This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/Tvzwy8915xjtj1VO-nUlxadrJf0.roa File: Tvzwy8915xjtj1VO-nUlxadrJf0.roa (raw, json) Hash identifier: 3HBDaFXyl/IL77d9OkQ1M1njyjo3lIiwhNWOJqmRMac= Subject key identifier: 4E:FC:F0:CB:CF:75:E7:18:ED:8F:55:4E:FA:75:25:C5:A7:6B:25:FD Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff Certificate serial: 019ABAFF27A0BA96ABE6336F8D9D2975430F Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/Tvzwy8915xjtj1VO-nUlxadrJf0.roa Signing time: Tue 25 Nov 2025 12:31:15 +0000 ROA not before: Tue 25 Nov 2025 12:31:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 56534 IP address blocks: 45.135.215.0/24 maxlen: 24 89.104.126.0/24 maxlen: 24 89.223.80.0/21 maxlen: 21 92.255.60.0/24 maxlen: 24 92.255.88.0/21 maxlen: 32 92.255.96.0/21 maxlen: 21 93.174.72.0/21 maxlen: 21 176.53.192.0/24 maxlen: 24 176.53.194.0/23 maxlen: 24 176.53.196.0/24 maxlen: 24 176.53.197.0/24 maxlen: 24 176.53.198.0/23 maxlen: 23 176.53.200.0/22 maxlen: 22 176.53.204.0/22 maxlen: 22 176.53.208.0/22 maxlen: 24 176.53.208.0/24 maxlen: 24 176.53.211.0/24 maxlen: 24 176.53.212.0/22 maxlen: 22 176.53.213.0/24 maxlen: 24 185.47.52.0/22 maxlen: 22 185.47.54.0/24 maxlen: 24 2a04:ac00::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ba:ff:27:a0:ba:96:ab:e6:33:6f:8d:9d:29:75:43:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff Validity Not Before: Nov 25 12:31:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4efcf0cbcf75e718ed8f554efa7525c5a76b25fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:df:59:02:bc:1f:ed:49:fd:c8:10:a1:65:65: 2e:78:e4:7d:d0:af:dc:6f:1d:43:64:60:cc:e9:59: 2d:3b:7d:3f:a8:2c:e0:ec:42:2a:9b:a3:86:d2:a9: d7:3e:32:e3:50:36:55:23:7a:e1:99:f0:9c:b8:c9: 31:63:da:34:84:e6:a1:47:99:43:35:c4:93:06:b0: e7:85:0c:a9:db:63:79:72:dd:bf:c4:e0:8e:62:5d: b8:5f:07:37:51:a8:55:3f:ee:a6:d6:ab:67:66:18: 77:85:d1:94:a7:bb:80:79:b0:42:9b:73:40:94:2b: 8e:20:78:b3:98:27:b6:4b:7a:2e:13:07:62:5c:63: 01:05:38:85:86:50:a6:5f:b3:ae:3c:9f:62:6c:65: 17:44:8a:6c:e8:27:18:9e:35:73:bd:bd:d3:2d:94: c4:69:92:b8:59:fb:e5:56:e6:4c:5b:3b:08:e3:a6: f7:56:b7:c7:18:80:1e:56:c1:dc:27:fe:b6:28:5e: f2:28:1d:4f:1f:86:68:f5:c7:38:f7:18:40:f7:09: a3:64:74:d4:ed:10:08:ff:54:2c:53:9e:a3:db:a2: 38:c8:99:a8:9d:5a:af:cf:bb:83:ed:c7:96:af:5a: 43:d6:c3:02:9c:21:7e:7b:30:8d:77:e2:05:ac:a4: fd:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:FC:F0:CB:CF:75:E7:18:ED:8F:55:4E:FA:75:25:C5:A7:6B:25:FD X509v3 Authority Key Identifier: keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/Tvzwy8915xjtj1VO-nUlxadrJf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.135.215.0/24 89.104.126.0/24 