This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/afTz00qzgB9asmULfvuFqW3k4og.roa File: afTz00qzgB9asmULfvuFqW3k4og.roa (raw, json) Hash identifier: GvDrEQA+YNw6DE4rpcpPQANDQ+JpxNfDh0yZ8jtlCq8= Subject key identifier: 69:F4:F3:D3:4A:B3:80:1F:5A:B2:65:0B:7E:FB:85:A9:6D:E4:E2:88 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019BD5355391AF9B28FDA0F16D5C0836D7C5 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/afTz00qzgB9asmULfvuFqW3k4og.roa Signing time: Mon 19 Jan 2026 07:43:20 +0000 ROA not before: Mon 19 Jan 2026 07:43:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 150249 IP address blocks: 151.242.133.0/24 maxlen: 24 151.247.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d5:35:53:91:af:9b:28:fd:a0:f1:6d:5c:08:36:d7:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 19 07:43:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69f4f3d34ab3801f5ab2650b7efb85a96de4e288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:74:b0:64:21:db:ed:00:29:87:1d:f1:ec:af: f3:d8:a1:55:85:c9:8f:8b:a9:54:eb:17:66:5f:8d: 39:6f:7b:40:b0:08:96:7e:4c:52:aa:91:e2:19:c4: db:58:b1:65:8f:6f:21:b2:26:c0:11:69:c9:40:41: 78:83:79:23:e7:ed:2b:2e:c1:d7:c9:e7:aa:50:83: 50:71:26:ad:e0:93:f1:6a:47:2f:96:66:09:3d:59: 30:ad:b0:08:42:e9:03:f1:4d:05:3b:00:55:fb:e6: b5:f4:84:22:75:03:b7:91:77:32:55:c2:53:88:6c: 57:97:99:71:70:41:b6:04:13:8f:b4:58:b3:24:4f: fb:83:66:93:c4:a0:87:c5:d8:68:82:7c:2b:c9:ea: 01:5e:fb:01:0b:ae:8e:4d:cf:58:f4:ce:36:13:e8: 41:58:af:22:55:97:3b:4e:f7:eb:70:05:a8:87:30: aa:f5:fe:79:dd:4c:72:57:cc:ae:71:28:ba:5e:b6: 9f:60:c6:37:bb:a5:2b:e8:85:ae:61:8c:99:40:68: da:0e:24:0f:7c:35:1b:f5:23:3c:e8:6a:86:6a:52: b2:45:69:15:58:cb:dc:8f:a9:b2:9f:ab:60:81:54: 84:84:33:86:ad:2f:ca:05:56:d9:0e:84:c6:d9:10: 7b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F4:F3:D3:4A:B3:80:1F:5A:B2:65:0B:7E:FB:85:A9:6D:E4:E2:88 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/afTz00qzgB9asmULfvuFqW3k4og.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.133.0/24 151.247.5.0/24 Signature Algorithm: sha256WithRSAEncryption a9:ce:d7:8f:4e:a7:85:24:91:0f:55:a0:8a:54:9d:a7:bb:1d: e8:bb:69:4f:00:3b:ce:79:61:48:7b:bd:d0:27:c7:a5:fc:28: 81:ee:ed:74:01:f3:a8:37:b3:31:37:00:6d:33:e2:f4:05:da: 3f:b7:e2:41:ce:c6:d2:6a:c7:48:59:88:d6:30:05:b4:27:09: 81:f8:01:8b:0f:3a:14:e4:d0:2c:7b:44:49:cf:9c:74:d8:18: 87:b7:ac:28:91:ef:10:53:2c:ca:fe:95:c5:07:8d:de:73:13: ca:c8:0f:eb:66:fe:92:02:ee:c8:a1:f4:56:07:e0:2e:1e:a2: a8:a4:63:e4:12:65:b3:64:51:e9:79:36:f5:73:fe:8e:67:ba: 36:32:a0:db:fb:a8:5a:b8:4d:f3:58:02:24:4f:53:a4:80:78: 1a:8a:75:9e:03:67:80:14:f0:01:df:09:b0:fd:20:38:22:21: b7:0e:97:cd:23:7b:c8:50:78:e9:18:65:fa:16:9e:ea:c0:be: 19:8a:63:2a:a5:62:ab:ca:d2:70:11:71:f1:14:c4:32:58:2d: ff:aa:a2:13:c5:fd:2f:f8:f2:ca:1d:c5:e9:91:81:d3:c0:af: 1a:ea:00:cf:48:d8:85:c6:e6:08:2b:78:0b:08:56:aa:4e:96: f0:53:9b:1f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvVNVORr5so/aDxbVwINtfFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTE5MDc0MzIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWY0ZjNkMzRhYjM4MDFmNWFiMjY1MGI3ZWZiODVhOTZkZTRlMjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXSwZCHb7QAphx3x7K/z2KFVhcmP i6lU6xdmX405b3tAsAiWfkxSqpHiGcTbWLFlj28hsibAEWnJQEF4g3kj5+0rLsHX yeeqUINQcSat4JPxakcvlmYJPVkwrbAIQukD8U0FOwBV++a19IQidQO3kXcyVcJT iGxXl5lxcEG2BBOPtFizJE/7g2aTxKCHxdhognwryeoBXvsBC66OTc9Y9M42E+hB WK8iVZc7TvfrcAWohzCq9f553UxyV8yucSi6XrafYMY3u6Ur6IWuYYyZQGjaDiQP fDUb9SM86GqGalKyRWkVWMvcj6myn6tggVSEhDOGrS/KBVbZDoTG2RB7YwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGn089NKs4AfWrJlC377halt5OKIMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvYWZUejAwcXpnQjlhc21VTGZ2dUZxVzNrNG9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/KFAwQA l/cFMA0GCSqGSIb3DQEBCwUAA4IBAQCpztePTqeFJJEPVaCKVJ2nux3ou2lPADvO eWFIe73QJ8el/CiB7u10AfOoN7MxNwBtM+L0Bdo/t+JBzsbSasdIWYjWMAW0JwmB +AGLDzoU5NAse0RJz5x02BiHt6woke8QUyzK/pXFB43ecxPKyA/rZv6SAu7IofRW B+AuHqKopGPkEmWzZFHpeTb1c/6OZ7o2MqDb+6hauE3zWAIkT1OkgHgainWeA2eA FPAB3wmw/SA4IiG3DpfNI3vIUHjpGGX6Fp7qwL4ZimMqpWKrytJwEXHxFMQyWC3/ qqITxf0v+PLKHcXpkYHTwK8a6gDPSNiFxuYIK3gLCFaqTpbwU5sf -----END CERTIFICATE-----Generated at Sun Jan 25 10:08:18 2026 by rpki-client