This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/Ttr7foitcHqzKL5tFDo4aAXiRHs.roa File: Ttr7foitcHqzKL5tFDo4aAXiRHs.roa (raw, json) Hash identifier: l+KPWtcu5vk+NW1gY++Z3UuQD8IwIIkC3ZQ3BVE/Egc= Subject key identifier: 4E:DA:FB:7E:88:AD:70:7A:B3:28:BE:6D:14:3A:38:68:05:E2:44:7B Certificate issuer: /CN=a8b31004df135aa1a8b943033db14691b11a63dd Certificate serial: 019B7B36B8186D0706D4F454120877E72533 Authority key identifier: A8:B3:10:04:DF:13:5A:A1:A8:B9:43:03:3D:B1:46:91:B1:1A:63:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/Ttr7foitcHqzKL5tFDo4aAXiRHs.roa Signing time: Thu 01 Jan 2026 20:19:02 +0000 ROA not before: Thu 01 Jan 2026 20:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56559 IP address blocks: 151.1.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:b8:18:6d:07:06:d4:f4:54:12:08:77:e7:25:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8b31004df135aa1a8b943033db14691b11a63dd Validity Not Before: Jan 1 20:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4edafb7e88ad707ab328be6d143a386805e2447b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:36:fe:d0:84:db:24:e8:c1:86:a8:86:81:a4: 38:37:15:b3:13:bb:48:df:cd:6e:b8:bd:2e:1f:5f: 1a:05:02:b6:6d:73:9c:34:e0:75:81:1f:c1:4d:15: fb:68:f0:dd:7e:a5:32:0e:39:b1:48:3f:4d:f7:ac: 8f:ec:98:be:19:9c:0b:15:b3:0d:64:6f:a5:d3:87: af:c1:73:11:45:78:41:af:29:e4:03:ac:3e:0d:b9: 2d:cd:bd:0b:d3:b0:34:14:14:40:6d:1c:f0:8e:c2: 68:53:c9:9d:50:6f:f8:23:4e:ae:15:f1:1b:d6:fb: 7e:70:9b:bd:79:c6:57:7e:d1:3f:4f:cb:09:fb:ba: 04:9e:d8:cb:20:bb:49:4b:96:42:94:83:7e:de:1d: b6:64:1a:07:e5:60:e4:61:a1:cb:05:56:37:5e:8b: f6:03:61:5f:71:22:be:3d:4a:62:49:7a:9e:34:51: cb:4e:a6:65:e7:32:3f:8f:ec:c6:ca:8d:27:d7:f4: ad:8e:60:2f:2f:02:fc:97:22:6e:a4:58:df:d3:72: 85:7e:27:2c:1c:0a:88:25:4e:5a:72:02:28:57:72: 19:66:b2:48:3a:97:32:54:3c:08:dc:d9:0c:c6:1e: 8e:23:8e:04:9a:20:c1:21:64:c7:35:53:22:61:8d: fa:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:DA:FB:7E:88:AD:70:7A:B3:28:BE:6D:14:3A:38:68:05:E2:44:7B X509v3 Authority Key Identifier: keyid:A8:B3:10:04:DF:13:5A:A1:A8:B9:43:03:3D:B1:46:91:B1:1A:63:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/Ttr7foitcHqzKL5tFDo4aAXiRHs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.1.252.0/24 Signature Algorithm: sha256WithRSAEncryption 90:68:2e:49:63:17:30:e7:74:f3:e3:7f:9d:59:c4:60:40:dd: fa:40:f7:96:b1:ee:86:20:e7:88:e4:a0:77:72:8e:6c:5b:3f: 