This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/tIEL4J6jSkAPZLSFtELamVkICgM.roa File: tIEL4J6jSkAPZLSFtELamVkICgM.roa (raw, json) Hash identifier: mcwIFqfoI6qXjVDhr4bgReH1f7CPQDUrI4HFRmfb3wI= Subject key identifier: B4:81:0B:E0:9E:A3:4A:40:0F:64:B4:85:B4:42:DA:99:59:08:0A:03 Certificate issuer: /CN=200b15e0783fe00f1b8a57bd14fdbd06924b8832 Certificate serial: 019B7CED6BBCBA113CE8CFB90C888CF5FA2A Authority key identifier: 20:0B:15:E0:78:3F:E0:0F:1B:8A:57:BD:14:FD:BD:06:92:4B:88:32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/tIEL4J6jSkAPZLSFtELamVkICgM.roa Signing time: Fri 02 Jan 2026 04:18:12 +0000 ROA not before: Fri 02 Jan 2026 04:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47692 IP address blocks: 152.89.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.crl rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:6b:bc:ba:11:3c:e8:cf:b9:0c:88:8c:f5:fa:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=200b15e0783fe00f1b8a57bd14fdbd06924b8832 Validity Not Before: Jan 2 04:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4810be09ea34a400f64b485b442da9959080a03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:49:f5:88:ff:1e:34:59:24:b6:89:bf:a2:67: 49:68:7c:13:c7:d0:9f:53:03:53:e0:27:de:62:20: 01:3c:22:2b:2a:7b:ed:f5:8e:a9:1a:86:c7:d5:b7: 55:f4:1f:6c:61:4b:80:10:cb:88:06:34:67:2d:c4: e7:e8:e3:4e:11:85:f9:c3:d6:5b:1b:bf:a7:69:d6: 92:3a:5b:7b:ed:8b:13:94:df:52:5b:13:78:9f:af: ff:41:af:c5:31:05:59:ab:bd:b4:65:89:c2:71:59: 55:a9:f6:89:4e:d6:fa:dd:9f:11:17:15:61:f4:b2: 0f:58:34:85:cd:ac:62:7f:84:16:ee:fd:76:b2:a4: 82:2a:52:87:54:99:0e:ec:c0:41:a9:56:9e:f7:2f: 62:7a:90:06:0e:3c:de:a2:5c:1c:dc:38:96:36:80: 76:c4:94:c8:f6:93:8f:3a:fc:f0:26:27:95:97:3b: 94:6a:18:55:32:5b:6d:5c:18:80:4f:cb:12:8e:4d: e3:df:4e:a8:ad:27:3d:2e:51:9a:23:f9:e1:3d:b0: 8f:a8:35:87:8a:1b:cd:ab:17:09:e2:2a:93:db:15: 5d:46:ea:a9:06:6d:5e:f6:bb:1a:f7:7f:49:bb:52: 41:82:e4:9d:64:0d:1a:88:97:05:48:76:8b:fa:03: 14:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:81:0B:E0:9E:A3:4A:40:0F:64:B4:85:B4:42:DA:99:59:08:0A:03 X509v3 Authority Key Identifier: keyid:20:0B:15:E0:78:3F:E0:0F:1B:8A:57:BD:14:FD:BD:06:92:4B:88:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/tIEL4J6jSkAPZLSFtELamVkICgM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.89.225.