This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tls795O0IoyWNUcEAD--8vWYTKg.roa File: tls795O0IoyWNUcEAD--8vWYTKg.roa (raw, json) Hash identifier: WPImq9Nkz9XvbUA5sod/7PCbnP8HrlOuCRRbPAMPaLw= Subject key identifier: B6:5B:3B:F7:93:B4:22:8C:96:35:47:04:00:3F:BE:F2:F5:98:4C:A8 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB971703A0330C38F8F72F5DBACA73 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tls795O0IoyWNUcEAD--8vWYTKg.roa Signing time: Fri 02 Jan 2026 08:20:53 +0000 ROA not before: Fri 02 Jan 2026 08:20:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214483 IP address blocks: 151.243.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:97:17:03:a0:33:0c:38:f8:f7:2f:5d:ba:ca:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b65b3bf793b4228c96354704003fbef2f5984ca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:57:13:8b:cd:13:80:cd:ef:97:67:fb:6e:df: 2c:3b:80:5c:1f:f1:cd:58:74:3f:9f:1a:ca:b0:0a: 52:63:1f:de:4f:c6:e4:3c:a3:1c:31:14:6d:6b:50: 5f:6c:d3:44:b1:1b:ce:e2:44:42:ed:a4:21:c7:ab: 4e:5c:5f:f6:84:96:95:7d:6a:39:3c:78:ee:22:bd: 31:2c:9d:45:7c:8e:fb:38:92:97:fc:35:ef:06:ce: 1b:02:7d:5a:2f:8d:d5:bf:2b:2e:80:df:8e:3a:c1: e6:5d:25:13:13:16:ca:5d:78:5f:cf:4d:eb:df:57: ff:f2:18:6f:ed:47:d9:cd:49:4b:7f:63:8e:31:38: f3:81:a9:f6:cc:74:92:a2:37:23:a9:ab:0a:49:ae: c2:9a:9d:c4:25:3d:8e:b0:49:bb:23:e8:5d:e3:70: 58:02:fa:e1:d4:78:1f:00:ac:49:99:ee:2b:43:26: 6d:d1:8b:b1:59:49:a4:40:cd:59:42:09:1b:9a:9d: 1c:7b:66:9c:eb:3b:2f:9c:60:5f:05:a7:7c:25:13: 24:4b:52:4a:8e:a3:e6:35:24:70:ed:d3:69:b5:ad: 49:11:ef:fc:00:06:93:19:47:92:b1:67:78:69:bf: 23:9c:98:f7:f2:77:6d:98:35:71:33:26:3f:81:ab: 70:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:5B:3B:F7:93:B4:22:8C:96:35:47:04:00:3F:BE:F2:F5:98:4C:A8 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tls795O0IoyWNUcEAD--8vWYTKg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.243.51.0/24 Signature Algorithm: sha256WithRSAEncryption 90:7c:42:16:5e:40:1a:48:53:02:b1:bd:72:a5:6c:a7:38:20: ad:5a:a1:4b:84:03:f3:76:06:d8:3f:d9:0b:02:59:3b:b2:89: 3e:c8:0a:43:58:b8:18:66:14:1f:c7:9b:cc:08:53:ed:4c:c1: 73:cc:5e:92:d0:25:15:f0:04:7c:8b:4f:b6:40:15:5f:8f:b8: 44:89:82:fa:19:94:27:14:67:ad:75:43:02:ae:cd:35:b1:1e: 88:2a:1a:21:a0:54:bc:7d:b5:3a:bf:3e:72:ae:30:39:4d:72: f6:d4:9c:ff:db:ce:71:21:2a:ec:96:8a:0d:17:76:cb:80:5f: 52:c2:2f:c0:19:29:43:64:5c:0e:d9:e8:b3:48:e0:99:5a:77: f2:38:15:5d:fd:f7:62:21:57:e8:58:8d:7c:a4:62:1c:12:de: 28:92:1f:7d:c5:09:d1:eb:e3:d7:eb:68:18:12:bb:bd:1a:e6: d5:01:2f:cc:6e:ee:c4:a8:73:e3:2d:4b:a5:4b:c2:99:00:0f: 46:4f:3e:e6:33:d1:79:33:3b:c5:54:d3:fb:9c:d9:6c:5c:ae: 90:82:ef:9f:9d:d7:0e:f0:09:60:3b:89:0c:f4:a6:74:4c:db: cd:e4:ce:16:1d:3b:09:c7:67:b1:26:9a:05:4e:07:c6:8f:f9: 42:89:f6:d9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y5cXA6AzDDj49y9duspzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjViM2JmNzkzYjQyMjhjOTYzNTQ3MDQwMDNmYmVmMmY1OTg0Y2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVcTi80TgM3vl2f7bt8sO4BcH/HN WHQ/nxrKsApSYx/eT8bkPKMcMRRta1BfbNNEsRvO4kRC7aQhx6tOXF/2hJaVfWo5 PHjuIr0xLJ1FfI77OJKX/DXvBs4bAn1aL43VvysugN+OOsHmXSUTExbKXXhfz03r 31f/8hhv7UfZzUlLf2OOMTjzgan2zHSSojcjqasKSa7Cmp3EJT2OsEm7I+hd43BY Avrh1HgfAKxJme4rQyZt0YuxWUmkQM1ZQgkbmp0ce2ac6zsvnGBfBad8JRMkS1JK jqPmNSRw7dNpta1JEe/8AAaTGUeSsWd4ab8jnJj38ndtmDVxMyY/gatwqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLZbO/eTtCKMljVHBAA/vvL1mEyoMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvdGxzNzk1TzBJb3lXTlVjRUFELS04dldZVEtnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/MzMA0G CSqGSIb3DQEBCwUAA4IBAQCQfEIWXkAaSFMCsb1ypWynOCCtWqFLhAPzdgbYP9kL Alk7sok+yApDWLgYZhQfx5vMCFPtTMFzzF6S0CUV8AR8i0+2QBVfj7hEiYL6GZQn FGetdUMCrs01sR6IKhohoFS8fbU6vz5yrjA5TXL21Jz/285xISrslooNF3bLgF9S wi/AGSlDZFwO2eizSOCZWnfyOBVd/fdiIVfoWI18pGIcEt4okh99xQnR6+PX62gY Eru9GubVAS/Mbu7EqHPjLUulS8KZAA9GTz7mM9F5MzvFVNP7nNlsXK6Qgu+fndcO 8AlgO4kM9KZ0TNvN5M4WHTsJx2exJpoFTgfGj/lCifbZ -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:04 2026 by rpki-client