This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1y2QSl6IjHPxOtBT5hlcrtVxKlw.roa File: 1y2QSl6IjHPxOtBT5hlcrtVxKlw.roa (raw, json) Hash identifier: LQlNaCvImdE0W7ssp6g3tlQ2113i7gCX/gNgz2wv/YA= Subject key identifier: D7:2D:90:4A:5E:88:8C:73:F1:3A:D0:53:E6:19:5C:AE:D5:71:2A:5C Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB1B1D247682BE467BE100FDB65058 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1y2QSl6IjHPxOtBT5hlcrtVxKlw.roa Signing time: Fri 02 Jan 2026 08:20:21 +0000 ROA not before: Fri 02 Jan 2026 08:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 151.240.128.0/21 maxlen: 24 151.240.136.0/21 maxlen: 24 151.240.145.0/24 maxlen: 24 151.240.171.0/24 maxlen: 24 151.241.105.0/24 maxlen: 24 151.241.106.0/24 maxlen: 24 151.241.107.0/24 maxlen: 24 151.241.132.0/22 maxlen: 22 151.242.56.0/24 maxlen: 24 151.242.70.0/24 maxlen: 24 151.242.71.0/24 maxlen: 24 151.242.135.0/24 maxlen: 24 151.243.8.0/23 maxlen: 23 151.243.204.0/23 maxlen: 23 151.244.56.0/24 maxlen: 24 151.245.2.0/24 maxlen: 24 151.245.22.0/24 maxlen: 24 151.245.56.0/22 maxlen: 22 151.245.185.0/24 maxlen: 24 151.245.187.0/24 maxlen: 24 151.245.188.0/24 maxlen: 24 151.246.8.0/21 maxlen: 24 151.247.133.0/24 maxlen: 24 151.247.134.0/24 maxlen: 24 151.247.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 17 Jan 2026 20:32:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:1b:1d:24:76:82:be:46:7b:e1:00:fd:b6:50:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d72d904a5e888c73f13ad053e6195caed5712a5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c5:f2:0d:55:4f:ec:6e:c8:d9:c6:ce:bb:18: 35:28:2e:94:b5:cf:a0:98:cb:3a:a4:e7:e2:cd:1e: 6c:31:09:96:c2:15:4d:82:e5:cc:c1:ae:b5:44:cf: 53:55:a7:7f:48:28:f6:ba:95:12:47:91:13:ca:14: 7c:f0:e1:71:b1:3a:cb:e2:1c:0b:6a:8d:c7:62:e6: e2:24:e7:83:cd:f7:c4:c8:e0:92:46:c4:77:46:16: 5f:39:c9:f0:76:34:aa:4e:05:a6:98:7f:87:5c:95: 5f:d9:85:9e:75:89:55:7a:08:08:74:5e:7a:a0:82: d6:13:a6:e0:43:6e:a6:b4:d8:2f:1f:67:a3:c9:0d: 7f:40:7c:0c:8d:4f:bf:33:a3:6a:0e:f2:82:f5:ad: 2c:e3:6a:04:20:62:63:b4:27:c8:20:07:be:89:b3: 63:6d:99:61:c5:8c:9c:c5:00:22:2e:52:58:38:6c: 4d:d8:f2:57:2b:ed:2c:5f:dd:32:24:4b:4f:c4:12: be:5b:d3:5a:c7:06:a9:67:ea:63:a1:57:46:5d:4f: d0:94:ac:bc:b5:28:30:19:00:4a:53:19:de:74:b5: 17:ad:c4:3d:58:3e:a2:67:b1:ad:74:fa:86:17:dd: 45:f8:0e:3c:b2:16:19:f2:b9:15:72:de:23:30:71: a9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:2D:90:4A:5E:88:8C:73:F1:3A:D0:53:E6:19:5C:AE:D5:71:2A:5C X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1y2QSl6IjHPxOtBT5hlcrtVxKlw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.128.0/20 