This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TIbpYe3dMTEw0EPBgsToF1ijNHg.roa File: TIbpYe3dMTEw0EPBgsToF1ijNHg.roa (raw, json) Hash identifier: Tqw3JNazLs5/RTbSvhg+wzKczEwzuEcszrKqxuIWW6s= Subject key identifier: 4C:86:E9:61:ED:DD:31:31:30:D0:43:C1:82:C4:E8:17:58:A3:34:78 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019ACF3BD40F026BAF4D2B4B94DAB10C01CD Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TIbpYe3dMTEw0EPBgsToF1ijNHg.roa Signing time: Sat 29 Nov 2025 10:49:55 +0000 ROA not before: Sat 29 Nov 2025 10:49:55 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205896 IP address blocks: 151.245.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cf:3b:d4:0f:02:6b:af:4d:2b:4b:94:da:b1:0c:01:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 29 10:49:55 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4c86e961eddd313130d043c182c4e81758a33478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:97:d5:98:cd:09:2e:c5:01:67:60:03:51:a0: 09:0c:13:cf:bc:25:46:ba:c1:05:f2:16:93:39:21: f4:be:0c:b0:be:39:c1:64:a5:f4:f2:8d:03:3d:ae: a9:af:24:f9:cd:11:f6:b6:a5:c6:f3:5f:fe:65:f6: 4f:0e:24:48:19:e8:bc:f7:82:15:5d:09:85:d9:fc: b1:3e:b6:af:c1:1b:0f:21:bb:aa:e2:a8:f2:0c:f6: c6:d4:99:54:9f:14:9b:61:a9:dc:8f:3f:88:98:12: 29:21:05:0d:d5:fd:4d:34:89:1e:4a:3c:74:c2:e4: c3:8d:79:c5:cc:89:55:f0:e9:35:28:62:41:9c:40: 81:e9:15:0f:6c:58:20:e6:e7:fd:dd:67:d7:c0:2c: 27:ce:a0:67:dd:df:39:26:a0:cb:9e:2a:4f:5e:1d: 37:d9:20:66:8d:1c:5e:39:ff:d5:ba:09:58:6f:2e: a6:84:28:ae:a6:6b:29:4d:ea:80:5b:ae:4b:27:90: 30:ff:39:97:12:37:4d:9e:74:a3:01:b8:48:53:89: f8:16:42:0a:22:af:96:d6:e7:d2:9b:eb:4b:4a:6a: 1d:55:4f:93:b2:b6:93:6c:a0:1a:a1:20:a1:87:0d: 20:56:ca:b7:74:69:68:5c:f0:08:ab:a9:22:ff:aa: 46:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:86:E9:61:ED:DD:31:31:30:D0:43:C1:82:C4:E8:17:58:A3:34:78 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TIbpYe3dMTEw0EPBgsToF1ijNHg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.245.36.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:c4:f5:61:8f:93:f5:71:47:a0:84:bb:83:f2:13:44:6b:57: a3:56:93:20:b7:3c:29:aa:d9:4a:f8:29:78:39:a1:a6:4d:4a: 38:db:48:7b:8d:b0:b7:ff:87:49:42:f7:f6:ab:57:1b:09:92: 6f:a7:05:3d:b3:04:d4:a3:16:0c:40:17:fe:22:34:1c:cd:89: 80:8a:45:03:20:f5:eb:ea:c3:aa:6b:9f:2b:5f:69:8a:7d:99: 5a:94:c8:6d:f3:89:45:3f:09:ac:d5:0e:9d:8a:42:90:30:7d: 9b:c4:80:d4:ff:35:10:fd:d5:2f:6f:cf:4f:6c:24:ab:67:de: b6:f9:c9:d0:45:28:92:d8:d8:5a:43:dc:dc:96:ef:ab:d8:72: 9a:86:93:a7:71:cf:73:04:5d:88:ce:d1:05:b6:88:15:e6:e3: ae:c8:d2:4e:b8:fe:64:1e:da:c0:9f:85:4b:d1:a1:59:81:fa: fe:56:d1:fc:05:29:7a:e7:b0:7a:94:51:4f:66:5b:a3:78:a6: f2:97:ba:f7:e2:2e:88:0e:2c:3e:85:08:5d:a6:13:7e:2e:3c: de:07:84:56:ee:ae:37:96:9d:ba:95:87:be:62:30:89:cf:e4: 36:52:8e:e9:90:46:d5:8f:87:96:fa:bd:6a:b1:e8:e7:0e:89: c7:b1:37:29 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrPO9QPAmuvTStLlNqxDAHNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTI5MTA0OTU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Yzg2ZTk2MWVkZGQzMTMxMzBkMDQzYzE4MmM0ZTgxNzU4YTMzNDc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZfVmM0JLsUBZ2ADUaAJDBPPvCVG usEF8haTOSH0vgywvjnBZKX08o0DPa6pryT5zRH2tqXG81/+ZfZPDiRIGei894IV XQmF2fyxPravwRsPIbuq4qjyDPbG1JlUnxSbYancjz+ImBIpIQUN1f1NNIkeSjx0 wuTDjXnFzIlV8Ok1KGJBnECB6RUPbFgg5uf93WfXwCwnzqBn3d85JqDLnipPXh03 2SBmjRxeOf/VuglYby6mhCiupmspTeqAW65LJ5Aw/zmXEjdNnnSjAbhIU4n4FkIK Iq+W1ufSm+tLSmodVU+TsraTbKAaoSChhw0gVsq3dGloXPAIq6ki/6pG+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEyG6WHt3TExMNBDwYLE6BdYozR4MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvVElicFllM2RNVEV3MEVQQmdzVG9GMWlqTkhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/UkMA0G CSqGSIb3DQEBCwUAA4IBAQAsxPVhj5P1cUeghLuD8hNEa1ejVpMgtzwpqtlK+Cl4 OaGmTUo420h7jbC3/4dJQvf2q1cbCZJvpwU9swTUoxYMQBf+IjQczYmAikUDIPXr 6sOqa58rX2mKfZlalMht84lFPwms1Q6dikKQMH2bxIDU/zUQ/dUvb89PbCSrZ962 +cnQRSiS2NhaQ9zclu+r2HKahpOncc9zBF2IztEFtogV5uOuyNJOuP5kHtrAn4VL 0aFZgfr+VtH8BSl657B6lFFPZlujeKbyl7r34i6IDiw+hQhdphN+LjzeB4RW7q43 lp26lYe+YjCJz+Q2Uo7pkEbVj4eW+r1qsejnDonHsTcp -----END CERTIFICATE-----Generated at Wed Dec 3 09:41:57 2025 by rpki-client