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:f3:e5:68:f5:b0:16:4b:c2:d9:bd:9f:00:3f:82:71:98:7a: da:e2:f8:5c:d3:e5:7e:aa:87:5e:6b:5c:9b:3e:7e:ca:1f:ff: 16:4c:a7:80:1f:a5:29:f3:be:94:80:7e:81:8a:0e:42:be:6b: 07:19:d1:58:07:c3:4e:b8:3b:5a:0c:e1:5e:69:16:84:e8:33: 5c:23:ce:2f:7a:03:e3:fa:13:c1:57:bd:1c:f1:34:97:d8:8b: 26:d0:03:89:15:2b:a1:9e:22:04:c7:a4:41:f2:e2:40:ed:7c: 7c:a3:46:5a:7d:a0:b2:83:98:57:5e:0a:f9:46:3f:0e:5a:72: 73:3c:91:4f:65:23:d2:03:85:63:28:d9:15:f1:f9:63:ae:bc: 7a:aa:54:d7:6a:0f:3e:fc:aa:47:6e:c1:71:22:7c:ca:3f:b3: 42:ee:92:ec:47:34:22:53:90:c7:1f:86:03:64:83:a4:95:27: 1f:f5:d3:2d:0a:72:0f:9f:05:dd:0d:36:13:00:02:c3:e8:ec: cf:9f:34:be:47:42:80:8e:19:06:26:39:6d:91:e0:4b:18:94: 24:43:95:1d:08:d3:80:ff:8a:32:1d:64:e0:96:21:d0:ad:3f: 19:6c:ac:2e:3e:93:a4:c4:fe:d4:05:7b:50:42:9d:19:4a:8e: 67:eb:1f:97 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87Wu8uhE86M+5DIiM9foqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwMGIxNWUwNzgzZmUwMGYxYjhhNTdiZDE0ZmRiZDA2OTI0 Yjg4MzIwHhcNMjYwMTAyMDQxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDgxMGJlMDllYTM0YTQwMGY2NGI0ODViNDQyZGE5OTU5MDgwYTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskn1iP8eNFkktom/omdJaHwTx9Cf UwNT4CfeYiABPCIrKnvt9Y6pGobH1bdV9B9sYUuAEMuIBjRnLcTn6ONOEYX5w9Zb G7+nadaSOlt77YsTlN9SWxN4n6//Qa/FMQVZq720ZYnCcVlVqfaJTtb63Z8RFxVh 9LIPWDSFzaxif4QW7v12sqSCKlKHVJkO7MBBqVae9y9iepAGDjzeolwc3DiWNoB2 xJTI9pOPOvzwJieVlzuUahhVMlttXBiAT8sSjk3j306orSc9LlGaI/nhPbCPqDWH ihvNqxcJ4iqT2xVdRuqpBm1e9rsa939Ju1JBguSdZA0aiJcFSHaL+gMUUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLSBC+Ceo0pAD2S0hbRC2plZCAoDMB8GA1UdIwQY MBaAFCALFeB4P+APG4pXvRT9vQaSS4gyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUFzVjRIZ180QThiaWxlOUZQMjlCcEpMaURJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9mMGE2N2MtYmQ0Zi00ZGRjLThjNjEt M2ZlN2FlYTllMmUwLzEvdElFTDRKNmpTa0FQWkxTRnRFTGFtVmtJQ2dNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9mMGE2N2MtYmQ0Zi00ZGRjLThjNjEtM2ZlN2FlYTllMmUw LzEvSUFzVjRIZ180QThiaWxlOUZQMjlCcEpMaURJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmFnhMA0G CSqGSIb3DQEBCwUAA4IBAQCe8+Vo9bAWS8LZvZ8AP4JxmHra4vhc0+V+qodea1yb Pn7KH/8WTKeAH6Up876UgH6Big5CvmsHGdFYB8NOuDtaDOFeaRaE6DNcI84vegPj +hPBV70c8TSX2Ism0AOJFSuhniIEx6RB8uJA7Xx8o0ZafaCyg5hXXgr5Rj8OWnJz PJFPZSPSA4VjKNkV8fljrrx6qlTXag8+/KpHbsFxInzKP7NC7pLsRzQiU5DHH4YD ZIOklScf9dMtCnIPnwXdDTYTAALD6OzPnzS+R0KAjhkGJjltkeBLGJQkQ5UdCNOA /4oyHWTgliHQrT8ZbKwuPpOkxP7UBXtQQp0ZSo5n6x+X -----END CERTIFICATE-----Generated at Sun Jan 25 13:00:26 2026 by rpki-client