This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zTlsaKur4vvPMM1Ct0MklzCNNcI.roa File: zTlsaKur4vvPMM1Ct0MklzCNNcI.roa (raw, json) Hash identifier: r+uHuxaJYM7VKWCmH7edLcvG6HqyPWhoxmpfg3LFjGY= Subject key identifier: CD:39:6C:68:AB:AB:E2:FB:CF:30:CD:42:B7:43:24:97:30:8D:35:C2 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCBA8F981E2C50986CFBF236517FE5E Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zTlsaKur4vvPMM1Ct0MklzCNNcI.roa Signing time: Fri 02 Jan 2026 08:20:57 +0000 ROA not before: Fri 02 Jan 2026 08:20:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 274099 IP address blocks: 151.241.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:a8:f9:81:e2:c5:09:86:cf:bf:23:65:17:fe:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd396c68ababe2fbcf30cd42b7432497308d35c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:64:66:82:54:98:1a:a7:89:98:f2:66:62:49: 79:34:4e:e2:c5:23:27:46:b2:a7:20:2c:ac:4e:8a: 36:5d:2b:42:09:26:81:41:61:da:5e:df:49:cd:76: 54:04:ff:48:02:72:1b:2e:a1:05:37:fd:3f:f6:16: 12:0c:cb:33:7f:0a:ac:49:35:c3:aa:c7:34:6f:03: 5f:44:f4:45:4f:4e:b9:8d:d4:75:ae:b2:ab:e2:49: 47:c1:6b:2d:a2:8c:1d:8a:98:d0:e8:00:a0:6b:37: 3b:d5:4c:31:94:7d:db:10:0b:c4:e3:90:46:a9:3e: b4:b9:dc:85:ab:c0:42:13:22:98:46:b2:b7:af:2d: b2:f7:29:75:0b:53:50:cb:17:cc:b4:92:1e:82:6b: 78:f2:da:72:a6:8b:3b:ed:a0:0d:6f:a2:1a:b5:7b: 33:f3:bd:55:42:be:bf:b1:db:3e:fa:3b:4e:47:85: 50:7c:03:c2:2c:ca:f6:c5:dc:db:bb:f0:9e:f2:7e: 5d:45:02:79:f8:32:9f:aa:bf:43:bc:91:e7:2d:66: 66:8a:38:4e:0a:e6:28:cb:69:40:5a:63:e1:6b:0d: 01:84:2f:0f:58:b4:ce:5c:d3:a1:e5:69:21:54:9b: d9:38:87:0e:76:00:64:4a:c5:0d:cf:a7:72:2d:d8: 27:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:39:6C:68:AB:AB:E2:FB:CF:30:CD:42:B7:43:24:97:30:8D:35:C2 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zTlsaKur4vvPMM1Ct0MklzCNNcI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.80.0/21 Signature Algorithm: sha256WithRSAEncryption 11:e0:21:16:f9:e7:02:e9:cd:6e:d9:34:0f:b5:93:3b:db:5c: bf:1d:7b:60:58:3e:65:9a:9c:2e:4d:24:dc:98:bb:c2:8f:8d: 3b:9b:b6:d7:07:ca:c0:9a:67:5a:e9:1b:83:e1:b5:e0:fc:74: a4:d0:0e:b1:97:56:ee:23:a1:c3:58:84:37:27:6b:fb:8b:c2: 95:5c:96:5d:e6:78:57:e8:df:61:f0:60:7b:83:c8:d7:0c:4a: 77:45:ac:f1:17:da:5f:83:b7:3b:22:a7:87:e1:97:5a:5d:42: a2:2d:05:8d:b5:25:4f:2c:00:60:7f:ab:2a:b1:ed:f3:79:b9: 7e:ff:d9:92:cc:45:55:8a:eb:ca:36:da:05:7b:c6:ad:b5:02: 84:3f:e9:9d:5c:e7:bf:e3:a0:d3:00:2a:d6:b5:44:2f:ce:a2: fa:e9:d8:03:23:76:ac:53:f5:e5:53:51:6c:32:3b:79:b9:63: 2d:09:af:cf:9c:b5:3a:48:07:e6:59:bd:c1:f3:5d:5c:20:12: 0e:86:99:f6:54:d5:b3:7c:ed:3e:37:96:6f:03:61:02:f1:0d: c4:53:0b:94:30:b7:b4:7c:02:f2:c6:78:c3:c3:36:9b:da:a7: 00:41:05:ed:7b:4c:c5:89:f5:63:bb:cd:e7:5b:84:71:c2:04: 4f:0f:05:c0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y6j5geLFCYbPvyNlF/5eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDM5NmM2OGFiYWJlMmZiY2YzMGNkNDJiNzQzMjQ5NzMwOGQzNWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2RmglSYGqeJmPJmYkl5NE7ixSMn RrKnICysToo2XStCCSaBQWHaXt9JzXZUBP9IAnIbLqEFN/0/9hYSDMszfwqsSTXD qsc0bwNfRPRFT065jdR1rrKr4klHwWstoowdipjQ6ACgazc71UwxlH3bEAvE45BG qT60udyFq8BCEyKYRrK3ry2y9yl1C1NQyxfMtJIegmt48tpypos77aANb6IatXsz 871VQr6/sds++jtOR4VQfAPCLMr2xdzbu/Ce8n5dRQJ5+DKfqr9DvJHnLWZmijhO CuYoy2lAWmPhaw0BhC8PWLTOXNOh5WkhVJvZOIcOdgBkSsUNz6dyLdgnNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM05bGirq+L7zzDNQrdDJJcwjTXCMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvelRsc2FLdXI0dnZQTU0xQ3QwTWtsekNOTmNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDl/FQMA0G CSqGSIb3DQEBCwUAA4IBAQAR4CEW+ecC6c1u2TQPtZM721y/HXtgWD5lmpwuTSTc mLvCj407m7bXB8rAmmda6RuD4bXg/HSk0A6xl1buI6HDWIQ3J2v7i8KVXJZd5nhX 6N9h8GB7g8jXDEp3RazxF9pfg7c7IqeH4ZdaXUKiLQWNtSVPLABgf6sqse3zebl+ /9mSzEVViuvKNtoFe8attQKEP+mdXOe/46DTACrWtUQvzqL66dgDI3asU/XlU1Fs Mjt5uWMtCa/PnLU6SAfmWb3B811cIBIOhpn2VNWzfO0+N5ZvA2EC8Q3EUwuUMLe0 fALyxnjDwzab2qcAQQXte0zFifVju83nW4RxwgRPDwXA -----END CERTIFICATE-----Generated at Sun Jan 18 06:28:53 2026 by rpki-client