This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TWGupszWRFbOD0yzfw9rgfKPcNg.roa File: TWGupszWRFbOD0yzfw9rgfKPcNg.roa (raw, json) Hash identifier: /SJ52V8xrXar9RDsJECM8+my3ULSE6LnxRVfcF4r9As= Subject key identifier: 4D:61:AE:A6:CC:D6:44:56:CE:0F:4C:B3:7F:0F:6B:81:F2:8F:70:D8 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019BEA0987D58081ACA48DA10446E20F9FB7 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TWGupszWRFbOD0yzfw9rgfKPcNg.roa Signing time: Fri 23 Jan 2026 08:47:31 +0000 ROA not before: Fri 23 Jan 2026 08:47:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214432 IP address blocks: 151.240.73.0/24 maxlen: 24 151.240.78.0/24 maxlen: 24 151.241.177.0/24 maxlen: 24 151.244.38.0/24 maxlen: 24 151.244.52.0/24 maxlen: 24 151.244.75.0/24 maxlen: 24 151.244.87.0/24 maxlen: 24 151.245.189.0/24 maxlen: 24 151.245.191.0/24 maxlen: 24 151.245.192.0/24 maxlen: 24 151.245.241.0/24 maxlen: 24 151.245.247.0/24 maxlen: 24 151.246.248.0/24 maxlen: 24 151.247.148.0/24 maxlen: 24 151.247.150.0/24 maxlen: 24 151.247.235.0/24 maxlen: 24 151.247.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ea:09:87:d5:80:81:ac:a4:8d:a1:04:46:e2:0f:9f:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 23 08:47:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d61aea6ccd64456ce0f4cb37f0f6b81f28f70d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:cf:51:15:68:fd:f7:59:7c:90:40:45:80:79: 7e:7a:08:2c:98:8d:1b:4e:fc:0c:dd:69:57:4f:3c: 9a:de:a2:60:85:6d:88:af:fd:fd:66:04:19:e9:04: c8:99:17:06:4d:87:57:dc:10:b5:7d:5d:96:04:30: f6:bb:5f:12:9c:bc:88:41:da:f4:c4:2a:91:68:ec: f9:86:b4:87:6b:b8:40:93:40:af:f7:26:12:0f:27: ad:16:d6:e6:bc:07:51:5a:07:44:a4:1f:27:e4:f7: 6b:61:f4:44:f1:27:19:54:48:11:ef:79:00:5f:23: af:3c:d6:a8:0c:30:c3:a2:41:43:f7:4d:5f:94:2c: c6:f2:37:09:f9:f9:20:dc:14:cc:f5:3b:06:df:b9: f7:f8:c9:66:5c:17:11:fa:19:dd:50:73:d2:d5:d7: ea:96:64:c9:16:d7:29:ad:31:eb:f2:e4:55:a1:77: 94:81:99:80:df:a0:bd:55:bf:31:bc:45:28:73:f1: 60:a8:bf:4e:2b:b1:1e:63:f5:f6:66:8a:a1:5a:72: 68:a1:49:4b:54:e9:99:5f:39:32:ee:3e:02:e1:d0: f4:2b:c9:33:43:9c:f8:f3:af:ca:a8:89:64:4d:56: f7:8d:8c:9c:7e:92:96:4f:82:94:92:8c:c4:6f:7d: 33:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:61:AE:A6:CC:D6:44:56:CE:0F:4C:B3:7F:0F:6B:81:F2:8F:70:D8 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TWGupszWRFbOD0yzfw9rgfKPcNg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.73.0/24 151.240.78.0/24 151.241.177.0/24 151.244.38.0/24 151.244.52.0/24 151.244.75.0/24 151.244.87.0/24 151.245.189.0/24 151.245.191.0-151.245.192.255 151.245.241.0/24 151.245.247.0/24 151.246.248.0/24 151.247.148.0/24 151.247.150.0/24 151.247.235.0/24 151.247.244.