This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TZ5aouN4Ean6zc_NFzedVhZ3ZuI.roa
File: TZ5aouN4Ean6zc_NFzedVhZ3ZuI.roa (raw, json)
Hash identifier: 3wuouWiALLNImuD529kG9y1lRzJ0B4L4RXqnUZ3oW3Y=
Subject key identifier: 4D:9E:5A:A2:E3:78:11:A9:FA:CD:CF:CD:17:37:9D:56:16:77:66:E2
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019B7DCB375D60DDB0BEC554694D5C702917
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TZ5aouN4Ean6zc_NFzedVhZ3ZuI.roa
Signing time: Fri 02 Jan 2026 08:20:28 +0000
ROA not before: Fri 02 Jan 2026 08:20:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50338
IP address blocks: 151.243.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Jan 2026 21:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:cb:37:5d:60:dd:b0:be:c5:54:69:4d:5c:70:29:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 2 08:20:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d9e5aa2e37811a9facdcfcd17379d56167766e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:81:a1:dd:02:81:28:7f:2d:13:73:4a:5d:ee:
f3:88:2e:35:72:e8:3d:72:5f:60:b3:78:a4:43:3e:
98:a1:c8:00:28:43:e9:d5:16:3a:d8:99:22:10:5d:
82:86:e8:88:0a:d0:59:d7:2b:31:bc:f6:b2:ae:7b:
4b:a2:78:5a:d2:b4:b5:46:42:62:98:92:df:1a:27:
61:c9:bf:b3:93:f9:c4:6c:a9:01:51:98:c5:a7:16:
2f:ec:7a:c8:b9:c1:4d:74:85:84:de:b6:71:17:54:
07:b7:11:67:40:45:59:04:14:c5:f8:17:0a:47:20:
ca:c5:2b:3d:b8:76:94:82:54:69:dc:83:6f:f6:22:
e8:49:d0:ad:6f:58:7d:f6:35:4b:d4:89:1e:f6:3b:
e1:fb:94:cc:c4:cb:8f:27:64:66:81:b9:96:c2:8c:
9a:c0:38:3f:1b:36:51:8e:55:fc:b9:75:3d:a8:37:
b4:4e:fb:15:7b:d0:52:c2:b3:04:f9:41:81:5c:f3:
13:bf:4e:0e:fb:c0:b4:6e:31:46:86:b3:6b:b0:61:
23:32:c7:d6:dd:35:4e:e0:3a:80:f3:23:5e:f7:55:
59:2b:f8:37:67:1d:07:67:b1:4e:40:57:34:cf:b6:
ad:c8:f1:c2:b3:67:51:43:35:b4:38:2c:ed:25:5f:
65:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9E:5A:A2:E3:78:11:A9:FA:CD:CF:CD:17:37:9D:56:16:77:66:E2
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TZ5aouN4Ean6zc_NFzedVhZ3ZuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.10.0/24
Signature Algorithm: sha256WithRSAEncryption
48:4c:ed:33:ee:1a:2b:78:cb:ca:ce:c2:c0:7a:41:22:45:b7:
dd:bf:f1:3b:30:1d:52:43:a1:cb:26:a1:21:0d:d4:8b:95:23:
ad:75:7d:e2:90:3e:bc:d2:b0:8d:76:e0:e5:45:f5:dc:e5:41:
20:07:94:f9:6d:a3:b0:c4:0d:9d:82:fb:ef:c3:f6:39:6b:db:
a8:b9:ed:95:58:a2:94:8b:05:5e:04:6c:44:e1:e0:de:3a:33:
32:1f:5b:00:3c:2a:98:c2:3c:93:d7:fc:01:e6:a5:95:f8:2a:
70:0b:6e:46:f9:17:31:6a:f4:41:3a:93:f3:b8:ab:42:65:52:
82:94:42:39:6b:6f:de:c1:d3:68:a8:67:ad:9c:9c:38:33:20:
40:10:55:55:41:c5:d0:d9:79:ff:6d:15:fb:4f:ab:ab:5b:a6:
c9:e7:49:37:2d:f5:58:8b:f3:54:bb:fd:80:69:1f:d7:61:16:
cb:8e:8c:4e:22:c8:47:11:07:24:10:4b:6f:a1:2d:65:f9:9d:
8e:da:e9:0f:75:0d:ec:ea:26:6d:65:bb:f9:6a:8d:d7:1b:ec:
58:42:77:8a:cb:c4:ea:57:7f:84:3e:4c:f2:fd:8d:7d:69:43:
56:b7:e5:6f:16:05:99:92:e2:85:31:6f:7f:b5:95:32:40:e2:
e7:c7:fa:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 06:29:57 2026 by rpki-client