44:84:97:b1:71:9c:42:24:91:15:2b:6e:8f:b6:68:b7:a4:a4: 33:fe:df:6d:a8:e1:d4:3b:67:fe:83:b9:61:d0:fc:2e:81:00: 76:35:57:99:81:a6:3e:a7:89:24:b3:6e:d5:5b:4b:e8:06:7e: 23:e2:70:34:6a:c2:05:47:38:4e:66:a5:31:4d:d1:8c:b7:69: 87:40:db:4e:d6:89:79:8e:cd:d8:dd:d9:17:7f:80:b1:86:3e: f3:ab:60:3c:2d:67:70:af:a8:07:58:0a:40:3d:b9:5c:16:aa: e9:5f:f3:12:7c:03:2b:31:b4:82:e2:87:cb:42:f1:d0:16:7e: 65:b6:2c:c8:55:f7:b1:c4:ef:a8:03:33:a0:3f:32:2f:a1:4b: 96:1c:c9:e9:68:e1:ac:d1:6e:45:af:51:96:a1:1d:d7:a4:7d: b1:a1:fc:c1:be:92:84:df:99:0b:54:52:95:da:21:c5:5a:e0: ef:e8:7c:d1:20:ff:d4:73:2a:dc:21:7f:16:88:65:f7:56:94: 38:c7:9b:04:a4:14:11:9a:8e:90:e5:80:a6:9c:b3:ff:23:36: 9b:4b:24:2d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NrgYbQcG1PRUEgh35yUzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4YjMxMDA0ZGYxMzVhYTFhOGI5NDMwMzNkYjE0NjkxYjEx YTYzZGQwHhcNMjYwMTAxMjAxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZWRhZmI3ZTg4YWQ3MDdhYjMyOGJlNmQxNDNhMzg2ODA1ZTI0NDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDb+0ITbJOjBhqiGgaQ4NxWzE7tI 381uuL0uH18aBQK2bXOcNOB1gR/BTRX7aPDdfqUyDjmxSD9N96yP7Ji+GZwLFbMN ZG+l04evwXMRRXhBrynkA6w+Dbktzb0L07A0FBRAbRzwjsJoU8mdUG/4I06uFfEb 1vt+cJu9ecZXftE/T8sJ+7oEntjLILtJS5ZClIN+3h22ZBoH5WDkYaHLBVY3Xov2 A2FfcSK+PUpiSXqeNFHLTqZl5zI/j+zGyo0n1/StjmAvLwL8lyJupFjf03KFfics HAqIJU5acgIoV3IZZrJIOpcyVDwI3NkMxh6OI44EmiDBIWTHNVMiYY36gQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE7a+36IrXB6syi+bRQ6OGgF4kR7MB8GA1UdIwQY MBaAFKizEATfE1qhqLlDAz2xRpGxGmPdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUxNUUJOOFRXcUdvdVVNRFBiRkdrYkVhWTkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS81ZTIzYWUtNjMzOC00OGRkLWEzMDQt YzJhNDNiMDgwZDZmLzEvVHRyN2ZvaXRjSHF6S0w1dEZEbzRhQVhpUkhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS81ZTIzYWUtNjMzOC00OGRkLWEzMDQtYzJhNDNiMDgwZDZm LzEvcUxNUUJOOFRXcUdvdVVNRFBiRkdrYkVhWTkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlwH8MA0G CSqGSIb3DQEBCwUAA4IBAQCQaC5JYxcw53Tz43+dWcRgQN36QPeWse6GIOeI5KB3 co5sWz9EhJexcZxCJJEVK26Ptmi3pKQz/t9tqOHUO2f+g7lh0PwugQB2NVeZgaY+ p4kks27VW0voBn4j4nA0asIFRzhOZqUxTdGMt2mHQNtO1ol5js3Y3dkXf4Cxhj7z q2A8LWdwr6gHWApAPblcFqrpX/MSfAMrMbSC4ofLQvHQFn5ltizIVfexxO+oAzOg PzIvoUuWHMnpaOGs0W5Fr1GWoR3XpH2xofzBvpKE35kLVFKV2iHFWuDv6HzRIP/U cyrcIX8WiGX3VpQ4x5sEpBQRmo6Q5YCmnLP/IzabSyQt -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:03 2026 by rpki-client