This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tQTIuFIG4YxjEJvBE0vRtxc_V1M.roa File: tQTIuFIG4YxjEJvBE0vRtxc_V1M.roa (raw, json) Hash identifier: iRkG3i81DOqU/ofL3hsVAhDeFNns1eGO11Zec0bSibY= Subject key identifier: B5:04:C8:B8:52:06:E1:8C:63:10:9B:C1:13:4B:D1:B7:17:3F:57:53 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB2E55553DB937EE375D6971A3DBE0 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tQTIuFIG4YxjEJvBE0vRtxc_V1M.roa Signing time: Fri 02 Jan 2026 08:20:26 +0000 ROA not before: Fri 02 Jan 2026 08:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40676 IP address blocks: 151.242.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:2e:55:55:3d:b9:37:ee:37:5d:69:71:a3:db:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b504c8b85206e18c63109bc1134bd1b7173f5753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:04:2f:79:7f:30:f7:e3:17:7d:e2:a8:d0:fd: f9:d9:d7:51:e6:91:95:8d:fc:6b:32:06:1e:23:d4: 3d:1f:d5:e5:94:aa:f2:4e:15:0c:7e:5d:4d:2e:a7: bd:08:3f:c4:f7:80:af:ca:fa:11:24:67:04:c9:e7: 29:48:ac:db:7b:bb:85:fb:93:e0:c1:6e:76:5e:2d: 0c:cb:f9:fc:6c:b1:0d:bc:c0:e9:27:09:4b:5c:07: cf:40:16:86:f0:2a:17:54:e3:99:70:11:ab:78:b9: 01:41:c5:ae:ca:cb:0f:a2:e4:23:b1:a7:bb:62:6c: a3:e0:dd:94:d7:d4:c5:b1:96:af:fc:3c:ef:4d:cf: fe:3d:5d:62:e6:6e:5d:93:5e:24:21:cf:c3:6b:5b: 9e:94:1c:cb:0e:92:92:df:55:ba:23:08:3a:17:0c: f7:5c:9f:e6:2f:30:66:e9:4f:52:47:87:4e:04:c4: 11:3c:e4:db:82:df:f5:f1:e0:2c:6c:e8:77:8a:cf: da:b4:14:f5:65:4a:44:1e:5c:dc:14:a5:4d:a5:04: 67:bf:a0:79:b4:bf:bc:c4:13:19:ba:17:e3:5c:d9: ef:dc:14:17:9e:7b:c2:05:a2:2e:9d:e2:fa:e6:45: 04:92:d0:e6:04:cc:39:a3:7f:58:25:e6:95:18:b9: e7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:04:C8:B8:52:06:E1:8C:63:10:9B:C1:13:4B:D1:B7:17:3F:57:53 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tQTIuFIG4YxjEJvBE0vRtxc_V1M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.61.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:53:4b:23:b4:56:d7:17:ce:74:28:d6:66:d6:54:7a:f6:c9: 6f:b3:f6:47:0f:d6:98:85:4b:84:7c:08:6b:6f:65:c8:55:87: 82:6e:06:0a:4b:69:0c:5f:97:62:74:4a:07:0c:ff:83:af:f5: f7:0f:a3:84:37:d4:65:2c:03:46:e1:2d:bf:71:4b:ca:f8:bd: 4b:39:95:64:34:10:f1:8f:89:c8:0a:72:79:a1:3a:09:82:2b: fd:6a:65:1d:68:1e:c1:59:f3:bd:7c:04:dd:40:c8:88:ce:5f: fd:d9:c2:e7:4f:63:c4:f0:86:49:cf:89:dd:4a:ac:77:f1:57: 4e:b0:88:19:4b:a4:7b:ba:6e:34:43:2a:f5:c3:05:1d:9c:ef: 5c:ce:ed:ac:28:19:6d:b4:49:bf:72:92:b3:8e:42:78:f7:0c: 69:f5:d4:d4:5a:bf:e4:cb:ed:bb:44:f3:77:a6:26:49:f6:87: 87:e5:36:02:58:c2:67:94:2c:c2:a4:2f:a3:d6:ba:40:26:f7: 27:99:74:ce:f6:cc:ea:5b:82:f3:35:c8:79:0a:21:8b:76:ca: 94:41:d1:63:01:5d:dc:f9:36:50:e2:3e:6e:b7:85:2b:f5:6d: 97:ce:ce:4a:5a:5b:5b:52:6b:47:03:f3:14:52:dd:ed:0b:00: d8:b4:c6:01 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yy5VVT25N+43XWlxo9vgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTA0YzhiODUyMDZlMThjNjMxMDliYzExMzRiZDFiNzE3M2Y1NzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAQveX8w9+MXfeKo0P352ddR5pGV jfxrMgYeI9Q9H9XllKryThUMfl1NLqe9CD/E94CvyvoRJGcEyecpSKzbe7uF+5Pg wW52Xi0My/n8bLENvMDpJwlLXAfPQBaG8CoXVOOZcBGreLkBQcWuyssPouQjsae7 Ymyj4N2U19TFsZav/DzvTc/+PV1i5m5dk14kIc/Da1uelBzLDpKS31W6Iwg6Fwz3 XJ/mLzBm6U9SR4dOBMQRPOTbgt/18eAsbOh3is/atBT1ZUpEHlzcFKVNpQRnv6B5 tL+8xBMZuhfjXNnv3BQXnnvCBaIuneL65kUEktDmBMw5o39YJeaVGLnn7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLUEyLhSBuGMYxCbwRNL0bcXP1dTMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvdFFUSXVGSUc0WXhqRUp2QkUwdlJ0eGNfVjFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/I9MA0G CSqGSIb3DQEBCwUAA4IBAQA7U0sjtFbXF850KNZm1lR69slvs/ZHD9aYhUuEfAhr b2XIVYeCbgYKS2kMX5didEoHDP+Dr/X3D6OEN9RlLANG4S2/cUvK+L1LOZVkNBDx j4nICnJ5oToJgiv9amUdaB7BWfO9fATdQMiIzl/92cLnT2PE8IZJz4ndSqx38VdO sIgZS6R7um40Qyr1wwUdnO9czu2sKBlttEm/cpKzjkJ49wxp9dTUWr/ky+27RPN3 piZJ9oeH5TYCWMJnlCzCpC+j1rpAJvcnmXTO9szqW4LzNch5CiGLdsqUQdFjAV3c +TZQ4j5ut4Ur9W2Xzs5KWltbUmtHA/MUUt3tCwDYtMYB -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:31 2026 by rpki-client