89.223.80.0/21 92.255.60.0/24 92.255.88.0-92.255.103.255 93.174.72.0/21 176.53.192.0/24 176.53.194.0-176.53.215.255 185.47.52.0/22 IPv6: 2a04:ac00::/29 Signature Algorithm: sha256WithRSAEncryption 2b:b9:84:ce:4b:27:60:e8:4b:ec:3c:c0:1b:d0:e4:ba:f3:69: b4:44:f9:63:b5:f2:3f:ec:3e:97:f1:e4:a2:3e:21:d0:15:00: 2f:f0:31:42:47:02:1e:ec:0a:45:6b:c1:f3:2e:4a:a7:09:f0: 90:02:f7:39:a2:98:f2:0d:2d:33:3e:7e:c4:1b:2a:e7:92:eb: 54:6f:49:f4:ee:f5:2b:48:8b:6a:1f:bc:36:e6:c2:d2:47:99: 3a:5f:e7:3a:93:19:2f:45:2d:6c:6c:e8:96:0c:b4:c0:9c:c7: 12:62:55:9f:bf:10:8e:c6:cb:18:d4:d8:12:2a:62:54:75:f5: 61:b4:49:4a:18:05:e5:c0:e7:ca:73:16:5a:79:f1:ed:11:02: bf:a9:f0:a9:7a:3e:19:d0:f6:87:b3:d5:38:ee:96:f3:69:ce: fc:43:b1:0f:6c:45:92:42:1b:a9:ce:b9:34:e5:1e:99:ee:ac: 63:f1:16:39:2d:16:6d:27:04:55:0a:5d:b7:b4:eb:f7:58:35: 7a:82:3d:6e:c9:a2:6e:2b:d5:48:1f:65:64:be:de:f9:4d:b2: 8c:8e:52:58:a8:ab:47:ae:8c:01:4d:1b:52:81:2b:c2:b0:87: 80:50:f5:08:cf:07:ca:54:13:37:3c:b8:ef:9c:bf:8a:bb:b2: a5:9f:82:e7 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgISAZq6/yegupar5jNvjZ0pdUMPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkODMxM2U0MWU2NDZhMDljZDAxZTJlNmY0NzM5ZDNiZDIz NmM0ZmYwHhcNMjUxMTI1MTIzMTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZWZjZjBjYmNmNzVlNzE4ZWQ4ZjU1NGVmYTc1MjVjNWE3NmIyNWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqN9ZArwf7Un9yBChZWUueOR90K/c bx1DZGDM6VktO30/qCzg7EIqm6OG0qnXPjLjUDZVI3rhmfCcuMkxY9o0hOahR5lD NcSTBrDnhQyp22N5ct2/xOCOYl24Xwc3UahVP+6m1qtnZhh3hdGUp7uAebBCm3NA lCuOIHizmCe2S3ouEwdiXGMBBTiFhlCmX7OuPJ9ibGUXRIps6CcYnjVzvb3TLZTE aZK4WfvlVuZMWzsI46b3VrfHGIAeVsHcJ/62KF7yKB1PH4Zo9cc49xhA9wmjZHTU 7RAI/1QsU56j26I4yJmonVqvz7uD7ceWr1pD1sMCnCF+ezCNd+IFrKT9rwIDAQAB o4ICWDCCAlQwHQYDVR0OBBYEFE788MvPdecY7Y9VTvp1JcWnayX9MB8GA1UdIwQY MBaAFM2DE+QeZGoJzQHi5vRznTvSNsT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQt ODg2MmI1MTczMTdjLzEvVHZ6d3k4OTE1eGp0ajFWTy1uVWx4YWRySmYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQtODg2MmI1MTczMTdj LzEvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG4GCCsGAQUFBwEHAQH/BF8wXTBMBAIAATBGAwQALYfXAwQA WWh+AwQDWd9QAwQAXP88MAwDBANc/1gDBANc/2ADBANdrkgDBACwNcAwDAMEAbA1 wgMEA7A10AMEArkvNDANBAIAAjAHAwUDKgSsADANBgkqhkiG9w0BAQsFAAOCAQEA K7mEzksnYOhL7DzAG9DkuvNptET5Y7XyP+w+l/Hkoj4h0BUAL/AxQkcCHuwKRWvB 8y5KpwnwkAL3OaKY8g0tMz5+xBsq55LrVG9J9O71K0iLah+8NubC0keZOl/nOpMZ L0UtbGzolgy0wJzHEmJVn78QjsbLGNTYEipiVHX1YbRJShgF5cDnynMWWnnx7REC v6nwqXo+GdD2h7PVOO6W82nO/EOxD2xFkkIbqc65NOUeme6sY/EWOS0WbScEVQpd t7Tr91g1eoI9bsmibivVSB9lZL7e+U2yjI5SWKirR66MAU0bUoErwrCHgFD1CM8H ylQTNzy475y/iruypZ+C5w== -----END CERTIFICATE-----Generated at Sat Dec 6 18:45:55 2025 by rpki-client