This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/tP9fulbTqgErLJMLyNiej2oTlqI.roa File: tP9fulbTqgErLJMLyNiej2oTlqI.roa (raw, json) Hash identifier: OanCM+SUDUM8rJKJtYI8xzsLY8yEkCq/CQ5zcDS0hpw= Subject key identifier: B4:FF:5F:BA:56:D3:AA:01:2B:2C:93:0B:C8:D8:9E:8F:6A:13:96:A2 Certificate issuer: /CN=4eaf14b67e051cfbd5e1b1d51693d44682392792 Certificate serial: 019A839824FF34558DC85868404019E1E0D2 Authority key identifier: 4E:AF:14:B6:7E:05:1C:FB:D5:E1:B1:D5:16:93:D4:46:82:39:27:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/tP9fulbTqgErLJMLyNiej2oTlqI.roa Signing time: Fri 14 Nov 2025 18:19:37 +0000 ROA not before: Fri 14 Nov 2025 18:19:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212123 IP address blocks: 167.150.90.0/24 maxlen: 24 2001:678:110::/48 maxlen: 48 2001:67c:e70::/48 maxlen: 48 2001:67c:e78::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:83:98:24:ff:34:55:8d:c8:58:68:40:40:19:e1:e0:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eaf14b67e051cfbd5e1b1d51693d44682392792 Validity Not Before: Nov 14 18:19:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b4ff5fba56d3aa012b2c930bc8d89e8f6a1396a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:14:2f:e1:00:78:b7:0c:9f:8b:bc:c2:38:ff: a5:ed:aa:bd:0e:d9:ea:32:a0:e3:b6:5d:16:c9:f8: 4d:3f:01:d8:4e:87:ab:8c:84:ff:7c:d3:0c:c6:02: c0:11:ce:43:6a:08:fb:80:51:b7:56:19:5a:34:12: 2b:91:14:d6:16:1b:d8:3c:49:51:9a:af:57:07:f1: 0a:83:02:61:c3:d4:42:cf:dd:68:4b:95:ea:7c:b5: a5:b4:98:a3:80:09:56:17:38:ec:02:42:00:85:14: 44:44:71:07:c2:86:8c:37:90:b0:72:95:72:f4:c1: c5:5d:ab:23:31:36:3b:ec:de:db:f4:0d:39:0b:b0: 5e:5c:56:e8:0c:38:dd:f5:be:bd:50:9b:40:09:7c: d9:15:e9:62:db:72:b0:18:79:29:f1:aa:ab:87:fe: 8c:45:d2:f8:fe:ff:52:02:41:98:08:ef:c6:cf:36: 79:57:4d:3e:99:60:0c:fe:00:75:d1:ff:c7:39:94: fe:0d:8c:10:99:d6:42:d9:13:b5:60:d0:24:e2:24: c0:32:5c:4a:66:65:90:68:1e:d1:29:f1:f9:6e:56: c9:20:75:8d:98:44:3e:ba:14:c7:0a:77:e0:e3:68: 47:d9:58:3b:14:ba:c6:d4:0c:ac:a2:d6:a0:36:5e: e1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:FF:5F:BA:56:D3:AA:01:2B:2C:93:0B:C8:D8:9E:8F:6A:13:96:A2 X509v3 Authority Key Identifier: keyid:4E:AF:14:B6:7E:05:1C:FB:D5:E1:B1:D5:16:93:D4:46:82:39:27:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/tP9fulbTqgErLJMLyNiej2oTlqI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.150.90.0/24 IPv6: 2001:678:110::/48 2001:67c:e70::/48 2001:67c:e78::/48 Signature Algorithm: sha256WithRSAEncryption 79:ff:33:67:87:96:38:b2:13:b5:7f:8d:47:52:a8:1f:35:81: 