This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0UX9OZBqDGeseiJL7XIKXPx7zc8.roa File: 0UX9OZBqDGeseiJL7XIKXPx7zc8.roa (raw, json) Hash identifier: mDMY2EQQ9+Zm76bPMdSBBYsfGwtwspOs52tROnniVg4= Subject key identifier: D1:45:FD:39:90:6A:0C:67:AC:7A:22:4B:ED:72:0A:5C:FC:7B:CD:CF Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB4D5FA3969FE5B7C408A9F2B4FC9F Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0UX9OZBqDGeseiJL7XIKXPx7zc8.roa Signing time: Fri 02 Jan 2026 08:20:34 +0000 ROA not before: Fri 02 Jan 2026 08:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136557 IP address blocks: 151.242.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:4d:5f:a3:96:9f:e5:b7:c4:08:a9:f2:b4:fc:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d145fd39906a0c67ac7a224bed720a5cfc7bcdcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:02:a7:39:87:91:a6:cb:f4:b1:65:b4:3a:b4: e9:a8:79:f1:86:6b:08:de:5e:be:ee:53:29:72:01: fa:29:c2:69:f9:c7:cf:a5:48:73:8d:f6:22:89:48: f5:0b:64:96:7d:1e:36:10:ec:80:47:3b:a8:1d:d9: 20:88:ad:f2:58:c3:f9:cc:da:c3:cf:70:2b:86:f2: 6f:45:b7:28:37:3a:1d:a4:f9:13:af:87:60:2e:19: f7:69:aa:8b:98:ad:e1:0a:88:56:bb:27:d6:bf:cc: f8:4d:e3:a3:c7:cf:26:b3:a7:89:85:19:1e:2b:c5: be:18:9c:c3:c9:64:73:14:4d:e5:55:d2:24:29:69: f9:ef:22:31:53:8d:f7:21:df:c1:1c:d5:4a:84:90: f7:b6:86:54:de:08:ce:96:34:ae:32:ea:52:a8:0c: 10:d7:84:b5:67:0f:9e:64:b1:7e:bf:52:2d:73:d4: 1f:6a:c1:f9:35:1d:7e:50:88:22:65:56:70:aa:af: 71:cf:90:8b:8e:d8:5a:a2:25:ec:f4:67:8d:46:7f: a3:ae:99:6b:ff:65:e5:5c:bd:37:d1:70:32:6d:dc: 7b:1b:2f:de:75:5f:d6:f5:fe:d0:73:27:0e:76:0f: b1:80:6b:11:b0:10:ac:ff:54:59:81:a8:fe:45:56: 57:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:45:FD:39:90:6A:0C:67:AC:7A:22:4B:ED:72:0A:5C:FC:7B:CD:CF X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0UX9OZBqDGeseiJL7XIKXPx7zc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.170.0/24 Signature Algorithm: sha256WithRSAEncryption 74:ff:d0:4e:24:c9:cd:8d:f0:32:b7:ba:fd:d4:b9:26:91:66: 06:6a:7a:7a:aa:b3:ff:c9:80:d6:44:b9:39:33:98:f8:3d:c1: 0e:dc:3f:b7:8f:ca:9c:16:12:aa:06:3f:8d:fb:04:65:72:3f: ff:30:99:81:4e:d0:b9:6a:4b:cd:a4:7e:2b:8d:93:d2:88:0b: 69:1c:68:73:a0:9d:c8:45:d8:21:69:a6:82:c2:64:cc:d2:3b: 7e:a2:81:3a:24:62:6f:f3:92:d2:da:09:2a:92:10:bc:ec:7b: 4e:c7:b5:cc:24:64:5d:d6:d6:ab:14:4f:4e:62:3b:f7:2d:d8: be:54:ee:ed:c0:d5:8e:dc:b1:18:7f:fd:18:fa:92:e9:a0:62: ee:eb:c6:1b:5f:b5:3d:a6:a4:b8:0b:e8:28:59:70:52:cd:7e: c0:05:ec:13:3a:d9:35:00:e2:2f:3a:9c:9e:b8:6e:45:01:0f: 26:c1:10:8e:72:08:1a:51:a1:68:e8:0b:67:fb:d1:4a:e8:8f: 64:e1:59:0b:a9:56:b6:6c:7e:07:62:fe:96:aa:3f:b0:e5:6d: 1e:2f:06:27:69:44:cc:3c:6c:d4:c3:4e:ec:01:cb:5b:88:e4: d7:f5:f0:49:ce:4a:f4:fd:43:52:20:f1:44:b4:75:52:4d:b5: 34:d4:e4:c6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y01fo5af5bfECKnytPyfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTQ1ZmQzOTkwNmEwYzY3YWM3YTIyNGJlZDcyMGE1Y2ZjN2JjZGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAKnOYeRpsv0sWW0OrTpqHnxhmsI 3l6+7lMpcgH6KcJp+cfPpUhzjfYiiUj1C2SWfR42EOyARzuoHdkgiK3yWMP5zNrD z3ArhvJvRbcoNzodpPkTr4dgLhn3aaqLmK3hCohWuyfWv8z4TeOjx88ms6eJhRke K8W+GJzDyWRzFE3lVdIkKWn57yIxU433Id/BHNVKhJD3toZU3gjOljSuMupSqAwQ 14S1Zw+eZLF+v1Itc9QfasH5NR1+UIgiZVZwqq9xz5CLjthaoiXs9GeNRn+jrplr /2XlXL030XAybdx7Gy/edV/W9f7QcycOdg+xgGsRsBCs/1RZgaj+RVZXRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNFF/TmQagxnrHoiS+1yClz8e83PMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvMFVYOU9aQnFER2VzZWlKTDdYSUtYUHg3emM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/KqMA0G CSqGSIb3DQEBCwUAA4IBAQB0/9BOJMnNjfAyt7r91LkmkWYGanp6qrP/yYDWRLk5 M5j4PcEO3D+3j8qcFhKqBj+N+wRlcj//MJmBTtC5akvNpH4rjZPSiAtpHGhzoJ3I RdghaaaCwmTM0jt+ooE6JGJv85LS2gkqkhC87HtOx7XMJGRd1tarFE9OYjv3Ldi+ VO7twNWO3LEYf/0Y+pLpoGLu68YbX7U9pqS4C+goWXBSzX7ABewTOtk1AOIvOpye uG5FAQ8mwRCOcggaUaFo6Atn+9FK6I9k4VkLqVa2bH4HYv6Wqj+w5W0eLwYnaUTM PGzUw07sActbiOTX9fBJzkr0/UNSIPFEtHVSTbU01OTG -----END CERTIFICATE-----Generated at Sun Jan 18 06:29:59 2026 by rpki-client