This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-oyyyg3cuGSRgOdalAf8onmVd_w.roa File: 1-oyyyg3cuGSRgOdalAf8onmVd_w.roa (raw, json) Hash identifier: R4izD4miqc0oLKYlbH1rjcJWW4VaDGZg8fG9iQcM/K8= Subject key identifier: FA:8C:B2:CA:0D:DC:B8:64:91:80:E7:5A:94:07:FC:A2:79:95:77:FC Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB12BE48AC60CD77C36421AAC76365 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-oyyyg3cuGSRgOdalAf8onmVd_w.roa Signing time: Fri 02 Jan 2026 08:20:19 +0000 ROA not before: Fri 02 Jan 2026 08:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12213 IP address blocks: 151.242.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:12:be:48:ac:60:cd:77:c3:64:21:aa:c7:63:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa8cb2ca0ddcb8649180e75a9407fca2799577fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:25:51:70:22:45:db:0b:d0:0a:c4:45:cb:fd: 3f:d7:de:ad:fd:ad:af:e9:cf:d6:d3:70:2e:a5:8d: 56:a6:39:f4:88:a2:10:86:88:a8:c8:fc:2b:a9:14: c4:ed:68:2e:4c:07:eb:4c:68:31:fb:9c:ba:c5:50: dc:f8:54:b7:b4:cd:ca:39:df:8b:13:49:0b:fe:f1: 9e:17:77:1d:45:d9:c3:64:6c:7b:93:c6:5c:df:65: b0:e0:0b:8d:5d:e3:3d:c4:16:a1:9b:ae:f8:b0:f4: 97:b7:44:5b:a0:36:d8:a5:99:e4:30:80:38:87:c2: a7:0a:89:29:dc:b6:77:93:b4:4e:2e:5e:d4:5f:80: c7:f1:f4:02:1f:c5:1d:4c:bd:22:cf:0a:02:07:8a: 02:2f:94:06:d6:97:91:2d:f0:21:66:9d:71:4c:11: cd:be:fd:dc:4d:63:a7:30:c9:02:73:8e:b8:a2:83: ee:01:25:04:7d:95:4b:0e:a1:3d:0a:97:bb:56:82: b7:c1:5a:b4:ec:b8:7e:32:55:9d:3e:63:68:e6:df: ed:0a:c5:4d:43:f8:cb:26:b1:de:ca:9d:ec:5c:cf: 0b:a1:d2:fa:4c:c9:d8:5b:47:3c:c2:8f:6c:36:75: d7:76:b0:02:73:11:b0:9b:f6:3e:6e:22:01:65:e6: 0f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:8C:B2:CA:0D:DC:B8:64:91:80:E7:5A:94:07:FC:A2:79:95:77:FC X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-oyyyg3cuGSRgOdalAf8onmVd_w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.102.0/24 Signature Algorithm: sha256WithRSAEncryption a6:8d:f9:5f:bc:d0:82:4a:05:41:35:2b:a9:b0:c8:e0:c6:2e: db:65:71:b1:de:f0:cd:02:7f:c7:cb:5b:74:61:a7:1e:ec:3a: ea:bd:13:e3:cc:91:5c:6f:ba:9e:e8:5b:ca:9f:22:25:72:a1: 03:c2:c2:bf:a4:6c:11:0c:f2:08:46:c4:eb:f5:99:27:f9:62: d5:21:88:91:f5:67:b6:df:13:04:c3:1b:5f:99:7e:d3:5f:2f: e1:59:7c:25:d6:2d:c7:64:5a:8c:eb:9b:20:eb:c7:9b:9c:4b: 46:9a:de:a3:35:e6:2f:c4:b5:9c:06:84:0a:eb:28:38:16:55: f4:67:14:aa:0f:89:e9:34:a1:38:cb:66:99:2b:5e:34:fc:c9: f9:82:f6:f8:17:aa:e7:46:73:5d:2a:c7:03:06:3c:1b:2f:d3: ac:c8:22:f4:00:a1:c6:ca:ae:c7:db:ac:eb:57:b8:bc:31:66: 3a:a9:ce:22:b0:e0:63:ce:d3:81:ff:3c:ea:57:5d:9c:73:3f: 72:10:87:85:2c:6d:be:8b:6e:33:4b:55:cb:c1:1a:bb:3c:f0: ef:81:e1:8a:10:e8:c7:2b:90:15:75:b7:f5:57:15:b6:5c:00: bd:8c:03:00:6f:11:2f:f2:56:df:f8:38:58:b9:81:56:ce:46: 71:b2:fe:85 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9yxK+SKxgzXfDZCGqx2NlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYThjYjJjYTBkZGNiODY0OTE4MGU3NWE5NDA3ZmNhMjc5OTU3N2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiVRcCJF2wvQCsRFy/0/196t/a2v 6c/W03AupY1Wpjn0iKIQhoioyPwrqRTE7WguTAfrTGgx+5y6xVDc+FS3tM3KOd+L E0kL/vGeF3cdRdnDZGx7k8Zc32Ww4AuNXeM9xBahm674sPSXt0RboDbYpZnkMIA4 h8KnCokp3LZ3k7ROLl7UX4DH8fQCH8UdTL0izwoCB4oCL5QG1peRLfAhZp1xTBHN vv3cTWOnMMkCc464ooPuASUEfZVLDqE9Cpe7VoK3wVq07Lh+MlWdPmNo5t/tCsVN Q/jLJrHeyp3sXM8LodL6TMnYW0c8wo9sNnXXdrACcxGwm/Y+biIBZeYPFwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPqMssoN3LhkkYDnWpQH/KJ5lXf8MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvMS1veXl5ZzNjdUdTUmdPZGFsQWY4b25tVmRfdy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOGUvZjQzYjFkLTllNTAtNDU1MS1hZTZhLTE3YjlkZTE0MTI1 Mi8xL3htSm05R2I3SkppamxGbXpOUzJpVVZHbHBNQS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJfyZjAN BgkqhkiG9w0BAQsFAAOCAQEApo35X7zQgkoFQTUrqbDI4MYu22Vxsd7wzQJ/x8tb dGGnHuw66r0T48yRXG+6nuhbyp8iJXKhA8LCv6RsEQzyCEbE6/WZJ/li1SGIkfVn tt8TBMMbX5l+018v4Vl8JdYtx2RajOubIOvHm5xLRpreozXmL8S1nAaECusoOBZV 9GcUqg+J6TShOMtmmSteNPzJ+YL2+Beq50ZzXSrHAwY8Gy/TrMgi9AChxsqux9us 61e4vDFmOqnOIrDgY87Tgf886lddnHM/chCHhSxtvotuM0tVy8Eauzzw74HhihDo xyuQFXW39VcVtlwAvYwDAG8RL/JW3/g4WLmBVs5GcbL+hQ== -----END CERTIFICATE-----Generated at Sun Jan 18 06:27:41 2026 by rpki-client