This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/2zQ3ZaY0XKcurmB_-Q-hUxDP8Yw.roa File: 2zQ3ZaY0XKcurmB_-Q-hUxDP8Yw.roa (raw, json) Hash identifier: J7BlS5hITnTmTV9bKLOQ8/ShGTMbsGcHjF1IxdzylUI= Subject key identifier: DB:34:37:65:A6:34:5C:A7:2E:AE:60:7F:F9:0F:A1:53:10:CF:F1:8C Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB13F65531EE8CAF854927487523C7 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/2zQ3ZaY0XKcurmB_-Q-hUxDP8Yw.roa Signing time: Fri 02 Jan 2026 08:20:19 +0000 ROA not before: Fri 02 Jan 2026 08:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13213 IP address blocks: 151.240.156.0/24 maxlen: 24 151.240.159.0/24 maxlen: 24 151.240.162.0/24 maxlen: 24 151.240.164.0/24 maxlen: 24 151.240.166.0/24 maxlen: 24 151.240.168.0/24 maxlen: 24 151.240.170.0/24 maxlen: 24 151.240.172.0/24 maxlen: 24 151.240.174.0/24 maxlen: 24 151.240.176.0/24 maxlen: 24 151.240.178.0/24 maxlen: 24 151.240.219.0/24 maxlen: 24 151.240.221.0/24 maxlen: 24 151.240.223.0/24 maxlen: 24 151.240.225.0/24 maxlen: 24 151.241.34.0/24 maxlen: 24 151.241.38.0/24 maxlen: 24 151.241.42.0/24 maxlen: 24 151.241.44.0/24 maxlen: 24 151.241.46.0/24 maxlen: 24 151.241.49.0/24 maxlen: 24 151.241.114.0/24 maxlen: 24 151.241.118.0/24 maxlen: 24 151.241.120.0/24 maxlen: 24 151.241.121.0/24 maxlen: 24 151.241.124.0/24 maxlen: 24 151.241.126.0/24 maxlen: 24 151.244.7.0/24 maxlen: 24 151.244.9.0/24 maxlen: 24 151.244.10.0/24 maxlen: 24 151.244.13.0/24 maxlen: 24 151.244.15.0/24 maxlen: 24 151.244.25.0/24 maxlen: 24 151.244.27.0/24 maxlen: 24 151.244.29.0/24 maxlen: 24 151.244.31.0/24 maxlen: 24 151.244.33.0/24 maxlen: 24 151.244.35.0/24 maxlen: 24 151.244.37.0/24 maxlen: 24 151.244.39.0/24 maxlen: 24 151.244.41.0/24 maxlen: 24 151.244.43.0/24 maxlen: 24 151.244.45.0/24 maxlen: 24 151.244.47.0/24 maxlen: 24 151.244.49.0/24 maxlen: 24 151.244.51.0/24 maxlen: 24 151.244.53.0/24 maxlen: 24 151.244.71.0/24 maxlen: 24 151.244.74.0/24 maxlen: 24 151.244.94.0/24 maxlen: 24 151.244.96.0/24 maxlen: 24 151.244.98.0/24 maxlen: 24 151.244.100.0/24 maxlen: 24 151.244.104.0/24 maxlen: 24 151.244.197.0/24 maxlen: 24 151.244.200.0/24 maxlen: 24 151.244.202.0/24 maxlen: 24 151.245.7.0/24 maxlen: 24 151.245.17.0/24 maxlen: 24 151.245.19.0/24 maxlen: 24 151.245.21.0/24 maxlen: 24 151.245.23.0/24 maxlen: 24 151.245.27.0/24 maxlen: 24 151.245.31.0/24 maxlen: 24 151.245.33.0/24 maxlen: 24 151.245.35.0/24 maxlen: 24 151.245.37.0/24 maxlen: 24 151.245.39.0/24 maxlen: 24 151.245.41.0/24 maxlen: 24 151.245.43.0/24 maxlen: 24 151.245.45.0/24 maxlen: 24 151.245.47.0/24 maxlen: 24 151.245.49.0/24 maxlen: 24 151.245.51.0/24 maxlen: 24 151.245.53.0/24 maxlen: 24 151.245.55.0/24 maxlen: 24 151.245.71.0/24 maxlen: 24 151.245.73.0/24 maxlen: 24 151.245.75.0/24 maxlen: 24 151.245.93.0/24 maxlen: 24 151.245.95.0/24 maxlen: 24 151.245.97.0/24 maxlen: 24 151.245.99.0/24 maxlen: 24 151.245.101.0/24 maxlen: 24 151.245.103.0/24 maxlen: 24 151.245.105.0/24 maxlen: 24 151.245.107.0/24 maxlen: 24 151.245.135.0/24 maxlen: 24 151.245.197.0/24 maxlen: 24 151.245.200.0/24 maxlen: 24 151.245.