This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/tzlp2jqFOd0_jBubUJxxkLqieDw.roa File: tzlp2jqFOd0_jBubUJxxkLqieDw.roa (raw, json) Hash identifier: ax6nyhwBpkZjlZ25g9yNsNeKB7E3cmdhcCwA4m5T2eA= Subject key identifier: B7:39:69:DA:3A:85:39:DD:3F:8C:1B:9B:50:9C:71:90:BA:A2:78:3C Certificate issuer: /CN=d9f866fb0aa83a271a0cb7dc9030188c89d23e5d Certificate serial: 019A776D8538E2BBCED25B0250DB9247BCE3 Authority key identifier: D9:F8:66:FB:0A:A8:3A:27:1A:0C:B7:DC:90:30:18:8C:89:D2:3E:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/tzlp2jqFOd0_jBubUJxxkLqieDw.roa Signing time: Wed 12 Nov 2025 09:37:37 +0000 ROA not before: Wed 12 Nov 2025 09:37:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 206451 IP address blocks: 31.14.24.0/24 maxlen: 24 89.33.180.0/22 maxlen: 23 89.36.168.0/24 maxlen: 24 89.36.175.0/24 maxlen: 24 89.39.160.0/24 maxlen: 24 176.97.232.0/21 maxlen: 21 176.97.232.0/22 maxlen: 22 176.97.236.0/22 maxlen: 22 185.155.4.0/22 maxlen: 24 212.85.232.0/22 maxlen: 22 212.85.232.0/23 maxlen: 23 212.85.234.0/23 maxlen: 23 2a0d:bf00::/32 maxlen: 32 2a0d:bf01::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:77:6d:85:38:e2:bb:ce:d2:5b:02:50:db:92:47:bc:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f866fb0aa83a271a0cb7dc9030188c89d23e5d Validity Not Before: Nov 12 09:37:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b73969da3a8539dd3f8c1b9b509c7190baa2783c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:38:15:32:96:e4:e5:83:21:9c:ca:94:dc:b4: 26:2f:7b:d9:f9:b4:b8:20:2b:6c:bf:07:6e:b0:0f: 2e:2e:ac:ab:53:3c:fa:7a:77:51:49:53:bf:0f:9d: 1e:58:99:6f:0b:ae:bd:6a:8b:20:4d:78:c7:2c:04: d4:88:a4:44:57:7a:aa:08:1d:bf:3f:8b:68:d8:29: f5:f5:3f:87:75:d7:cf:79:bd:b8:b4:81:9a:da:09: 7c:e6:4b:fa:2c:2c:0b:53:b1:86:43:78:59:b1:7a: 28:8a:43:13:83:fd:f7:dc:02:0b:69:04:93:67:c3: 48:b3:87:ec:74:9c:29:98:82:6d:7c:35:fd:3b:54: 7c:3c:4f:27:97:75:74:37:ce:e7:c1:f6:f8:d4:30: 9b:cd:7b:41:eb:e6:15:47:8a:16:2e:ac:8c:e5:5b: 00:1b:3e:0a:17:97:75:c0:03:e9:74:23:d3:82:f4: bf:d4:eb:bd:b1:21:38:e8:2e:85:fc:7e:49:56:84: 53:11:2c:e6:4a:bc:9f:72:b1:62:f0:09:43:3d:6d: 19:02:54:df:e3:33:f5:7c:a0:80:a9:8c:55:8e:e6: dd:e5:5d:19:00:44:26:e0:01:1b:0f:2b:78:51:0a: 97:8e:a0:db:96:ab:96:c5:60:06:e3:0e:5e:55:e0: c9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:39:69:DA:3A:85:39:DD:3F:8C:1B:9B:50:9C:71:90:BA:A2:78:3C X509v3 Authority Key Identifier: keyid:D9:F8:66:FB:0A:A8:3A:27:1A:0C:B7:DC:90:30:18:8C:89:D2:3E:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/tzlp2jqFOd0_jBubUJxxkLqieDw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.14.24.0/24 89.33.180.0/22 89.36.168.0/24 89.36.175.0/24 89.39.160.0/24 