This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tJRFxqbAe7AeiM04fEwNVQd9swg.roa File: tJRFxqbAe7AeiM04fEwNVQd9swg.roa (raw, json) Hash identifier: 72fLdD/4tkTUDd30sF42DG0ia5LirMYV3ZU3hjNI8hM= Subject key identifier: B4:94:45:C6:A6:C0:7B:B0:1E:88:CD:38:7C:4C:0D:55:07:7D:B3:08 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCBA4E238A7404809A55AEF55812A31 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tJRFxqbAe7AeiM04fEwNVQd9swg.roa Signing time: Fri 02 Jan 2026 08:20:56 +0000 ROA not before: Fri 02 Jan 2026 08:20:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 262287 IP address blocks: 151.245.244.0/24 maxlen: 24 151.245.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:a4:e2:38:a7:40:48:09:a5:5a:ef:55:81:2a:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b49445c6a6c07bb01e88cd387c4c0d55077db308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:16:1f:9b:20:75:97:31:1f:c6:72:f8:e1:78: 5b:76:65:bc:a9:a4:47:94:75:de:c4:44:bd:8e:0e: 10:b3:45:57:bd:d0:88:1f:d1:05:f7:b8:74:f9:e4: 69:51:06:6a:b8:00:cf:8d:59:db:55:2c:e5:5d:94: d0:07:12:1c:8a:4b:02:a4:6f:91:a9:e6:7c:40:1c: 2c:33:49:44:c5:25:31:bf:56:40:26:64:ad:19:1b: 63:21:c6:93:69:92:29:c4:83:4d:94:4c:41:26:ee: d3:5b:d4:9b:1a:3b:5b:88:83:4b:3d:8c:c5:3b:27: c3:6f:a6:db:41:d6:20:41:e0:cc:0b:09:04:0d:d4: 0c:c6:11:f9:0f:af:6d:50:ee:d8:10:1a:e3:b0:9a: c1:46:3b:b2:65:b7:47:b6:e5:6f:5d:f8:1e:3a:15: 33:51:4c:c5:a4:e7:b6:27:9c:26:27:13:96:0f:7e: 21:34:2a:5f:b7:12:cc:af:06:0d:01:0a:c4:9c:b0: 1d:6f:37:e2:38:85:20:2a:1a:62:f5:c9:ea:2a:ad: b0:47:4d:6b:6a:f2:eb:99:3e:00:9e:2c:d6:df:10: 58:ad:bb:4c:b9:dd:3c:4a:09:a7:18:16:0d:ee:ab: 87:6b:d7:54:1b:6c:b6:3a:d1:44:61:2e:07:47:86: 18:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:94:45:C6:A6:C0:7B:B0:1E:88:CD:38:7C:4C:0D:55:07:7D:B3:08 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tJRFxqbAe7AeiM04fEwNVQd9swg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.245.244.0/23 Signature Algorithm: sha256WithRSAEncryption 08:e6:45:93:de:e4:69:a8:cf:9e:0d:a9:ef:ec:2d:59:d0:ad: 97:78:6b:f6:50:ae:cc:a9:17:7f:99:54:49:e3:55:8f:46:72: a8:70:3c:6d:99:05:60:1f:86:fe:2b:54:2a:86:db:58:fb:82: c4:56:9c:f9:30:57:a9:15:b6:2a:ac:22:b2:72:cd:2d:88:20: 8a:7e:ed:cc:b9:00:4d:70:ea:e5:59:5f:65:61:08:ee:a2:1e: ff:a8:b8:ad:c8:85:17:5f:24:9b:b4:f3:d9:53:0b:87:5a:17: 33:fc:e7:62:43:74:f9:fc:ed:b8:c5:5d:1b:bb:db:9a:2a:c5: aa:56:f4:da:7b:6b:53:c8:fc:bc:f3:4f:8d:30:7a:34:cd:64: 9e:df:81:12:88:dc:a5:d9:2b:69:c9:bb:fd:e5:c8:54:27:ab: b0:d8:7f:b9:9a:4b:36:49:91:16:dd:05:9b:c5:17:aa:42:34: 20:3f:02:51:3a:15:59:d2:85:2a:ed:00:c1:77:2b:8a:bd:56: 99:64:29:e8:83:ca:84:77:37:df:8c:50:98:81:e7:f0:e0:bc: d9:07:f8:92:56:2a:d2:48:d9:44:90:d9:0b:2a:40:fc:06:b0: 25:a6:1b:c5:90:2c:64:5d:33:64:38:bf:ac:66:20:d8:69:8b: 8c:b2:d3:3b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y6TiOKdASAmlWu9VgSoxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDk0NDVjNmE2YzA3YmIwMWU4OGNkMzg3YzRjMGQ1NTA3N2RiMzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+BYfmyB1lzEfxnL44XhbdmW8qaRH lHXexES9jg4Qs0VXvdCIH9EF97h0+eRpUQZquADPjVnbVSzlXZTQBxIciksCpG+R qeZ8QBwsM0lExSUxv1ZAJmStGRtjIcaTaZIpxINNlExBJu7TW9SbGjtbiINLPYzF OyfDb6bbQdYgQeDMCwkEDdQMxhH5D69tUO7YEBrjsJrBRjuyZbdHtuVvXfgeOhUz UUzFpOe2J5wmJxOWD34hNCpftxLMrwYNAQrEnLAdbzfiOIUgKhpi9cnqKq2wR01r avLrmT4AnizW3xBYrbtMud08SgmnGBYN7quHa9dUG2y2OtFEYS4HR4YYCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLSURcamwHuwHojNOHxMDVUHfbMIMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvdEpSRnhxYkFlN0FlaU0wNGZFd05WUWQ5c3dnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBl/X0MA0G CSqGSIb3DQEBCwUAA4IBAQAI5kWT3uRpqM+eDanv7C1Z0K2XeGv2UK7MqRd/mVRJ 41WPRnKocDxtmQVgH4b+K1QqhttY+4LEVpz5MFepFbYqrCKycs0tiCCKfu3MuQBN cOrlWV9lYQjuoh7/qLityIUXXySbtPPZUwuHWhcz/OdiQ3T5/O24xV0bu9uaKsWq VvTae2tTyPy880+NMHo0zWSe34ESiNyl2Stpybv95chUJ6uw2H+5mks2SZEW3QWb xReqQjQgPwJROhVZ0oUq7QDBdyuKvVaZZCnog8qEdzffjFCYgefw4LzZB/iSVirS SNlEkNkLKkD8BrAlphvFkCxkXTNkOL+sZiDYaYuMstM7 -----END CERTIFICATE-----Generated at Sun Jan 18 06:29:11 2026 by rpki-client