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:13:f6:55:31:ee:8c:af:85:49:27:48:75:23:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db343765a6345ca72eae607ff90fa15310cff18c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ff:54:35:3f:6e:79:83:06:df:21:2e:38:2e: 90:9c:c8:2f:e1:2d:71:e8:a3:38:ea:13:95:35:24: 9b:d1:cd:d3:43:eb:05:ab:a9:21:10:e1:ad:2e:db: ba:c7:42:8e:e9:43:da:bf:ed:83:cb:c3:90:ee:15: 51:08:41:cc:00:78:cc:75:6d:35:22:d6:24:44:33: 9f:57:a6:61:75:05:4f:28:00:1a:5e:92:c4:98:5f: f2:54:c9:36:65:3b:8c:84:d9:ac:44:be:cc:99:62: 7d:d6:09:6b:bb:18:cd:9b:dd:4c:34:1c:2b:e9:43: 7d:f4:67:4a:84:a3:fa:5e:18:63:76:40:ed:60:20: e8:c5:bb:2a:42:ba:bf:e7:99:f2:d0:8d:73:98:66: 47:37:e3:af:8b:82:a1:a5:fc:08:6b:1b:b9:7e:2a: f9:b3:18:3f:4e:99:b6:db:fd:5f:0d:6e:f8:ba:fe: 14:a3:b0:17:79:ea:cc:68:e3:28:18:94:12:6a:63: bf:a0:0b:d7:0f:7d:2d:7e:bb:58:13:88:f8:40:63: 6b:81:51:fa:1f:e5:01:c5:b1:55:20:77:c5:db:f9: 52:aa:43:6a:3d:e5:9e:2a:f5:0f:fa:7c:b9:69:06: c3:85:cb:d2:37:c3:95:92:04:a7:ac:ab:36:b3:90: 55:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:34:37:65:A6:34:5C:A7:2E:AE:60:7F:F9:0F:A1:53:10:CF:F1:8C X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/2zQ3ZaY0XKcurmB_-Q-hUxDP8Yw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.156.0/24 151.240.159.0/24 151.240.162.0/24 151.240.164.0/24 151.240.166.0/24 151.240.168.0/24 151.240.170.0/24 151.240.172.0/24 151.240.174.0/24 151.240.176.0/24 151.240.178.0/24 151.240.219.0/24 151.240.221.0/24 151.240.223.0/24 151.240.225.0/24 151.241.34.0/24 151.241.38.0/24 151.241.42.0/24 151.241.44.0/24 151.241.46.0/24 151.241.49.0/24 151.241.114.0/24 151.241.118.0/24 151.241.120.0/23 151.241.124.0/24 151.241.126.0/24 151.244.7.0/24 151.244.9.0-151.244.10.255 151.244.13.0/24 151.244.15.0/24 151.244.25.0/24 151.244.27.0/24 151.244.29.0/24 151.244.31.0/24 151.244.33.0/24 151.244.35.0/24 151.244.37.0/24 151.244.39.0/24 151.244.41.0/24 151.244.43.0/24 151.244.45.0/24 151.244.47.0/24 151.244.49.0/24 151.244.51.0/24 151.244.53.0/24 151.244.71.0/24 151.244.74.0/24 151.244.94.0/24 151.244.96.0/24 151.244.98.0/24 151.244.100.0/24 151.244.104.0/24 151.244.197.0/24 151.244.200.0/24 151.244.202.0/24 151.245.7.0/24 151.245.17.0/24 151.245.19.0/24 151.245.21.0/24 151.245.23.0/24 151.245.27.0/24 151.245.31.0/24 151.245.33.0/24 151.245.35.0/24 151.245.37.0/24 151.245.39.0/24 151.245.41.0/24 151.245.43.0/24 151.245.45.0/24 151.245.47.0/24 151.245.49.0/24 151.245.51.0/24 151.245.53.0/24 151.245.55.0/24 151.245.71.0/24 151.245.73.0/24 151.245.75.0/24 151.245.93.0/24 151.245.95.0/24 151.245.97.0/24 151.245.99.0/24 151.245.101.0/24 151.245.103.0/24 151.245.105.0/24 151.245.107.0/24 151.245.135.0/24 151.245.197.0/24 