This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qIrut4r2Wn6Dw56vFlh04C4Hz7o.roa File: qIrut4r2Wn6Dw56vFlh04C4Hz7o.roa (raw, json) Hash identifier: /Xz12wm1wIcHd33h+8DBtTjl4K4n6b/xPV7Uj7nOa60= Subject key identifier: A8:8A:EE:B7:8A:F6:5A:7E:83:C3:9E:AF:16:58:74:E0:2E:07:CF:BA Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B934179BFB8E7041793891B074258B740 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qIrut4r2Wn6Dw56vFlh04C4Hz7o.roa Signing time: Tue 06 Jan 2026 12:21:40 +0000 ROA not before: Tue 06 Jan 2026 12:21:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 174 IP address blocks: 151.240.205.0/24 maxlen: 24 151.241.119.0/24 maxlen: 24 151.241.122.0/24 maxlen: 24 151.241.123.0/24 maxlen: 24 151.241.125.0/24 maxlen: 24 151.243.227.0/24 maxlen: 24 151.243.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:93:41:79:bf:b8:e7:04:17:93:89:1b:07:42:58:b7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 6 12:21:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a88aeeb78af65a7e83c39eaf165874e02e07cfba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:99:09:bc:90:a7:b7:64:3a:85:aa:34:2a:a8: 15:36:00:e9:55:b4:0b:e3:cb:11:3d:c4:97:66:47: 20:55:64:b6:a4:b8:ad:e2:31:d2:7d:30:4f:1d:0f: ed:27:90:7e:5a:70:e9:bd:df:64:e4:eb:97:1a:7a: f8:2f:ab:f1:79:e4:3f:74:c6:71:b7:41:e7:52:95: e9:50:2b:bc:ad:08:cf:15:2c:fb:29:03:35:70:78: 26:fc:c7:71:58:fa:a6:7b:2c:ab:eb:d4:8b:3a:cc: 60:bf:86:db:d9:43:bf:fd:96:fa:37:47:c2:c3:bc: ea:2a:5e:50:b3:f2:9a:2d:a8:af:92:19:54:1f:0f: a1:7c:c5:ef:2b:0b:bb:5e:3f:a8:3e:77:c9:2a:28: 01:67:d8:46:cf:c4:be:0e:c3:e5:90:45:c0:e7:b2: b8:6a:1f:a3:76:e3:90:de:26:43:f8:16:10:15:18: b3:2d:43:2b:56:b8:20:a7:25:fd:03:0c:c4:73:39: 2d:a7:32:6a:07:56:8b:f7:97:71:76:38:b8:3a:5f: 37:76:4e:75:a2:4f:c6:04:a8:b4:8e:5b:fd:42:75: d7:ef:32:b0:10:69:f6:e2:b9:eb:2b:3c:99:aa:dd: 52:8e:c4:3b:79:56:00:c8:2c:7e:d5:78:64:20:d0: c3:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:8A:EE:B7:8A:F6:5A:7E:83:C3:9E:AF:16:58:74:E0:2E:07:CF:BA X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qIrut4r2Wn6Dw56vFlh04C4Hz7o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.205.0/24 151.241.119.0/24 151.241.122.0/23 151.241.125.0/24 151.243.227.0/24 151.243.235.0/24 Signature Algorithm: sha256WithRSAEncryption 94:ad:f7:9a:cc:03:50:57:da:db:0a:2d:fb:6f:3b:f6:e5:7a: aa:4e:a8:c0:e0:ed:e1:d2:d4:78:0b:7f:07:8e:7d:81:c2:a0: 37:aa:8c:dd:5b:80:76:a4:31:a0:c7:e5:ac:e0:93:ee:e5:22: f5:2b:2e:1f:25:86:8a:c1:49:f1:d1:7f:2d:b8:c4:18:dd:24: 0f:6e:84:ff:d8:e4:5d:29:4f:ce:29:c1:67:36:77:aa:6b:c4: 75:9f:4f:f8:a0:03:68:e4:1c:86:bd:6b:4c:9d:76:e4:70:d8: 1d:ee:40:6b:49:19:f0:98:75:47:90:79:e0:4d:d4:2d:ec:48: 8d:20:6f:13:c5:f4:15:06:5c:90:d7:13:a6:e1:1d:dc:b9:7b: a4:16:fa:33:ea:0b:55:c8:cb:30:a8:79:03:f7:30:a3:74:b4: 31:0a:fd:d0:64:06:58:91:b5:10:45:cc:18:ab:25:1d:b0:35: 73:30:3d:64:93:99:fc:b6:2c:7e:c4:42:f1:e4:6f:9f:f5:25: c5:6e:e1:ab:57:8a:36:26:40:2d:ef:32:2d:5c:21:ec:78:62: 39:b0:07:9d:a8:76:0c:cc:76:ad:c8:4a:c8:00:ec:32:3d:12: 23:a2:66:0b:b2:38:32:96:bb:97:2d:a7:80:4e:7a:1c:0f:2b: 0b:56:22:61 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZuTQXm/uOcEF5OJGwdCWLdAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTA2MTIyMTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODhhZWViNzhhZjY1YTdlODNjMzllYWYxNjU4NzRlMDJlMDdjZmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZkJvJCnt2Q6hao0KqgVNgDpVbQL 48sRPcSXZkcgVWS2pLit4jHSfTBPHQ/tJ5B+WnDpvd9k5OuXGnr4L6vxeeQ/dMZx t0HnUpXpUCu8rQjPFSz7KQM1cHgm/MdxWPqmeyyr69SLOsxgv4bb2UO//Zb6N0fC w7zqKl5Qs/KaLaivkhlUHw+hfMXvKwu7Xj+oPnfJKigBZ9hGz8S+DsPlkEXA57K4 ah+jduOQ3iZD+BYQFRizLUMrVrggpyX9AwzEczktpzJqB1aL95dxdji4Ol83dk51 ok/GBKi0jlv9QnXX7zKwEGn24rnrKzyZqt1SjsQ7eVYAyCx+1XhkINDDSQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFKiK7reK9lp+g8OerxZYdOAuB8+6MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvcUlydXQ0cjJXbjZEdzU2dkZsaDA0QzRIejdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAl/DNAwQA l/F3AwQBl/F6AwQAl/F9AwQAl/PjAwQAl/PrMA0GCSqGSIb3DQEBCwUAA4IBAQCU rfeazANQV9rbCi37bzv25XqqTqjA4O3h0tR4C38Hjn2BwqA3qozdW4B2pDGgx+Ws 4JPu5SL1Ky4fJYaKwUnx0X8tuMQY3SQPboT/2ORdKU/OKcFnNneqa8R1n0/4oANo 5ByGvWtMnXbkcNgd7kBrSRnwmHVHkHngTdQt7EiNIG8TxfQVBlyQ1xOm4R3cuXuk Fvoz6gtVyMswqHkD9zCjdLQxCv3QZAZYkbUQRcwYqyUdsDVzMD1kk5n8tix+xELx 5G+f9SXFbuGrV4o2JkAt7zItXCHseGI5sAedqHYMzHatyErIAOwyPRIjomYLsjgy lruXLaeATnocDysLViJh -----END CERTIFICATE-----Generated at Mon Jan 12 00:51:37 2026 by rpki-client