85:a7:60:46:68:2b:d7:31:14:24:98:c6:19:97:9e:24:33:56: 13:8c:7b:e5:b4:2d:5d:8f:6a:19:11:20:62:52:d5:73:e0:af: 66:03:a5:2c:c5:39:d9:f1:ef:87:28:8a:e6:9f:fe:13:7c:e7: f1:aa:3a:25:a0:02:e0:bd:5e:e3:6c:12:bb:2b:31:71:b0:ea: 01:90:98:dc:da:93:aa:9d:94:b0:e7:ce:22:1f:fb:e0:2c:e6: 6c:b0:d3:5d:64:65:da:a7:a0:6b:01:e3:be:f6:9e:f2:79:c2: 8f:6b:f1:e1:5b:d9:bf:47:e7:6f:f1:fb:07:b0:5a:0c:1f:9e: 4a:93:10:49:2b:22:46:bd:95:f1:80:1e:f7:c3:dc:63:d1:47: b8:b0:27:37:7e:d3:17:ce:95:4a:02:db:a8:0a:87:40:d6:94: f1:05:26:ae:d6:40:b2:1c:ba:63:b4:90:46:8c:b2:48:8b:ab: 5d:0b:7e:df:1b:a8:4c:67:ed:54:47:69:8e:55:30:1b:8a:eb: 52:da:b0:31:dd:dd:da:d8:3c:13:e3:c8:3f:21:84:8e:26:77: 09:2c:22:28:63:61:a9:d5:09:91:14:af:59:5a:84:30:47:e8: 34:22:78:58 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZqDmCT/NFWNyFhoQEAZ4eDSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlYWYxNGI2N2UwNTFjZmJkNWUxYjFkNTE2OTNkNDQ2ODIz OTI3OTIwHhcNMjUxMTE0MTgxOTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGZmNWZiYTU2ZDNhYTAxMmIyYzkzMGJjOGQ4OWU4ZjZhMTM5NmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBQv4QB4twyfi7zCOP+l7aq9Dtnq MqDjtl0WyfhNPwHYToerjIT/fNMMxgLAEc5Dagj7gFG3VhlaNBIrkRTWFhvYPElR mq9XB/EKgwJhw9RCz91oS5XqfLWltJijgAlWFzjsAkIAhRRERHEHwoaMN5CwcpVy 9MHFXasjMTY77N7b9A05C7BeXFboDDjd9b69UJtACXzZFeli23KwGHkp8aqrh/6M RdL4/v9SAkGYCO/GzzZ5V00+mWAM/gB10f/HOZT+DYwQmdZC2RO1YNAk4iTAMlxK ZmWQaB7RKfH5blbJIHWNmEQ+uhTHCnfg42hH2Vg7FLrG1AysotagNl7hPwIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFLT/X7pW06oBKyyTC8jYno9qE5aiMB8GA1UdIwQY MBaAFE6vFLZ+BRz71eGx1RaT1EaCOSeSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHE4VXRuNEZIUHZWNGJIVkZwUFVSb0k1SjVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS84Y2Y1MWMtNTRkNy00YzNhLTkwYzQt YmQ1MTJlZDU4Zjc4LzEvdFA5ZnVsYlRxZ0VyTEpNTHlOaWVqMm9UbHFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS84Y2Y1MWMtNTRkNy00YzNhLTkwYzQtYmQ1MTJlZDU4Zjc4 LzEvVHE4VXRuNEZIUHZWNGJIVkZwUFVSb0k1SjVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAMBAIAATAGAwQAp5ZaMCEE AgACMBsDBwAgAQZ4ARADBwAgAQZ8DnADBwAgAQZ8DngwDQYJKoZIhvcNAQELBQAD ggEBAHn/M2eHljiyE7V/jUdSqB81gYWnYEZoK9cxFCSYxhmXniQzVhOMe+W0LV2P ahkRIGJS1XPgr2YDpSzFOdnx74coiuaf/hN85/GqOiWgAuC9XuNsErsrMXGw6gGQ mNzak6qdlLDnziIf++As5myw011kZdqnoGsB4772nvJ5wo9r8eFb2b9H52/x+wew WgwfnkqTEEkrIka9lfGAHvfD3GPRR7iwJzd+0xfOlUoC26gKh0DWlPEFJq7WQLIc umO0kEaMskiLq10Lft8bqExn7VRHaY5VMBuK61LasDHd3drYPBPjyD8hhI4mdwks IihjYanVCZEUr1lahDBH6DQieFg= -----END CERTIFICATE-----Generated at Sat Dec 6 05:54:20 2025 by rpki-client