This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/tz2e93GZ_VkXqwiin5UrF6tTl-E.roa File: tz2e93GZ_VkXqwiin5UrF6tTl-E.roa (raw, json) Hash identifier: fs9g5+VLu3OTriRVnlbcf2rwqdoNP2oMRyLa0WT622w= Subject key identifier: B7:3D:9E:F7:71:99:FD:59:17:AB:08:A2:9F:95:2B:17:AB:53:97:E1 Certificate issuer: /CN=73dd2894568aebd05ad6432d53cf70e2cd788e6e Certificate serial: 019B7A5B1D4311D3640D1B955F5F84804F74 Authority key identifier: 73:DD:28:94:56:8A:EB:D0:5A:D6:43:2D:53:CF:70:E2:CD:78:8E:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/tz2e93GZ_VkXqwiin5UrF6tTl-E.roa Signing time: Thu 01 Jan 2026 16:19:10 +0000 ROA not before: Thu 01 Jan 2026 16:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49984 IP address blocks: 5.199.232.0/21 maxlen: 21 178.210.128.0/19 maxlen: 19 185.42.128.0/22 maxlen: 22 2a01:a240::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:1d:43:11:d3:64:0d:1b:95:5f:5f:84:80:4f:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73dd2894568aebd05ad6432d53cf70e2cd788e6e Validity Not Before: Jan 1 16:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b73d9ef77199fd5917ab08a29f952b17ab5397e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:85:c0:2f:17:60:b3:54:82:10:ce:c0:90:8c: f9:0e:16:87:21:2b:46:96:d3:08:c8:bd:86:39:1f: f3:fd:7e:69:f5:8b:d2:5f:d3:68:8e:e1:71:5e:6f: 51:92:27:7a:9c:84:8f:52:eb:d4:70:97:9d:df:a7: d9:e4:e8:1c:a4:f2:b3:4d:d5:16:c1:b2:1c:3a:cd: 09:61:3d:30:bf:14:01:95:17:93:27:4b:ae:0b:3d: 4f:c6:d2:1f:86:af:30:6f:bb:e1:6e:a0:c5:94:cb: b3:79:95:ef:dd:00:f8:12:62:3e:ec:fd:7d:31:fe: 0f:f4:78:9e:01:cc:72:4d:b6:27:d9:2d:16:8f:60: 21:d5:f4:d6:b6:24:97:92:a7:76:ee:aa:dd:ce:28: 9b:58:68:50:cc:c2:90:cb:26:8c:bd:fa:db:df:e1: 3d:10:0c:90:bc:a7:e6:55:1b:d7:51:b5:07:b0:a8: c8:e8:3b:02:73:59:a6:21:d5:80:6b:c9:f1:f9:e1: a9:c7:96:fa:53:23:c7:f5:58:85:fa:fc:49:3a:cb: b3:eb:c9:e2:21:0e:0c:0e:cb:d7:b9:31:f4:90:f5: 29:a3:3f:cc:cf:6a:b7:03:3d:1b:09:b0:23:83:da: 7a:bb:9a:bb:b1:ae:6a:7f:46:1d:b6:2e:ed:3c:d7: d8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:3D:9E:F7:71:99:FD:59:17:AB:08:A2:9F:95:2B:17:AB:53:97:E1 X509v3 Authority Key Identifier: keyid:73:DD:28:94:56:8A:EB:D0:5A:D6:43:2D:53:CF:70:E2:CD:78:8E:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/tz2e93GZ_VkXqwiin5UrF6tTl-E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.199.232.0/21 178.210.128.0/19 185.42.128.0/22 IPv6: 2a01:a240::/32 Signature Algorithm: sha256WithRSAEncryption 27:df:79:60:98:7d:4f:91:c7:35:05:de:df:47:45:92:ce:35: 