This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/t_oYDDuzzDGs25bMR2IZOjq0UvE.roa File: t_oYDDuzzDGs25bMR2IZOjq0UvE.roa (raw, json) Hash identifier: ncp8JkuYOYAuFi4UtsPLm9DUH+ZSRBgMcDNAkpaHU6w= Subject key identifier: B7:FA:18:0C:3B:B3:CC:31:AC:DB:96:CC:47:62:19:3A:3A:B4:52:F1 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019BEA0CA728896EBAB7D0FD5004A3A403BC Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/t_oYDDuzzDGs25bMR2IZOjq0UvE.roa Signing time: Fri 23 Jan 2026 08:50:55 +0000 ROA not before: Fri 23 Jan 2026 08:50:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 402044 IP address blocks: 151.244.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ea:0c:a7:28:89:6e:ba:b7:d0:fd:50:04:a3:a4:03:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 23 08:50:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7fa180c3bb3cc31acdb96cc4762193a3ab452f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b4:3d:4d:49:47:75:1e:eb:ed:e1:36:aa:db: 2a:4e:99:3c:d6:b0:5f:d6:b8:73:4b:7b:6e:33:0d: 07:73:02:ae:26:55:0d:17:8f:71:06:58:78:9d:a9: a6:05:46:47:6a:37:c8:14:d0:2f:cc:0e:48:3d:84: 51:41:78:92:82:16:76:98:65:f3:e9:bc:4a:fa:08: bd:57:8a:f1:4e:24:05:a8:47:86:28:e1:e8:29:6b: 4d:3b:ff:cb:b9:af:c3:9f:3b:d5:fb:e1:25:c2:01: 35:ed:e5:d4:30:59:60:4d:e1:e1:ce:c1:43:3d:df: 5f:17:93:6a:1e:fc:4c:7c:eb:36:46:11:55:28:29: 54:58:d4:5e:7a:2f:2c:c2:93:ef:78:91:fd:39:e4: 56:7b:ff:3e:78:b6:a1:19:4a:54:9a:07:d4:27:73: d2:0a:3a:45:5b:0b:cf:13:19:09:b2:74:6a:b4:e3: 82:b4:af:d2:e6:3c:b1:c7:9b:2a:8e:ca:e7:90:95: e0:d2:57:fc:cb:49:9c:9b:84:11:30:d8:be:f9:e1: 9e:69:cb:d7:a8:28:3c:90:b5:a7:93:ff:8a:26:c1: 9d:8b:5a:ad:08:5d:6f:96:e6:e9:e6:e9:ee:86:22: 1a:f4:e0:45:8f:92:ca:5d:81:aa:40:ae:51:f5:f9: a3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:FA:18:0C:3B:B3:CC:31:AC:DB:96:CC:47:62:19:3A:3A:B4:52:F1 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/t_oYDDuzzDGs25bMR2IZOjq0UvE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.244.254.0/24 Signature Algorithm: sha256WithRSAEncryption 20:b5:36:ba:e9:e8:30:99:d0:3a:6c:0e:52:09:a1:7a:f5:85: 4f:b8:eb:ff:68:b2:7d:b7:ec:9b:ee:ad:80:07:08:4f:06:e9: f9:77:d9:05:60:3a:bd:2f:ea:3c:72:88:05:7e:9f:5d:44:9f: df:e1:9c:4f:7d:df:01:38:03:5e:a8:bf:d9:c6:16:41:eb:c0: c2:07:3b:ae:a2:ab:14:a3:14:16:76:db:a6:dc:7b:52:99:ba: fb:93:dd:bf:37:31:6c:f7:80:9a:9e:65:ad:50:12:8e:08:b9: 1a:fb:f6:da:58:71:39:9f:32:9b:41:2d:cf:f3:e5:ff:ef:dd: 46:b1:42:27:4c:d1:de:77:f0:1e:d8:56:9b:18:23:fb:e7:98: 45:9c:0e:b2:35:2c:da:cb:c4:6c:00:29:07:f5:55:9c:8a:31: e1:77:99:4f:30:5d:c0:97:2e:e4:a4:4c:c0:b9:57:41:e2:80: 0d:93:5c:88:50:3f:33:a8:b7:a0:24:23:28:72:f1:1f:ee:6c: be:d6:17:26:12:dd:04:fb:fe:fc:a1:6e:d2:f5:c6:8e:ad:ce: 43:dc:a3:9e:70:8a:4c:b4:60:d1:e0:6c:62:41:81:67:00:3b: 12:ca:f8:0f:79:d9:16:db:57:cf:3d:5f:98:b1:5d:0b:1f:c2: 29:17:03:a8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvqDKcoiW66t9D9UASjpAO8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTIzMDg1MDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2ZhMTgwYzNiYjNjYzMxYWNkYjk2Y2M0NzYyMTkzYTNhYjQ1MmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17Q9TUlHdR7r7eE2qtsqTpk81rBf 1rhzS3tuMw0HcwKuJlUNF49xBlh4nammBUZHajfIFNAvzA5IPYRRQXiSghZ2mGXz 6bxK+gi9V4rxTiQFqEeGKOHoKWtNO//Lua/DnzvV++ElwgE17eXUMFlgTeHhzsFD Pd9fF5NqHvxMfOs2RhFVKClUWNReei8swpPveJH9OeRWe/8+eLahGUpUmgfUJ3PS CjpFWwvPExkJsnRqtOOCtK/S5jyxx5sqjsrnkJXg0lf8y0mcm4QRMNi++eGeacvX qCg8kLWnk/+KJsGdi1qtCF1vlubp5unuhiIa9OBFj5LKXYGqQK5R9fmj5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLf6GAw7s8wxrNuWzEdiGTo6tFLxMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvdF9vWUREdXp6REdzMjViTVIySVpPanEwVXZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/T+MA0G CSqGSIb3DQEBCwUAA4IBAQAgtTa66egwmdA6bA5SCaF69YVPuOv/aLJ9t+yb7q2A BwhPBun5d9kFYDq9L+o8cogFfp9dRJ/f4ZxPfd8BOANeqL/ZxhZB68DCBzuuoqsU oxQWdtum3HtSmbr7k92/NzFs94CanmWtUBKOCLka+/baWHE5nzKbQS3P8+X/791G sUInTNHed/Ae2FabGCP755hFnA6yNSzay8RsACkH9VWcijHhd5lPMF3Aly7kpEzA uVdB4oANk1yIUD8zqLegJCMocvEf7my+1hcmEt0E+/78oW7S9caOrc5D3KOecIpM tGDR4GxiQYFnADsSyvgPedkW21fPPV+YsV0LH8IpFwOo -----END CERTIFICATE-----Generated at Sun Jan 25 10:08:38 2026 by rpki-client