This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RTMNpUekd0obVKRA1eX567gAP0U.roa File: RTMNpUekd0obVKRA1eX567gAP0U.roa (raw, json) Hash identifier: aSXnluSK1VXa+Fpv7rmwXy0605RfIjswYim/AP7O9vk= Subject key identifier: 45:33:0D:A5:47:A4:77:4A:1B:54:A4:40:D5:E5:F9:EB:B8:00:3F:45 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB39239FBF603CC2A1D8F64B3B216C Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RTMNpUekd0obVKRA1eX567gAP0U.roa Signing time: Fri 02 Jan 2026 08:20:29 +0000 ROA not before: Fri 02 Jan 2026 08:20:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 53107 IP address blocks: 151.244.141.0/24 maxlen: 24 151.245.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:39:23:9f:bf:60:3c:c2:a1:d8:f6:4b:3b:21:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45330da547a4774a1b54a440d5e5f9ebb8003f45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:71:49:b6:89:7e:13:c5:da:7c:56:2a:0c:a1: c2:9c:1a:3c:84:00:c8:ea:ae:96:df:17:59:f7:5a: 80:94:f2:34:e4:f3:da:17:38:d6:e9:e3:48:32:ee: ba:89:c6:8e:0f:50:25:51:8a:97:48:35:15:fe:d1: 67:5f:57:16:9f:b5:46:35:1d:0d:49:e7:ea:50:bc: 24:ff:58:16:8d:eb:81:20:48:85:0f:07:ee:4f:14: 23:75:62:61:fd:39:56:ea:5c:98:41:e5:33:47:44: 33:9f:61:4a:5f:27:f6:a3:fb:b7:58:4b:f9:be:9e: 2c:f7:a8:9c:12:85:6d:cb:97:ac:c1:5c:54:27:13: 5b:40:ff:5f:e7:62:24:30:d4:d6:7a:e2:52:c8:34: 59:24:82:3a:74:96:df:5a:63:ac:ee:83:9e:b8:98: f3:84:14:0a:c8:ab:cd:e4:3a:79:39:35:32:e3:dc: b8:0f:94:10:30:7c:e0:23:4c:ee:9b:59:db:4a:7a: 95:1e:98:00:e0:6e:8a:99:a9:3c:64:b9:8c:25:00: 26:2c:4e:8d:24:50:d9:be:77:77:93:32:f3:d1:ce: b1:73:bf:dd:08:fe:f5:33:5d:7c:ba:ea:84:86:fa: 2f:8e:5d:3d:dc:b1:c8:a2:c7:fb:e1:41:20:2b:bd: 19:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:33:0D:A5:47:A4:77:4A:1B:54:A4:40:D5:E5:F9:EB:B8:00:3F:45 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RTMNpUekd0obVKRA1eX567gAP0U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.244.141.0/24 151.245.229.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:38:d4:20:69:e4:98:99:1f:09:db:b4:fc:7c:6a:ec:03:86: be:b2:a6:9e:11:45:9d:96:0d:4a:01:97:94:5b:8b:7d:2f:21: 41:23:70:ba:f4:d3:f0:48:d1:0e:f9:74:94:b5:d0:67:1b:c6: 60:2f:a6:4b:d2:cc:20:2a:f3:54:dc:7a:26:d7:15:64:62:7e: a6:c6:64:8e:09:3c:55:64:88:1c:9a:5d:a2:04:ac:10:c6:b3: ca:91:d0:d0:f0:12:4e:30:dd:99:60:bf:93:1e:49:b8:b2:ce: 93:b6:36:11:eb:e9:aa:18:6d:20:e4:12:49:57:79:70:39:d9: 7b:be:27:b6:8b:60:ae:c6:cc:b1:ec:3e:50:0b:e6:fc:7c:d2: b5:40:23:fd:c9:8f:16:c3:54:8e:f3:40:98:db:41:70:94:3b: a8:56:64:6b:a5:04:63:57:81:4f:2b:32:a7:04:d5:d1:25:74: ca:c6:ef:cd:e0:55:26:94:75:8e:2d:d1:09:86:69:a1:e4:8f: d6:63:00:cf:c8:93:2a:28:6b:fc:18:c7:ce:3b:68:28:48:52: 38:a8:71:40:44:6e:d5:79:21:8b:6f:67:20:94:dc:7e:a5:7f: 79:e3:2f:ac:28:ba:49:de:05:66:51:c0:75:96:b2:69:d8:e9: ea:21:89:25 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9yzkjn79gPMKh2PZLOyFsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTMzMGRhNTQ3YTQ3NzRhMWI1NGE0NDBkNWU1ZjllYmI4MDAzZjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXFJtol+E8XafFYqDKHCnBo8hADI 6q6W3xdZ91qAlPI05PPaFzjW6eNIMu66icaOD1AlUYqXSDUV/tFnX1cWn7VGNR0N SefqULwk/1gWjeuBIEiFDwfuTxQjdWJh/TlW6lyYQeUzR0Qzn2FKXyf2o/u3WEv5 vp4s96icEoVty5eswVxUJxNbQP9f52IkMNTWeuJSyDRZJII6dJbfWmOs7oOeuJjz hBQKyKvN5Dp5OTUy49y4D5QQMHzgI0zum1nbSnqVHpgA4G6Kmak8ZLmMJQAmLE6N JFDZvnd3kzLz0c6xc7/dCP71M118uuqEhvovjl093LHIosf74UEgK70ZSQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEUzDaVHpHdKG1SkQNXl+eu4AD9FMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvUlRNTnBVZWtkMG9iVktSQTFlWDU2N2dBUDBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/SNAwQA l/XlMA0GCSqGSIb3DQEBCwUAA4IBAQA/ONQgaeSYmR8J27T8fGrsA4a+sqaeEUWd lg1KAZeUW4t9LyFBI3C69NPwSNEO+XSUtdBnG8ZgL6ZL0swgKvNU3Hom1xVkYn6m xmSOCTxVZIgcml2iBKwQxrPKkdDQ8BJOMN2ZYL+THkm4ss6TtjYR6+mqGG0g5BJJ V3lwOdl7vie2i2Cuxsyx7D5QC+b8fNK1QCP9yY8Ww1SO80CY20FwlDuoVmRrpQRj V4FPKzKnBNXRJXTKxu/N4FUmlHWOLdEJhmmh5I/WYwDPyJMqKGv8GMfOO2goSFI4 qHFARG7VeSGLb2cglNx+pX954y+sKLpJ3gVmUcB1lrJp2OnqIYkl -----END CERTIFICATE-----Generated at Sun Jan 18 06:27:42 2026 by rpki-client