This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/aQwW-KVffN0nqB5Cl6_lrUye_4A.roa File: aQwW-KVffN0nqB5Cl6_lrUye_4A.roa (raw, json) Hash identifier: 4Nvq8HY6E337bd0ub/N+IBO4u+MFsWw0zkkm3m+xKBc= Subject key identifier: 69:0C:16:F8:A5:5F:7C:DD:27:A8:1E:42:97:AF:E5:AD:4C:9E:FF:80 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019C2DC9EE473DB4220C4CE9D4BF515B3BA1 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/aQwW-KVffN0nqB5Cl6_lrUye_4A.roa Signing time: Thu 05 Feb 2026 12:32:14 +0000 ROA not before: Thu 05 Feb 2026 12:32:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 151.240.128.0/21 maxlen: 24 151.240.136.0/21 maxlen: 24 151.240.145.0/24 maxlen: 24 151.240.171.0/24 maxlen: 24 151.241.105.0/24 maxlen: 24 151.241.106.0/24 maxlen: 24 151.241.107.0/24 maxlen: 24 151.241.132.0/22 maxlen: 22 151.242.56.0/24 maxlen: 24 151.242.70.0/24 maxlen: 24 151.242.71.0/24 maxlen: 24 151.242.135.0/24 maxlen: 24 151.243.8.0/23 maxlen: 23 151.243.204.0/23 maxlen: 23 151.244.56.0/24 maxlen: 24 151.245.2.0/24 maxlen: 24 151.245.22.0/24 maxlen: 24 151.245.56.0/22 maxlen: 22 151.245.185.0/24 maxlen: 24 151.245.187.0/24 maxlen: 24 151.245.188.0/24 maxlen: 24 151.246.8.0/21 maxlen: 24 151.247.41.0/24 maxlen: 24 151.247.44.0/24 maxlen: 24 151.247.45.0/24 maxlen: 24 151.247.75.0/24 maxlen: 24 151.247.77.0/24 maxlen: 24 151.247.78.0/24 maxlen: 24 151.247.102.0/24 maxlen: 24 151.247.133.0/24 maxlen: 24 151.247.134.0/24 maxlen: 24 151.247.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Feb 2026 23:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:2d:c9:ee:47:3d:b4:22:0c:4c:e9:d4:bf:51:5b:3b:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Feb 5 12:32:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=690c16f8a55f7cdd27a81e4297afe5ad4c9eff80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:38:f7:31:19:9a:68:cf:02:0a:f6:b9:10:cd: 62:a7:c3:14:3c:41:13:d8:07:a5:56:6d:3f:99:73: 95:87:f9:ae:60:3f:68:44:83:77:4b:8f:2a:7a:21: 94:2e:36:5e:31:1f:d5:73:da:ea:8a:62:42:a3:8a: b2:45:8f:3d:b8:71:8c:c4:d0:cf:63:d1:ec:0b:51: 1f:eb:f4:f5:f6:61:40:0a:b6:b6:a8:df:43:5b:f6: 5a:2a:76:f5:e8:02:7a:7a:3c:0a:aa:d1:50:ab:0e: 92:2b:12:c1:cd:37:83:f3:8c:72:38:c0:91:da:37: 72:ce:0f:42:80:d2:2d:ad:63:66:60:40:a6:90:2f: 5f:57:e7:f2:7c:b2:42:22:b4:8c:51:98:f6:f8:af: ba:17:02:5b:9f:9b:31:b0:bf:d5:83:9e:74:1a:78: ea:69:34:5d:20:f7:b9:93:94:07:c2:7f:bb:ad:ac: f0:11:a6:a3:7d:53:ac:af:b3:79:fd:d1:ec:6a:9f: d2:46:45:83:5f:e0:af:d1:67:8e:e3:61:11:0e:75: cc:7b:d2:80:6c:da:e4:9a:59:61:ae:b6:ef:f0:b4: d0:7a:fb:e9:a9:97:00:30:4e:1c:60:72:4e:eb:a1: f7:c6:a5:bd:21:5d:a1:44:db:14:71:61:9b:4b:e0: 06:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:0C:16:F8:A5:5F:7C:DD:27:A8:1E:42:97:AF:E5:AD:4C:9E:FF:80 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/aQwW-KVffN0nqB5Cl6_lrUye_4A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.128.0/20 