This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TRtd2EBAztYNisRUhoV8JgYaNyE.roa File: TRtd2EBAztYNisRUhoV8JgYaNyE.roa (raw, json) Hash identifier: Cp4oomoqDK/hVt2l/ZTqKSvF/999/aGFb1poiLk8ru4= Subject key identifier: 4D:1B:5D:D8:40:40:CE:D6:0D:8A:C4:54:86:85:7C:26:06:1A:37:21 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019BB609362E93A92D8ADE1A5A892733F035 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TRtd2EBAztYNisRUhoV8JgYaNyE.roa Signing time: Tue 13 Jan 2026 06:26:55 +0000 ROA not before: Tue 13 Jan 2026 06:26:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206766 IP address blocks: 37.202.192.0/24 maxlen: 24 151.243.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b6:09:36:2e:93:a9:2d:8a:de:1a:5a:89:27:33:f0:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 13 06:26:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d1b5dd84040ced60d8ac45486857c26061a3721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3c:15:d6:82:ea:7c:d0:cd:b8:3f:7a:fb:9f: e3:5b:e4:4e:2d:53:67:89:18:c9:97:a4:90:a8:82: 18:14:61:79:8d:a2:4e:88:4e:15:29:60:65:bb:a7: a6:a6:5a:75:15:9d:25:02:b5:5d:7d:ed:05:5c:87: 3e:de:1f:21:a7:b8:5f:ee:b0:5e:de:31:6c:27:a3: ea:ba:b0:c6:19:23:a8:2e:28:9d:a3:99:a4:03:79: 14:ed:97:9a:80:b8:db:d1:7b:5c:34:a0:78:3e:aa: bc:ae:3a:33:9d:ac:a1:c9:0a:f7:79:0d:89:8b:ba: 34:5c:43:d4:af:95:20:45:e1:2b:bf:60:4b:7f:48: 4a:15:10:36:89:7d:04:8c:90:57:66:44:d6:9a:9f: f4:ce:56:db:60:6b:25:dc:72:61:59:b6:4e:1b:9b: eb:b5:c3:53:46:9f:a0:8e:ec:3f:8e:76:0c:c9:e5: 03:3d:ac:76:dc:b7:48:df:cf:fe:7d:64:eb:6c:cf: 17:ba:0e:de:82:2d:bb:47:cd:a2:e6:da:55:71:13: 8e:5e:17:ce:93:96:f8:5d:ff:18:34:f4:b9:6e:42: 68:42:77:c8:c3:c4:74:38:15:76:07:3d:ac:06:9f: 94:6d:9b:10:73:92:6f:2e:9e:b8:bc:2f:48:43:7f: 22:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:1B:5D:D8:40:40:CE:D6:0D:8A:C4:54:86:85:7C:26:06:1A:37:21 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TRtd2EBAztYNisRUhoV8JgYaNyE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.202.192.0/24 151.243.198.0/23 Signature Algorithm: sha256WithRSAEncryption 4f:08:0d:dc:af:3d:3a:ab:2c:65:b5:ca:52:10:a4:0a:d8:cd: b9:90:33:6a:37:a9:e2:c4:d5:38:0d:f3:5e:07:2a:76:dd:e1: a9:06:48:58:9a:1e:56:53:c4:35:fe:a3:ae:07:65:ad:0a:45: 83:87:8f:27:11:a6:01:22:66:4d:df:5f:3f:4a:cf:ac:10:d0: cf:b7:53:da:b7:e3:fa:5a:0e:a4:78:43:4f:28:42:ed:51:79: bc:52:0d:e2:49:4c:b8:4f:4c:a2:bf:c0:a8:f5:d5:46:1e:42: a0:f9:f9:bb:37:88:89:65:65:93:f8:b3:ec:6d:f0:0e:48:e7: a6:68:d6:ec:e5:5c:0e:cd:ba:92:0d:42:9e:c2:41:37:d3:ce: 0a:48:75:42:a0:6e:56:c6:88:c1:d4:e2:e2:4d:a1:08:84:d6: 8b:cc:5e:d7:10:15:65:bb:47:6f:03:dd:18:6f:fb:9b:50:f8: 30:7b:6e:19:0c:43:82:d7:e4:2a:ca:83:90:26:44:87:82:4c: ca:18:cd:8e:6b:ac:15:90:25:70:a6:71:ca:28:14:d9:ad:90: c3:86:b2:6e:67:67:a4:a5:31:44:75:1b:b8:3b:a0:4a:73:20: 1d:c8:85:e8:fa:ef:55:f3:72:0e:c8:72:07:13:49:56:9e:72: fd:d3:e8:d6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZu2CTYuk6ktit4aWoknM/A1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTEzMDYyNjU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDFiNWRkODQwNDBjZWQ2MGQ4YWM0NTQ4Njg1N2MyNjA2MWEzNzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TwV1oLqfNDNuD96+5/jW+ROLVNn iRjJl6SQqIIYFGF5jaJOiE4VKWBlu6emplp1FZ0lArVdfe0FXIc+3h8hp7hf7rBe 3jFsJ6PqurDGGSOoLiido5mkA3kU7ZeagLjb0XtcNKB4Pqq8rjoznayhyQr3eQ2J i7o0XEPUr5UgReErv2BLf0hKFRA2iX0EjJBXZkTWmp/0zlbbYGsl3HJhWbZOG5vr tcNTRp+gjuw/jnYMyeUDPax23LdI38/+fWTrbM8Xug7egi27R82i5tpVcROOXhfO k5b4Xf8YNPS5bkJoQnfIw8R0OBV2Bz2sBp+UbZsQc5JvLp64vC9IQ38iCwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFE0bXdhAQM7WDYrEVIaFfCYGGjchMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvVFJ0ZDJFQkF6dFlOaXNSVWhvVjhKZ1lhTnlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJcrAAwQB l/PGMA0GCSqGSIb3DQEBCwUAA4IBAQBPCA3crz06qyxltcpSEKQK2M25kDNqN6ni xNU4DfNeByp23eGpBkhYmh5WU8Q1/qOuB2WtCkWDh48nEaYBImZN318/Ss+sENDP t1Pat+P6Wg6keENPKELtUXm8Ug3iSUy4T0yiv8Co9dVGHkKg+fm7N4iJZWWT+LPs bfAOSOemaNbs5VwOzbqSDUKewkE3084KSHVCoG5WxojB1OLiTaEIhNaLzF7XEBVl u0dvA90Yb/ubUPgwe24ZDEOC1+QqyoOQJkSHgkzKGM2Oa6wVkCVwpnHKKBTZrZDD hrJuZ2ekpTFEdRu4O6BKcyAdyIXo+u9V83IOyHIHE0lWnnL90+jW -----END CERTIFICATE-----Generated at Sun Jan 18 06:31:06 2026 by rpki-client