This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/IPE-tbT7mZHC_mVOXCnZbBARVrE.roa File: IPE-tbT7mZHC_mVOXCnZbBARVrE.roa (raw, json) Hash identifier: 9Pvd8mTsmxDOqa26tsGPIpoLn8+h+Tn9v4mWnas6nBQ= Subject key identifier: 20:F1:3E:B5:B4:FB:99:91:C2:FE:65:4E:5C:29:D9:6C:10:11:56:B1 Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294 Certificate serial: 019C05B7B100CCB184CD363F71A256DE3B11 Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/IPE-tbT7mZHC_mVOXCnZbBARVrE.roa Signing time: Wed 28 Jan 2026 17:47:30 +0000 ROA not before: Wed 28 Jan 2026 17:47:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7029 IP address blocks: 222.167.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:05:b7:b1:00:cc:b1:84:cd:36:3f:71:a2:56:de:3b:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294 Validity Not Before: Jan 28 17:47:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=20f13eb5b4fb9991c2fe654e5c29d96c101156b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:14:4f:92:b3:05:3c:6c:3f:dc:a0:c5:35:68: 86:16:9f:ca:c1:4f:23:d5:62:1c:ed:7b:16:bc:06: 60:90:d0:08:2f:93:c8:8e:ba:93:de:68:d4:c6:78: 04:e9:f3:b8:78:67:5f:8c:a9:b7:ff:c4:29:ae:61: 91:52:04:8e:65:99:a9:89:e5:46:5b:b9:38:3f:f2: d7:ab:a5:43:dc:5d:7d:55:6b:28:9a:e2:64:9b:4d: e7:d3:22:a2:68:b5:7b:05:80:c1:dd:dc:cc:35:7e: b8:70:98:00:53:55:0c:b4:83:63:f0:e1:bd:39:ff: 19:69:2e:50:88:a6:a1:9f:8d:d1:0b:ad:d5:92:25: 02:fc:91:9f:0f:e8:9b:4c:f4:ed:57:03:be:7b:ae: 08:8f:8d:a2:c7:11:c0:a0:a7:8d:42:9a:ef:4a:08: da:75:cd:3f:2f:59:79:2e:6c:eb:9d:75:3e:1b:9d: 4d:2d:e1:27:e9:a4:4b:ba:77:0e:83:a2:ae:b2:d1: 0a:23:a4:b9:cf:ce:50:f9:0e:19:30:fa:a6:7a:b3: 85:e0:54:78:6a:fc:4a:f7:6a:0b:bc:e9:77:a1:1b: 01:de:fa:cb:0c:74:a6:d1:21:55:d8:71:21:ec:f4: f9:f0:ee:0d:d4:5e:72:89:23:61:64:34:6d:f7:71: 01:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:F1:3E:B5:B4:FB:99:91:C2:FE:65:4E:5C:29:D9:6C:10:11:56:B1 X509v3 Authority Key Identifier: keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/IPE-tbT7mZHC_mVOXCnZbBARVrE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 222.167.251.0/24 Signature Algorithm: sha256WithRSAEncryption 73:82:0b:72:55:b8:42:1d:31:3b:87:ad:ee:aa:59:fb:b7:26: 21:b9:9a:96:ad:53:6f:61:7d:7f:b5:4e:78:cb:b3:c3:9a:66: bd:73:76:96:90:b1:d2:2f:6a:87:14:70:0f:e3:79:0d:1b:b5: 6a:4e:16:49:39:7d:f9:fa:b0:c5:72:8a:04:d4:1d:ec:11:c3: ef:45:3c:36:79:e5:7d:64:11:a7:7e:bf:b6:da:63:6b:13:48: 67:d0:aa:22:d2:ef:95:b2:10:84:8a:b8:d4:70:e9:ed:31:41: db:08:57:0b:1d:e4:3e:bf:7e:34:5a:89:30:35:a4:9f:c8:f9: 3c:53:af:6a:8a:d6:20:35:9a:9e:41:90:4d:bd:d8:17:36:d2: 27:25:75:77:30:fc:f3:d5:05:06:ed:93:ea:32:04:10:e6:f1: ef:75:10:f8:4c:e3:69:e3:82:2c:97:44:3c:f2:d3:8d:8e:27: 55:b8:e9:75:65:9e:34:d7:5b:63:0d:0f:a4:c1:a2:87:51:3b: 9b:f4:bf:28:83:39:d8:7f:d4:1c:16:36:a8:62:28:7f:64:65: 62:2e:b5:3f:6b:a1:6a:50:05:66:6f:97:22:e1:5c:10:94:8c: 11:af:1e:12:25:ca:13:45:fd:df:e1:46:20:ed:90:30:b1:10: 4d:05:e1:dc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwFt7EAzLGEzTY/caJW3jsRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxNGFhNTU3YzNkM2QxZTZiN2YwNTI1YzM0Y2MxZDQ4OGE1 YTkyOTQwHhcNMjYwMTI4MTc0NzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMGYxM2ViNWI0ZmI5OTkxYzJmZTY1NGU1YzI5ZDk2YzEwMTE1NmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhRPkrMFPGw/3KDFNWiGFp/KwU8j 1WIc7XsWvAZgkNAIL5PIjrqT3mjUxngE6fO4eGdfjKm3/8QprmGRUgSOZZmpieVG W7k4P/LXq6VD3F19VWsomuJkm03n0yKiaLV7BYDB3dzMNX64cJgAU1UMtINj8OG9 Of8ZaS5QiKahn43RC63VkiUC/JGfD+ibTPTtVwO+e64Ij42ixxHAoKeNQprvSgja dc0/L1l5LmzrnXU+G51NLeEn6aRLuncOg6KustEKI6S5z85Q+Q4ZMPqmerOF4FR4 avxK92oLvOl3oRsB3vrLDHSm0SFV2HEh7PT58O4N1F5yiSNhZDRt93EBmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCDxPrW0+5mRwv5lTlwp2WwQEVaxMB8GA1UdIwQY MBaAFJFKpVfD09Hmt/BSXDTMHUiKWpKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYt NGEzNDhlN2JlNDQxLzEvSVBFLXRiVDdtWkhDX21WT1hDblpiQkFSVnJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYtNGEzNDhlN2JlNDQx LzEva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA3qf7MA0G CSqGSIb3DQEBCwUAA4IBAQBzggtyVbhCHTE7h63uqln7tyYhuZqWrVNvYX1/tU54 y7PDmma9c3aWkLHSL2qHFHAP43kNG7VqThZJOX35+rDFcooE1B3sEcPvRTw2eeV9 ZBGnfr+22mNrE0hn0Koi0u+VshCEirjUcOntMUHbCFcLHeQ+v340WokwNaSfyPk8 U69qitYgNZqeQZBNvdgXNtInJXV3MPzz1QUG7ZPqMgQQ5vHvdRD4TONp44Isl0Q8 8tONjidVuOl1ZZ4011tjDQ+kwaKHUTub9L8ogznYf9QcFjaoYih/ZGViLrU/a6Fq UAVmb5ci4VwQlIwRrx4SJcoTRf3f4UYg7ZAwsRBNBeHc -----END CERTIFICATE-----Generated at Tue Feb 10 01:28:59 2026 by rpki-client