151.240.145.0/24 151.240.171.0/24 151.241.105.0-151.241.107.255 151.241.132.0/22 151.242.56.0/24 151.242.70.0/23 151.242.135.0/24 151.243.8.0/23 151.243.204.0/23 151.244.56.0/24 151.245.2.0/24 151.245.22.0/24 151.245.56.0/22 151.245.185.0/24 151.245.187.0-151.245.188.255 151.246.8.0/21 151.247.41.0/24 151.247.44.0/23 151.247.75.0/24 151.247.77.0-151.247.78.255 151.247.102.0/24 151.247.133.0-151.247.135.255 Signature Algorithm: sha256WithRSAEncryption 33:b5:7e:81:25:98:59:e4:7c:53:83:2a:34:72:6b:63:4a:9f: a5:21:94:7e:d5:46:54:67:9a:0f:e0:01:e7:21:20:9f:93:69: 62:3b:ab:eb:7a:4e:e7:d9:77:66:53:77:c7:5d:2c:ad:0e:96: e0:03:d4:5e:e5:2c:2f:10:1c:f2:5a:66:81:91:f7:99:fe:01: 23:7d:fd:57:c3:8a:9a:b0:5d:0e:ff:2f:d1:e0:48:76:71:1a: b0:b9:f5:94:4a:56:fa:3c:b6:c2:b7:65:0c:b5:01:d9:eb:02: 33:a4:fd:8f:01:9c:79:88:7f:64:59:4a:74:f1:f3:b2:99:17: 34:96:93:85:7d:ae:0c:f0:85:14:81:a4:03:e5:5b:75:dd:05: 7b:2b:d9:b3:35:51:71:12:52:df:5e:90:63:bf:35:10:34:cb: 11:b5:cc:47:13:4d:3d:a3:be:39:85:4e:47:a4:b8:7a:31:7e: 08:4d:e0:60:a5:5d:e4:70:95:ba:d5:6c:3b:09:61:11:18:58: a4:12:57:76:2f:18:5e:1b:f4:4c:69:eb:e5:27:4d:e0:db:c3: 4d:d3:dd:fa:7a:78:df:3b:16:ee:4a:ff:78:ed:c6:17:ef:63: 83:0b:38:e2:3d:34:e7:dd:ed:6c:cd:6a:49:2d:7a:e1:6a:1f: e7:c4:d2:e0 -----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgISAZwtye5HPbQiDEzp1L9RWzuhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMjA1MTIzMjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTBjMTZmOGE1NWY3Y2RkMjdhODFlNDI5N2FmZTVhZDRjOWVmZjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozj3MRmaaM8CCva5EM1ip8MUPEET 2AelVm0/mXOVh/muYD9oRIN3S48qeiGULjZeMR/Vc9rqimJCo4qyRY89uHGMxNDP Y9HsC1Ef6/T19mFACra2qN9DW/ZaKnb16AJ6ejwKqtFQqw6SKxLBzTeD84xyOMCR 2jdyzg9CgNItrWNmYECmkC9fV+fyfLJCIrSMUZj2+K+6FwJbn5sxsL/Vg550Gnjq aTRdIPe5k5QHwn+7razwEaajfVOsr7N5/dHsap/SRkWDX+Cv0WeO42ERDnXMe9KA bNrkmllhrrbv8LTQevvpqZcAME4cYHJO66H3xqW9IV2hRNsUcWGbS+AGhQIDAQAB o4ICsjCCAq4wHQYDVR0OBBYEFGkMFvilX3zdJ6geQpev5a1Mnv+AMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvYVF3Vy1LVmZmTjBucUI1Q2w2X2xyVXllXzRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHHBggrBgEFBQcBBwEB/wSBtzCBtDCBsQQCAAEwgaoDBASX 8IADBACX8JEDBACX8KswDAMEAJfxaQMEApfxaAMEApfxhAMEAJfyOAMEAZfyRgME AJfyhwMEAZfzCAMEAZfzzAMEAJf0OAMEAJf1AgMEAJf1FgMEApf1OAMEAJf1uTAM AwQAl/W7AwQAl/W8AwQDl/YIAwQAl/cpAwQBl/csAwQAl/dLMAwDBACX900DBACX 904DBACX92YwDAMEAJf3hQMEA5f3gDANBgkqhkiG9w0BAQsFAAOCAQEAM7V+gSWY WeR8U4MqNHJrY0qfpSGUftVGVGeaD+AB5yEgn5NpYjur63pO59l3ZlN3x10srQ6W 4APUXuUsLxAc8lpmgZH3mf4BI339V8OKmrBdDv8v0eBIdnEasLn1lEpW+jy2wrdl DLUB2esCM6T9jwGceYh/ZFlKdPHzspkXNJaThX2uDPCFFIGkA+Vbdd0FeyvZszVR cRJS316QY781EDTLEbXMRxNNPaO+OYVOR6S4ejF+CE3gYKVd5HCVutVsOwlhERhY pBJXdi8YXhv0TGnr5SdN4NvDTdPd+np43zsW7kr/eO3GF+9jgws44j00593tbM1q SS164Wof58TS4A== -----END CERTIFICATE-----Generated at Mon Feb 16 06:36:54 2026 by rpki-client