This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/tPPQ2MX8zeKb6GqERCXjuGH8ds4.roa File: tPPQ2MX8zeKb6GqERCXjuGH8ds4.roa (raw, json) Hash identifier: /I2V6ak1ikZZlvsO/kVy4ibcPNbQ8S94XaGCt6WfFvU= Subject key identifier: B4:F3:D0:D8:C5:FC:CD:E2:9B:E8:6A:84:44:25:E3:B8:61:FC:76:CE Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b Certificate serial: 019B7CED8CFD35FFB505C94BF6DD637AECA3 Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/tPPQ2MX8zeKb6GqERCXjuGH8ds4.roa Signing time: Fri 02 Jan 2026 04:18:21 +0000 ROA not before: Fri 02 Jan 2026 04:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201005 IP address blocks: 151.237.67.0/24 maxlen: 24 151.237.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:8c:fd:35:ff:b5:05:c9:4b:f6:dd:63:7a:ec:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b Validity Not Before: Jan 2 04:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4f3d0d8c5fccde29be86a844425e3b861fc76ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f5:50:3d:c4:9b:17:aa:ed:01:a7:85:5e:48: 61:05:4e:ec:2e:7d:b3:93:7e:e5:75:17:ef:06:e1: d4:38:02:43:05:2a:fc:94:84:4f:62:32:2f:a1:91: 18:6e:60:29:e8:d9:aa:86:72:37:ce:eb:9f:0c:dc: e3:e8:50:09:e1:35:6b:57:32:71:05:7b:8b:10:c5: 63:c1:e5:d4:05:e2:c4:bb:4a:4a:b7:e5:87:b0:99: 76:6c:e9:cc:eb:65:e2:bf:cd:53:32:a5:e0:9f:8a: 46:d2:ac:16:e8:d0:55:ae:e4:36:b6:d0:8a:44:38: 74:cb:f1:18:0f:f0:33:ae:e5:40:c0:27:a1:64:3a: cb:cc:3c:7e:cb:eb:00:30:73:8f:c7:55:57:fb:c8: 2c:5e:e7:ed:68:d4:47:e0:94:81:03:36:31:04:a7: 82:bc:38:6c:a9:b8:79:3b:3d:ee:a7:54:c8:2f:c9: fc:40:49:ff:68:ab:0a:4c:35:96:75:f1:b3:c6:3e: 6b:8f:cc:0a:e6:71:41:fd:2e:d3:77:3e:db:e2:0c: f0:99:35:a3:55:d6:59:23:e3:ce:57:75:8a:cb:36: 5e:37:15:9c:a0:c3:ba:8b:75:0f:80:2c:7f:a4:e7: 00:e3:f2:ea:78:9f:3f:93:9e:78:16:0f:25:ae:c7: 88:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:F3:D0:D8:C5:FC:CD:E2:9B:E8:6A:84:44:25:E3:B8:61:FC:76:CE X509v3 Authority Key Identifier: keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/tPPQ2MX8zeKb6GqERCXjuGH8ds4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.237.67.0/24 151.237.142.0/24 Signature Algorithm: sha256WithRSAEncryption ac:9f:c0:62:70:be:e6:82:ee:4d:71:90:87:d2:5c:83:91:76: dd:c0:f6:90:ac:43:1c:e9:3b:58:f2:ac:bd:ee:9b:ef:3b:4c: c7:53:e0:ad:72:52:3e:a0:03:4e:34:f8:bf:86:71:2d:77:a7: 32:f6:f2:98:21:2e:19:fe:c2:45:25:b7:1b:a9:97:48:c6:b1: 33:08:8a:f9:38:f0:a3:9a:57:02:0b:01:fc:ab:b4:4d:28:eb: 47:77:82:67:12:68:3f:7d:0a:23:1a:1c:c1:b8:99:66:78:62: 56:e4:18:f9:4f:b2:b6:6e:27:46:8d:28:28:18:29:cd:47:ad: 52:dc:ca:a1:02:bf:21:96:92:0a:0a:a1:89:5c:9d:50:47:52: d0:95:e5:20:10:1c:f9:54:0b:34:9d:f2:03:1e:24:2e:ba:48: 05:eb:ed:4c:aa:bd:5d:2b:e5:c3:2c:3d:82:7b:5b:c2:80:c9: ff:01:c7:5a:84:c1:13:9e:04:57:e5:3c:ac:75:8b:59:30:a2: 3d:9e:1d:d1:22:38:58:f8:ec:5a:1f:bc:b0:5e:ed:11:a7:86: d2:07:bb:56:16:a3:7c:75:9d:47:01:b1:f3:eb:36:f2:dc:3d: ff:8c:79:6d:48:a1:96:3d:a2:0a:b1:55:36:24:52:c2:c7:1f: 3a:ea:48:8a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87Yz9Nf+1BclL9t1jeuyjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl NGQxMWIwHhcNMjYwMTAyMDQxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGYzZDBkOGM1ZmNjZGUyOWJlODZhODQ0NDI1ZTNiODYxZmM3NmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPVQPcSbF6rtAaeFXkhhBU7sLn2z k37ldRfvBuHUOAJDBSr8lIRPYjIvoZEYbmAp6NmqhnI3zuufDNzj6FAJ4TVrVzJx BXuLEMVjweXUBeLEu0pKt+WHsJl2bOnM62Xiv81TMqXgn4pG0qwW6NBVruQ2ttCK RDh0y/EYD/AzruVAwCehZDrLzDx+y+sAMHOPx1VX+8gsXuftaNRH4JSBAzYxBKeC vDhsqbh5Oz3up1TIL8n8QEn/aKsKTDWWdfGzxj5rj8wK5nFB/S7Tdz7b4gzwmTWj VdZZI+POV3WKyzZeNxWcoMO6i3UPgCx/pOcA4/LqeJ8/k554Fg8lrseIcQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLTz0NjF/M3im+hqhEQl47hh/HbOMB8GA1UdIwQY MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt YTk3YzBkYzBhNzQ5LzEvdFBQUTJNWDh6ZUtiNkdxRVJDWGp1R0g4ZHM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5 LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl+1DAwQA l+2OMA0GCSqGSIb3DQEBCwUAA4IBAQCsn8BicL7mgu5NcZCH0lyDkXbdwPaQrEMc 6TtY8qy97pvvO0zHU+CtclI+oANONPi/hnEtd6cy9vKYIS4Z/sJFJbcbqZdIxrEz CIr5OPCjmlcCCwH8q7RNKOtHd4JnEmg/fQojGhzBuJlmeGJW5Bj5T7K2bidGjSgo GCnNR61S3MqhAr8hlpIKCqGJXJ1QR1LQleUgEBz5VAs0nfIDHiQuukgF6+1Mqr1d K+XDLD2Ce1vCgMn/AcdahMETngRX5TysdYtZMKI9nh3RIjhY+OxaH7ywXu0Rp4bS B7tWFqN8dZ1HAbHz6zby3D3/jHltSKGWPaIKsVU2JFLCxx866kiK -----END CERTIFICATE-----Generated at Mon Jan 26 20:24:50 2026 by rpki-client