This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/tJQ8xrq4CC598T5hq-T0l0JCilk.roa File: tJQ8xrq4CC598T5hq-T0l0JCilk.roa (raw, json) Hash identifier: lYpYCisyGEwy4vUZDd9mXuyKbQ3Gcrxm7OAASuEwmg0= Subject key identifier: B4:94:3C:C6:BA:B8:08:2E:7D:F1:3E:61:AB:E4:F4:97:42:42:8A:59 Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019AED70E49D1FF5BDF4245D787DCB423206 Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/tJQ8xrq4CC598T5hq-T0l0JCilk.roa Signing time: Fri 05 Dec 2025 07:36:30 +0000 ROA not before: Fri 05 Dec 2025 07:36:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 50049 IP address blocks: 158.173.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ed:70:e4:9d:1f:f5:bd:f4:24:5d:78:7d:cb:42:32:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Dec 5 07:36:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b4943cc6bab8082e7df13e61abe4f49742428a59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:27:cb:25:68:a4:5f:21:f6:64:39:cb:9e:7a: 10:5d:47:5b:df:27:12:95:81:10:bd:75:dc:45:99: d8:a6:11:61:e7:48:be:81:70:a3:a0:09:db:fd:bc: 76:7b:6c:10:78:88:ee:11:a1:1e:39:5f:46:14:4e: 34:25:1b:74:0b:f4:db:0a:ef:50:6e:15:23:3e:a6: a5:0e:70:0f:58:98:16:94:cf:55:aa:97:47:a4:16: ea:ae:32:4b:76:5c:a0:91:3f:b8:af:6d:7d:98:aa: 39:c3:0e:27:19:10:85:7b:b7:75:55:14:30:04:c0: a0:8b:52:b6:b0:c0:4f:b7:52:d8:a3:02:e6:89:09: 5d:1f:83:ae:a8:d9:71:7b:c7:b2:32:c1:8c:e5:01: 4c:1e:6c:5a:af:b3:4a:06:63:f0:50:a3:b5:e9:ed: d6:5e:84:5a:7c:ad:e4:4b:5a:d8:1c:fd:db:c9:67: 96:dd:d9:e8:16:68:e8:b4:b4:dd:75:a4:e2:6d:02: 26:0b:bb:e7:4c:b8:ba:84:ff:70:a9:f5:49:8b:e0: e5:43:66:c6:44:4e:47:bd:96:14:7c:44:de:51:bf: c1:ff:48:0a:40:9f:59:c8:16:0b:8d:f9:b9:37:1e: c1:ee:b6:41:5e:f4:b7:c3:c6:ed:66:35:a6:d0:d3: 81:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:94:3C:C6:BA:B8:08:2E:7D:F1:3E:61:AB:E4:F4:97:42:42:8A:59 X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/tJQ8xrq4CC598T5hq-T0l0JCilk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.173.226.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:89:46:8c:ba:a6:e8:5d:4a:6b:f1:bc:a9:e6:5c:0e:e3:d5: c4:6f:7f:64:bd:61:14:7b:7f:b4:af:01:49:e6:7c:2e:fd:49: a2:88:46:a1:b6:0f:86:09:23:91:84:ce:5a:58:2c:d7:d5:ff: 89:89:ac:a7:c5:7d:00:03:b0:39:d9:1e:1d:0f:1a:6a:f1:ec: ef:3b:63:01:61:ba:a5:15:2c:6e:42:98:df:90:e4:50:31:3c: 3e:e7:3d:9c:8f:45:72:01:b8:1c:74:55:d6:8d:bc:5b:c3:9b: f3:a5:20:f7:96:58:d0:9d:36:c0:9e:4b:d8:f3:aa:65:bb:b6: 57:ca:85:95:e7:81:b9:fd:2b:ed:4d:77:06:97:a7:53:30:62: 6a:51:27:73:f6:c7:24:d0:12:f9:7b:18:5d:46:1b:3f:e5:a2: 02:c6:bb:99:2c:a2:7d:06:fa:6c:1d:67:e9:ed:d7:50:68:38: 9e:de:f8:66:04:15:14:eb:57:ee:b8:0c:dc:d6:1e:34:6a:ed: c5:6b:ab:63:1a:c7:66:07:fb:56:74:5b:ed:e2:21:44:84:2b: 05:82:fb:94:38:c0:79:f0:de:3b:39:5e:3d:74:7f:13:9f:64: b7:3c:d6:f5:c0:04:09:f7:66:57:06:f6:a0:e0:6e:f1:e1:1d: f6:7e:08:46 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrtcOSdH/W99CRdeH3LQjIGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjUxMjA1MDczNjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDk0M2NjNmJhYjgwODJlN2RmMTNlNjFhYmU0ZjQ5NzQyNDI4YTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyfLJWikXyH2ZDnLnnoQXUdb3ycS lYEQvXXcRZnYphFh50i+gXCjoAnb/bx2e2wQeIjuEaEeOV9GFE40JRt0C/TbCu9Q bhUjPqalDnAPWJgWlM9VqpdHpBbqrjJLdlygkT+4r219mKo5ww4nGRCFe7d1VRQw BMCgi1K2sMBPt1LYowLmiQldH4OuqNlxe8eyMsGM5QFMHmxar7NKBmPwUKO16e3W XoRafK3kS1rYHP3byWeW3dnoFmjotLTddaTibQImC7vnTLi6hP9wqfVJi+DlQ2bG RE5HvZYUfETeUb/B/0gKQJ9ZyBYLjfm5Nx7B7rZBXvS3w8btZjWm0NOBDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLSUPMa6uAguffE+Yavk9JdCQopZMB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvdEpROHhycTRDQzU5OFQ1aHEtVDBsMEpDaWxrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnq3iMA0G CSqGSIb3DQEBCwUAA4IBAQCMiUaMuqboXUpr8byp5lwO49XEb39kvWEUe3+0rwFJ 5nwu/UmiiEahtg+GCSORhM5aWCzX1f+JiaynxX0AA7A52R4dDxpq8ezvO2MBYbql FSxuQpjfkORQMTw+5z2cj0VyAbgcdFXWjbxbw5vzpSD3lljQnTbAnkvY86plu7ZX yoWV54G5/SvtTXcGl6dTMGJqUSdz9sck0BL5exhdRhs/5aICxruZLKJ9BvpsHWfp 7ddQaDie3vhmBBUU61fuuAzc1h40au3Fa6tjGsdmB/tWdFvt4iFEhCsFgvuUOMB5 8N47OV49dH8Tn2S3PNb1wAQJ92ZXBvag4G7x4R32fghG -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:52 2025 by rpki-client