This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tFJ0-DJxuaGd4NfDP4QglnOzCGk.roa File: tFJ0-DJxuaGd4NfDP4QglnOzCGk.roa (raw, json) Hash identifier: G9HZTjSLYMSaFXB5e41fBHUhdhSl8EhB+nAijwib+B4= Subject key identifier: B4:52:74:F8:32:71:B9:A1:9D:E0:D7:C3:3F:84:20:96:73:B3:08:69 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019BF97AC872E166BA4443947E62AD3BA5B8 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tFJ0-DJxuaGd4NfDP4QglnOzCGk.roa Signing time: Mon 26 Jan 2026 08:45:32 +0000 ROA not before: Mon 26 Jan 2026 08:45:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205949 IP address blocks: 151.244.135.0/24 maxlen: 24 151.247.33.0/24 maxlen: 24 151.247.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:7a:c8:72:e1:66:ba:44:43:94:7e:62:ad:3b:a5:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 26 08:45:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b45274f83271b9a19de0d7c33f84209673b30869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9c:37:9e:0d:fe:0d:a2:b1:80:88:5a:5f:82: 82:c7:0e:7c:6c:35:a1:22:2e:4e:9e:ac:77:c7:dd: 87:59:e4:44:f8:42:16:98:d1:2a:66:cc:a4:46:ea: 2d:15:98:36:5d:14:12:d1:b0:27:ca:3e:7f:aa:bc: a7:9e:e1:c4:59:96:36:c4:c5:ab:34:d6:b3:36:54: ed:7b:1c:a6:9f:26:13:1e:0a:b9:d0:b2:46:c2:b4: 1a:74:ed:4a:3b:fa:f8:b3:04:4d:c3:3c:97:65:57: 31:8f:32:09:52:49:64:73:bc:b4:71:a9:b0:eb:ce: c8:7f:b1:48:02:af:9a:80:33:7c:da:3d:8e:ee:fc: 4e:8f:d4:b9:ae:29:c7:da:ce:dd:74:7f:82:de:31: b3:29:bf:97:97:43:db:3c:7e:95:d6:6e:b9:11:8d: 16:f9:4b:8e:9b:6b:19:85:d5:63:9f:b7:0a:6f:e9: 70:04:eb:2b:80:5a:9c:64:bd:f1:ec:db:03:4a:56: 07:65:f9:cc:c3:cf:2a:cf:a2:05:29:73:65:ef:b1: cb:b3:ff:3d:b2:ec:12:4a:39:7e:0d:22:9a:70:bb: e3:06:48:f1:dc:2f:fd:d2:e9:f6:09:86:ee:6a:26: 5e:51:63:28:e3:7a:2e:4c:d7:2e:6b:d2:e0:65:01: ff:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:52:74:F8:32:71:B9:A1:9D:E0:D7:C3:3F:84:20:96:73:B3:08:69 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tFJ0-DJxuaGd4NfDP4QglnOzCGk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.244.135.0/24 151.247.33.0/24 151.247.103.0/24 Signature Algorithm: sha256WithRSAEncryption ae:dd:e8:97:12:b4:a3:2b:dd:a4:e6:1e:af:bc:05:b1:d7:9f: f3:19:04:92:c3:b9:b6:a3:8e:99:91:58:03:54:36:7b:04:76: 76:7a:00:01:92:7a:bb:1f:bf:cf:62:0d:60:47:e2:b9:0f:e0: 40:59:ed:2b:81:3a:f2:95:79:1e:bc:46:6b:3b:bb:5b:c0:bb: 1a:00:6f:31:d4:46:98:1d:09:9d:ff:07:75:90:0b:62:ed:bf: fd:30:aa:ab:86:a1:2a:a7:b6:c2:c5:36:7c:d7:13:4f:40:66: a4:f8:b5:24:bd:b7:52:13:40:e6:4f:2d:14:40:cf:c7:43:ff: 57:78:42:6f:41:cc:74:0e:4f:3b:69:cd:f9:07:15:7b:8f:c1: 26:0b:42:2a:2e:8c:dc:ad:f3:44:f1:46:b0:a0:c0:80:d7:19: ff:af:25:2c:2d:23:2d:2a:cd:60:f4:f2:da:fe:ef:e8:48:d2: 41:61:5b:d6:e3:2e:1c:f8:e1:24:55:83:2c:f1:2c:73:c9:f5: 69:f1:5b:1d:0d:ec:6e:3a:55:7b:ce:a4:bb:32:08:e0:9a:64: c2:64:93:a3:b5:ab:07:1c:e1:16:1f:b6:a6:b4:db:fb:34:5e: d8:db:8d:cf:11:59:46:27:a4:26:92:d9:74:c0:13:a6:b0:75: 11:a2:f7:f0 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZv5eshy4Wa6REOUfmKtO6W4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTI2MDg0NTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDUyNzRmODMyNzFiOWExOWRlMGQ3YzMzZjg0MjA5NjczYjMwODY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJw3ng3+DaKxgIhaX4KCxw58bDWh Ii5Onqx3x92HWeRE+EIWmNEqZsykRuotFZg2XRQS0bAnyj5/qrynnuHEWZY2xMWr NNazNlTtexymnyYTHgq50LJGwrQadO1KO/r4swRNwzyXZVcxjzIJUklkc7y0camw 687If7FIAq+agDN82j2O7vxOj9S5rinH2s7ddH+C3jGzKb+Xl0PbPH6V1m65EY0W +UuOm2sZhdVjn7cKb+lwBOsrgFqcZL3x7NsDSlYHZfnMw88qz6IFKXNl77HLs/89 suwSSjl+DSKacLvjBkjx3C/90un2CYbuaiZeUWMo43ouTNcua9LgZQH/3wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLRSdPgycbmhneDXwz+EIJZzswhpMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvdEZKMC1ESnh1YUdkNE5mRFA0UWdsbk96Q0drLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAl/SHAwQA l/chAwQAl/dnMA0GCSqGSIb3DQEBCwUAA4IBAQCu3eiXErSjK92k5h6vvAWx15/z GQSSw7m2o46ZkVgDVDZ7BHZ2egABknq7H7/PYg1gR+K5D+BAWe0rgTrylXkevEZr O7tbwLsaAG8x1EaYHQmd/wd1kAti7b/9MKqrhqEqp7bCxTZ81xNPQGak+LUkvbdS E0DmTy0UQM/HQ/9XeEJvQcx0Dk87ac35BxV7j8EmC0IqLozcrfNE8UawoMCA1xn/ ryUsLSMtKs1g9PLa/u/oSNJBYVvW4y4c+OEkVYMs8SxzyfVp8VsdDexuOlV7zqS7 MgjgmmTCZJOjtasHHOEWH7amtNv7NF7Y243PEVlGJ6Qmktl0wBOmsHURovfw -----END CERTIFICATE-----Generated at Tue Feb 10 06:24:37 2026 by rpki-client