176.97.232.0/21 185.155.4.0/22 212.85.232.0/22 IPv6: 2a0d:bf00::/31 Signature Algorithm: sha256WithRSAEncryption 98:79:22:e8:17:e7:b0:6d:5c:2b:47:13:68:c4:1f:85:8f:3a: 7a:ba:3f:f2:b3:a9:2c:cd:17:56:f2:d6:42:46:05:84:46:b8: 50:30:39:a9:55:65:41:fd:f9:a4:7f:1c:98:b2:91:14:be:24: ef:f0:b7:00:4a:03:b8:79:58:2f:d1:57:83:6c:31:7d:65:a8: 31:2c:89:98:02:ce:f8:d0:5e:6d:2f:9d:0f:00:06:ee:25:11: 21:11:86:80:74:61:df:18:14:ed:a9:f0:80:16:02:7a:f5:e9: cb:2f:72:ea:f4:78:10:80:bc:66:ac:3b:37:f3:19:4e:6c:09: c2:56:d3:c3:e0:fd:16:fe:1b:5c:7d:9c:ca:b2:68:eb:91:10: 86:84:1a:f2:3e:17:78:22:28:71:d5:4f:f6:a8:18:5d:42:a5: 7b:0f:4e:e7:8c:25:71:a0:ff:f6:b0:26:f0:d8:b5:aa:ac:9f: 3e:59:11:a9:49:3b:48:1c:6b:4a:ec:d8:1c:a7:a7:af:3f:dc: c9:fb:b6:ad:6d:4b:8b:b5:41:db:b0:70:fe:07:ce:59:76:46: 62:4d:92:34:3f:70:37:e4:56:5a:2a:24:5a:5d:07:a6:b8:74: e3:da:a6:b8:4f:be:22:3b:5a:26:99:0e:12:05:36:57:ae:84: 7a:dc:0b:c4 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgISAZp3bYU44rvO0lsCUNuSR7zjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5Zjg2NmZiMGFhODNhMjcxYTBjYjdkYzkwMzAxODhjODlk MjNlNWQwHhcNMjUxMTEyMDkzNzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzM5NjlkYTNhODUzOWRkM2Y4YzFiOWI1MDljNzE5MGJhYTI3ODNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTgVMpbk5YMhnMqU3LQmL3vZ+bS4 ICtsvwdusA8uLqyrUzz6endRSVO/D50eWJlvC669aosgTXjHLATUiKREV3qqCB2/ P4to2Cn19T+HddfPeb24tIGa2gl85kv6LCwLU7GGQ3hZsXooikMTg/333AILaQST Z8NIs4fsdJwpmIJtfDX9O1R8PE8nl3V0N87nwfb41DCbzXtB6+YVR4oWLqyM5VsA Gz4KF5d1wAPpdCPTgvS/1Ou9sSE46C6F/H5JVoRTESzmSryfcrFi8AlDPW0ZAlTf 4zP1fKCAqYxVjubd5V0ZAEQm4AEbDyt4UQqXjqDblquWxWAG4w5eVeDJQwIDAQAB o4ICQjCCAj4wHQYDVR0OBBYEFLc5ado6hTndP4wbm1CccZC6ong8MB8GA1UdIwQY MBaAFNn4ZvsKqDonGgy33JAwGIyJ0j5dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmZobS13cW9PaWNhRExmY2tEQVlqSW5TUGwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81MjczYTQtMTBjOC00MGJmLWIyNGYt NWMxZDVhNjk5MmQ4LzEvdHpscDJqcUZPZDBfakJ1YlVKeHhrTHFpZUR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS81MjczYTQtMTBjOC00MGJmLWIyNGYtNWMxZDVhNjk5MmQ4 LzEvMmZobS13cW9PaWNhRExmY2tEQVlqSW5TUGwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQAHw4YAwQC WSG0AwQAWSSoAwQAWSSvAwQAWSegAwQDsGHoAwQCuZsEAwQC1FXoMA0EAgACMAcD BQEqDb8AMA0GCSqGSIb3DQEBCwUAA4IBAQCYeSLoF+ewbVwrRxNoxB+Fjzp6uj/y s6kszRdW8tZCRgWERrhQMDmpVWVB/fmkfxyYspEUviTv8LcASgO4eVgv0VeDbDF9 ZagxLImYAs740F5tL50PAAbuJREhEYaAdGHfGBTtqfCAFgJ69enLL3Lq9HgQgLxm rDs38xlObAnCVtPD4P0W/htcfZzKsmjrkRCGhBryPhd4Iihx1U/2qBhdQqV7D07n jCVxoP/2sCbw2LWqrJ8+WRGpSTtIHGtK7Ngcp6evP9zJ+7atbUuLtUHbsHD+B85Z dkZiTZI0P3A35FZaKiRaXQemuHTj2qa4T74iO1ommQ4SBTZXroR63AvE -----END CERTIFICATE-----Generated at Sat Dec 6 23:18:56 2025 by rpki-client