This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1TRQ1xBYVkrdVYhy5ykXTMaFH3g.roa File: 1TRQ1xBYVkrdVYhy5ykXTMaFH3g.roa (raw, json) Hash identifier: a08bsppqUD3Dr3XX2nM92LmGL020ClBNA2rFPUdkBIQ= Subject key identifier: D5:34:50:D7:10:58:56:4A:DD:55:88:72:E7:29:17:4C:C6:85:1F:78 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019A9AE4D1BCD537C56C63230B4F536DF606 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1TRQ1xBYVkrdVYhy5ykXTMaFH3g.roa Signing time: Wed 19 Nov 2025 06:54:38 +0000 ROA not before: Wed 19 Nov 2025 06:54:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203771 IP address blocks: 151.242.129.0/24 maxlen: 24 151.243.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 22 Nov 2025 09:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9a:e4:d1:bc:d5:37:c5:6c:63:23:0b:4f:53:6d:f6:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 19 06:54:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d53450d71058564add558872e729174cc6851f78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b1:3c:2a:3b:86:49:b3:92:6d:75:5c:49:06: 3f:f4:cd:bf:b2:d7:2c:74:b0:40:9d:07:4d:7b:75: 36:b4:b9:5c:9d:0f:2a:2b:2f:b3:f0:0f:43:7a:f6: 47:b8:99:63:4b:41:a1:ea:55:06:ab:ea:30:a5:61: ba:f7:61:d1:ff:3b:ae:99:07:e0:97:28:b8:43:b8: 64:0e:7d:1d:66:b5:dd:18:4e:0e:22:c5:7b:ec:4c: 6b:8f:08:0a:f8:6d:86:be:fd:a4:c1:9f:72:b7:a6: e7:bf:f1:bd:20:99:10:b0:47:2f:9c:37:b6:66:d9: 25:76:d5:88:8f:98:b2:99:19:bb:d1:cf:ab:44:53: 4f:9a:2b:c9:52:e3:75:bd:c5:a4:17:07:9c:7d:63: 45:82:a7:35:c3:ee:12:0a:3d:b1:ac:e3:2b:02:11: f3:e9:3d:a2:94:a4:15:e6:2d:52:9a:d9:13:24:d8: c0:21:ae:24:22:fc:5e:1d:a2:74:65:8e:c3:41:03: 75:12:92:49:7c:20:aa:bc:b3:ff:cb:83:a2:d0:30: 09:af:3c:9f:70:58:0f:36:21:84:72:c1:4d:b8:8d: 6f:be:f3:64:3b:03:43:34:ac:92:1b:31:c5:ec:e7: 8c:2b:f2:a5:3b:c4:45:c9:75:5a:09:5a:2a:ab:56: 9b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:34:50:D7:10:58:56:4A:DD:55:88:72:E7:29:17:4C:C6:85:1F:78 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1TRQ1xBYVkrdVYhy5ykXTMaFH3g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.129.0/24 151.243.240.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:a0:bc:7c:33:f8:48:7d:8c:7a:ad:56:e3:39:c3:87:ab:63: fa:4a:80:43:93:4c:a0:93:b6:d7:d8:b3:20:85:f8:5b:a8:53: ec:ba:5e:94:8a:a0:ad:ac:4e:12:d6:bf:61:d5:e8:59:f7:ac: 19:d3:66:05:85:31:59:e9:ee:aa:38:49:d6:58:63:aa:09:e4: 80:a4:0a:0e:fe:46:e9:d7:f7:51:e1:a0:22:73:21:7a:52:b7: 27:6a:fa:b8:31:8d:d9:96:6a:30:3d:bd:d6:a2:d5:62:54:5c: a5:40:c1:e7:4c:1f:be:52:8f:07:68:b1:7f:75:a3:9c:dd:1b: 44:14:48:aa:2a:b1:74:ff:a2:49:ed:ca:45:42:4b:79:11:d7: 99:1a:8d:71:82:2c:b2:55:b1:46:ea:31:48:8f:c5:b8:4c:0f: 10:66:a6:25:43:98:e4:27:60:ea:d6:30:70:f9:17:35:f0:5a: 44:f5:eb:52:71:93:74:9f:1a:84:1e:9f:7e:71:fa:d8:b0:6a: e7:5b:91:fe:81:a9:e3:2e:c1:ab:51:02:35:57:56:ca:fb:8a: c4:12:01:cd:ab:14:5f:37:10:2f:40:6e:94:92:31:b3:55:b4: e3:d9:1b:55:e3:54:a7:be:cc:15:dc:be:cc:c3:13:9b:b1:42: 9d:f3:74:da -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqa5NG81TfFbGMjC09TbfYGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTE5MDY1NDM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTM0NTBkNzEwNTg1NjRhZGQ1NTg4NzJlNzI5MTc0Y2M2ODUxZjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbE8KjuGSbOSbXVcSQY/9M2/stcs dLBAnQdNe3U2tLlcnQ8qKy+z8A9DevZHuJljS0Gh6lUGq+owpWG692HR/zuumQfg lyi4Q7hkDn0dZrXdGE4OIsV77ExrjwgK+G2Gvv2kwZ9yt6bnv/G9IJkQsEcvnDe2 ZtkldtWIj5iymRm70c+rRFNPmivJUuN1vcWkFwecfWNFgqc1w+4SCj2xrOMrAhHz 6T2ilKQV5i1SmtkTJNjAIa4kIvxeHaJ0ZY7DQQN1EpJJfCCqvLP/y4Oi0DAJrzyf cFgPNiGEcsFNuI1vvvNkOwNDNKySGzHF7OeMK/KlO8RFyXVaCVoqq1abeQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNU0UNcQWFZK3VWIcucpF0zGhR94MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvMVRSUTF4QllWa3JkVlloeTV5a1hUTWFGSDNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/KBAwQA l/PwMA0GCSqGSIb3DQEBCwUAA4IBAQBeoLx8M/hIfYx6rVbjOcOHq2P6SoBDk0yg k7bX2LMghfhbqFPsul6UiqCtrE4S1r9h1ehZ96wZ02YFhTFZ6e6qOEnWWGOqCeSA pAoO/kbp1/dR4aAicyF6Urcnavq4MY3ZlmowPb3WotViVFylQMHnTB++Uo8HaLF/ daOc3RtEFEiqKrF0/6JJ7cpFQkt5EdeZGo1xgiyyVbFG6jFIj8W4TA8QZqYlQ5jk J2Dq1jBw+Rc18FpE9etScZN0nxqEHp9+cfrYsGrnW5H+ganjLsGrUQI1V1bK+4rE EgHNqxRfNxAvQG6UkjGzVbTj2RtV41SnvswV3L7MwxObsUKd83Ta -----END CERTIFICATE-----Generated at Fri Nov 21 18:22:39 2025 by rpki-client