This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TgJG9Gy4fUoJr_bsvhtrhvjqLDY.roa File: TgJG9Gy4fUoJr_bsvhtrhvjqLDY.roa (raw, json) Hash identifier: reeSMs+97hJnDNlV+MBMbGNu+TQ/PUAKevzREDqvVSo= Subject key identifier: 4E:02:46:F4:6C:B8:7D:4A:09:AF:F6:EC:BE:1B:6B:86:F8:EA:2C:36 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019AF375BD964522046C10995057DAF42337 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TgJG9Gy4fUoJr_bsvhtrhvjqLDY.roa Signing time: Sat 06 Dec 2025 11:39:30 +0000 ROA not before: Sat 06 Dec 2025 11:39:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48011 IP address blocks: 151.243.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:39:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:75:bd:96:45:22:04:6c:10:99:50:57:da:f4:23:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 6 11:39:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4e0246f46cb87d4a09aff6ecbe1b6b86f8ea2c36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f0:f9:7b:0c:6e:b8:3f:ec:0c:74:61:ff:5e: 45:ce:82:44:da:6b:f5:80:6e:c3:40:fd:d9:21:cc: 80:f7:29:07:c9:95:c1:6d:1c:ec:8f:d5:41:d2:9c: 69:83:0b:ca:9f:cc:ca:35:cc:43:3c:1e:7f:a7:d6: 5e:4d:85:b9:a4:3c:61:e9:38:ce:20:ac:c6:b1:e7: 3e:d6:6f:3e:3c:27:a1:70:14:d6:da:da:02:b5:0f: 50:ef:73:83:c6:d5:b8:0d:0f:1e:30:fb:04:23:08: 22:bf:b9:d6:c3:e3:fc:a7:a8:f9:fe:b7:cf:79:13: d3:66:44:d2:75:f3:7a:08:8b:9c:27:9b:b2:22:98: 3b:73:85:8a:53:d6:9d:f6:f1:1c:4e:a3:8d:52:33: fb:2e:3d:01:8c:aa:02:49:13:56:d4:b8:80:66:64: 65:cc:ef:62:1f:dd:ef:65:d4:ad:94:7c:af:5b:dc: 05:67:cd:d0:c9:a9:41:b7:ac:f2:d0:9c:9e:0f:aa: 4b:45:65:d9:db:c6:e2:1c:e5:33:c7:fb:d8:6c:9c: 67:b0:43:f9:92:18:65:e5:4d:3b:2c:0a:5f:a5:67: da:20:5c:9c:47:2b:20:85:76:6a:6c:a7:03:90:ff: f9:b4:e8:51:54:6f:28:09:89:42:4e:77:4f:7d:3c: e1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:02:46:F4:6C:B8:7D:4A:09:AF:F6:EC:BE:1B:6B:86:F8:EA:2C:36 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TgJG9Gy4fUoJr_bsvhtrhvjqLDY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.243.212.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:77:47:0b:11:15:a9:5a:df:b8:af:a5:6a:58:4a:c6:4d:ba: 79:95:30:9e:82:74:fd:9e:18:82:fe:60:ef:5c:04:32:8d:61: 95:d9:bd:ec:07:06:cb:1e:bc:2e:cf:cd:de:4a:49:c0:bc:1e: 44:dd:69:5d:bc:32:14:86:a3:7d:0e:ed:4c:84:c5:e6:b6:bd: fa:35:a8:06:fe:25:c1:e4:64:0c:8e:e6:c6:10:8b:b9:10:39: 30:39:6c:50:8e:7f:ad:21:d8:e2:87:7a:9d:e1:83:73:55:5c: dc:7a:59:a5:a9:ce:9e:9e:28:df:4a:b0:41:99:5b:13:0c:1d: bb:27:a9:10:47:00:a9:d0:95:96:28:fc:09:e8:6d:47:71:1c: 08:26:aa:df:49:11:81:7d:8c:a7:ed:ec:47:c1:86:78:ad:76: f9:aa:3e:35:d4:ba:b2:af:e3:40:95:2e:cb:00:85:a0:31:40: b7:3b:e4:79:12:d0:6f:47:01:d2:cd:4a:58:03:5c:82:5e:d5: dc:1a:95:e6:c8:f8:63:51:e5:b0:be:f3:11:19:3f:80:c0:25: f2:f5:da:b9:a0:c6:92:86:74:2a:88:ff:fc:f5:5f:f3:af:04: b8:05:43:14:d3:f4:fc:f6:29:45:ba:d6:f9:26:00:82:94:20: e0:ff:dd:64 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrzdb2WRSIEbBCZUFfa9CM3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjA2MTEzOTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTAyNDZmNDZjYjg3ZDRhMDlhZmY2ZWNiZTFiNmI4NmY4ZWEyYzM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/D5ewxuuD/sDHRh/15FzoJE2mv1 gG7DQP3ZIcyA9ykHyZXBbRzsj9VB0pxpgwvKn8zKNcxDPB5/p9ZeTYW5pDxh6TjO IKzGsec+1m8+PCehcBTW2toCtQ9Q73ODxtW4DQ8eMPsEIwgiv7nWw+P8p6j5/rfP eRPTZkTSdfN6CIucJ5uyIpg7c4WKU9ad9vEcTqONUjP7Lj0BjKoCSRNW1LiAZmRl zO9iH93vZdStlHyvW9wFZ83QyalBt6zy0JyeD6pLRWXZ28biHOUzx/vYbJxnsEP5 khhl5U07LApfpWfaIFycRysghXZqbKcDkP/5tOhRVG8oCYlCTndPfTzhcQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE4CRvRsuH1KCa/27L4ba4b46iw2MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvVGdKRzlHeTRmVW9Kcl9ic3ZodHJodmpxTERZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/PUMA0G CSqGSIb3DQEBCwUAA4IBAQB7d0cLERWpWt+4r6VqWErGTbp5lTCegnT9nhiC/mDv XAQyjWGV2b3sBwbLHrwuz83eSknAvB5E3WldvDIUhqN9Du1MhMXmtr36NagG/iXB 5GQMjubGEIu5EDkwOWxQjn+tIdjih3qd4YNzVVzcelmlqc6enijfSrBBmVsTDB27 J6kQRwCp0JWWKPwJ6G1HcRwIJqrfSRGBfYyn7exHwYZ4rXb5qj411Lqyr+NAlS7L AIWgMUC3O+R5EtBvRwHSzUpYA1yCXtXcGpXmyPhjUeWwvvMRGT+AwCXy9dq5oMaS hnQqiP/89V/zrwS4BUMU0/T89ilFutb5JgCClCDg/91k -----END CERTIFICATE-----Generated at Sat Dec 6 19:44:58 2025 by rpki-client