e8:b5:d2:9c:d2:7f:fc:a1:05:d5:46: b0:49:d0:d6:b6:36:dd:6b:a1:c0:bf:d8:d9:a1:e2:d7:7a:5a: dd:63:c9:db:d4:5f:e2:d0:9a:9a:5f:9b:38:7b:f1:f1:8e:bc: cc:1c:ca:04 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/hQJ7XEQtMnZI457FOwOxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMzAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDlkYzQ1ZmRlMWE3ODhiZGI2MmIxY2IxNjc2NWM5ZTAyY2QyNmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1efM/nZVDqEpiDMeEpYWj2+AGo0P MWRtSZrmbF7QQ9Mf3q8T5rwCXJL2/Z+dkew6ZBt7DgRpvGQIwDF4KppNS0xt3N+9 GO8FWtbdwPZvcuPnK8wDxp2htSYpjpdhbv0cpO6LnFsb1ExJWM0HeFKRTO+LS7za DIQlIoAl30lE5bEROUfMllO27AyFTeh8VuLVxu4aMsD9Z1MAT6exflFpROLUx4al bmlwAVQTzRcVrpDMJ52+Yyi+X1JbHYm0+9BZn05/AJdzphkiMF1/J0+zsuAWba/u DzC0CaHgqa9kIILkwJ3jOihk8/pLZ7RkW6zSLXJp7r0OVsuf2F/OWPpm5wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFE2dxF/eGniL22KxyxZ2XJ4CzSbjMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvVFozRVg5NGFlSXZiWXJITEZuWmNuZ0xOSnVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBknieAwQB knjEAwQBknj2MA0GCSqGSIb3DQEBCwUAA4IBAQB5s8ozTF+QUv1379UyPIbfI8Er 1ROk2zF3UN794e8OPUjjRjK9taFt1/++LMJRc4CVXbOl18osTGNclJyfrH6NqfdE xZAhfCOzuYQcE5J2kUdbvCEhTczsIgTQGkxhxlGlMSnX88mXZZEgguhY4E8kwQF6 MjnWEPe+ys9jeCEQS5EywFRRA8tWRJqK6F+o+GUuNduYKmTolTdojLSW1aJPXqRs xyBFkbpFZhGzwygEUTxL/10t0jIVzp3ew7S56vbRd7jgiar55qiIQPJq6LXSnNJ/ /KEF1UawSdDWtjbda6HAv9jZoeLXelrdY8nb1F/i0JqaX5s4e/HxjrzMHMoE -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:35 2026 by rpki-client