This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TmeTkqZYONbENZPxiLAT5pRtgPs.roa File: TmeTkqZYONbENZPxiLAT5pRtgPs.roa (raw, json) Hash identifier: ybk9Q41coBHyIlIG1xHVn8nM3WeNNpCAKXPCfOCvi68= Subject key identifier: 4E:67:93:92:A6:58:38:D6:C4:35:93:F1:88:B0:13:E6:94:6D:80:FB Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB8DF1F2235FDC8D63F0EC7E7FD0C6 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TmeTkqZYONbENZPxiLAT5pRtgPs.roa Signing time: Fri 02 Jan 2026 08:20:50 +0000 ROA not before: Fri 02 Jan 2026 08:20:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213724 IP address blocks: 151.242.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:8d:f1:f2:23:5f:dc:8d:63:f0:ec:7e:7f:d0:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e679392a65838d6c43593f188b013e6946d80fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8c:00:f2:d0:14:d9:73:9e:7b:9b:70:92:35: a3:73:91:0f:44:9a:11:cf:31:80:ba:aa:9a:29:ab: 98:bd:57:ce:d1:fc:fa:57:dd:a3:da:cb:51:81:cd: 91:38:1a:eb:1b:7d:78:ca:b0:05:8d:fb:28:6e:98: 7c:7e:99:87:a2:80:9a:ea:47:ed:5f:53:98:64:25: 8b:89:e3:99:a8:18:8c:4c:84:61:e5:2f:1f:f9:42: 1e:a0:71:c8:52:60:f2:48:a7:15:ea:77:98:04:dc: 7c:c1:84:de:3a:62:ac:f3:e7:f7:13:50:84:7b:fa: 13:af:09:1e:0a:85:a6:25:88:7c:7a:52:3f:87:5d: 66:7a:e0:63:ca:e9:6b:1e:1e:fa:42:4f:87:f8:5f: fe:91:36:54:c6:77:15:9e:5d:15:50:cc:36:6d:8f: 2c:34:af:24:37:c0:f1:ff:95:01:32:20:3e:4f:db: 0a:55:62:0f:bb:67:4b:ea:72:85:19:19:b9:63:a3: 70:ee:3f:72:ef:7e:78:71:5e:6c:af:17:05:49:eb: 89:f9:7a:e5:96:49:24:49:c0:ca:4d:8c:92:52:04: 78:32:78:a9:d7:82:08:8c:32:dc:d9:73:a5:3f:1d: 14:85:ff:3d:28:8a:ef:2d:1a:12:e4:25:09:ce:a8: 54:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:67:93:92:A6:58:38:D6:C4:35:93:F1:88:B0:13:E6:94:6D:80:FB X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TmeTkqZYONbENZPxiLAT5pRtgPs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.155.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:4f:a2:3a:ce:93:ff:c1:f9:3d:26:4d:e5:59:dc:98:17:3b: 85:21:a5:31:c6:4b:33:5a:32:15:32:a3:d8:66:2a:a7:ec:69: e3:e3:6e:14:fb:f6:0e:f0:bb:fa:7e:34:4e:5d:e5:c5:e4:3e: 54:db:49:50:f2:30:fc:90:d0:58:de:d2:55:05:a6:b7:6d:e9: 4b:9f:cf:2f:84:33:80:fc:ba:91:4c:5a:af:08:58:a4:59:09: 7a:0b:3d:f6:56:e9:26:e1:3b:1c:37:6a:21:ae:8a:14:59:3e: 2e:80:91:f9:ac:c3:5c:b4:cc:b8:2a:3b:e9:55:f6:2d:37:23: 39:53:1a:2f:5e:20:99:b6:a9:e5:79:b0:b4:09:f5:b3:33:8c: 15:bb:3a:45:36:1a:61:cd:c4:b0:1b:d7:01:44:0a:7f:06:6b: 30:1c:c5:16:29:67:08:59:b0:7e:3a:9f:70:ff:9b:6f:22:6b: 17:20:aa:ea:e7:fa:b7:73:1c:a6:e1:45:2a:e7:e2:37:d6:74: c0:e5:fc:2d:48:de:0b:b1:b3:c9:89:45:d0:f3:71:80:71:93: e1:d1:84:0b:c5:2e:cc:19:22:31:5a:d0:82:12:b4:57:a4:d4: 83:3e:88:a7:2a:00:6d:5d:24:f8:dd:7c:01:ed:52:17:1c:d2: 1e:a0:4a:ce -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y43x8iNf3I1j8Ox+f9DGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTY3OTM5MmE2NTgzOGQ2YzQzNTkzZjE4OGIwMTNlNjk0NmQ4MGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYwA8tAU2XOee5twkjWjc5EPRJoR zzGAuqqaKauYvVfO0fz6V92j2stRgc2ROBrrG314yrAFjfsobph8fpmHooCa6kft X1OYZCWLieOZqBiMTIRh5S8f+UIeoHHIUmDySKcV6neYBNx8wYTeOmKs8+f3E1CE e/oTrwkeCoWmJYh8elI/h11meuBjyulrHh76Qk+H+F/+kTZUxncVnl0VUMw2bY8s NK8kN8Dx/5UBMiA+T9sKVWIPu2dL6nKFGRm5Y6Nw7j9y7354cV5srxcFSeuJ+Xrl lkkkScDKTYySUgR4Mnip14IIjDLc2XOlPx0Uhf89KIrvLRoS5CUJzqhUKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE5nk5KmWDjWxDWT8YiwE+aUbYD7MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvVG1lVGtxWllPTmJFTlpQeGlMQVQ1cFJ0Z1BzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/KbMA0G CSqGSIb3DQEBCwUAA4IBAQAfT6I6zpP/wfk9Jk3lWdyYFzuFIaUxxkszWjIVMqPY Ziqn7Gnj424U+/YO8Lv6fjROXeXF5D5U20lQ8jD8kNBY3tJVBaa3belLn88vhDOA /LqRTFqvCFikWQl6Cz32Vukm4TscN2ohrooUWT4ugJH5rMNctMy4KjvpVfYtNyM5 UxovXiCZtqnlebC0CfWzM4wVuzpFNhphzcSwG9cBRAp/BmswHMUWKWcIWbB+Op9w /5tvImsXIKrq5/q3cxym4UUq5+I31nTA5fwtSN4LsbPJiUXQ83GAcZPh0YQLxS7M GSIxWtCCErRXpNSDPoinKgBtXST43XwB7VIXHNIeoErO -----END CERTIFICATE-----Generated at Sun Jan 18 06:28:51 2026 by rpki-client