151.240.145.0/24 151.240.171.0/24 151.241.105.0-151.241.107.255 151.241.132.0/22 151.242.56.0/24 151.242.70.0/23 151.242.135.0/24 151.243.8.0/23 151.243.204.0/23 151.244.56.0/24 151.245.2.0/24 151.245.22.0/24 151.245.56.0/22 151.245.185.0/24 151.245.187.0-151.245.188.255 151.246.8.0/21 151.247.133.0-151.247.135.255 Signature Algorithm: sha256WithRSAEncryption 26:5e:9e:e9:0e:9d:41:4f:52:dd:34:9a:f3:34:92:37:80:96: 29:77:4a:55:d8:2a:64:01:44:66:ec:b6:aa:11:51:7a:43:91: b7:72:ef:f5:01:52:ba:8e:62:f2:22:3f:d8:3f:47:e1:5a:5b: 60:74:80:17:f6:3f:4c:88:41:5c:45:79:dd:3f:32:67:d9:39: 3b:1d:a2:8a:c6:f9:b3:0d:03:d5:53:a2:28:83:31:3a:81:0d: c3:af:f8:1b:f8:ac:9b:c5:c6:7a:f1:c5:67:9a:70:6f:3c:9b: 41:07:94:f1:c4:21:16:07:d5:59:8f:cc:f6:fc:10:30:f6:f1: f0:c7:d6:77:44:49:5a:13:b4:99:b9:e9:dc:5d:ee:ec:be:a4: 04:f3:ee:0d:6b:9a:ce:71:af:90:0f:41:0a:f6:4a:1c:50:9f: 9c:ec:3b:ed:8a:f5:1d:a5:1f:5f:0d:ba:17:fa:ed:3d:f2:4d: d2:e2:e6:d9:9c:1b:e1:82:14:ff:e4:14:22:dd:35:74:5f:45: aa:82:c6:ee:ab:37:23:8a:0f:59:b7:77:5a:3a:a6:ed:f9:7e: 13:8f:d5:af:a6:6d:eb:da:29:6d:b8:15:c7:20:c4:e3:51:4d: 06:f2:a1:bd:32:8e:9a:e0:be:9f:0f:01:aa:51:7d:20:61:16: 41:59:1d:ed -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgISAZt9yxsdJHaCvkZ74QD9tlBYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzJkOTA0YTVlODg4YzczZjEzYWQwNTNlNjE5NWNhZWQ1NzEyYTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8XyDVVP7G7I2cbOuxg1KC6Utc+g mMs6pOfizR5sMQmWwhVNguXMwa61RM9TVad/SCj2upUSR5ETyhR88OFxsTrL4hwL ao3HYubiJOeDzffEyOCSRsR3RhZfOcnwdjSqTgWmmH+HXJVf2YWedYlVeggIdF56 oILWE6bgQ26mtNgvH2ejyQ1/QHwMjU+/M6NqDvKC9a0s42oEIGJjtCfIIAe+ibNj bZlhxYycxQAiLlJYOGxN2PJXK+0sX90yJEtPxBK+W9NaxwapZ+pjoVdGXU/QlKy8 tSgwGQBKUxnedLUXrcQ9WD6iZ7GtdPqGF91F+A48shYZ8rkVct4jMHGpYwIDAQAB o4ICjDCCAogwHQYDVR0OBBYEFNctkEpeiIxz8TrQU+YZXK7VcSpcMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvMXkyUVNsNklqSFB4T3RCVDVobGNydFZ4S2x3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGhBggrBgEFBQcBBwEB/wSBkTCBjjCBiwQCAAEwgYQDBASX 8IADBACX8JEDBACX8KswDAMEAJfxaQMEApfxaAMEApfxhAMEAJfyOAMEAZfyRgME AJfyhwMEAZfzCAMEAZfzzAMEAJf0OAMEAJf1AgMEAJf1FgMEApf1OAMEAJf1uTAM AwQAl/W7AwQAl/W8AwQDl/YIMAwDBACX94UDBAOX94AwDQYJKoZIhvcNAQELBQAD ggEBACZenukOnUFPUt00mvM0kjeAlil3SlXYKmQBRGbstqoRUXpDkbdy7/UBUrqO YvIiP9g/R+FaW2B0gBf2P0yIQVxFed0/MmfZOTsdoorG+bMNA9VToiiDMTqBDcOv +Bv4rJvFxnrxxWeacG88m0EHlPHEIRYH1VmPzPb8EDD28fDH1ndESVoTtJm56dxd 7uy+pATz7g1rms5xr5APQQr2ShxQn5zsO+2K9R2lH18Nuhf67T3yTdLi5tmcG+GC FP/kFCLdNXRfRaqCxu6rNyOKD1m3d1o6pu35fhOP1a+mbevaKW24FccgxONRTQby ob0yjprgvp8PAapRfSBhFkFZHe0= -----END CERTIFICATE-----Generated at Sat Jan 17 06:46:20 2026 by rpki-client