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:e2:ca:23:b6:d3:cd:b4:8e:a7:2d:37:5c:f2:d7:2e:b3:ef: 2b:89:69:b3:94:20:61:31:2b:8b:45:57:64:28:bb:97:96:76: 36:20:21:4b:9e:cf:bb:7e:f5:ef:e5:4e:4e:10:85:55:ba:e5: 84:ea:53:58:4a:36:81:e1:92:d7:94:00:01:0a:fe:8a:bd:1c: da:0e:5b:69:e8:bc:43:d6:3c:da:6e:59:c4:79:01:fb:fe:02: 0d:6b:e0:f2:0f:19:36:5c:9d:6c:5d:1f:32:a6:d3:7a:72:b5: 65:17:91:3d:f2:5f:30:53:d9:fe:d9:20:dd:fc:7d:c5:d1:af: e1:06:5d:19:a0:46:41:c9:d8:68:91:1e:51:9b:63:cf:d7:69: b5:1b:7c:de:8c:93:2b:f7:9a:a9:3a:bf:fb:b0:42:ac:2a:10: b9:f3:dc:72:8e:12:78:5c:93:1e:c0:34:87:48:d7:f5:9f:80: 26:7b:2d:bc:c6:87:d9:f3:ae:86:f5:8f:43:ed:95:b9:b0:2f: 93:6d:48:f4:d5:50:a4:25:cc:9d:07:05:2d:51:fe:c4:aa:24: 66:27:c0:57:2f:31:2f:d7:16:3b:69:dd:4c:13:96:48:ca:c3: 83:2a:50:cb:53:72:27:62:c2:5d:7f:d4:66:f4:38:b2:bf:8d: 5b:43:6a:5a -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgISAZvqCYfVgIGspI2hBEbiD5+3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTIzMDg0NzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDYxYWVhNmNjZDY0NDU2Y2UwZjRjYjM3ZjBmNmI4MWYyOGY3MGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhs9RFWj991l8kEBFgHl+eggsmI0b TvwM3WlXTzya3qJghW2Ir/39ZgQZ6QTImRcGTYdX3BC1fV2WBDD2u18SnLyIQdr0 xCqRaOz5hrSHa7hAk0Cv9yYSDyetFtbmvAdRWgdEpB8n5PdrYfRE8ScZVEgR73kA XyOvPNaoDDDDokFD901flCzG8jcJ+fkg3BTM9TsG37n3+MlmXBcR+hndUHPS1dfq lmTJFtcprTHr8uRVoXeUgZmA36C9Vb8xvEUoc/FgqL9OK7EeY/X2ZoqhWnJooUlL VOmZXzky7j4C4dD0K8kzQ5z486/KqIlkTVb3jYycfpKWT4KUkozEb30z4QIDAQAB o4ICbDCCAmgwHQYDVR0OBBYEFE1hrqbM1kRWzg9Ms38Pa4Hyj3DYMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvVFdHdXBzeldSRmJPRDB5emZ3OXJnZktQY05nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGBBggrBgEFBQcBBwEB/wRyMHAwbgQCAAEwaAMEAJfwSQME AJfwTgMEAJfxsQMEAJf0JgMEAJf0NAMEAJf0SwMEAJf0VwMEAJf1vTAMAwQAl/W/ AwQAl/XAAwQAl/XxAwQAl/X3AwQAl/b4AwQAl/eUAwQAl/eWAwQAl/frAwQAl/f0 MA0GCSqGSIb3DQEBCwUAA4IBAQAv4sojttPNtI6nLTdc8tcus+8riWmzlCBhMSuL RVdkKLuXlnY2ICFLns+7fvXv5U5OEIVVuuWE6lNYSjaB4ZLXlAABCv6KvRzaDltp 6LxD1jzablnEeQH7/gINa+DyDxk2XJ1sXR8yptN6crVlF5E98l8wU9n+2SDd/H3F 0a/hBl0ZoEZBydhokR5Rm2PP12m1G3zejJMr95qpOr/7sEKsKhC589xyjhJ4XJMe wDSHSNf1n4Amey28xofZ866G9Y9D7ZW5sC+TbUj01VCkJcydBwUtUf7EqiRmJ8BX LzEv1xY7ad1ME5ZIysODKlDLU3InYsJdf9Rm9Diyv41bQ2pa -----END CERTIFICATE-----Generated at Sun Jan 25 09:19:32 2026 by rpki-client