This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tmPBl7L2ALLn-C32tjMfoCb7p_Y.roa File: tmPBl7L2ALLn-C32tjMfoCb7p_Y.roa (raw, json) Hash identifier: N2NjJxgwYI0pp2CDLCRNPQnnPoeFc3LSR8QUWtwP4Fw= Subject key identifier: B6:63:C1:97:B2:F6:00:B2:E7:F8:2D:F6:B6:33:1F:A0:26:FB:A7:F6 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB5AC6E32EF8BDDEC4F9A16A6DD7D5 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tmPBl7L2ALLn-C32tjMfoCb7p_Y.roa Signing time: Fri 02 Jan 2026 08:20:37 +0000 ROA not before: Fri 02 Jan 2026 08:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 153656 IP address blocks: 151.242.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:5a:c6:e3:2e:f8:bd:de:c4:f9:a1:6a:6d:d7:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b663c197b2f600b2e7f82df6b6331fa026fba7f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:33:e2:2c:ea:45:ab:a4:e4:96:52:63:e9:7f: c4:a6:f6:e5:94:b4:15:47:6c:7f:54:a4:98:10:4f: 12:b7:dc:78:e1:c7:4a:5d:40:fb:48:8e:38:f5:d1: 40:93:7f:00:05:d7:06:7f:1c:86:f4:19:42:ea:f8: 16:9d:33:bf:99:08:89:4c:dd:8a:81:e4:75:9d:fc: a6:7a:95:5f:21:9e:ff:03:da:d1:cf:c4:41:af:db: 50:f0:fb:19:61:4b:9f:1e:03:14:18:bf:31:a6:17: d6:06:ae:0f:f6:30:0e:85:e7:bf:b3:73:c6:03:73: f3:7e:53:6e:68:36:2b:a6:66:6b:40:8b:20:0a:f1: c4:78:09:ac:19:af:53:7d:44:9e:ba:49:03:20:17: 6a:6e:3d:38:57:cf:ea:dd:71:1d:04:7b:f8:b3:f7: 1b:4f:6c:34:f8:ed:23:53:db:b6:74:f4:69:89:67: c2:5d:37:7b:a8:8a:5c:79:c9:ca:08:20:cf:22:52: 05:04:5c:41:66:60:bc:6e:ee:65:b9:fe:99:08:38: 63:70:2e:96:f5:4e:f3:e6:e1:42:88:91:5b:e3:e5: e9:04:3e:2d:d9:b7:0c:b3:ab:10:3f:4a:39:a1:80: 48:b3:5c:be:74:0e:55:6b:5f:33:ac:c7:10:65:de: 96:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:63:C1:97:B2:F6:00:B2:E7:F8:2D:F6:B6:33:1F:A0:26:FB:A7:F6 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tmPBl7L2ALLn-C32tjMfoCb7p_Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.20.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:0b:fe:5a:5a:82:fc:0e:2d:80:bc:16:7e:fd:8a:92:e4:21: 3e:ec:5f:3a:f0:42:5d:42:1c:20:e0:dd:ad:5a:1b:c7:b9:1b: 75:8d:a5:25:92:c8:18:da:28:82:cd:db:f7:f7:4b:e8:1a:7b: 5c:c9:1d:fe:ff:6c:a5:67:82:48:03:39:a8:ed:e1:62:8e:a2: 36:71:b8:d1:59:17:b0:07:67:29:ff:8c:bc:09:54:92:12:c0: 6b:54:19:be:66:41:d3:87:75:16:9b:5d:86:f4:0a:20:83:49: 68:d4:e3:78:c1:3c:5c:9c:82:3e:58:f0:05:82:91:bb:47:bc: 16:c6:c0:a1:73:05:1a:2a:ae:8f:fc:b7:d6:10:39:63:2d:a8: b1:a5:28:35:d1:26:b4:b1:bf:af:2a:8d:f1:ab:f0:95:f1:01: b3:92:be:80:a7:07:c7:d2:49:1b:18:bb:ab:df:7f:3d:eb:d5: 76:4e:05:6e:08:e2:df:7e:cb:87:92:7f:94:1f:f0:28:ca:6b: 45:9f:a9:f7:f3:a5:42:58:54:f8:83:c7:5b:60:11:32:07:de: 41:cb:76:4f:c9:eb:2e:58:78:29:cf:bd:b4:cf:e5:25:0e:7d: ee:3f:9a:af:0e:05:b4:4c:aa:a2:85:42:ed:b5:7a:19:49:bb: 67:06:e3:55 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y1rG4y74vd7E+aFqbdfVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjYzYzE5N2IyZjYwMGIyZTdmODJkZjZiNjMzMWZhMDI2ZmJhN2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TPiLOpFq6TkllJj6X/EpvbllLQV R2x/VKSYEE8St9x44cdKXUD7SI449dFAk38ABdcGfxyG9BlC6vgWnTO/mQiJTN2K geR1nfymepVfIZ7/A9rRz8RBr9tQ8PsZYUufHgMUGL8xphfWBq4P9jAOhee/s3PG A3PzflNuaDYrpmZrQIsgCvHEeAmsGa9TfUSeukkDIBdqbj04V8/q3XEdBHv4s/cb T2w0+O0jU9u2dPRpiWfCXTd7qIpcecnKCCDPIlIFBFxBZmC8bu5luf6ZCDhjcC6W 9U7z5uFCiJFb4+XpBD4t2bcMs6sQP0o5oYBIs1y+dA5Va18zrMcQZd6WVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLZjwZey9gCy5/gt9rYzH6Am+6f2MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvdG1QQmw3TDJBTExuLUMzMnRqTWZvQ2I3cF9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/IUMA0G CSqGSIb3DQEBCwUAA4IBAQAKC/5aWoL8Di2AvBZ+/YqS5CE+7F868EJdQhwg4N2t WhvHuRt1jaUlksgY2iiCzdv390voGntcyR3+/2ylZ4JIAzmo7eFijqI2cbjRWRew B2cp/4y8CVSSEsBrVBm+ZkHTh3UWm12G9Aogg0lo1ON4wTxcnII+WPAFgpG7R7wW xsChcwUaKq6P/LfWEDljLaixpSg10Sa0sb+vKo3xq/CV8QGzkr6ApwfH0kkbGLur 338969V2TgVuCOLffsuHkn+UH/AoymtFn6n386VCWFT4g8dbYBEyB95By3ZPyesu WHgpz720z+UlDn3uP5qvDgW0TKqihULttXoZSbtnBuNV -----END CERTIFICATE-----Generated at Sun Jan 18 06:28:48 2026 by rpki-client