This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Te2ONBupm4qjWEK2e8cASld9-6M.roa File: Te2ONBupm4qjWEK2e8cASld9-6M.roa (raw, json) Hash identifier: sPLn8VRgaXNfXrAFufHcI943tnadGLBOR7je5y1q2+E= Subject key identifier: 4D:ED:8E:34:1B:A9:9B:8A:A3:58:42:B6:7B:C7:00:4A:57:7D:FB:A3 Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019BADA81DA540C8E0C5B660E25C9C380199 Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Te2ONBupm4qjWEK2e8cASld9-6M.roa Signing time: Sun 11 Jan 2026 15:23:54 +0000 ROA not before: Sun 11 Jan 2026 15:23:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401819 IP address blocks: 147.90.1.0/24 maxlen: 24 158.173.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 00:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ad:a8:1d:a5:40:c8:e0:c5:b6:60:e2:5c:9c:38:01:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Jan 11 15:23:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ded8e341ba99b8aa35842b67bc7004a577dfba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:39:c5:be:bb:e5:2a:05:03:08:6c:84:3f:ed: 23:f8:a6:62:7b:99:66:91:96:07:cc:07:60:14:c4: 04:e7:cf:4d:bd:21:cf:a1:5e:65:2c:0c:f4:59:11: a6:fa:25:cd:b0:09:fe:c3:8a:2e:14:02:c8:91:b3: d8:9f:ab:d4:6e:95:2f:04:93:c4:62:38:cd:23:69: 6b:96:84:81:d4:94:ec:f1:9f:7b:7c:78:0e:03:46: 9f:5e:26:66:33:5b:4b:2e:f9:5e:5e:80:9b:12:c1: fb:1e:cf:4e:16:45:2e:8b:e2:04:31:7f:78:7e:af: 2e:87:eb:8d:3d:16:dc:4b:82:9c:c1:3e:6f:51:45: 64:aa:6b:6a:1f:6a:f5:b6:17:cb:4c:3c:87:6f:34: bf:bc:a1:cd:1f:cd:86:0c:b5:d1:0d:e1:59:e4:be: 94:b1:d1:31:15:b3:2f:8e:dc:09:85:84:c6:5d:51: 71:79:15:a5:81:04:de:67:6f:90:63:0f:d1:62:04: fe:ad:d3:4c:0f:21:7e:69:07:c8:da:b1:2c:fe:c6: f7:49:8d:ef:91:e3:af:7d:8a:91:aa:de:65:36:da: ce:ca:fd:0a:e8:69:98:eb:d6:f9:da:fc:a7:e0:d2: 73:95:d5:c4:40:3a:89:96:39:3b:09:18:d6:38:d1: 60:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:ED:8E:34:1B:A9:9B:8A:A3:58:42:B6:7B:C7:00:4A:57:7D:FB:A3 X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Te2ONBupm4qjWEK2e8cASld9-6M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.90.1.0/24 158.173.204.0/24 Signature Algorithm: sha256WithRSAEncryption 95:60:4a:25:c6:86:76:fb:d7:c5:8a:91:26:14:90:d5:99:73: 5b:b9:40:87:80:64:cb:07:3b:86:b7:ce:84:5a:0d:00:2e:a5: 34:7c:46:fb:8f:fa:b9:a6:9c:24:51:70:b4:46:bd:8a:07:8c: 49:35:cc:b5:20:67:16:25:05:9a:6d:f9:64:ed:ed:28:7d:cf: 98:cb:12:cc:e4:42:d9:02:16:56:0b:de:8c:28:76:d6:9b:38: 99:1b:36:af:fa:67:1c:cf:38:57:51:81:61:fc:35:36:78:5e: a4:da:c2:b7:08:8f:8b:a9:16:d9:84:44:70:bc:43:ab:6e:3e: 33:70:95:d9:f3:ce:0c:e5:24:62:78:de:aa:58:9e:b1:a0:40: 5c:c7:5c:87:4e:22:01:a9:77:bd:3d:31:19:26:1c:50:9c:e2: 7d:74:e5:8a:d4:03:78:04:f1:a7:61:47:1f:75:72:ef:74:24: 45:fe:9b:f3:4e:73:b6:70:4a:a8:ff:bc:3d:38:a1:9a:88:e7: 9d:7b:ff:ff:2d:06:19:c7:65:a0:1c:b3:8a:f1:ad:5d:34:1f: 4d:21:3c:b0:26:2d:08:f3:d3:2e:eb:9c:81:a6:36:ad:61:df: ce:c9:cf:6b:83:38:b8:e8:40:65:23:4a:42:11:3a:8e:f7:d2: 03:31:0b:9b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZutqB2lQMjgxbZg4lycOAGZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjYwMTExMTUyMzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZGVkOGUzNDFiYTk5YjhhYTM1ODQyYjY3YmM3MDA0YTU3N2RmYmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjnFvrvlKgUDCGyEP+0j+KZie5lm kZYHzAdgFMQE589NvSHPoV5lLAz0WRGm+iXNsAn+w4ouFALIkbPYn6vUbpUvBJPE YjjNI2lrloSB1JTs8Z97fHgOA0afXiZmM1tLLvleXoCbEsH7Hs9OFkUui+IEMX94 fq8uh+uNPRbcS4KcwT5vUUVkqmtqH2r1thfLTDyHbzS/vKHNH82GDLXRDeFZ5L6U sdExFbMvjtwJhYTGXVFxeRWlgQTeZ2+QYw/RYgT+rdNMDyF+aQfI2rEs/sb3SY3v keOvfYqRqt5lNtrOyv0K6GmY69b52vyn4NJzldXEQDqJljk7CRjWONFgAQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFE3tjjQbqZuKo1hCtnvHAEpXffujMB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvVGUyT05CdXBtNHFqV0VLMmU4Y0FTbGQ5LTZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAk1oBAwQA nq3MMA0GCSqGSIb3DQEBCwUAA4IBAQCVYEolxoZ2+9fFipEmFJDVmXNbuUCHgGTL BzuGt86EWg0ALqU0fEb7j/q5ppwkUXC0Rr2KB4xJNcy1IGcWJQWabflk7e0ofc+Y yxLM5ELZAhZWC96MKHbWmziZGzav+mcczzhXUYFh/DU2eF6k2sK3CI+LqRbZhERw vEOrbj4zcJXZ884M5SRieN6qWJ6xoEBcx1yHTiIBqXe9PTEZJhxQnOJ9dOWK1AN4 BPGnYUcfdXLvdCRF/pvzTnO2cEqo/7w9OKGaiOede///LQYZx2WgHLOK8a1dNB9N ITywJi0I89Mu65yBpjatYd/Oyc9rgzi46EBlI0pCETqO99IDMQub -----END CERTIFICATE-----Generated at Fri Jan 23 04:39:17 2026 by rpki-client