This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TZJ_ReY_9oeQvFqH-51d4sIQN0E.roa
File: TZJ_ReY_9oeQvFqH-51d4sIQN0E.roa (raw, json)
Hash identifier: S0xk0+a0T1qKmx/1AFSBFhEjRTCTt/HU8n4Qux5qRdE=
Subject key identifier: 4D:92:7F:45:E6:3F:F6:87:90:BC:5A:87:FB:9D:5D:E2:C2:10:37:41
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019B7F84BA95E291105CEF531CD267A02811
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TZJ_ReY_9oeQvFqH-51d4sIQN0E.roa
Signing time: Fri 02 Jan 2026 16:22:43 +0000
ROA not before: Fri 02 Jan 2026 16:22:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213995
IP address blocks: 94.183.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:84:ba:95:e2:91:10:5c:ef:53:1c:d2:67:a0:28:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 16:22:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d927f45e63ff68790bc5a87fb9d5de2c2103741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ce:4e:37:f0:a3:b7:f6:ea:80:00:01:fa:57:
8a:57:5e:a1:8c:51:d9:c2:a6:ba:f8:b9:82:4d:89:
cd:02:6f:1e:2d:3e:c2:6b:02:19:7b:30:b0:fe:17:
64:41:f0:8c:5c:28:2b:de:b2:72:f7:de:35:d1:d1:
3b:68:b6:56:25:07:5b:f3:56:94:b4:ee:36:de:96:
dd:70:55:04:62:49:ef:1a:86:38:84:fe:ea:15:6b:
82:36:d8:98:ca:30:39:d7:d9:6b:58:2b:e4:75:cb:
c9:66:15:53:2b:52:8f:f7:67:ed:b1:a0:d4:25:11:
00:8e:cb:f5:70:20:76:83:68:c4:fe:ce:cb:3d:90:
14:64:0b:14:16:7d:44:32:d1:ec:57:d9:94:c4:63:
a7:27:d5:74:a1:c8:76:1a:74:9d:ae:d6:c7:ca:3f:
49:11:79:f5:7b:a9:76:be:8d:f6:62:c7:fe:64:1c:
cf:d7:cf:a2:2e:14:e3:16:ce:dc:26:28:d3:11:16:
5c:de:bd:2d:7d:d8:ee:53:12:08:4f:b9:8f:92:d0:
69:c8:15:76:4b:bd:a0:30:2e:8f:d3:61:7c:ec:4f:
18:d7:23:c3:fc:ad:fc:25:63:e7:01:24:84:be:2e:
89:bd:db:75:c7:e6:b9:c3:f4:43:fe:40:26:a6:e0:
dc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:92:7F:45:E6:3F:F6:87:90:BC:5A:87:FB:9D:5D:E2:C2:10:37:41
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TZJ_ReY_9oeQvFqH-51d4sIQN0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.168.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:54:fa:3f:9a:6b:db:d3:7b:14:97:85:6b:3c:45:0f:81:60:
73:0e:6c:ff:9f:77:c5:8c:2d:df:1f:14:42:5f:ea:03:2f:7e:
d2:66:e8:f1:0d:00:88:df:00:69:d1:d3:e2:96:37:44:22:96:
a0:b0:2e:8c:d6:dd:e3:62:4c:56:84:36:f5:4a:85:09:11:2e:
47:ef:4e:2b:2e:0a:5c:51:b6:79:9a:56:c0:a3:51:95:8c:98:
49:c3:6d:85:9c:d0:1d:31:7f:35:fc:9a:6d:bf:0a:6f:dc:65:
03:1e:30:8a:5a:a7:cb:54:52:37:a6:96:9e:e3:03:5f:65:68:
2c:02:03:91:be:25:7a:cf:86:da:74:5a:b6:89:40:ed:35:1e:
f9:ed:c0:94:6a:17:72:8e:2a:5e:09:07:f3:c5:3d:c0:c4:a2:
de:be:c9:24:c1:63:2d:7c:2e:ef:55:78:e7:77:f1:95:c5:5f:
82:4a:56:0f:b1:5e:f3:34:3a:eb:ef:99:98:b6:e2:88:49:44:
5a:c7:88:b4:1e:b0:d4:d1:e6:a3:b2:5b:4f:46:5a:54:67:03:
fa:75:b3:dd:45:ed:1d:f0:f2:c8:22:25:a4:0a:16:6f:a4:13:
68:44:b3:a5:b1:19:09:71:ca:8a:71:07:73:c1:a2:d5:5d:80:
5c:cc:9e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:47:55 2026 by rpki-client