06:ec:8a:0c:b3:20:ba:57:f3:cd:be:5b:72:8f:d2:fd:65:24: af:87:f0:13:9e:1a:32:01:39:f2:0a:fc:3c:10:7a:1a:d5:37: 0a:20:65:86:49:d0:5e:1c:49:ff:c9:c4:bb:d2:fc:9a:76:69: 25:57:ee:3a:72:a2:7f:d8:8f:c0:28:c5:3c:cc:fc:11:6c:a3: d6:1c:b3:91:f7:53:01:b0:46:ce:72:f3:8f:7e:82:2e:b3:15: 38:98:1b:fa:cb:1b:fe:2e:b0:1b:bf:ba:60:0a:df:85:79:61: 6b:86:3b:0b:0a:7e:0a:02:1f:5e:28:85:c7:f2:c0:ec:ee:01: 97:37:dc:94:f8:49:5d:f4:85:6c:c5:56:62:e1:8e:7a:2d:39: f1:e6:53:f8:85:5e:22:f5:69:76:4c:c5:48:b9:6e:4e:ea:fc: 3d:12:59:3a:0c:72:d2:b9:e3:61:98:b0:e3:75:da:be:2d:88: bb:8e:54:6c:44:4c:15:ad:07:f6:e9:5f:c8:9d:06:29:47:c3: 85:33:03:c2:02:57:48:29:96:9c:4f:e3:36:ff:6c:0d:e1:c0: 44:97:63:14:9a:7e:49:01:00:90:a1:28:81:1d:8c:36:6a:52: 5a:ea:e4:7c -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt6Wx1DEdNkDRuVX1+EgE90MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZGQyODk0NTY4YWViZDA1YWQ2NDMyZDUzY2Y3MGUyY2Q3 ODhlNmUwHhcNMjYwMTAxMTYxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzNkOWVmNzcxOTlmZDU5MTdhYjA4YTI5Zjk1MmIxN2FiNTM5N2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIXALxdgs1SCEM7AkIz5DhaHIStG ltMIyL2GOR/z/X5p9YvSX9NojuFxXm9Rkid6nISPUuvUcJed36fZ5OgcpPKzTdUW wbIcOs0JYT0wvxQBlReTJ0uuCz1PxtIfhq8wb7vhbqDFlMuzeZXv3QD4EmI+7P19 Mf4P9HieAcxyTbYn2S0Wj2Ah1fTWtiSXkqd27qrdziibWGhQzMKQyyaMvfrb3+E9 EAyQvKfmVRvXUbUHsKjI6DsCc1mmIdWAa8nx+eGpx5b6UyPH9ViF+vxJOsuz68ni IQ4MDsvXuTH0kPUpoz/Mz2q3Az0bCbAjg9p6u5q7sa5qf0Ydti7tPNfY0wIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFLc9nvdxmf1ZF6sIop+VKxerU5fhMB8GA1UdIwQY MBaAFHPdKJRWiuvQWtZDLVPPcOLNeI5uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzkwb2xGYUs2OUJhMWtNdFU4OXc0czE0am00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hMWQyMGUtNTBhMi00NGRjLWIxZTgt YTY3ZGNhOGEwODhjLzEvdHoyZTkzR1pfVmtYcXdpaW41VXJGNnRUbC1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9hMWQyMGUtNTBhMi00NGRjLWIxZTgtYTY3ZGNhOGEwODhj LzEvYzkwb2xGYUs2OUJhMWtNdFU4OXc0czE0am00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDBcfoAwQF stKAAwQCuSqAMA0EAgACMAcDBQAqAaJAMA0GCSqGSIb3DQEBCwUAA4IBAQAn33lg mH1Pkcc1Bd7fR0WSzjUG7IoMsyC6V/PNvltyj9L9ZSSvh/ATnhoyATnyCvw8EHoa 1TcKIGWGSdBeHEn/ycS70vyadmklV+46cqJ/2I/AKMU8zPwRbKPWHLOR91MBsEbO cvOPfoIusxU4mBv6yxv+LrAbv7pgCt+FeWFrhjsLCn4KAh9eKIXH8sDs7gGXN9yU +Eld9IVsxVZi4Y56LTnx5lP4hV4i9Wl2TMVIuW5O6vw9Elk6DHLSueNhmLDjddq+ LYi7jlRsREwVrQf26V/InQYpR8OFMwPCAldIKZacT+M2/2wN4cBEl2MUmn5JAQCQ oSiBHYw2alJa6uR8 -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:36 2026 by rpki-client