This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/2EBSwM_q56-stybSnr88MGrRr40.roa File: 2EBSwM_q56-stybSnr88MGrRr40.roa (raw, json) Hash identifier: y6qmirOEN1WbOFSOKVwwrgMOOWbsvMQ5WvS4xjDhMcU= Subject key identifier: D8:40:52:C0:CF:EA:E7:AF:AC:B7:26:D2:9E:BF:3C:30:6A:D1:AF:8D Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB7F1AD3D2582711E6EA98866311B0 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/2EBSwM_q56-stybSnr88MGrRr40.roa Signing time: Fri 02 Jan 2026 08:20:46 +0000 ROA not before: Fri 02 Jan 2026 08:20:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209671 IP address blocks: 151.244.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:7f:1a:d3:d2:58:27:11:e6:ea:98:86:63:11:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d84052c0cfeae7afacb726d29ebf3c306ad1af8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:cb:7a:02:13:7f:00:ea:50:8b:5f:b6:04:f9: e8:8c:3c:9a:18:91:66:f4:35:83:fc:6e:c2:06:5b: 54:eb:a1:5a:4b:d7:56:4b:5e:35:25:59:bf:64:be: 9d:d7:a2:de:9b:6c:0d:a3:58:09:28:f0:bb:c5:bb: 79:c6:a3:9d:ac:f2:81:0b:4b:88:81:e1:1b:f0:b9: 81:8d:38:ae:6e:6e:25:cb:67:17:04:f7:6f:9a:69: fd:45:d8:30:09:f3:ef:80:18:f8:31:fd:0a:6a:6c: 73:a0:9b:47:dc:e3:60:a1:c4:d0:84:2c:98:23:7f: 01:61:9e:52:2b:98:88:97:ea:81:81:d6:3c:ab:42: 06:ca:e4:25:a6:78:4e:78:de:41:cf:f2:8f:ed:a0: 27:8b:0b:d5:55:1f:48:1d:79:19:0d:68:94:bf:79: 89:4e:a3:be:95:9d:48:42:f0:4a:77:ef:0a:9a:77: 72:82:33:f9:26:b6:c1:e4:ec:8c:dc:43:12:5c:f2: d5:d5:b9:06:ae:2f:77:63:9c:dd:33:36:10:c5:42: 04:19:f8:38:c1:a5:d9:cb:21:3c:9b:33:82:06:d8: 5e:85:48:ff:b5:86:b9:7c:0d:cd:0d:d9:ba:9a:48: 56:73:b3:6c:1e:a7:cf:b7:68:88:a6:51:6c:29:c4: de:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:40:52:C0:CF:EA:E7:AF:AC:B7:26:D2:9E:BF:3C:30:6A:D1:AF:8D X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/2EBSwM_q56-stybSnr88MGrRr40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.244.91.0/24 Signature Algorithm: sha256WithRSAEncryption 99:2c:71:f3:43:f4:6c:c2:cd:51:c3:e4:1c:e4:49:78:48:78: 96:b5:ab:66:13:88:51:2a:99:20:50:b4:25:97:51:92:35:60: da:40:2c:7e:1a:67:70:19:0c:3a:8f:af:2b:43:95:54:a8:f6: 21:11:63:2e:bc:9c:a5:4d:e4:88:76:37:25:4d:04:33:dd:f6: d3:c0:21:ae:b5:e5:3d:54:09:1f:09:2e:66:f7:5b:25:4e:f3: 0c:ea:05:a5:dd:11:fe:ae:1b:7f:9b:9a:7f:69:23:40:29:d4: a4:ee:85:36:d3:b8:34:a2:89:45:05:36:fb:1a:e7:79:d6:8a: 8c:ef:a4:7a:5c:b8:0e:be:c6:c1:2c:36:c7:ee:f2:b0:d5:ff: 61:17:8e:3b:db:57:dc:15:e9:4f:80:f5:43:f9:b5:14:eb:1d: c2:d3:40:13:89:b1:29:15:9d:33:75:46:15:f6:3f:17:a3:5d: 12:68:dd:81:45:11:bf:87:10:64:c7:42:a6:de:b8:dd:1f:1b: 61:3c:cc:e4:53:2e:79:14:29:78:f6:4f:df:07:da:27:7b:c9: 78:33:a0:9b:82:15:6e:9f:c6:10:35:10:f8:ed:d1:9b:73:32: 06:cc:51:29:3f:ad:c7:91:85:f7:f0:b8:ec:16:a5:6f:b6:c0: 5e:9e:b5:95 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y38a09JYJxHm6piGYxGwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODQwNTJjMGNmZWFlN2FmYWNiNzI2ZDI5ZWJmM2MzMDZhZDFhZjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/ct6AhN/AOpQi1+2BPnojDyaGJFm 9DWD/G7CBltU66FaS9dWS141JVm/ZL6d16Lem2wNo1gJKPC7xbt5xqOdrPKBC0uI geEb8LmBjTiubm4ly2cXBPdvmmn9RdgwCfPvgBj4Mf0KamxzoJtH3ONgocTQhCyY I38BYZ5SK5iIl+qBgdY8q0IGyuQlpnhOeN5Bz/KP7aAniwvVVR9IHXkZDWiUv3mJ TqO+lZ1IQvBKd+8KmndygjP5JrbB5OyM3EMSXPLV1bkGri93Y5zdMzYQxUIEGfg4 waXZyyE8mzOCBthehUj/tYa5fA3NDdm6mkhWc7NsHqfPt2iIplFsKcTeqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNhAUsDP6uevrLcm0p6/PDBq0a+NMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvMkVCU3dNX3E1Ni1zdHliU25yODhNR3JScjQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/RbMA0G CSqGSIb3DQEBCwUAA4IBAQCZLHHzQ/Rsws1Rw+Qc5El4SHiWtatmE4hRKpkgULQl l1GSNWDaQCx+GmdwGQw6j68rQ5VUqPYhEWMuvJylTeSIdjclTQQz3fbTwCGuteU9 VAkfCS5m91slTvMM6gWl3RH+rht/m5p/aSNAKdSk7oU207g0oolFBTb7Gud51oqM 76R6XLgOvsbBLDbH7vKw1f9hF44721fcFelPgPVD+bUU6x3C00ATibEpFZ0zdUYV 9j8Xo10SaN2BRRG/hxBkx0Km3rjdHxthPMzkUy55FCl49k/fB9one8l4M6CbghVu n8YQNRD47dGbczIGzFEpP63HkYX38LjsFqVvtsBenrWV -----END CERTIFICATE-----Generated at Sun Jan 18 06:29:12 2026 by rpki-client