This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/BRRlr-O65m98wAyGeEux0ziZQTg.roa File: BRRlr-O65m98wAyGeEux0ziZQTg.roa (raw, json) Hash identifier: r4yxbGgOabU6dy/wqqnsPsdmZlo8myEwwZceeDTTub4= Subject key identifier: 05:14:65:AF:E3:BA:E6:6F:7C:C0:0C:86:78:4B:B1:D3:38:99:41:38 Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a Certificate serial: 019B7FF16DE6F7B0595F86B28C62BADFAE2C Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/BRRlr-O65m98wAyGeEux0ziZQTg.roa Signing time: Fri 02 Jan 2026 18:21:27 +0000 ROA not before: Fri 02 Jan 2026 18:21:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 154049 IP address blocks: 43.240.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 14:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:6d:e6:f7:b0:59:5f:86:b2:8c:62:ba:df:ae:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a Validity Not Before: Jan 2 18:21:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=051465afe3bae66f7cc00c86784bb1d338994138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ef:6d:79:1b:06:06:44:1e:3a:8c:4f:6e:cf: 1f:98:aa:3f:c5:63:d4:b9:71:69:9c:3b:c3:d9:b0: 0d:3c:3f:c9:25:d0:9d:f7:c9:84:1e:da:fa:bf:17: 01:9c:45:61:05:af:d4:6d:80:7a:26:fc:d7:fd:af: b5:91:01:a0:ff:a4:66:56:fd:50:28:3f:bd:d1:ee: 25:47:fb:6c:f4:b7:8b:0e:a5:fb:f5:77:46:44:52: 5b:d2:2c:b9:c4:90:3d:8b:ce:5a:37:2c:dd:14:8a: cf:19:18:db:59:00:fd:bf:ec:61:15:62:d5:06:6a: 91:6d:d4:80:7d:60:18:a7:f1:8b:79:a5:dc:51:10: e0:f0:a7:0f:f3:78:7f:15:59:da:7f:07:cf:c3:f9: 55:ef:6a:b5:77:2b:d7:63:31:3d:18:3f:5c:cf:2c: fe:83:9a:a3:4b:9f:96:27:7e:3a:77:5e:54:df:fd: 99:f7:d3:eb:b1:88:7d:87:cd:29:9b:ad:34:e9:f3: 48:48:5d:f7:21:17:6b:da:b6:40:f0:3e:51:c9:aa: aa:ac:67:82:27:c7:c0:6a:c9:5d:ac:42:a4:94:37: 5e:bf:8b:f2:f0:21:14:a6:cf:98:dc:92:ee:d6:66: 0c:11:46:ac:70:3f:95:37:b8:bc:9b:71:3a:0b:25: 5e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:14:65:AF:E3:BA:E6:6F:7C:C0:0C:86:78:4B:B1:D3:38:99:41:38 X509v3 Authority Key Identifier: keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/BRRlr-O65m98wAyGeEux0ziZQTg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.151.0/24 Signature Algorithm: sha256WithRSAEncryption 58:91:a7:14:62:2a:a4:b5:e7:cb:56:5e:e7:c6:d4:87:e1:88: 21:6e:2f:22:4e:01:35:fa:ce:a6:b0:93:a1:54:c9:54:ba:79: 72:ee:d4:09:18:3a:eb:e7:74:24:cf:30:8d:65:32:7f:9d:96: a9:c7:93:6f:01:7f:ed:16:16:a4:03:ce:61:7e:96:dd:54:32: 8b:54:89:85:66:73:1e:79:59:f0:cb:aa:9e:c5:ff:2d:27:70: 7c:65:f1:6a:9b:d8:92:65:c4:81:12:fb:ca:fc:79:62:39:92: 45:78:23:c6:fb:61:94:0a:16:db:d8:4a:66:a5:eb:45:8a:9b: 98:db:54:ea:8e:df:0e:8b:3e:a9:72:5d:37:58:0e:ae:49:43: f0:33:1e:a7:c5:92:4b:3d:70:46:c9:c8:e5:71:a9:b9:c5:22: cc:91:10:39:41:e1:f1:7b:5f:ea:6b:3d:f1:d6:36:9a:4a:77: b7:7c:13:41:dd:c9:33:d8:ef:13:d0:c8:39:0b:5c:c9:4e:6e: 60:94:c3:7a:9e:82:4b:fa:6d:cd:f0:9c:76:c5:99:5a:df:33: f6:c2:16:6b:e7:4d:8a:4a:50:77:77:da:47:ad:81:04:7c:8f: b3:1d:d1:2a:dd:86:84:cb:57:0d:98:c5:c0:c6:39:5f:66:5d: 28:a5:f1:d3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8W3m97BZX4ayjGK6364sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk ZjM1NGEwHhcNMjYwMTAyMTgyMTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTE0NjVhZmUzYmFlNjZmN2NjMDBjODY3ODRiYjFkMzM4OTk0MTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAru9teRsGBkQeOoxPbs8fmKo/xWPU uXFpnDvD2bANPD/JJdCd98mEHtr6vxcBnEVhBa/UbYB6JvzX/a+1kQGg/6RmVv1Q KD+90e4lR/ts9LeLDqX79XdGRFJb0iy5xJA9i85aNyzdFIrPGRjbWQD9v+xhFWLV BmqRbdSAfWAYp/GLeaXcURDg8KcP83h/FVnafwfPw/lV72q1dyvXYzE9GD9czyz+ g5qjS5+WJ346d15U3/2Z99PrsYh9h80pm6006fNISF33IRdr2rZA8D5RyaqqrGeC J8fAasldrEKklDdev4vy8CEUps+Y3JLu1mYMEUascD+VN7i8m3E6CyVeWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAUUZa/juuZvfMAMhnhLsdM4mUE4MB8GA1UdIwQY MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt MjBlMTk3ODBjYjJlLzEvQlJSbHItTzY1bTk4d0F5R2VFdXgwemlaUVRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAK/CXMA0G CSqGSIb3DQEBCwUAA4IBAQBYkacUYiqktefLVl7nxtSH4Yghbi8iTgE1+s6msJOh VMlUunly7tQJGDrr53QkzzCNZTJ/nZapx5NvAX/tFhakA85hfpbdVDKLVImFZnMe eVnwy6qexf8tJ3B8ZfFqm9iSZcSBEvvK/HliOZJFeCPG+2GUChbb2EpmpetFipuY 21Tqjt8Oiz6pcl03WA6uSUPwMx6nxZJLPXBGycjlcam5xSLMkRA5QeHxe1/qaz3x 1jaaSne3fBNB3ckz2O8T0Mg5C1zJTm5glMN6noJL+m3N8Jx2xZla3zP2whZr502K SlB3d9pHrYEEfI+zHdEq3YaEy1cNmMXAxjlfZl0opfHT -----END CERTIFICATE-----Generated at Fri Jan 9 23:45:10 2026 by rpki-client