This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0RKg-MB7bO3PM9fmr5zhE6xQXWM.roa File: 0RKg-MB7bO3PM9fmr5zhE6xQXWM.roa (raw, json) Hash identifier: hyg0Lj5qSFqFwzZ0+xfWsyA6XSVMKgulQPPqv14wj2A= Subject key identifier: D1:12:A0:F8:C0:7B:6C:ED:CF:33:D7:E6:AF:9C:E1:13:AC:50:5D:63 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB34E5344CF9207E890AE60BF62AF5 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0RKg-MB7bO3PM9fmr5zhE6xQXWM.roa Signing time: Fri 02 Jan 2026 08:20:27 +0000 ROA not before: Fri 02 Jan 2026 08:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49608 IP address blocks: 151.244.254.0/24 maxlen: 24 151.245.25.0/24 maxlen: 24 151.245.30.0/24 maxlen: 24 151.247.144.0/24 maxlen: 24 151.247.206.0/24 maxlen: 24 151.247.214.0/24 maxlen: 24 151.247.222.0/24 maxlen: 24 151.247.240.0/24 maxlen: 24 151.247.247.0/24 maxlen: 24 151.247.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:34:e5:34:4c:f9:20:7e:89:0a:e6:0b:f6:2a:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d112a0f8c07b6cedcf33d7e6af9ce113ac505d63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:cb:00:f4:1e:ac:4a:48:f6:7d:f9:02:9c:bb: 94:09:c7:99:28:da:f3:29:1f:e9:5a:0c:31:32:47: a8:24:d6:20:69:87:43:03:ad:a9:50:44:88:b6:3a: b3:8e:62:14:92:9e:28:73:69:8b:17:e8:5f:78:fc: d5:7b:de:c5:8b:d2:4d:fb:e7:3b:3b:7c:72:3e:7d: d9:6c:da:d2:5f:1d:e2:1d:e4:b1:ea:75:1d:39:f7: e7:79:2e:fe:53:14:e0:5b:d9:27:b8:ff:5c:d7:e3: 7b:12:88:f0:ae:85:10:36:51:70:05:55:44:27:12: 5f:8a:a0:d4:40:54:10:c2:c5:0c:e8:1b:cb:c5:bb: f4:da:4e:2c:62:fe:6c:f6:bf:77:0d:cd:60:d6:8c: 11:34:30:b1:2b:60:20:85:4b:27:e1:cb:24:ef:d6: eb:d1:ae:58:18:a5:f5:94:d5:49:12:df:f5:58:36: d3:77:45:27:62:7f:a2:8e:0e:cd:0c:83:47:b7:55: ca:8e:ea:b3:1d:30:7c:12:65:df:5e:a4:95:bc:d2: b4:25:3b:73:72:17:c4:3a:40:d6:4d:1a:0e:6b:d5: f8:60:8e:19:6f:44:49:cf:b8:81:3d:61:c9:29:07: ae:66:b8:42:cb:27:27:c7:dc:50:29:01:a8:c9:ef: a8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:12:A0:F8:C0:7B:6C:ED:CF:33:D7:E6:AF:9C:E1:13:AC:50:5D:63 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0RKg-MB7bO3PM9fmr5zhE6xQXWM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.244.254.0/24 151.245.25.0/24 151.245.30.0/24 151.247.144.0/24 151.247.206.0/24 151.247.214.0/24 151.247.222.0/24 151.247.240.0/24 151.247.247.0/24 151.247.255.0/24 Signature Algorithm: sha256WithRSAEncryption 08:1c:c0:40:51:aa:0b:89:d8:82:40:a6:c8:8c:9a:82:05:04: 4e:de:14:a7:1c:4e:49:32:bf:cf:84:54:f5:9f:4a:e4:cb:06: 17:1a:38:a4:ba:02:7e:ca:bd:41:f9:79:43:6d:c3:33:b2:84: ea:e4:dd:42:95:dd:5b:f9:db:d4:4e:60:d4:35:25:8e:be:b0: 95:54:cf:7c:44:f7:a1:a7:14:b5:c8:61:ad:b7:9b:6d:a1:db: fa:c5:25:df:a5:a4:3e:11:c9:30:f6:0d:cb:9d:41:f0:e2:80: 30:6e:11:1f:2b:e0:72:44:22:59:fe:c6:d2:09:b0:25:68:16: b2:bc:8f:b2:15:c9:0a:86:ab:65:11:65:7c:c3:1f:d7:ff:0f: ab:e7:2b:c2:a0:a0:6a:20:c9:7e:ad:0a:bd:42:06:ad:d8:4e: ea:ef:13:60:6b:a1:bc:f1:a6:28:02:7e:5f:84:79:ab:33:26: 3c:0c:59:d8:1d:62:c7:17:86:03:e8:4f:68:fb:4b:7a:62:2b: e7:c0:e9:ca:a5:a5:05:07:fe:58:de:74:97:9e:a0:0c:56:1e: b3:a3:20:a6:8a:95:f7:e3:5a:8e:e1:5a:81:0e:67:94:72:9a: d5:ad:3c:2f:6d:fa:3d:27:d3:17:69:23:53:09:de:9f:05:43: ef:67:30:54 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZt9yzTlNEz5IH6JCuYL9ir1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTEyYTBmOGMwN2I2Y2VkY2YzM2Q3ZTZhZjljZTExM2FjNTA1ZDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3csA9B6sSkj2ffkCnLuUCceZKNrz KR/pWgwxMkeoJNYgaYdDA62pUESItjqzjmIUkp4oc2mLF+hfePzVe97Fi9JN++c7 O3xyPn3ZbNrSXx3iHeSx6nUdOffneS7+UxTgW9knuP9c1+N7EojwroUQNlFwBVVE JxJfiqDUQFQQwsUM6BvLxbv02k4sYv5s9r93Dc1g1owRNDCxK2AghUsn4csk79br 0a5YGKX1lNVJEt/1WDbTd0UnYn+ijg7NDINHt1XKjuqzHTB8EmXfXqSVvNK0JTtz chfEOkDWTRoOa9X4YI4Zb0RJz7iBPWHJKQeuZrhCyycnx9xQKQGoye+o2wIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFNESoPjAe2ztzzPX5q+c4ROsUF1jMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvMFJLZy1NQjdiTzNQTTlmbXI1emhFNnhRWFdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQAl/T+AwQA l/UZAwQAl/UeAwQAl/eQAwQAl/fOAwQAl/fWAwQAl/feAwQAl/fwAwQAl/f3AwQA l/f/MA0GCSqGSIb3DQEBCwUAA4IBAQAIHMBAUaoLidiCQKbIjJqCBQRO3hSnHE5J Mr/PhFT1n0rkywYXGjikugJ+yr1B+XlDbcMzsoTq5N1Cld1b+dvUTmDUNSWOvrCV VM98RPehpxS1yGGtt5ttodv6xSXfpaQ+Eckw9g3LnUHw4oAwbhEfK+ByRCJZ/sbS CbAlaBayvI+yFckKhqtlEWV8wx/X/w+r5yvCoKBqIMl+rQq9Qgat2E7q7xNga6G8 8aYoAn5fhHmrMyY8DFnYHWLHF4YD6E9o+0t6YivnwOnKpaUFB/5Y3nSXnqAMVh6z oyCmipX341qO4VqBDmeUcprVrTwvbfo9J9MXaSNTCd6fBUPvZzBU -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:09 2026 by rpki-client