151.245.200.0/24 151.245.202.0/24 Signature Algorithm: sha256WithRSAEncryption ab:5d:5f:98:91:99:3e:35:e7:05:a0:dc:34:54:10:c3:93:af: 69:8d:63:5c:3d:07:86:91:9c:b0:0e:15:3c:5a:94:41:05:b1: 16:89:a3:27:6c:b9:52:43:3a:9c:4d:23:b0:cd:94:ad:20:a2: fd:be:53:b4:19:65:11:3e:70:24:fb:db:4a:ae:e2:3f:d5:44: 58:3a:e7:aa:62:57:5d:44:b8:a7:16:4e:9f:00:12:93:49:25: 4a:66:13:cb:f3:7d:c3:48:f6:eb:93:cb:72:57:f4:8b:95:d7: bb:a8:1c:c1:7b:4e:17:91:b0:ac:ad:3f:cc:a2:ea:57:e7:8e: 93:04:41:88:80:d0:e1:6a:14:ca:d3:92:fe:f0:14:fe:e7:10: 57:50:28:3e:00:48:82:b5:d3:70:8e:66:66:78:5a:10:bc:68: 1f:1d:89:af:e9:77:2c:91:1b:35:42:9e:d9:94:0e:68:75:68: b3:c0:fe:63:de:1a:1b:dc:d8:60:40:e7:37:7f:f8:96:8b:e7: 04:66:7b:54:d9:23:d8:a9:cb:cf:62:81:cb:eb:69:85:4a:78: 59:c5:91:95:0b:ee:d3:d2:82:e0:31:ed:63:a0:bf:95:fb:53: f4:a2:48:34:85:2a:d2:4e:fa:dd:49:21:91:4f:a0:eb:99:f1: 58:99:49:af -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgISAZt9yxP2VTHujK+FSSdIdSPHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjM0Mzc2NWE2MzQ1Y2E3MmVhZTYwN2ZmOTBmYTE1MzEwY2ZmMThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3P9UNT9ueYMG3yEuOC6QnMgv4S1x 6KM46hOVNSSb0c3TQ+sFq6khEOGtLtu6x0KO6UPav+2Dy8OQ7hVRCEHMAHjMdW01 ItYkRDOfV6ZhdQVPKAAaXpLEmF/yVMk2ZTuMhNmsRL7MmWJ91glruxjNm91MNBwr 6UN99GdKhKP6XhhjdkDtYCDoxbsqQrq/55ny0I1zmGZHN+Ovi4KhpfwIaxu5fir5 sxg/Tpm22/1fDW74uv4Uo7AXeerMaOMoGJQSamO/oAvXD30tfrtYE4j4QGNrgVH6 H+UBxbFVIHfF2/lSqkNqPeWeKvUP+ny5aQbDhcvSN8OVkgSnrKs2s5BVywIDAQAB o4IEKzCCBCcwHQYDVR0OBBYEFNs0N2WmNFynLq5gf/kPoVMQz/GMMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvMnpRM1phWTBYS2N1cm1CXy1RLWhVeERQOFl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIICPwYIKwYBBQUHAQcBAf8EggIuMIICKjCCAiYEAgABMIIC HgMEAJfwnAMEAJfwnwMEAJfwogMEAJfwpAMEAJfwpgMEAJfwqAMEAJfwqgMEAJfw rAMEAJfwrgMEAJfwsAMEAJfwsgMEAJfw2wMEAJfw3QMEAJfw3wMEAJfw4QMEAJfx IgMEAJfxJgMEAJfxKgMEAJfxLAMEAJfxLgMEAJfxMQMEAJfxcgMEAJfxdgMEAZfx eAMEAJfxfAMEAJfxfgMEAJf0BzAMAwQAl/QJAwQAl/QKAwQAl/QNAwQAl/QPAwQA l/QZAwQAl/QbAwQAl/QdAwQAl/QfAwQAl/QhAwQAl/QjAwQAl/QlAwQAl/QnAwQA l/QpAwQAl/QrAwQAl/QtAwQAl/QvAwQAl/QxAwQAl/QzAwQAl/Q1AwQAl/RHAwQA l/RKAwQAl/ReAwQAl/RgAwQAl/RiAwQAl/RkAwQAl/RoAwQAl/TFAwQAl/TIAwQA l/TKAwQAl/UHAwQAl/URAwQAl/UTAwQAl/UVAwQAl/UXAwQAl/UbAwQAl/UfAwQA l/UhAwQAl/UjAwQAl/UlAwQAl/UnAwQAl/UpAwQAl/UrAwQAl/UtAwQAl/UvAwQA l/UxAwQAl/UzAwQAl/U1AwQAl/U3AwQAl/VHAwQAl/VJAwQAl/VLAwQAl/VdAwQA l/VfAwQAl/VhAwQAl/VjAwQAl/VlAwQAl/VnAwQAl/VpAwQAl/VrAwQAl/WHAwQA l/XFAwQAl/XIAwQAl/XKMA0GCSqGSIb3DQEBCwUAA4IBAQCrXV+YkZk+NecFoNw0 VBDDk69pjWNcPQeGkZywDhU8WpRBBbEWiaMnbLlSQzqcTSOwzZStIKL9vlO0GWUR PnAk+9tKruI/1URYOueqYlddRLinFk6fABKTSSVKZhPL833DSPbrk8tyV/SLlde7 qBzBe04XkbCsrT/MoupX546TBEGIgNDhahTK05L+8BT+5xBXUCg+AEiCtdNwjmZm eFoQvGgfHYmv6XcskRs1Qp7ZlA5odWizwP5j3hob3NhgQOc3f/iWi+cEZntU2SPY qcvPYoHL62mFSnhZxZGVC+7T0oLgMe1joL+V+1P0okg0hSrSTvrdSSGRT6DrmfFY mUmv -----END CERTIFICATE-----Generated at Sun Jan 18 06:31:07 2026 by rpki-client